last executing test programs: 3.191455849s ago: executing program 1 (id=462): socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448de, &(0x7f00000000c0)={0x0, 0x0, "a4cd91"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010000", 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 2.266368585s ago: executing program 1 (id=476): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x404a, &(0x7f0000000340)={[{@bh}, {@norecovery}]}, 0x1, 0x76b, &(0x7f0000000fc0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) r1 = syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x269}, &(0x7f00000000c0), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa91, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x6e6a9ace1e35a607}) io_uring_enter(r1, 0xec4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socketpair(0xb, 0x3, 0xffff, 0x0) r6 = mq_open(&(0x7f0000000280)='eth0\x00', 0x42, 0x0, 0x0) clock_gettime(0x0, 0x0) mq_timedsend(r6, &(0x7f00000005c0), 0x2000, 0x0, &(0x7f0000000380)={0x0, 0x3938700}) read(r0, &(0x7f0000000040)=""/148, 0xffffff96) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r9, &(0x7f0000001300)="05", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, 0x1c) memfd_secret(0x0) 2.265942245s ago: executing program 4 (id=478): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5}]}}}]}, 0x50}}, 0x0) 2.245778387s ago: executing program 0 (id=480): unshare(0x400) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) 2.159046264s ago: executing program 0 (id=482): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x3}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x40030000000000}, 0x0) 2.020402395s ago: executing program 4 (id=484): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000001900000008000300", @ANYRES32=r2], 0x48}}, 0x0) 1.970429039s ago: executing program 0 (id=485): r0 = socket(0x22, 0x2, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, &(0x7f0000000580)=0xffffffffffffffad) 1.869208547s ago: executing program 0 (id=487): socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) 1.770559845s ago: executing program 4 (id=488): socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x2}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000006000)=[@in={0x2, 0x0, @local}]}, &(0x7f0000005ec0)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x14) 1.663430004s ago: executing program 4 (id=490): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0xb0) socket$packet(0x11, 0x2, 0x300) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) 1.556401173s ago: executing program 0 (id=491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}}, 0x0) 1.391158546s ago: executing program 0 (id=493): unshare(0x68040200) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000000000030006190fea3f27a445c7aa9d70df6d26fe3005000000000200"], 0x28}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000050000000000000000000000000000feffffff01000000030000000000000081006e7230000000000000002000000000007465616d300000000000000000000020766c616e30000000000000004000000076657468305f746f5f7465616d000000aaaaaaf991bb000000000000aaaaaaaaaabb0000000000000000d0000000d000000000010000766c616e0069df4e5100000000000000000000079ba316000000000000000000080000000000000208000000892f0700636f6e6e6c6162656c000000000000000000e5ffffff00000000000020000000080000000000000000000000000000004e465154455545000000000000000000000000000000000000000000000000000800000000000000000800000000000400000000000000000000000080000000000000000000000001fcffffffffffff0000000001000000ffffffff000000000000000000000000000400000000efff000000000000000000000000000000000000000001000000feffffff010000000b00006b90088754ea234d6f6e6430000000000000000000000074489c4c2c0000000000000000000000626f6e64300000ff000000000000000076657468315f744d8abdc76964676500aaaaaaaaaabb0000000000e7feffffffffff00000008000000007000000070000000a0000000434f4e4e5345434d3c964de64039918d16289341524b0000000020827903000000000000000000000000000804000000"]}, 0x2a8) pipe(&(0x7f0000000000)) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.031088346s ago: executing program 2 (id=495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]]}, 0x24}}, 0x0) 895.515687ms ago: executing program 2 (id=497): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x20, r1, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) 746.451389ms ago: executing program 2 (id=499): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000200)=ANY=[@ANYRES8], 0x8) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000440), 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) accept4(r3, 0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=""/4135, 0x1027}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x58, &(0x7f0000000040)={0x0, 0x0}}, 0x10) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r6}, 0xc) close(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000780), 0xb) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r10, 0x89e2, 0x0) ioctl$SIOCRSSL2CALL(r10, 0x89e2, &(0x7f0000000140)=@null) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000000c0), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) sendto$inet6(r4, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) 686.117704ms ago: executing program 3 (id=501): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x80000000000008, &(0x7f0000000180), 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x7c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @device_a, @device_b, @from_mac=@device_b}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x7c}}, 0x0) 603.471741ms ago: executing program 3 (id=502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x0, 0x2, 0x3}, 0x14}}, 0x0) 510.582848ms ago: executing program 3 (id=503): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) unshare(0x20200) unshare(0x20010000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1}, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500001c00000000002e9078ac1e0001001000002001880b0000907856b24832d97a87697f763924"], 0x0) r4 = socket$packet(0x11, 0x0, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x4000090) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x34, r6, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000c40)=ANY=[@ANYBLOB="04010000", @ANYRES16, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x40040}, 0x20000094) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x820010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2cb63ffec6867934cb4508bf", @ANYRESDEC=r8, @ANYBLOB="34422abd7000fedbdf254b000000bb00a9003d2075b57e52129626c5d7a80db973f8fedd9f8ce11a9bb5e2cd7ea817c7d9887acce86bb9a2a13c02c5691e61f09f5e6bca9dfcbd8794f7185bac419fc44efa22b6e66ef0dcb33f702ad93aa4ad08d67f6b1810ea6029ad85d0b1d445c57a8d05cf0f5794d542e02fe875deecffbb863f933b5f413c12aab4481058d6c0b7fb7a3f926f58d849f5d60d20dda90898a9b90e2b82ce51e33dff5baebd958392623bf6ae1bfc4796a38c91943d3363e7c3851fe15f2b412b000800030000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x8080}, 0x20044840) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r7, 0xffffffffffffffff, 0x5, 0x0, 0x0, @prog_id}, 0x20) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000500), r5) 510.277258ms ago: executing program 2 (id=504): socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000100003050400"/20, @ANYRES32=0x0, @ANYBLOB="000000000200030024000e"], 0x58}}, 0x0) 508.776918ms ago: executing program 1 (id=505): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509011f00000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32, @ANYBLOB="000000e8ff000000b703000000000000850000020c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) 278.607047ms ago: executing program 3 (id=506): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 235.80285ms ago: executing program 1 (id=507): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}}, 0x0) 228.711252ms ago: executing program 2 (id=508): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="ec0000002100010026bd700000000000e0000001000000000000000000000000ff0200000000000000000000000000010000000200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000009c00110000000000000000000008000000000001ffffffff000000000000000000000000640101010000000000000000000000000a010100000000000000000000000000000000000635000000000a"], 0xec}}, 0x0) 146.571348ms ago: executing program 3 (id=509): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4, 0x0, @loopback}, 0x1c) 146.138648ms ago: executing program 1 (id=510): getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x40, "1374fe3b3b509e7776a9f3e3959af30993a2f4a3a95028dd1e838145d9e6be3488b0eba201a2a89b2fce039e5ee6ffa0d717c61ed026fc4ce4c097519b60070a"}, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 146.036208ms ago: executing program 2 (id=511): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000001900000008000300", @ANYRES32=r2, @ANYBLOB='#\x00$'], 0x48}}, 0x0) 123.87941ms ago: executing program 4 (id=512): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) 79.783274ms ago: executing program 3 (id=513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x0, 0x0, {0x37}}, 0x14}}, 0x0) 22.553948ms ago: executing program 1 (id=514): r0 = socket(0x2b, 0x80801, 0x0) unshare(0x20000400) bind$x25(r0, &(0x7f0000000040), 0x12) 0s ago: executing program 4 (id=515): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) kernel console output (not intermixed with test programs): an up link [ 213.995896][ T3594] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.002958][ T3594] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.011429][ T3594] device bridge_slave_0 entered promiscuous mode [ 214.020183][ T3587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.045301][ T3586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.057262][ T3586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.071904][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.079634][ T3594] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.087532][ T3594] device bridge_slave_1 entered promiscuous mode [ 214.104542][ T3585] team0: Port device team_slave_0 added [ 214.129977][ T3587] team0: Port device team_slave_0 added [ 214.137543][ T3585] team0: Port device team_slave_1 added [ 214.144573][ T3587] team0: Port device team_slave_1 added [ 214.190314][ T3586] team0: Port device team_slave_0 added [ 214.204014][ T3594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.227098][ T3586] team0: Port device team_slave_1 added [ 214.233446][ T3587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.241085][ T3587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.267176][ T3587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.279686][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.286952][ T3597] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.294977][ T3597] device bridge_slave_0 entered promiscuous mode [ 214.303538][ T3594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.313155][ T3585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.320145][ T3585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.348351][ T3585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.371918][ T3587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.378975][ T3587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.405080][ T3587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.416526][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.423617][ T3597] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.432443][ T3597] device bridge_slave_1 entered promiscuous mode [ 214.447015][ T3585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.453982][ T3585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.480306][ T3585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.497799][ T3586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.505511][ T3586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.531638][ T3586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.563095][ T3594] team0: Port device team_slave_0 added [ 214.573987][ T3586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.589371][ T3586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.621863][ T3586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.653851][ T3594] team0: Port device team_slave_1 added [ 214.679191][ T3597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.691202][ T3597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.717680][ T3585] device hsr_slave_0 entered promiscuous mode [ 214.725460][ T3585] device hsr_slave_1 entered promiscuous mode [ 214.734869][ T3587] device hsr_slave_0 entered promiscuous mode [ 214.741553][ T3587] device hsr_slave_1 entered promiscuous mode [ 214.748280][ T3587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.756258][ T3587] Cannot create hsr debugfs directory [ 214.806250][ T3594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.813303][ T3594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.839451][ T3594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.865319][ T3586] device hsr_slave_0 entered promiscuous mode [ 214.872227][ T3586] device hsr_slave_1 entered promiscuous mode [ 214.879286][ T3586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.887045][ T3586] Cannot create hsr debugfs directory [ 214.895049][ T3597] team0: Port device team_slave_0 added [ 214.905091][ T3594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.912052][ T3594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.938534][ T3594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.963868][ T3597] team0: Port device team_slave_1 added [ 215.055084][ T3597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.062215][ T3597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.088369][ T3597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.102963][ T3597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.110039][ T3597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.137920][ T3597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.151523][ T3594] device hsr_slave_0 entered promiscuous mode [ 215.158412][ T3594] device hsr_slave_1 entered promiscuous mode [ 215.165502][ T3594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.173157][ T3594] Cannot create hsr debugfs directory [ 215.215012][ T3310] Bluetooth: hci3: command 0x0409 tx timeout [ 215.215012][ T1074] Bluetooth: hci0: command 0x0409 tx timeout [ 215.215475][ T1074] Bluetooth: hci2: command 0x0409 tx timeout [ 215.233605][ T1074] Bluetooth: hci1: command 0x0409 tx timeout [ 215.294388][ T1074] Bluetooth: hci4: command 0x0409 tx timeout [ 215.318025][ T3597] device hsr_slave_0 entered promiscuous mode [ 215.326980][ T3597] device hsr_slave_1 entered promiscuous mode [ 215.333663][ T3597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.341761][ T3597] Cannot create hsr debugfs directory [ 215.499970][ T3587] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 215.516624][ T3587] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 215.530883][ T3587] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 215.541078][ T3587] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 215.555083][ T3585] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.566371][ T3585] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.579192][ T3585] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.591723][ T3585] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.645105][ T3586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 215.655445][ T3586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 215.668706][ T3586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 215.678315][ T3586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 215.740609][ T3594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.752137][ T3594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.780308][ T3594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.790734][ T3594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.842439][ T3597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 215.871279][ T3597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 215.881551][ T3597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 215.903157][ T3597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 215.921097][ T3587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.943686][ T3585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.970963][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.981472][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.998401][ T3587] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.020099][ T3585] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.050573][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.061112][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.069203][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.078296][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.087022][ T3631] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.094254][ T3631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.102923][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.112824][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.121343][ T3631] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.128523][ T3631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.138978][ T3586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.165144][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.173106][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.182092][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.191015][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.200350][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.208844][ T3632] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.215931][ T3632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.223592][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.232423][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.240918][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.249583][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.258252][ T3632] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.265347][ T3632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.272877][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.282571][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.291722][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.300100][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.330467][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.340032][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.357094][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.394371][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.402845][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.413948][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.421832][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.433240][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.441833][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.450398][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.460088][ T3586] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.476208][ T3594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.484999][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.499637][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.508232][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.522485][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.531774][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.538905][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.548002][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.556677][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.566157][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.581759][ T3597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.597494][ T3594] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.613263][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.623441][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.633641][ T3632] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.640786][ T3632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.649190][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.658541][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.666764][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.675199][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.683875][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.697490][ T3585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.711569][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.738244][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.750627][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.762190][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.774015][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.783197][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.794922][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.802585][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.813117][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.821820][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.830686][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.837898][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.845946][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.853370][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.871589][ T3597] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.888773][ T3587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.910937][ T3586] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 216.922284][ T3586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.937792][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.946893][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.956372][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.965824][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.974124][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.983157][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.991667][ T3631] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.998739][ T3631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.006621][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.015538][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.023847][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.032380][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.041169][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.051693][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.074423][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.083669][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.105077][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.115123][ T3636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.154881][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.163477][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.172423][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.180283][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.189881][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.198574][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.207253][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.215893][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.222954][ T3310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.230742][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.239444][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.248111][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.257506][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.273323][ T3585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.295243][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 217.301926][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.311919][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.321177][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.331585][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.340535][ T3310] Bluetooth: hci2: command 0x041b tx timeout [ 217.347005][ T3310] Bluetooth: hci3: command 0x041b tx timeout [ 217.356969][ T3587] device veth0_vlan entered promiscuous mode [ 217.374421][ T3310] Bluetooth: hci0: command 0x041b tx timeout [ 217.381031][ T3310] Bluetooth: hci4: command 0x041b tx timeout [ 217.381611][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.401455][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.410314][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.421531][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.430065][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.438826][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.447194][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.455731][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.463998][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.473007][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.481628][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.490777][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.499476][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.508394][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.519661][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.537223][ T3597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.549539][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.563362][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.577862][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.588609][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.597870][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.606799][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.620802][ T3587] device veth1_vlan entered promiscuous mode [ 217.683812][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 217.693645][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 217.709451][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.720690][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.729704][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.738032][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.748726][ T3586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.764331][ T3585] device veth0_vlan entered promiscuous mode [ 217.796306][ T3594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.803604][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.813015][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.820876][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.830340][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.839347][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.846931][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.858283][ T3587] device veth0_macvtap entered promiscuous mode [ 217.886550][ T3585] device veth1_vlan entered promiscuous mode [ 217.894712][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 217.902801][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.914646][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.923725][ T3597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.941736][ T3587] device veth1_macvtap entered promiscuous mode [ 217.953141][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.968555][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.996822][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.015188][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.031629][ T3594] device veth0_vlan entered promiscuous mode [ 218.061805][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.071358][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.087983][ T3585] device veth0_macvtap entered promiscuous mode [ 218.106423][ T3587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.119747][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.128643][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.136876][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.152203][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.162103][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.171190][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.180942][ T3594] device veth1_vlan entered promiscuous mode [ 218.190925][ T3585] device veth1_macvtap entered promiscuous mode [ 218.211175][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 218.219668][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.228218][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.236226][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.244535][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.254078][ T3587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.268885][ T3586] device veth0_vlan entered promiscuous mode [ 218.282351][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 218.290658][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.300789][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.309619][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.319708][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.331501][ T3587] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.341129][ T3587] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.350608][ T3587] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.359742][ T3587] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.389831][ T3586] device veth1_vlan entered promiscuous mode [ 218.400594][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 218.408830][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 218.418365][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.427565][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.463374][ T3594] device veth0_macvtap entered promiscuous mode [ 218.475232][ T3585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.489389][ T3585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.502276][ T3585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.511633][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.520392][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.529285][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.538133][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.547700][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.558815][ T3594] device veth1_macvtap entered promiscuous mode [ 218.605722][ T3585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.617394][ T3585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.630885][ T3585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.640065][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.648196][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.657332][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.665815][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.673912][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.682503][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.691126][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.700281][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.708306][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.729607][ T3597] device veth0_vlan entered promiscuous mode [ 218.748739][ T3586] device veth0_macvtap entered promiscuous mode [ 218.758860][ T3594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.769805][ T3594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.780226][ T3594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.790762][ T3594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.802087][ T3594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.812593][ T3585] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.823516][ T3585] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.832562][ T3585] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.841807][ T3585] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.856631][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.869943][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.878803][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.889650][ T3594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.901104][ T3594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.912986][ T3594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.923907][ T3594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.936037][ T3594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.948590][ T3597] device veth1_vlan entered promiscuous mode [ 218.958353][ T3586] device veth1_macvtap entered promiscuous mode [ 218.981369][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.990555][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.001528][ T3594] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.010443][ T3594] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.019621][ T3594] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.028363][ T3594] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.083025][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.091679][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.101291][ T3586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.113368][ T3586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.123916][ T3586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.135119][ T3586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.145028][ T3586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.155804][ T3586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.167879][ T3586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.177134][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.185937][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.194412][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 219.202119][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.210774][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.236871][ T3597] device veth0_macvtap entered promiscuous mode [ 219.259705][ T3586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.273845][ T3586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.284093][ T3586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.301056][ T3586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.311065][ T3586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.321830][ T3586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.333093][ T3586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.350815][ T3597] device veth1_macvtap entered promiscuous mode [ 219.367112][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.377843][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.386255][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.397787][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.408966][ T3586] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.417993][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 219.420632][ T3586] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.424057][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 219.438002][ T3586] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.448154][ T3586] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.465092][ T3636] Bluetooth: hci4: command 0x040f tx timeout [ 219.469060][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.471209][ T3636] Bluetooth: hci0: command 0x040f tx timeout [ 219.489383][ T3636] Bluetooth: hci3: command 0x040f tx timeout [ 219.497772][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.546031][ T3625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.552034][ T3597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.567021][ T3625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.570437][ T3597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.586313][ T3597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.597009][ T3597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.607018][ T3597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.619265][ T3597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.629585][ T3597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.640334][ T3597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.651343][ T3597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.674520][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 219.682276][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 219.690226][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.701066][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.732773][ T3597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.743316][ T3597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.753794][ T3597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.764550][ T3597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.783176][ T3597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.793973][ T3597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.805427][ T3597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.815938][ T3597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.827516][ T3597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.845734][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.853665][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.881340][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.899257][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.910205][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 219.935501][ T3597] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.949859][ T3597] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.959026][ T3597] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.969309][ T3597] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.994933][ T3666] FAULT_INJECTION: forcing a failure. [ 219.994933][ T3666] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 219.995730][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.014035][ T3666] CPU: 0 PID: 3666 Comm: syz.0.1 Not tainted 5.15.164-syzkaller #0 [ 220.024293][ T3666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 220.033419][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.034360][ T3666] Call Trace: [ 220.034370][ T3666] [ 220.034377][ T3666] dump_stack_lvl+0x1e3/0x2d0 [ 220.034412][ T3666] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 220.034429][ T3666] ? panic+0x860/0x860 [ 220.034446][ T3666] ? validate_chain+0x112/0x5930 [ 220.067110][ T3666] ? validate_chain+0x112/0x5930 [ 220.072042][ T3666] should_fail+0x38a/0x4c0 [ 220.076443][ T3666] _copy_from_user+0x2d/0x170 [ 220.081108][ T3666] iovec_from_user+0x13b/0x390 [ 220.085993][ T3666] __import_iovec+0x72/0x4b0 [ 220.090596][ T3666] ? __ia32_sys_shutdown+0x60/0x60 [ 220.095697][ T3666] import_iovec+0xe6/0x120 [ 220.100105][ T3666] ___sys_sendmsg+0x215/0x2e0 [ 220.104774][ T3666] ? __sys_sendmsg+0x260/0x260 [ 220.109568][ T3666] ? __fdget+0x191/0x220 [ 220.113802][ T3666] __se_sys_sendmsg+0x19a/0x260 [ 220.118642][ T3666] ? __x64_sys_sendmsg+0x80/0x80 [ 220.124278][ T3666] ? syscall_enter_from_user_mode+0x2e/0x240 [ 220.130270][ T3666] ? lockdep_hardirqs_on+0x94/0x130 [ 220.135459][ T3666] ? syscall_enter_from_user_mode+0x2e/0x240 [ 220.141422][ T3666] do_syscall_64+0x3b/0xb0 [ 220.145810][ T3666] ? clear_bhb_loop+0x15/0x70 [ 220.150467][ T3666] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.156343][ T3666] RIP: 0033:0x7f339dd829f9 [ 220.160739][ T3666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.180419][ T3666] RSP: 002b:00007f339c1e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.188989][ T3666] RAX: ffffffffffffffda RBX: 00007f339df11058 RCX: 00007f339dd829f9 [ 220.197091][ T3666] RDX: 0000000000000000 RSI: 0000000020001400 RDI: 0000000000000004 [ 220.205058][ T3666] RBP: 00007f339c1e0090 R08: 0000000000000000 R09: 0000000000000000 [ 220.213035][ T3666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.221028][ T3666] R13: 0000000000000001 R14: 00007f339df11058 R15: 00007ffc0b7fa228 [ 220.228999][ T3666] [ 220.251339][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.262545][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.279193][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.298544][ T3625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.329423][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.336433][ T3625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.382703][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 220.451435][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.460546][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.493016][ T3675] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 220.524797][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 220.570904][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.599515][ T3669] loop0: detected capacity change from 0 to 4096 [ 220.607303][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.624575][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.633275][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.654245][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.669449][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.696851][ T3669] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 220.739983][ T3674] loop2: detected capacity change from 0 to 8192 [ 220.859904][ T3674] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 220.885460][ T26] audit: type=1800 audit(1722993999.314:2): pid=3669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 220.908540][ T3674] REISERFS (device loop2): using ordered data mode [ 220.915280][ T3674] reiserfs: using flush barriers [ 220.922098][ T26] audit: type=1800 audit(1722993999.344:3): pid=3688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 220.945638][ T3674] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 220.963370][ T3674] REISERFS (device loop2): checking transaction log (loop2) [ 221.151631][ T3674] REISERFS (device loop2): Using tea hash to sort names [ 221.171735][ T3674] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 221.182044][ T3636] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 221.465090][ T3667] Bluetooth: hci1: command 0x0419 tx timeout [ 221.481504][ T3667] Bluetooth: hci2: command 0x0419 tx timeout [ 221.488190][ T3636] usb 5-1: Using ep0 maxpacket: 8 [ 221.537863][ T3310] Bluetooth: hci3: command 0x0419 tx timeout [ 221.545175][ T3310] Bluetooth: hci0: command 0x0419 tx timeout [ 221.562087][ T3310] Bluetooth: hci4: command 0x0419 tx timeout [ 221.635086][ T3636] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.642247][ T3694] device syzkaller0 entered promiscuous mode [ 221.654378][ T3636] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 221.698384][ T3636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.732081][ T3636] usb 5-1: config 0 descriptor?? [ 222.009853][ T3685] loop4: detected capacity change from 0 to 512 [ 222.040779][ T3711] loop0: detected capacity change from 0 to 128 [ 222.102972][ T3685] EXT4-fs (loop4): Invalid journal IO priority (must be 0-7) [ 222.171072][ T3667] usb 5-1: USB disconnect, device number 2 [ 222.233543][ T3711] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.274812][ T3711] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 222.532969][ T3716] loop1: detected capacity change from 0 to 2048 [ 222.590788][ T3722] FAULT_INJECTION: forcing a failure. [ 222.590788][ T3722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.646790][ T3722] CPU: 1 PID: 3722 Comm: syz.2.17 Not tainted 5.15.164-syzkaller #0 [ 222.654814][ T3722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 222.664875][ T3722] Call Trace: [ 222.668158][ T3722] [ 222.671084][ T3722] dump_stack_lvl+0x1e3/0x2d0 [ 222.675760][ T3722] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 222.681393][ T3722] ? panic+0x860/0x860 [ 222.685459][ T3722] ? __might_sleep+0xc0/0xc0 [ 222.690056][ T3722] should_fail+0x38a/0x4c0 [ 222.694470][ T3722] copy_page_from_iter+0x33b/0x750 [ 222.699592][ T3722] tun_get_user+0x1c55/0x40f0 [ 222.704285][ T3722] ? tun_ring_recv+0xcc0/0xcc0 [ 222.709053][ T3722] ? rcu_lock_release+0x5/0x20 [ 222.713834][ T3722] tun_chr_write_iter+0x10c/0x1e0 [ 222.718870][ T3722] vfs_write+0xacd/0xe50 [ 222.723136][ T3722] ? file_end_write+0x250/0x250 [ 222.727996][ T3722] ? __fget_files+0x413/0x480 [ 222.732679][ T3722] ? __fdget_pos+0x1e9/0x380 [ 222.737262][ T3722] ? ksys_write+0x77/0x2c0 [ 222.741675][ T3722] ksys_write+0x1a2/0x2c0 [ 222.746005][ T3722] ? print_irqtrace_events+0x210/0x210 [ 222.751486][ T3722] ? __ia32_sys_read+0x80/0x80 [ 222.756276][ T3722] ? syscall_enter_from_user_mode+0x2e/0x240 [ 222.762289][ T3722] ? lockdep_hardirqs_on+0x94/0x130 [ 222.767594][ T3722] ? syscall_enter_from_user_mode+0x2e/0x240 [ 222.773582][ T3722] do_syscall_64+0x3b/0xb0 [ 222.777994][ T3722] ? clear_bhb_loop+0x15/0x70 [ 222.782669][ T3722] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 