last executing test programs:
3.191455849s ago: executing program 1 (id=462):
socket$unix(0x1, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448de, &(0x7f00000000c0)={0x0, 0x0, "a4cd91"})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000040)="05000000010000", 0x7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
2.266368585s ago: executing program 1 (id=476):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x404a, &(0x7f0000000340)={[{@bh}, {@norecovery}]}, 0x1, 0x76b, &(0x7f0000000fc0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0)
r1 = syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x269}, &(0x7f00000000c0), &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_setup(0xa91, &(0x7f00000002c0), &(0x7f0000000040)=<r3=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x6e6a9ace1e35a607})
io_uring_enter(r1, 0xec4, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r4 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
socketpair(0xb, 0x3, 0xffff, 0x0)
r6 = mq_open(&(0x7f0000000280)='eth0\x00', 0x42, 0x0, 0x0)
clock_gettime(0x0, 0x0)
mq_timedsend(r6, &(0x7f00000005c0), 0x2000, 0x0, &(0x7f0000000380)={0x0, 0x3938700})
read(r0, &(0x7f0000000040)=""/148, 0xffffff96)
r7 = socket(0x15, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
getsockname$l2tp6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r9, &(0x7f0000001300)="05", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, 0x1c)
memfd_secret(0x0)
2.265942245s ago: executing program 4 (id=478):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5}]}}}]}, 0x50}}, 0x0)
2.245778387s ago: executing program 0 (id=480):
unshare(0x400)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12)
2.159046264s ago: executing program 0 (id=482):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x3}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x40030000000000}, 0x0)
2.020402395s ago: executing program 4 (id=484):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000001900000008000300", @ANYRES32=r2], 0x48}}, 0x0)
1.970429039s ago: executing program 0 (id=485):
r0 = socket(0x22, 0x2, 0x1)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, &(0x7f0000000580)=0xffffffffffffffad)
1.869208547s ago: executing program 0 (id=487):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
close(r0)
1.770559845s ago: executing program 4 (id=488):
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x2}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000006000)=[@in={0x2, 0x0, @local}]}, &(0x7f0000005ec0)=0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x14)
1.663430004s ago: executing program 4 (id=490):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0xb0)
socket$packet(0x11, 0x2, 0x300)
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0)
1.556401173s ago: executing program 0 (id=491):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}}, 0x0)
1.391158546s ago: executing program 0 (id=493):
unshare(0x68040200)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000000000030006190fea3f27a445c7aa9d70df6d26fe3005000000000200"], 0x28}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_sctp(0x2, 0x0, 0x84)
r0 = socket(0xa, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000050000000000000000000000000000feffffff01000000030000000000000081006e7230000000000000002000000000007465616d300000000000000000000020766c616e30000000000000004000000076657468305f746f5f7465616d000000aaaaaaf991bb000000000000aaaaaaaaaabb0000000000000000d0000000d000000000010000766c616e0069df4e5100000000000000000000079ba316000000000000000000080000000000000208000000892f0700636f6e6e6c6162656c000000000000000000e5ffffff00000000000020000000080000000000000000000000000000004e465154455545000000000000000000000000000000000000000000000000000800000000000000000800000000000400000000000000000000000080000000000000000000000001fcffffffffffff0000000001000000ffffffff000000000000000000000000000400000000efff000000000000000000000000000000000000000001000000feffffff010000000b00006b90088754ea234d6f6e6430000000000000000000000074489c4c2c0000000000000000000000626f6e64300000ff000000000000000076657468315f744d8abdc76964676500aaaaaaaaaabb0000000000e7feffffffffff00000008000000007000000070000000a0000000434f4e4e5345434d3c964de64039918d16289341524b0000000020827903000000000000000000000000000804000000"]}, 0x2a8)
pipe(&(0x7f0000000000))
socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
1.031088346s ago: executing program 2 (id=495):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]]}, 0x24}}, 0x0)
895.515687ms ago: executing program 2 (id=497):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x20, r1, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0)
746.451389ms ago: executing program 2 (id=499):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10)
setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000200)=ANY=[@ANYRES8], 0x8)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000440), 0x4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
accept4(r3, 0x0, 0x0, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=""/4135, 0x1027}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x58, &(0x7f0000000040)={0x0, <r6=>0x0}}, 0x10)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r6}, 0xc)
close(r7)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000780), 0xb)
r9 = socket$inet6(0xa, 0x2, 0x0)
r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSL2CALL(r10, 0x89e2, 0x0)
ioctl$SIOCRSSL2CALL(r10, 0x89e2, &(0x7f0000000140)=@null)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000000c0), 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0)
sendto$inet6(r4, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd)