222.788560][ T3722] RIP: 0033:0x7f6614c1b4df [ 222.792971][ T3722] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 222.812569][ T3722] RSP: 002b:00007f661309b000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 222.820982][ T3722] RAX: ffffffffffffffda RBX: 00007f6614daaf80 RCX: 00007f6614c1b4df [ 222.828949][ T3722] RDX: 00000000000001ee RSI: 0000000020000640 RDI: 00000000000000c8 [ 222.836917][ T3722] RBP: 00007f661309b090 R08: 0000000000000000 R09: 0000000000000000 [ 222.844973][ T3722] R10: 00000000000001ee R11: 0000000000000293 R12: 0000000000000001 [ 222.852944][ T3722] R13: 0000000000000001 R14: 00007f6614daaf80 R15: 00007ffc0bfc0788 [ 222.860950][ T3722] [ 223.016270][ T3716] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 223.979988][ T3587] cgroup: fork rejected by pids controller in /syz0 [ 224.530993][ T3741] loop2: detected capacity change from 0 to 32768 [ 224.610358][ T3741] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.21 (3741) [ 224.712264][ T3741] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 224.759353][ T3741] BTRFS info (device loop2): using free space tree [ 224.787273][ T3741] BTRFS info (device loop2): has skinny extents [ 224.816242][ T3745] loop4: detected capacity change from 0 to 32768 [ 224.931109][ T3745] XFS (loop4): Mounting V5 Filesystem [ 224.950953][ T3748] loop3: detected capacity change from 0 to 32768 [ 224.976594][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 225.028024][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 225.069453][ T3748] ======================================================= [ 225.069453][ T3748] WARNING: The mand mount option has been deprecated and [ 225.069453][ T3748] and is ignored by this kernel. Remove the mand [ 225.069453][ T3748] option from the mount to silence this warning. [ 225.069453][ T3748] ======================================================= [ 225.146282][ T3741] BTRFS info (device loop2): enabling ssd optimizations [ 225.262919][ T3787] capability: warning: `syz.2.21' uses 32-bit capabilities (legacy support in use) [ 225.312104][ T3748] XFS (loop3): Mounting V5 Filesystem [ 225.312826][ T3745] XFS (loop4): Ending clean mount [ 225.322509][ T3741] fuse: Bad value for 'fd' [ 225.331015][ T3780] chnl_net:caif_netlink_parms(): no params data found [ 225.404032][ T3745] XFS (loop4): Quotacheck needed: Please wait. [ 225.514802][ T3780] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.526981][ T3780] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.560814][ T3780] device bridge_slave_0 entered promiscuous mode [ 225.610450][ T3745] XFS (loop4): Quotacheck: Done. [ 225.614772][ T3748] XFS (loop3): Ending clean mount [ 225.663156][ T3780] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.673122][ T3748] XFS (loop3): Quotacheck needed: Please wait. [ 225.710466][ T3780] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.741472][ T3780] device bridge_slave_1 entered promiscuous mode [ 225.755147][ T3745] XFS (loop4): User initiated shutdown received. [ 225.769938][ T3748] XFS (loop3): Quotacheck: Done. [ 225.801647][ T3745] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x150 (fs/xfs/xfs_fsops.c:481). Shutting down filesystem. [ 225.834366][ T3745] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 225.863990][ T3780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.896108][ T3780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.042519][ T3597] XFS (loop4): Unmounting Filesystem [ 226.047588][ T3809] loop2: detected capacity change from 0 to 128 [ 226.062881][ T3780] team0: Port device team_slave_0 added [ 226.092604][ T3780] team0: Port device team_slave_1 added [ 226.126661][ T3809] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 226.152275][ T3809] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 226.230106][ T3780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.240882][ T3780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.272343][ T3780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.290119][ T3780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.301448][ T3780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.334753][ T3780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.346116][ T3667] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 226.674422][ T3667] usb 4-1: Using ep0 maxpacket: 16 [ 226.804758][ T3667] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.858965][ T3667] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 226.919467][ T3667] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 226.968655][ T3667] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.018539][ T3667] usb 4-1: config 0 descriptor?? [ 227.082744][ T3780] device hsr_slave_0 entered promiscuous mode [ 227.134280][ T3802] Bluetooth: hci2: command 0x0409 tx timeout [ 227.188643][ T3780] device hsr_slave_1 entered promiscuous mode [ 227.222255][ T3780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.231011][ T3817] capability: warning: `syz.4.30' uses deprecated v2 capabilities in a way that may be insecure [ 227.243013][ T3780] Cannot create hsr debugfs directory [ 227.288155][ T3586] XFS (loop3): Unmounting Filesystem [ 227.354385][ T3667] usbhid 4-1:0.0: can't add hid device: -71 [ 227.366496][ T3667] usbhid: probe of 4-1:0.0 failed with error -71 [ 227.413545][ T3667] usb 4-1: USB disconnect, device number 2 [ 227.701486][ T3823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.34'. [ 227.911598][ T3780] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.984306][ T3802] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 228.092523][ T3780] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.130916][ T3833] loop4: detected capacity change from 0 to 1024 [ 228.197950][ T3780] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.244266][ T3802] usb 2-1: Using ep0 maxpacket: 16 [ 228.346009][ T26] audit: type=1804 audit(1722994006.774:4): pid=3837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.36" name="/newroot/6/file1/bus" dev="loop4" ino=25 res=1 errno=0 [ 228.364427][ T3802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.383385][ T3780] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.405375][ T3802] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 228.429747][ T3802] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 228.445674][ T3802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.475723][ T3802] usb 2-1: config 0 descriptor?? [ 228.535347][ T3825] loop2: detected capacity change from 0 to 65536 [ 228.683253][ T3780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 228.797589][ T3780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 228.855233][ T3780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 229.030166][ T3825] XFS (loop2): Mounting V5 Filesystem [ 229.087540][ T3780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 229.116246][ T3846] FAULT_INJECTION: forcing a failure. [ 229.116246][ T3846] name failslab, interval 1, probability 0, space 0, times 1 [ 229.128933][ T3802] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 229.140150][ T3846] CPU: 0 PID: 3846 Comm: syz.3.38 Not tainted 5.15.164-syzkaller #0 [ 229.148150][ T3846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 229.158207][ T3846] Call Trace: [ 229.161490][ T3846] [ 229.164422][ T3846] dump_stack_lvl+0x1e3/0x2d0 [ 229.168875][ T3802] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 229.169111][ T3846] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 229.186298][ T3846] ? panic+0x860/0x860 [ 229.190386][ T3846] ? __might_sleep+0xc0/0xc0 [ 229.194994][ T3846] should_fail+0x38a/0x4c0 [ 229.199432][ T3846] should_failslab+0x5/0x20 [ 229.203938][ T3846] slab_pre_alloc_hook+0x53/0xc0 [ 229.208886][ T3846] __kmalloc+0x6e/0x300 [ 229.208977][ T3802] microsoft 0003:045E:07DA.0001: no inputs found [ 229.213044][ T3846] ? tomoyo_encode+0x26b/0x530 [ 229.213074][ T3846] tomoyo_encode+0x26b/0x530 [ 229.213093][ T3846] ? sock_free_inode+0x20/0x20 [ 229.213113][ T3846] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 229.213137][ T3846] tomoyo_path_number_perm+0x225/0x810 [ 229.244902][ T3846] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 229.247178][ T3802] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 229.250400][ T3846] ? __fget_files+0x413/0x480 [ 229.263693][ T3846] security_file_ioctl+0x6d/0xa0 [ 229.268644][ T3846] __se_sys_ioctl+0x47/0x160 [ 229.273241][ T3846] do_syscall_64+0x3b/0xb0 [ 229.277666][ T3846] ? clear_bhb_loop+0x15/0x70 [ 229.282506][ T3846] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 229.288439][ T3846] RIP: 0033:0x7f50ece819f9 [ 229.292960][ T3846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.310066][ T3780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.313019][ T3846] RSP: 002b:00007f50eb300038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.313043][ T3846] RAX: ffffffffffffffda RBX: 00007f50ed00ff80 RCX: 00007f50ece819f9 [ 229.313054][ T3846] RDX: 0000000020000800 RSI: 0000000000008923 RDI: 0000000000000005 [ 229.313065][ T3846] RBP: 00007f50eb300090 R08: 0000000000000000 R09: 0000000000000000 [ 229.313075][ T3846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.313084][ T3846] R13: 0000000000000000 R14: 00007f50ed00ff80 R15: 00007ffe6c7ed248 [ 229.313108][ T3846] [ 229.341947][ T3630] Bluetooth: hci2: command 0x041b tx timeout [ 229.367350][ T3780] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.392548][ T3846] ERROR: Out of memory at tomoyo_realpath_from_path. [ 229.400552][ T3825] XFS (loop2): Ending clean mount [ 229.407494][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.423537][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.431132][ T3825] XFS (loop2): Quotacheck needed: Please wait. [ 229.439021][ T3846] : renamed from pim6reg1 [ 229.471661][ T3825] XFS (loop2): Quotacheck: Done. [ 229.508746][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.523863][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.553123][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.559843][ T3853] tmpfs: Unknown parameter 'huways' [ 229.560283][ T3636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.611284][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.637890][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.664691][ T3636] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.671816][ T3636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.711873][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.734968][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.756453][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.777356][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.787573][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.797011][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.815799][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.824903][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.835285][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.848830][ T3780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.866884][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 229.880841][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.892782][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 229.906693][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.999365][ T3857] Option '^%' to dns_resolver key: bad/missing value [ 230.079186][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.093439][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.116912][ T3780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.119548][ T3852] loop4: detected capacity change from 0 to 32768 [ 230.148823][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.167393][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.182722][ T3852] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.39 (3852) [ 230.222756][ T3780] device veth0_vlan entered promiscuous mode [ 230.241243][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.254362][ T3852] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 230.259184][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.281667][ T3852] BTRFS info (device loop4): using free space tree [ 230.298557][ T3780] device veth1_vlan entered promiscuous mode [ 230.302868][ T3852] BTRFS info (device loop4): has skinny extents [ 230.327802][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.341065][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.358542][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 230.407450][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 230.438090][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 230.483238][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 230.518147][ T3780] device veth0_macvtap entered promiscuous mode [ 230.565423][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 230.576821][ T3852] BTRFS info (device loop4): enabling ssd optimizations [ 230.636538][ T3780] device veth1_macvtap entered promiscuous mode [ 230.674305][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.693366][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.722309][ T3667] usb 2-1: USB disconnect, device number 2 [ 230.728357][ T26] audit: type=1800 audit(1722994009.154:5): pid=3852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.39" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 230.776869][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.864222][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.898327][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.942218][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.993928][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.036101][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.077658][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.105655][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.135669][ T3780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.170519][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.188343][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.237384][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.272605][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.303083][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.356104][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.385617][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.396692][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.406779][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.417315][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.427249][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.444185][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.459450][ T3805] Bluetooth: hci2: command 0x040f tx timeout [ 231.480602][ T3780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.504849][ T3585] XFS (loop2): Unmounting Filesystem [ 231.510825][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.538446][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.575514][ T3780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.658867][ T3780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.672237][ T3780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.687861][ T3780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.907134][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.935443][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.981875][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 232.008796][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.031885][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.060532][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.371957][ T3884] loop1: detected capacity change from 0 to 65536 [ 232.436621][ T3884] XFS: ikeep mount option is deprecated. [ 232.448637][ T3904] netlink: 'syz.0.44': attribute type 4 has an invalid length. [ 232.573035][ T3884] XFS (loop1): Mounting V5 Filesystem [ 232.683681][ T3884] XFS (loop1): Ending clean mount [ 232.785231][ T3916] FAULT_INJECTION: forcing a failure. [ 232.785231][ T3916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.819460][ T3916] CPU: 1 PID: 3916 Comm: syz.0.45 Not tainted 5.15.164-syzkaller #0 [ 232.827736][ T3916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 232.838322][ T3916] Call Trace: [ 232.841714][ T3916] [ 232.844660][ T3916] dump_stack_lvl+0x1e3/0x2d0 [ 232.849478][ T3916] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 232.855289][ T3916] ? panic+0x860/0x860 [ 232.859383][ T3916] should_fail+0x38a/0x4c0 [ 232.863825][ T3916] _copy_from_user+0x2d/0x170 [ 232.868617][ T3916] __sys_bpf+0x1d5/0x670 [ 232.873225][ T3916] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 232.878707][ T3916] ? syscall_enter_from_user_mode+0x2e/0x240 [ 232.884718][ T3916] ? lockdep_hardirqs_on+0x94/0x130 [ 232.890205][ T3916] __x64_sys_bpf+0x78/0x90 [ 232.894639][ T3916] do_syscall_64+0x3b/0xb0 [ 232.899060][ T3916] ? clear_bhb_loop+0x15/0x70 [ 232.903745][ T3916] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.909643][ T3916] RIP: 0033:0x7f01d33ff9f9 [ 232.914153][ T3916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.933927][ T3916] RSP: 002b:00007f01d187e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 232.942354][ T3916] RAX: ffffffffffffffda RBX: 00007f01d358df80 RCX: 00007f01d33ff9f9 [ 232.950336][ T3916] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011 [ 232.958318][ T3916] RBP: 00007f01d187e090 R08: 0000000000000000 R09: 0000000000000000 [ 232.966297][ T3916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.974275][ T3916] R13: 0000000000000000 R14: 00007f01d358df80 R15: 00007fff29999408 [ 232.982277][ T3916] [ 233.113326][ T3594] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x25 dinode [ 233.183469][ T3911] loop2: detected capacity change from 0 to 32768 [ 233.190729][ T3594] XFS (loop1): Unmount and run xfs_repair [ 233.197635][ T3594] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 233.205702][ T3594] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 233.235617][ T3594] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 233.246196][ T3594] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 233.256001][ T3594] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 233.266467][ T3594] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 233.276854][ T3594] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 233.286524][ T3594] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 233.293608][ T3920] loop0: detected capacity change from 0 to 8192 [ 233.297292][ T3594] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 233.316595][ T3594] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x25 dinode [ 233.327428][ T3594] XFS (loop1): Unmount and run xfs_repair [ 233.334618][ T3594] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 233.344443][ T3594] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 233.356441][ T3594] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 233.366184][ T3594] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 233.379243][ T3594] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 233.389694][ T3594] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 233.399268][ T3594] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 233.405768][ T3911] XFS (loop2): Mounting V5 Filesystem [ 233.408238][ T3594] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 233.423644][ T3594] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 233.441255][ T3920] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 233.503636][ T3930] loop4: detected capacity change from 0 to 2048 [ 233.551279][ T3892] Bluetooth: hci2: command 0x0419 tx timeout [ 233.565622][ T3920] REISERFS (device loop0): using ordered data mode [ 233.572146][ T3920] reiserfs: using flush barriers [ 233.627262][ T3920] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 233.639732][ T3911] XFS (loop2): Ending clean mount [ 233.651029][ T3911] XFS (loop2): Quotacheck needed: Please wait. [ 233.662159][ T3920] REISERFS (device loop0): checking transaction log (loop0) [ 233.681308][ T3594] XFS (loop1): Unmounting Filesystem [ 233.692645][ T3920] REISERFS (device loop0): Using r5 hash to sort names [ 233.701739][ T3920] REISERFS (device loop0): using 3.5.x disk format [ 233.734075][ T3920] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 233.813119][ T3911] XFS (loop2): Quotacheck: Done. [ 233.819105][ T3930] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 233.901159][ T3585] XFS (loop2): Unmounting Filesystem [ 233.941526][ T151] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.235090][ T3940] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 234.251676][ T3940] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 234.264361][ T3940] EXT4-fs (loop4): This should not happen!! Data will be lost [ 234.264361][ T3940] [ 234.274409][ T3940] EXT4-fs (loop4): Total free blocks count 0 [ 234.280452][ T3940] EXT4-fs (loop4): Free/Dirty block details [ 234.286519][ T3940] EXT4-fs (loop4): free_blocks=2415919104 [ 234.292343][ T3940] EXT4-fs (loop4): dirty_blocks=16 [ 234.297560][ T3940] EXT4-fs (loop4): Block reservation details [ 234.304117][ T3940] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 234.348907][ T3940] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 234.361369][ T3940] EXT4-fs (loop4): This should not happen!! Data will be lost [ 234.361369][ T3940] [ 234.455597][ T3940] Zero length message leads to an empty skb [ 234.818382][ T151] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.875673][ T3942] fuse: Bad value for 'fd' [ 234.988460][ T151] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.177948][ T151] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.359439][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 235.397830][ T3957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.416637][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 235.433449][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 235.443430][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 235.453555][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 235.463453][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 235.486156][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 235.516095][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 236.348939][ T3957] loop2: detected capacity change from 0 to 32768 [ 237.525978][ T3957] XFS: ikeep mount option is deprecated. [ 237.532006][ T3957] XFS: noikeep mount option is deprecated. [ 237.573950][ T3961] netlink: 'syz.3.56': attribute type 10 has an invalid length. [ 237.692026][ T3957] XFS (loop2): Mounting V5 Filesystem [ 237.783123][ T3957] XFS (loop2): Ending clean mount [ 237.791540][ T3957] XFS (loop2): Quotacheck needed: Please wait. [ 237.818081][ T3961] team0: Port device netdevsim0 added [ 237.833372][ T3969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.883581][ T3957] XFS (loop2): Quotacheck: Done. [ 238.401138][ T3987] loop0: detected capacity change from 0 to 512 [ 238.512782][ T3987] EXT4-fs (loop0): Unrecognized mount option "nobh"" or missing value [ 238.552971][ T3585] XFS (loop2): Unmounting Filesystem [ 239.102365][ T3999] loop3: detected capacity change from 0 to 512 [ 239.124372][ T3973] chnl_net:caif_netlink_parms(): no params data found [ 239.211991][ T4004] loop2: detected capacity change from 0 to 512 [ 239.249742][ T3999] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,user_xattr,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 239.270502][ T3999] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff) [ 239.543997][ T4017] loop2: detected capacity change from 0 to 1024 [ 239.641687][ T4020] loop4: detected capacity change from 0 to 16 [ 239.661254][ T3973] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.674400][ T3973] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.694409][ T4010] kvm [4009]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 239.695333][ T3973] device bridge_slave_0 entered promiscuous mode [ 239.715110][ T4020] erofs: Unknown parameter 't5;} 7_cN"Lam)p'6~' [ 239.764404][ T4015] loop0: detected capacity change from 0 to 1024 [ 239.821767][ T3973] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.831907][ T3973] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.866263][ T3973] device bridge_slave_1 entered promiscuous mode [ 239.935318][ T3803] Bluetooth: hci3: command 0x0409 tx timeout [ 239.955849][ T4015] EXT4-fs (loop0): Test dummy encryption mode enabled [ 239.975800][ T4015] EXT4-fs (loop0): Ignoring removed orlov option [ 240.034504][ T4015] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 240.247004][ T3973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.276336][ T3973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.449805][ T3973] team0: Port device team_slave_0 added [ 240.532587][ T3973] team0: Port device team_slave_1 added [ 240.626331][ T3973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.643749][ T3973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.752019][ T3973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.848723][ T151] device hsr_slave_0 left promiscuous mode [ 240.890858][ T151] device hsr_slave_1 left promiscuous mode [ 240.933506][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.972210][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.001418][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.023129][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.050595][ T151] device bridge_slave_1 left promiscuous mode [ 241.075901][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.138140][ T151] device bridge_slave_0 left promiscuous mode [ 241.155722][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.257416][ T151] device veth1_macvtap left promiscuous mode [ 241.293564][ T151] device veth0_macvtap left promiscuous mode [ 241.304601][ T151] device veth1_vlan left promiscuous mode [ 241.310781][ T151] device veth0_vlan left promiscuous mode [ 242.014882][ T3803] Bluetooth: hci3: command 0x041b tx timeout [ 242.099403][ T151] team0 (unregistering): Port device team_slave_1 removed [ 242.145418][ T151] team0 (unregistering): Port device team_slave_0 removed [ 242.186714][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.292549][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.484056][ T151] bond0 (unregistering): Released all slaves [ 242.640085][ T3973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.657669][ T3973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.753472][ T3973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.965945][ T3973] device hsr_slave_0 entered promiscuous mode [ 243.003472][ T3973] device hsr_slave_1 entered promiscuous mode [ 243.033545][ T3973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.064249][ T3973] Cannot create hsr debugfs directory [ 244.094305][ T3894] Bluetooth: hci3: command 0x040f tx timeout [ 244.179081][ T3973] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 244.245901][ T3973] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 244.271765][ T3973] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 244.302081][ T3973] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 244.501036][ T4121] loop4: detected capacity change from 0 to 1024 [ 244.626887][ T3973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.668429][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.686656][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.706149][ T4121] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.92: bad orphan inode 2097152 [ 244.771532][ T4121] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.788171][ T3973] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.825164][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.864731][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.873176][ T3667] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.880393][ T3667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.078906][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.111565][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.157543][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.189032][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.196176][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.232159][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.258495][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.281412][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.308634][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.330562][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.360663][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.380662][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.431491][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.450449][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.500849][ T3973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.575691][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.593684][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.630486][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.911753][ T4154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 246.681860][ T3803] Bluetooth: hci3: command 0x0419 tx timeout [ 246.811144][ T3973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.849280][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.865015][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.932661][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.945998][ T4161] loop4: detected capacity change from 0 to 2048 [ 246.955162][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.016515][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 247.046373][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.064531][ T3973] device veth0_vlan entered