686.117704ms ago: executing program 3 (id=501):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$inet(0x2, 0x2, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x80000000000008, &(0x7f0000000180), 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x7c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @device_a, @device_b, @from_mac=@device_b}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x7c}}, 0x0)
603.471741ms ago: executing program 3 (id=502):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x0, 0x2, 0x3}, 0x14}}, 0x0)
510.582848ms ago: executing program 3 (id=503):
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1})
r2 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1})
unshare(0x20200)
unshare(0x20010000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1}, 0x4)
syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500001c00000000002e9078ac1e0001001000002001880b0000907856b24832d97a87697f763924"], 0x0)
r4 = socket$packet(0x11, 0x0, 0x300)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x4000090)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x34, r6, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000c40)=ANY=[@ANYBLOB="04010000", @ANYRES16, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x40040}, 0x20000094)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x820010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2cb63ffec6867934cb4508bf", @ANYRESDEC=r8, @ANYBLOB="34422abd7000fedbdf254b000000bb00a9003d2075b57e52129626c5d7a80db973f8fedd9f8ce11a9bb5e2cd7ea817c7d9887acce86bb9a2a13c02c5691e61f09f5e6bca9dfcbd8794f7185bac419fc44efa22b6e66ef0dcb33f702ad93aa4ad08d67f6b1810ea6029ad85d0b1d445c57a8d05cf0f5794d542e02fe875deecffbb863f933b5f413c12aab4481058d6c0b7fb7a3f926f58d849f5d60d20dda90898a9b90e2b82ce51e33dff5baebd958392623bf6ae1bfc4796a38c91943d3363e7c3851fe15f2b412b000800030000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x8080}, 0x20044840)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r7, 0xffffffffffffffff, 0x5, 0x0, 0x0, @prog_id}, 0x20)
setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000500), r5)
510.277258ms ago: executing program 2 (id=504):
socket$inet6_sctp(0xa, 0x0, 0x84)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000100003050400"/20, @ANYRES32=0x0, @ANYBLOB="000000000200030024000e"], 0x58}}, 0x0)
508.776918ms ago: executing program 1 (id=505):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509011f00000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32, @ANYBLOB="000000e8ff000000b703000000000000850000020c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0)
278.607047ms ago: executing program 3 (id=506):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
235.80285ms ago: executing program 1 (id=507):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}}, 0x0)
228.711252ms ago: executing program 2 (id=508):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="ec0000002100010026bd700000000000e0000001000000000000000000000000ff0200000000000000000000000000010000000200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000009c00110000000000000000000008000000000001ffffffff000000000000000000000000640101010000000000000000000000000a010100000000000000000000000000000000000635000000000a"], 0xec}}, 0x0)
146.571348ms ago: executing program 3 (id=509):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4, 0x0, @loopback}, 0x1c)
146.138648ms ago: executing program 1 (id=510):
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x40, "1374fe3b3b509e7776a9f3e3959af30993a2f4a3a95028dd1e838145d9e6be3488b0eba201a2a89b2fce039e5ee6ffa0d717c61ed026fc4ce4c097519b60070a"}, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
146.036208ms ago: executing program 2 (id=511):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000001900000008000300", @ANYRES32=r2, @ANYBLOB='#\x00$'], 0x48}}, 0x0)
123.87941ms ago: executing program 4 (id=512):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
79.783274ms ago: executing program 3 (id=513):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x0, 0x0, {0x37}}, 0x14}}, 0x0)
22.553948ms ago: executing program 1 (id=514):
r0 = socket(0x2b, 0x80801, 0x0)
unshare(0x20000400)
bind$x25(r0, &(0x7f0000000040), 0x12)
0s ago: executing program 4 (id=515):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20)
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)
kernel console output (not intermixed with test programs):
an up link
[ 213.995896][ T3594] bridge0: port 1(bridge_slave_0) entered blocking state
[ 214.002958][ T3594] bridge0: port 1(bridge_slave_0) entered disabled state
[ 214.011429][ T3594] device bridge_slave_0 entered promiscuous mode
[ 214.020183][ T3587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 214.045301][ T3586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 214.057262][ T3586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 214.071904][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state
[ 214.079634][ T3594] bridge0: port 2(bridge_slave_1) entered disabled state
[ 214.087532][ T3594] device bridge_slave_1 entered promiscuous mode
[ 214.104542][ T3585] team0: Port device team_slave_0 added
[ 214.129977][ T3587] team0: Port device team_slave_0 added
[ 214.137543][ T3585] team0: Port device team_slave_1 added
[ 214.144573][ T3587] team0: Port device team_slave_1 added
[ 214.190314][ T3586] team0: Port device team_slave_0 added
[ 214.204014][ T3594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 214.227098][ T3586] team0: Port device team_slave_1 added
[ 214.233446][ T3587] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 214.241085][ T3587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 214.267176][ T3587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 214.279686][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state