promiscuous mode [ 247.085385][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.115393][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.125972][ T4161] EXT4-fs (loop4): Mount option "nodelalloc" incompatible with ext3 [ 247.176387][ T3973] device veth1_vlan entered promiscuous mode [ 247.262517][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 247.280220][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 247.326756][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 247.367007][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 247.410639][ T3973] device veth0_macvtap entered promiscuous mode [ 247.462017][ T3973] device veth1_macvtap entered promiscuous mode [ 247.501478][ T4178] loop3: detected capacity change from 0 to 512 [ 247.552740][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.591635][ T4178] EXT4-fs (loop3): Unrecognized mount option "fsmagic=0x0000000000000008" or missing value [ 247.609687][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.643516][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.672410][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.699630][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.729224][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.762287][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.802349][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.865891][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.924484][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.992918][ T3973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.041818][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.058480][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.082162][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 248.101036][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.141281][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.172002][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.193247][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.210679][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.222442][ T4173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.236848][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.261321][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.283117][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.314734][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.346343][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.408083][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.435105][ T3973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.454313][ T3803] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 248.470631][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.489278][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.527179][ T3973] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.546421][ T3973] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.562546][ T4207] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 248.569222][ T3973] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.672061][ T3973] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.834496][ T3803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.853596][ T3803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.898696][ T3803] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 248.916490][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.934625][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.955651][ T3803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.017037][ T3803] usb 3-1: config 0 descriptor?? [ 249.042997][ T3735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.051874][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 249.072547][ T3735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.148136][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 249.208373][ T4232] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 249.230201][ T3629] Bluetooth: hci0: command 0x2016 tx timeout [ 249.253035][ T4227] loop4: detected capacity change from 0 to 2048 [ 249.420952][ T4227] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 249.823370][ T4237] loop1: detected capacity change from 0 to 40427 [ 249.955945][ T4237] F2FS-fs (loop1): invalid crc value [ 249.970966][ T4237] F2FS-fs (loop1): Found nat_bits in checkpoint [ 250.025325][ T3803] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 250.053882][ T3803] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 250.078422][ T3803] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 250.114484][ T3803] usb 3-1: USB disconnect, device number 2 [ 250.122775][ T4237] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 250.142114][ T4262] loop4: detected capacity change from 0 to 2048 [ 250.190570][ T26] audit: type=1800 audit(1722994028.614:6): pid=4246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.112" name="/" dev="fuse" ino=1 res=0 errno=0 [ 250.234421][ T4262] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 250.284081][ T4237] overlayfs: failed to resolve './file0': -2 [ 250.344547][ T3973] attempt to access beyond end of device [ 250.344547][ T3973] loop1: rw=2049, want=45120, limit=40427 [ 250.490788][ T4270] loop4: detected capacity change from 0 to 512 [ 250.614578][ T4270] EXT4-fs (loop4): Invalid want_extra_isize 7 [ 250.654040][ T26] audit: type=1326 audit(1722994029.074:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4271 comm="syz.2.123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6614c1c9f9 code=0x0 [ 251.127420][ T4281] loop4: detected capacity change from 0 to 2048 [ 251.586670][ T4281] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 251.848102][ T4268] loop3: detected capacity change from 0 to 40427 [ 251.911907][ T4293] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 251.978108][ T4268] F2FS-fs (loop3): Found nat_bits in checkpoint [ 252.136607][ T4268] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 252.381148][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 253.299391][ T4312] loop1: detected capacity change from 0 to 512 [ 253.353860][ T4312] EXT4-fs (loop1): Ignoring removed nobh option [ 253.387514][ T4312] EXT4-fs (loop1): 1 truncate cleaned up [ 253.400689][ T4312] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,grpquota,errors=continue,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 253.475062][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 253.714656][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.091283][ T4321] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.134: invalid indirect mapped block 234881024 (level 0) [ 254.118950][ T4321] EXT4-fs (loop1): Remounting filesystem read-only [ 254.413519][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.423837][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 254.436746][ T7] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 254.446246][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.466786][ T7] usb 5-1: config 0 descriptor?? [ 254.952785][ T7] microsoft 0003:045E:07DA.0003: nested delimiters [ 254.966538][ T26] audit: type=1326 audit(1722994033.394:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000 [ 254.996513][ T7] microsoft 0003:045E:07DA.0003: item 0 4 2 10 parsing failed [ 255.021511][ T26] audit: type=1326 audit(1722994033.424:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000 [ 255.034573][ T7] microsoft 0003:045E:07DA.0003: parse failed [ 255.049241][ T26] audit: type=1326 audit(1722994033.434:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000 [ 255.064248][ T7] microsoft: probe of 0003:045E:07DA.0003 failed with error -22 [ 255.808611][ T26] audit: type=1326 audit(1722994033.434:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000 [ 255.835765][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.840106][ T7] usb 5-1: USB disconnect, device number 3 [ 255.843145][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.994669][ T26] audit: type=1326 audit(1722994033.434:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000 [ 256.078022][ T26] audit: type=1326 audit(1722994033.434:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000 [ 256.154422][ T26] audit: type=1326 audit(1722994033.434:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000 [ 256.244293][ T26] audit: type=1326 audit(1722994033.434:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000 [ 257.141188][ T4357] loop4: detected capacity change from 0 to 1024 [ 257.365359][ T4357] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 257.402818][ T4357] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038 (0x7fffffff) [ 257.422261][ T26] audit: type=1326 audit(1722994035.844:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6614c1c9f9 code=0x7ffc0000 [ 257.448671][ T26] audit: type=1326 audit(1722994035.844:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6614c1c9f9 code=0x7ffc0000 [ 257.478807][ T26] audit: type=1326 audit(1722994035.844:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6614c1c9f9 code=0x7ffc0000 [ 257.577602][ T26] audit: type=1326 audit(1722994035.844:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6614c1c9f9 code=0x7ffc0000 [ 257.605779][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.615124][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.664263][ T4380] loop2: detected capacity change from 0 to 1024 [ 257.679236][ T4381] loop0: detected capacity change from 0 to 512 [ 257.723459][ T26] audit: type=1326 audit(1722994035.844:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6614c1c9f9 code=0x7ffc0000 [ 257.783105][ T4384] device bridge_slave_1 left promiscuous mode [ 257.793140][ T4380] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 257.804236][ T4380] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 257.814380][ T4380] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 257.836358][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.869989][ T4381] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 257.886270][ T4384] device bridge_slave_0 left promiscuous mode [ 257.904669][ T4381] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 257.914011][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.929822][ T4381] System zones: 1-12 [ 257.954958][ T4381] EXT4-fs (loop0): orphan cleanup on readonly fs [ 257.993003][ T4381] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.157: Inode bitmap for bg 0 marked uninitialized [ 258.025822][ T4381] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 258.231247][ T4391] netlink: 44 bytes leftover after parsing attributes in process `syz.2.162'. [ 258.394653][ T4399] device wireguard0 entered promiscuous mode [ 258.660276][ T4410] device bond_slave_0 entered promiscuous mode [ 258.666897][ T4410] device bond_slave_1 entered promiscuous mode [ 258.727802][ T4410] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 258.743228][ T4414] loop3: detected capacity change from 0 to 1024 [ 258.773023][ T4410] team0: Port device macvlan2 added [ 258.927245][ T4414] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000005,jqfmt=vfsold,jqfmt=vfsv0,discard,data_err=abort,. Quota mode: none. [ 259.047825][ T4414] netlink: 'syz.3.172': attribute type 10 has an invalid length. [ 259.170464][ T4422] netlink: 'syz.3.172': attribute type 10 has an invalid length. [ 259.210183][ T4422] team0: Port device netdevsim0 removed [ 259.607928][ T4437] loop3: detected capacity change from 0 to 1024 [ 259.691701][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 259.736503][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 259.761968][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.804884][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.864509][ T4437] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000005,jqfmt=vfsold,jqfmt=vfsv0,discard,data_err=abort,. Quota mode: none. [ 260.084561][ T4437] netlink: 'syz.3.179': attribute type 10 has an invalid length. [ 260.117637][ T4452] loop2: detected capacity change from 0 to 256 [ 260.156196][ T4453] loop0: detected capacity change from 0 to 512 [ 260.364670][ T4453] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 260.394900][ T4453] ext4 filesystem being mounted at /33/bus supports timestamps until 2038 (0x7fffffff) [ 260.558689][ T4462] loop2: detected capacity change from 0 to 512 [ 260.733649][ T4462] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 260.946282][ T4462] EXT4-fs (loop2): 1 truncate cleaned up [ 260.951986][ T4462] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 261.107350][ T4478] netlink: 'syz.3.194': attribute type 10 has an invalid length. [ 261.118109][ T4478] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 261.632985][ T4484] loop1: detected capacity change from 0 to 512 [ 261.692088][ T4488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.199'. [ 261.701493][ T4488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 261.763280][ T4484] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 261.814217][ T4490] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 261.822379][ T4490] team0: Port device macvlan3 added [ 261.845693][ T4484] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 261.845810][ T4490] netlink: 'syz.0.201': attribute type 4 has an invalid length. [ 261.873750][ T4490] netlink: 152 bytes leftover after parsing attributes in process `syz.0.201'. [ 261.907957][ T4484] EXT4-fs (loop1): 1 truncate cleaned up [ 261.921958][ T4490] device bond_slave_0 left promiscuous mode [ 261.929944][ T4490] device bond_slave_1 left promiscuous mode [ 262.002390][ T4484] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 262.003968][ T4497] tipc: Failed to obtain node identity [ 262.037635][ T4497] tipc: Enabling of bearer rejected, failed to enable media [ 262.059343][ T4492] loop3: detected capacity change from 0 to 2048 [ 262.249385][ T4492] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 262.258398][ T4506] loop2: detected capacity change from 0 to 512 [ 262.319362][ T4506] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 262.364527][ T4505] loop0: detected capacity change from 0 to 8192 [ 262.396133][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 262.396147][ T26] audit: type=1804 audit(1722994040.824:46): pid=4492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.202" name="/newroot/43/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 262.457193][ T4492] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 262.520778][ T4505] netlink: 277 bytes leftover after parsing attributes in process `syz.0.207'. [ 262.546489][ T26] audit: type=1804 audit(1722994040.874:47): pid=4492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.202" name="/newroot/43/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 262.574721][ T4492] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 23 with error 28 [ 262.601660][ T4506] EXT4-fs (loop2): 1 truncate cleaned up [ 262.602760][ T4492] EXT4-fs (loop3): This should not happen!! Data will be lost [ 262.602760][ T4492] [ 262.622190][ T4492] EXT4-fs (loop3): Total free blocks count 0 [ 262.628724][ T4492] EXT4-fs (loop3): Free/Dirty block details [ 262.635386][ T4492] EXT4-fs (loop3): free_blocks=2415919104 [ 262.641273][ T4492] EXT4-fs (loop3): dirty_blocks=48 [ 262.646971][ T4492] EXT4-fs (loop3): Block reservation details [ 262.653099][ T4492] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 262.674346][ T4506] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 262.701630][ T4492] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28 [ 262.701725][ T4492] EXT4-fs (loop3): This should not happen!! Data will be lost [ 262.701725][ T4492] [ 263.887169][ T4528] loop3: detected capacity change from 0 to 128 [ 264.189258][ T4538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.221'. [ 264.900187][ T4541] loop2: detected capacity change from 0 to 32768 [ 264.974963][ T4541] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.221 (4541) [ 265.028180][ T4541] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 265.071641][ T4541] BTRFS info (device loop2): using free space tree [ 265.097700][ T4541] BTRFS info (device loop2): has skinny extents [ 265.243957][ T4541] BTRFS info (device loop2): enabling ssd optimizations [ 266.609091][ T4590] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 267.014738][ T4578] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 267.239416][ T4603] loop3: detected capacity change from 0 to 256 [ 267.284973][ T4603] exfat: Deprecated parameter 'namecase' [ 267.295799][ T4603] exfat: Deprecated parameter 'utf8' [ 267.313523][ T4603] exfat: Deprecated parameter 'namecase' [ 267.365877][ T4603] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 267.575238][ T4578] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 267.584474][ T4393] syz.4.163 (4393) used greatest stack depth: 17248 bytes left [ 267.603356][ T4578] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.616553][ T4578] usb 3-1: Product: syz [ 267.620759][ T4578] usb 3-1: Manufacturer: syz [ 267.625839][ T4578] usb 3-1: SerialNumber: syz [ 267.647326][ T4578] usb 3-1: config 0 descriptor?? [ 267.742923][ T4578] ch341 3-1:0.0: ch341-uart converter detected [ 268.205453][ T4619] 9pnet_virtio: no channels available for device syz [ 269.035609][ T4578] ch341-uart ttyUSB0: failed to read break control: -71 [ 269.057700][ T4578] ch341-uart: probe of ttyUSB0 failed with error -71 [ 269.173437][ T4578] usb 3-1: USB disconnect, device number 3 [ 269.221495][ T4578] ch341 3-1:0.0: device disconnected [ 269.854428][ T4578] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 269.942107][ T4657] netlink: 76 bytes leftover after parsing attributes in process `syz.1.254'. [ 270.046839][ T26] audit: type=1326 audit(1722994048.474:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000 [ 270.111899][ T4663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'. [ 270.139060][ T26] audit: type=1326 audit(1722994048.474:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000 [ 270.184474][ T4665] loop3: detected capacity change from 0 to 2048 [ 270.214578][ T4578] usb 1-1: config 0 has no interfaces? [ 270.220641][ T4578] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 270.230561][ T26] audit: type=1326 audit(1722994048.474:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000 [ 270.303822][ T26] audit: type=1326 audit(1722994048.474:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000 [ 270.314253][ T4578] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.328126][ T26] audit: type=1326 audit(1722994048.474:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000 [ 270.360145][ T26] audit: type=1326 audit(1722994048.504:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000 [ 270.389016][ T4665] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 270.500093][ T4578] usb 1-1: config 0 descriptor?? [ 270.829774][ T4578] usb 1-1: USB disconnect, device number 2 [ 270.984118][ T4672] loop4: detected capacity change from 0 to 512 [ 271.028741][ T4691] fuse: Unknown parameter '' [ 271.112379][ T4672] EXT4-fs (loop4): Ignoring removed orlov option [ 271.158392][ T4672] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 271.181623][ T4672] EXT4-fs (loop4): Mount option "journal_checksum" incompatible with ext3 [ 271.244100][ T4677] loop2: detected capacity change from 0 to 32768 [ 271.246569][ T4699] loop3: detected capacity change from 0 to 256 [ 271.275903][ T4701] loop1: detected capacity change from 0 to 2048 [ 271.286675][ T4677] XFS: ikeep mount option is deprecated. [ 271.311609][ T4699] FAT-fs (loop3): Directory bread(block 64) failed [ 271.323689][ T4699] FAT-fs (loop3): Directory bread(block 65) failed [ 271.332962][ T4699] FAT-fs (loop3): Directory bread(block 66) failed [ 271.340401][ T4672] loop4: detected capacity change from 0 to 512 [ 271.356825][ T4677] XFS (loop2): Mounting V5 Filesystem [ 271.365685][ T4699] FAT-fs (loop3): Directory bread(block 67) failed [ 271.384191][ T4699] FAT-fs (loop3): Directory bread(block 68) failed [ 271.392489][ T4699] FAT-fs (loop3): Directory bread(block 69) failed [ 271.399718][ T4699] FAT-fs (loop3): Directory bread(block 70) failed [ 271.407457][ T4699] FAT-fs (loop3): Directory bread(block 71) failed [ 271.415876][ T4699] FAT-fs (loop3): Directory bread(block 72) failed [ 271.422414][ T4699] FAT-fs (loop3): Directory bread(block 73) failed [ 271.462927][ T4701] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 271.523298][ T4677] XFS (loop2): Ending clean mount [ 271.535216][ T4715] attempt to access beyond end of device [ 271.535216][ T4715] loop3: rw=1, want=1228, limit=256 [ 271.555193][ T4672] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 271.566759][ T4672] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038 (0x7fffffff) [ 271.590886][ T26] audit: type=1326 audit(1722994050.021:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4697 comm="syz.3.269" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x0 [ 271.616175][ T4677] XFS (loop2): Quotacheck needed: Please wait. [ 271.623221][ T4672] netlink: 'syz.4.259': attribute type 3 has an invalid length. [ 271.637229][ T4701] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 271.678763][ T4701] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 271.734100][ T4677] XFS (loop2): Quotacheck: Done. [ 271.742999][ T4701] EXT4-fs (loop1): This should not happen!! Data will be lost [ 271.742999][ T4701] [ 271.768304][ T4701] EXT4-fs (loop1): Total free blocks count 0 [ 271.779451][ T4701] EXT4-fs (loop1): Free/Dirty block details [ 271.788950][ T4701] EXT4-fs (loop1): free_blocks=2415919104 [ 271.800587][ T4701] EXT4-fs (loop1): dirty_blocks=16 [ 271.808898][ T4701] EXT4-fs (loop1): Block reservation details [ 271.835796][ T4701] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 271.919422][ T3585] XFS (loop2): Unmounting Filesystem [ 272.055471][ T4721] syz.0.274[4721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.055565][ T4721] syz.0.274[4721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.174515][ T4725] netlink: 36 bytes leftover after parsing attributes in process `syz.1.273'. [ 272.210746][ T4727] loop3: detected capacity change from 0 to 512 [ 272.286595][ T4729] loop1: detected capacity change from 0 to 1024 [ 272.315675][ T4727] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 272.338970][ T4735] loop0: detected capacity change from 0 to 512 [ 272.369021][ T4727] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038 (0x7fffffff) [ 272.447565][ T4729] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 272.514410][ T4729] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,usrquota,grpjquota=,lazytime,jqfmt=vfsold,grpid,data_err=abort,,errors=continue. Quota mode: writeback. [ 272.543497][ T4741] netlink: 'syz.2.272': attribute type 10 has an invalid length. [ 272.582652][ T4735] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 272.605573][ T4735] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038 (0x7fffffff) [ 272.683666][ T4717] loop4: detected capacity change from 0 to 32768 [ 272.690425][ T4741] team0: Port device netdevsim0 added [ 272.735516][ T4717] XFS: ikeep mount option is deprecated. [ 272.843312][ T4717] XFS (loop4): Mounting V5 Filesystem [ 272.917877][ T4717] XFS (loop4): Ending clean mount [ 272.933981][ T4717] XFS (loop4): Quotacheck needed: Please wait. [ 273.021047][ T4717] XFS (loop4): Quotacheck: Done. [ 273.098166][ T3597] XFS (loop4): Unmounting Filesystem [ 273.153199][ T4745] overlayfs: './file0' not a directory [ 273.299640][ T4762] overlayfs: './file0' not a directory [ 273.488411][ T4769] loop2: detected capacity change from 0 to 4096 [ 273.497639][ T4771] loop4: detected capacity change from 0 to 512 [ 273.586291][ T4771] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 273.602809][ T4771] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e098, mo2=0002] [ 273.611244][ T4771] System zones: 1-12 [ 273.616162][ T4771] EXT4-fs (loop4): orphan cleanup on readonly fs [ 273.622533][ T4771] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.280: Inode bitmap for bg 0 marked uninitialized [ 273.646765][ T4771] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,nogrpid,,errors=continue. Quota mode: none. [ 273.664385][ T26] audit: type=1326 audit(1722994052.091:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6614c1c9f9 code=0x7ffc0000 [ 273.686732][ T26] audit: type=1326 audit(1722994052.091:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6614c1c9f9 code=0x7ffc0000 [ 273.767185][ T26] audit: type=1326 audit(1722994052.141:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6614c1c9f9 code=0x7ffc0000 [ 274.786200][ T4784] loop0: detected capacity change from 0 to 512 [ 274.923854][ T4784] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 274.944672][ T4784] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038 (0x7fffffff) [ 275.035549][ T4797] loop2: detected capacity change from 0 to 512 [ 275.156914][ T4797] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 275.194466][ T4797] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038 (0x7fffffff) [ 275.375460][ T4811] loop2: detected capacity change from 0 to 512 [ 275.447926][ T4809] loop4: detected capacity change from 0 to 4096 [ 275.470261][ T4811] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 275.484477][ T4811] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038 (0x7fffffff) [ 275.550554][ T4809] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 275.691045][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 275.691059][ T26] audit: type=1800 audit(1722994054.121:62): pid=4809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.300" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 275.726879][ T26] audit: type=1800 audit(1722994054.121:63): pid=4809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.300" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 276.195067][ T4824] loop0: detected capacity change from 0 to 512 [ 276.308110][ T4824] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 276.361428][ T4824] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038 (0x7fffffff) [ 276.372662][ T4827] loop2: detected capacity change from 0 to 32768 [ 276.405004][ T4827] XFS: ikeep mount option is deprecated. [ 276.428313][ T4824] netlink: 'syz.0.306': attribute type 3 has an invalid length. [ 276.695817][ T4827] XFS (loop2): Mounting V5 Filesystem [ 276.849768][ T4827] XFS (loop2): Ending clean mount [ 276.862415][ T4827] XFS (loop2): Quotacheck needed: Please wait. [ 277.535506][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 277.621932][ T4827] XFS (loop2): Quotacheck: Done. [ 277.726374][ T3585] XFS (loop2): Unmounting Filesystem [ 279.504503][ T3892] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 279.854498][ T3892] usb 1-1: Using ep0 maxpacket: 8 [ 280.185450][ T3892] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 280.204256][ T3892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.235115][ T3892] usb 1-1: Product: syz [ 280.280938][ T3892] usb 1-1: Manufacturer: syz [ 280.308200][ T3892] usb 1-1: SerialNumber: syz [ 280.349876][ T3892] usb 1-1: config 0 descriptor?? [ 280.452563][ T3892] gspca_main: sq930x-2.14.0 probing 2770:930c [ 280.560295][ T4964] loop2: detected capacity change from 0 to 64 [ 280.666847][ T3892] gspca_sq930x: reg_r 001f failed -32 [ 280.672532][ T3892] sq930x: probe of 1-1:0.0 failed with error -32 [ 280.746152][ T4964] hfs: request for non-existent node 1280 in B*Tree [ 280.765005][ T4964] hfs: request for non-existent node 1280 in B*Tree [ 281.036961][ T4980] netlink: 'syz.1.360': attribute type 10 has an invalid length. [ 281.132918][ T4980] team0: Port device netdevsim0 added [ 281.311318][ T4991] netlink: 'syz.2.365': attribute type 9 has an invalid length. [ 281.342595][ T4991] netlink: 92148 bytes leftover after parsing attributes in process `syz.2.365'. [ 281.756339][ T5002] nfs: Unknown parameter ' [ 281.756339][ T5002] ' [ 281.778947][ T5002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.370'. [ 282.233572][ T4578] usb 1-1: USB disconnect, device number 3 [ 282.783601][ T5041] autofs4:pid:5041:autofs_fill_super: called with bogus options [ 283.214651][ T4580] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 283.464431][ T4580] usb 3-1: Using ep0 maxpacket: 8 [ 283.584871][ T4580] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 283.610047][ T4580] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 283.661568][ T4580] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 283.739880][ T5054] raw_sendmsg: syz.1.389 forgot to set AF_INET. Fix it! [ 283.824377][ T4580] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 283.848121][ T4580] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 283.877131][ T4580] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 283.924401][ T5081] vivid-001: ================= START STATUS ================= [ 283.938806][ T5081] vivid-001: Test Pattern: 75% Colorbar [ 283.947103][ T5081] vivid-001: Fill Percentage of Frame: 100 [ 283.963365][ T5081] vivid-001: Horizontal Movement: No Movement [ 283.994482][ T5081] vivid-001: Vertical Movement: No Movement [ 284.014479][ T4580] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 284.029104][ T4580] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 284.041385][ T5081] vivid-001: OSD Text Mode: All [ 284.070491][ T5081] vivid-001: Show Border: false [ 284.108251][ T4580] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 284.148761][ T5081] vivid-001: Show Square: false [ 284.179577][ T5081] vivid-001: Sensor Flipped Horizontally: false [ 284.188661][ T5081] vivid-001: Sensor Flipped Vertically: false [ 284.199652][ T5081] vivid-001: Insert SAV Code in Image: false [ 284.208009][ T5081] vivid-001: Insert EAV Code in Image: false [ 284.215127][ T5081] vivid-001: Reduced Framerate: false [ 284.224662][ T5081] vivid-001: Enable Capture Cropping: true [ 284.232698][ T5081] vivid-001: Enable Capture Composing: true [ 284.239718][ T5081] vivid-001: Enable Capture Scaler: true [ 284.246793][ T5081] vivid-001: Timestamp Source: End of Frame [ 284.253774][ T5081] vivid-001: Colorspace: sRGB [ 284.261980][ T5081] vivid-001: Transfer Function: Default [ 284.275434][ T5081] vivid-001: Y'CbCr Encoding: Default [ 284.287028][ T5081] vivid-001: HSV Encoding: Hue 0-179 [ 284.294311][ T5081] vivid-001: Quantization: Default [ 284.308384][ T5081] vivid-001: Apply Alpha To Red Only: false [ 284.315081][ T5081] vivid-001: Standard Aspect Ratio: 4x3 [ 284.324475][ T5081] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 284.332497][ T5081] vivid-001: DV Timings: 640x480p59 inactive [ 284.340848][ T5081] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 284.360040][ T5081] vivid-001: Maximum EDID Blocks: 2 [ 284.366826][ T5081] vivid-001: Limited RGB Range (16-235): false [ 284.379397][ T5081] vivid-001: Rx RGB Quantization Range: Automatic [ 284.390941][ T5081] vivid-001: Power Present: 0x00000001 [ 284.394487][ T4580] usb 3-1: string descriptor 0 read error: -22 [ 284.406630][ T5081] [ 284.412568][ T5081] tpg source WxH: 640x360 (Y'CbCr) [ 284.419404][ T5081] tpg field: 1 [ 284.424206][ T5081] tpg crop: 640x360@0x0 [ 284.429826][ T5081] tpg compose: 640x360@0x0 [ 284.436254][ T5081] tpg colorspace: 8 [ 284.441816][ T5081] tpg transfer function: 0/0 [ 284.447617][ T4580] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 284.456983][ T5081] tpg Y'CbCr encoding: 0/0 [ 284.461591][ T5081] tpg quantization: 0/0 [ 284.468715][ T5081] tpg RGB range: 0/2 [ 284.474596][ T5081] vivid-001: ================== END STATUS ================== [ 284.604943][ T4580] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.675365][ T4580] adutux 3-1:168.0: interrupt endpoints not found [ 284.881560][ T4580] usb 3-1: USB disconnect, device number 4 [ 284.953000][ T5101] sctp: [Deprecated]: syz.3.405 (pid 5101) Use of int in maxseg socket option. [ 284.953000][ T5101] Use struct sctp_assoc_value instead [ 285.030860][ T5103] syz.4.406 uses obsolete (PF_INET,SOCK_PACKET) [ 286.869645][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 287.008783][ T5194] device syz_tun entered promiscuous mode [ 287.037889][ T5194] device batadv_slave_0 entered promiscuous mode [ 287.354712][ T5198] ebtables: ebtables: counters copy to user failed while replacing table [ 287.860796][ T9] tipc: Subscription rejected, illegal request [ 288.158113][ T5214] netlink: 256 bytes leftover after parsing attributes in process `syz.0.451'. [ 288.738491][ T5224] netlink: 48 bytes leftover after parsing attributes in process `syz.0.456'. [ 288.796745][ T5224] dccp_invalid_packet: P.Data Offset(0) too small [ 289.341778][ T5246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.465'. [ 289.662655][ T5258] delete_channel: no stack [ 290.005159][ T5273] device syz_tun entered promiscuous mode [ 290.027812][ T5274] loop1: detected capacity change from 0 to 2048 [ 290.041587][ T5273] device batadv_slave_0 entered promiscuous mode [ 290.071314][ T5273] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 290.105885][ T5273] Cannot create hsr debugfs directory [ 290.113681][ T5274] EXT4-fs (loop1): Ignoring removed bh option [ 290.145141][ T5287] netlink: 'syz.2.481': attribute type 10 has an invalid length. [ 290.153625][ T5274] EXT4-fs error (device loop1): ext4_fill_super:4840: inode #2: comm syz.1.476: casefold flag without casefold feature [ 290.185424][ T5274] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 290.199741][ T5274] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 290.208084][ T5274] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,norecovery,,errors=continue. Quota mode: writeback. [ 290.251081][ T5291] netlink: 44 bytes leftover after parsing attributes in process `syz.4.484'. [ 290.491202][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 290.536312][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.579071][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 290.834570][ T5312] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 291.031992][ T5302] Dead loop on virtual device ipvlan1, fix it urgently! [ 291.040008][ T5317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.494'. [ 291.069256][ T5317] netlink: 32 bytes leftover after parsing attributes in process `syz.3.494'. [ 291.134289][ T3893] Bluetooth: hci0: command 0x0c20 tx timeout [ 291.254628][ T5302] syz.1.476 (5302) used greatest stack depth: 11192 bytes left [ 291.780079][ T5345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.504'. [ 292.093024][ T5364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 292.130065][ T5364] ------------[ cut here ]------------ [ 292.156540][ T5364] WARNING: CPU: 1 PID: 5364 at net/mac80211/rate.c:282 ieee80211_check_rate_mask+0x23b/0x3b0 [ 292.210885][ T5364] Modules linked in: [ 292.230889][ T5364] CPU: 1 PID: 5364 Comm: syz.2.511 Not tainted 5.15.164-syzkaller #0 [ 292.251558][ T5364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 292.280757][ T5364] RIP: 0010:ieee80211_check_rate_mask+0x23b/0x3b0 [ 292.296105][ T5364] Code: b6 04 38 84 c0 0f 85 99 00 00 00 89 2a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6e 99 bd f7 0f 0b eb e8 e8 65 99 bd f7 <0f> 0b eb df 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fe ff ff e8 1c [ 292.317134][ T5364] RSP: 0018:ffffc90003257270 EFLAGS: 00010283 [ 292.323331][ T5364] RAX: ffffffff89c2c7fb RBX: ffff888063054c80 RCX: 0000000000040000 [ 292.354771][ T5364] RDX: ffffc90003f6c000 RSI: 0000000000003260 RDI: 0000000000003261 [ 292.368118][ T5364] RBP: ffff88807e083510 R08: ffffffff89c2c689 R09: ffffffff89c4a966 [ 292.384621][ T5364] R10: 0000000000000002 R11: ffff888016f0d940 R12: 0000000000000000 [ 292.392667][ T5364] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807e080da0 [ 292.402009][ T5364] FS: 00007f661309b6c0(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 292.411382][ T5364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.418375][ T5364] CR2: 00007f01d355b178 CR3: 000000004a953000 CR4: 00000000003506e0 [ 292.427120][ T5364] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 292.435382][ T5364] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 292.443448][ T5364] Call Trace: [ 292.448055][ T5364] [ 292.451071][ T5364] ? __warn+0x15b/0x300 [ 292.455720][ T5364] ? ieee80211_check_rate_mask+0x23b/0x3b0 [ 292.461617][ T5364] ? report_bug+0x1b7/0x2e0 [ 292.466624][ T5364] ? handle_bug+0x3d/0x70 [ 292.471120][ T5364] ? exc_invalid_op+0x16/0x40 [ 292.476242][ T5364] ? asm_exc_invalid_op+0x16/0x20 [ 292.481440][ T5364] ? ieee80211_change_bss+0x276/0x910 [ 292.487365][ T5364] ? ieee80211_check_rate_mask+0xc9/0x3b0 [ 292.493163][ T5364] ? ieee80211_check_rate_mask+0x23b/0x3b0 [ 292.501756][ T5364] ? ieee80211_check_rate_mask+0x23b/0x3b0 [ 292.509720][ T5364] ieee80211_change_bss+0x462/0x910 [ 292.519568][ T5364] nl80211_set_bss+0x84c/0xce0 [ 292.527077][ T5364] ? nl80211_del_mpath+0x3a0/0x3a0 [ 292.532571][ T5364] genl_rcv_msg+0xfbd/0x14a0 [ 292.542255][ T5364] ? genl_bind+0x420/0x420 [ 292.549463][ T5364] ? local_bh_enable+0x5/0x20 [ 292.558846][ T5364] ? mark_lock+0x98/0x340 [ 292.563370][ T5364] ? __lock_acquire+0x1295/0x1ff0 [ 292.571404][ T5364] ? nl80211_del_mpath+0x3a0/0x3a0 [ 292.589706][ T5364] netlink_rcv_skb+0x1cf/0x410 [ 292.605323][ T5364] ? genl_bind+0x420/0x420 [ 292.609786][ T5364] ? netlink_ack+0xb10/0xb10 [ 292.621212][ T5364] ? down_read+0x1b3/0x2e0 [ 292.626091][ T5364] ? genl_rcv+0x9/0x40 [ 292.630354][ T5364] genl_rcv+0x24/0x40 [ 292.641396][ T5364] netlink_unicast+0x7b6/0x980 [ 292.646484][ T5364] ? netlink_detachskb+0x90/0x90 [ 292.651451][ T5364] ? __virt_addr_valid+0x3bb/0x460 [ 292.663479][ T5364] ? 0xffffffff81000000 [ 292.670948][ T5364] ? __check_object_size+0x300/0x410 [ 292.683784][ T5364] ? bpf_lsm_netlink_send+0x5/0x10 [ 292.689261][ T5364] netlink_sendmsg+0xa30/0xd60 [ 292.701121][ T5364] ? netlink_getsockopt+0x5b0/0x5b0 [ 292.708208][ T5364] ? futex_wait+0x634/0x740 [ 292.713714][ T5364] ? aa_sock_msg_perm+0x91/0x150 [ 292.720152][ T5364] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 292.726003][ T5364] ? security_socket_sendmsg+0x7d/0xa0 [ 292.731653][ T5364] ? netlink_getsockopt+0x5b0/0x5b0 [ 292.737010][ T5364] ____sys_sendmsg+0x59e/0x8f0 [ 292.741952][ T5364] ? iovec_from_user+0x300/0x390 [ 292.747016][ T5364] ? __sys_sendmsg_sock+0x30/0x30 [ 292.752255][ T5364] ___sys_sendmsg+0x252/0x2e0 [ 292.757151][ T5364] ? __sys_sendmsg+0x260/0x260 [ 292.762166][ T5364] ? __fdget+0x191/0x220 [ 292.766539][ T5364] __se_sys_sendmsg+0x19a/0x260 [ 292.771600][ T5364] ? __x64_sys_sendmsg+0x80/0x80 [ 292.776718][ T5364] ? syscall_enter_from_user_mode+0x2e/0x240 [ 292.782934][ T5364] ? lockdep_hardirqs_on+0x94/0x130 [ 292.788281][ T5364] ? syscall_enter_from_user_mode+0x2e/0x240 [ 292.794494][ T5364] do_syscall_64+0x3b/0xb0 [ 292.798917][ T5364] ? clear_bhb_loop+0x15/0x70 [ 292.803600][ T5364] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 292.810533][ T5364] RIP: 0033:0x7f6614c1c9f9 [ 292.815235][ T5364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.836428][ T5364] RSP: 002b:00007f661309b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.845004][ T5364] RAX: ffffffffffffffda RBX: 00007f6614daaf80 RCX: 00007f6614c1c9f9 [ 292.853008][ T5364] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 292.861274][ T5364] RBP: 00007f6614c8a8ee R08: 0000000000000000 R09: 0000000000000000 [ 292.869305][ T5364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.881080][ T5364] R13: 0000000000000000 R14: 00007f6614daaf80 R15: 00007ffc0bfc0788 [ 292.889493][ T5364] [ 292.892671][ T5364] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 292.900478][ T5364] CPU: 0 PID: 5364 Comm: syz.2.511 Not tainted 5.15.164-syzkaller #0 [ 292.910304][ T5364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 292.920658][ T5364] Call Trace: [ 292.924061][ T5364] [ 292.927113][ T5364] dump_stack_lvl+0x1e3/0x2d0 [ 292.931998][ T5364] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 292.937763][ T5364] ? panic+0x860/0x860 [ 292.941856][ T5364] ? ieee80211_check_rate_mask+0x140/0x3b0 [ 292.947672][ T5364] ? ieee80211_check_rate_mask+0x140/0x3b0 [ 292.953807][ T5364] panic+0x318/0x860 [ 292.957706][ T5364] ? __warn+0x16a/0x300 [ 292.961866][ T5364] ? fb_is_primary_device+0xd0/0xd0 [ 292.967076][ T5364] ? ieee80211_check_rate_mask+0x23b/0x3b0 [ 292.972883][ T5364] __warn+0x2b2/0x300 [ 292.976883][ T5364] ? ieee80211_check_rate_mask+0x23b/0x3b0 [ 292.982714][ T5364] report_bug+0x1b7/0x2e0 [ 292.987064][ T5364] handle_bug+0x3d/0x70 [ 292.991223][ T5364] exc_invalid_op+0x16/0x40 [ 292.995725][ T5364] asm_exc_invalid_op+0x16/0x20 [ 293.000581][ T5364] RIP: 0010:ieee80211_check_rate_mask+0x23b/0x3b0 [ 293.007003][ T5364] Code: b6 04 38 84 c0 0f 85 99 00 00 00 89 2a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6e 99 bd f7 0f 0b eb e8 e8 65 99 bd f7 <0f> 0b eb df 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fe ff ff e8 1c [ 293.026701][ T5364] RSP: 0018:ffffc90003257270 EFLAGS: 00010283 [ 293.032783][ T5364] RAX: ffffffff89c2c7fb RBX: ffff888063054c80 RCX: 0000000000040000 [ 293.042436][ T5364] RDX: ffffc90003f6c000 RSI: 0000000000003260 RDI: 0000000000003261 [ 293.050426][ T5364] RBP: ffff88807e083510 R08: ffffffff89c2c689 R09: ffffffff89c4a966 [ 293.058504][ T5364] R10: 0000000000000002 R11: ffff888016f0d940 R12: 0000000000000000 [ 293.066657][ T5364] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807e080da0 [ 293.074646][ T5364] ? ieee80211_change_bss+0x276/0x910 [ 293.080109][ T5364] ? ieee80211_check_rate_mask+0xc9/0x3b0 [ 293.085829][ T5364] ? ieee80211_check_rate_mask+0x23b/0x3b0 [ 293.091652][ T5364] ieee80211_change_bss+0x462/0x910 [ 293.096858][ T5364] nl80211_set_bss+0x84c/0xce0 [ 293.101750][ T5364] ? nl80211_del_mpath+0x3a0/0x3a0 [ 293.106883][ T5364] genl_rcv_msg+0xfbd/0x14a0 [ 293.111484][ T5364] ? genl_bind+0x420/0x420 [ 293.116613][ T5364] ? local_bh_enable+0x5/0x20 [ 293.121324][ T5364] ? mark_lock+0x98/0x340 [ 293.125676][ T5364] ? __lock_acquire+0x1295/0x1ff0 [ 293.130723][ T5364] ? nl80211_del_mpath+0x3a0/0x3a0 [ 293.135934][ T5364] netlink_rcv_skb+0x1cf/0x410 [ 293.140703][ T5364] ? genl_bind+0x420/0x420 [ 293.145118][ T5364] ? netlink_ack+0xb10/0xb10 [ 293.149729][ T5364] ? down_read+0x1b3/0x2e0 [ 293.154145][ T5364] ? genl_rcv+0x9/0x40 [ 293.158213][ T5364] genl_rcv+0x24/0x40 [ 293.162229][ T5364] netlink_unicast+0x7b6/0x980 [ 293.167009][ T5364] ? netlink_detachskb+0x90/0x90 [ 293.171945][ T5364] ? __virt_addr_valid+0x3bb/0x460 [ 293.177061][ T5364] ? 0xffffffff81000000 [ 293.181209][ T5364] ? __check_object_size+0x300/0x410 [ 293.186495][ T5364] ? bpf_lsm_netlink_send+0x5/0x10 [ 293.191608][ T5364] netlink_sendmsg+0xa30/0xd60 [ 293.196385][ T5364] ? netlink_getsockopt+0x5b0/0x5b0 [ 293.201583][ T5364] ? futex_wait+0x634/0x740 [ 293.206094][ T5364] ? aa_sock_msg_perm+0x91/0x150 [ 293.211035][ T5364] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 293.216465][ T5364] ? security_socket_sendmsg+0x7d/0xa0 [ 293.221935][ T5364] ? netlink_getsockopt+0x5b0/0x5b0 [ 293.227141][ T5364] ____sys_sendmsg+0x59e/0x8f0 [ 293.231909][ T5364] ? iovec_from_user+0x300/0x390 [ 293.236853][ T5364] ? __sys_sendmsg_sock+0x30/0x30 [ 293.241897][ T5364] ___sys_sendmsg+0x252/0x2e0 [ 293.244353][ T3892] Bluetooth: hci0: command 0x0c1a tx timeout [ 293.246574][ T5364] ? __sys_sendmsg+0x260/0x260 [ 293.257437][ T5364] ? __fdget+0x191/0x220 [ 293.261700][ T5364] __se_sys_sendmsg+0x19a/0x260 [ 293.266565][ T5364] ? __x64_sys_sendmsg+0x80/0x80 [ 293.271516][ T5364] ? syscall_enter_from_user_mode+0x2e/0x240 [ 293.277498][ T5364] ? lockdep_hardirqs_on+0x94/0x130 [ 293.282697][ T5364] ? syscall_enter_from_user_mode+0x2e/0x240 [ 293.288798][ T5364] do_syscall_64+0x3b/0xb0 [ 293.293242][ T5364] ? clear_bhb_loop+0x15/0x70 [ 293.297953][ T5364] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 293.303885][ T5364] RIP: 0033:0x7f6614c1c9f9 [ 293.308313][ T5364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.330271][ T5364] RSP: 002b:00007f661309b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.338721][ T5364] RAX: ffffffffffffffda RBX: 00007f6614daaf80 RCX: 00007f6614c1c9f9 [ 293.346713][ T5364] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 293.354782][ T5364] RBP: 00007f6614c8a8ee R08: 0000000000000000 R09: 0000000000000000 [ 293.362849][ T5364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.370819][ T5364] R13: 0000000000000000 R14: 00007f6614daaf80 R15: 00007ffc0bfc0788 [ 293.378813][ T5364] [ 293.382047][ T5364] Kernel Offset: disabled [ 293.386612][ T5364] Rebooting in 86400 seconds..