[ 214.286952][ T3597] bridge0: port 1(bridge_slave_0) entered disabled state
[ 214.294977][ T3597] device bridge_slave_0 entered promiscuous mode
[ 214.303538][ T3594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 214.313155][ T3585] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 214.320145][ T3585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 214.348351][ T3585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 214.371918][ T3587] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 214.378975][ T3587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 214.405080][ T3587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 214.416526][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state
[ 214.423617][ T3597] bridge0: port 2(bridge_slave_1) entered disabled state
[ 214.432443][ T3597] device bridge_slave_1 entered promiscuous mode
[ 214.447015][ T3585] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 214.453982][ T3585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 214.480306][ T3585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 214.497799][ T3586] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 214.505511][ T3586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 214.531638][ T3586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 214.563095][ T3594] team0: Port device team_slave_0 added
[ 214.573987][ T3586] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 214.589371][ T3586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 214.621863][ T3586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 214.653851][ T3594] team0: Port device team_slave_1 added
[ 214.679191][ T3597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 214.691202][ T3597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 214.717680][ T3585] device hsr_slave_0 entered promiscuous mode
[ 214.725460][ T3585] device hsr_slave_1 entered promiscuous mode
[ 214.734869][ T3587] device hsr_slave_0 entered promiscuous mode
[ 214.741553][ T3587] device hsr_slave_1 entered promiscuous mode
[ 214.748280][ T3587] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 214.756258][ T3587] Cannot create hsr debugfs directory
[ 214.806250][ T3594] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 214.813303][ T3594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 214.839451][ T3594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 214.865319][ T3586] device hsr_slave_0 entered promiscuous mode
[ 214.872227][ T3586] device hsr_slave_1 entered promiscuous mode
[ 214.879286][ T3586] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 214.887045][ T3586] Cannot create hsr debugfs directory
[ 214.895049][ T3597] team0: Port device team_slave_0 added
[ 214.905091][ T3594] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 214.912052][ T3594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 214.938534][ T3594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 214.963868][ T3597] team0: Port device team_slave_1 added
[ 215.055084][ T3597] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 215.062215][ T3597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 215.088369][ T3597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 215.102963][ T3597] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 215.110039][ T3597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 215.137920][ T3597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 215.151523][ T3594] device hsr_slave_0 entered promiscuous mode
[ 215.158412][ T3594] device hsr_slave_1 entered promiscuous mode
[ 215.165502][ T3594] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 215.173157][ T3594] Cannot create hsr debugfs directory
[ 215.215012][ T3310] Bluetooth: hci3: command 0x0409 tx timeout
[ 215.215012][ T1074] Bluetooth: hci0: command 0x0409 tx timeout
[ 215.215475][ T1074] Bluetooth: hci2: command 0x0409 tx timeout
[ 215.233605][ T1074] Bluetooth: hci1: command 0x0409 tx timeout
[ 215.294388][ T1074] Bluetooth: hci4: command 0x0409 tx timeout
[ 215.318025][ T3597] device hsr_slave_0 entered promiscuous mode
[ 215.326980][ T3597] device hsr_slave_1 entered promiscuous mode
[ 215.333663][ T3597] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 215.341761][ T3597] Cannot create hsr debugfs directory
[ 215.499970][ T3587] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 215.516624][ T3587] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 215.530883][ T3587] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 215.541078][ T3587] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 215.555083][ T3585] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 215.566371][ T3585] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 215.579192][ T3585] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 215.591723][ T3585] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 215.645105][ T3586] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 215.655445][ T3586] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 215.668706][ T3586] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 215.678315][ T3586] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 215.740609][ T3594] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 215.752137][ T3594] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 215.780308][ T3594] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 215.790734][ T3594] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 215.842439][ T3597] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 215.871279][ T3597] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 215.881551][ T3597] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 215.903157][ T3597] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 215.921097][ T3587] 8021q: adding VLAN 0 to HW filter on device bond0
[ 215.943686][ T3585] 8021q: adding VLAN 0 to HW filter on device bond0
[ 215.970963][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 215.981472][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 215.998401][ T3587] 8021q: adding VLAN 0 to HW filter on device team0
[ 216.020099][ T3585] 8021q: adding VLAN 0 to HW filter on device team0
[ 216.050573][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 216.061112][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 216.069203][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 216.078296][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 216.087022][ T3631] bridge0: port 1(bridge_slave_0) entered blocking state
[ 216.094254][ T3631] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 216.102923][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 216.112824][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 216.121343][ T3631] bridge0: port 2(bridge_slave_1) entered blocking state
[ 216.128523][ T3631] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 216.138978][ T3586] 8021q: adding VLAN 0 to HW filter on device bond0
[ 216.165144][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 216.173106][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 216.182092][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 216.191015][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 216.200350][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 216.208844][ T3632] bridge0: port 1(bridge_slave_0) entered blocking state
[ 216.215931][ T3632] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 216.223592][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 216.232423][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 216.240918][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 216.249583][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 216.258252][ T3632] bridge0: port 2(bridge_slave_1) entered blocking state
[ 216.265347][ T3632] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 216.272877][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 216.282571][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 216.291722][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 216.300100][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 216.330467][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 216.340032][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 216.357094][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 216.394371][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 216.402845][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 216.413948][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 216.421832][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 216.433240][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 216.441833][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 216.450398][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 216.460088][ T3586] 8021q: adding VLAN 0 to HW filter on device team0
[ 216.476208][ T3594] 8021q: adding VLAN 0 to HW filter on device bond0
[ 216.484999][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 216.499637][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 216.508232][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 216.522485][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 216.531774][ T7] bridge0: port 1(bridge_slave_0) entered blocking state
[ 216.538905][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 216.548002][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 216.556677][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 216.566157][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 216.581759][ T3597] 8021q: adding VLAN 0 to HW filter on device bond0
[ 216.597494][ T3594] 8021q: adding VLAN 0 to HW filter on device team0
[ 216.613263][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 216.623441][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 216.633641][ T3632] bridge0: port 2(bridge_slave_1) entered blocking state
[ 216.640786][ T3632] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 216.649190][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 216.658541][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 216.666764][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 216.675199][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 216.683875][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 216.697490][ T3585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 216.711569][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 216.738244][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 216.750627][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 216.762190][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 216.774015][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 216.783197][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 216.794922][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 216.802585][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 216.813117][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 216.821820][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 216.830686][ T23] bridge0: port 1(bridge_slave_0) entered blocking state
[ 216.837898][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 216.845946][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 216.853370][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 216.871589][ T3597] 8021q: adding VLAN 0 to HW filter on device team0
[ 216.888773][ T3587] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 216.910937][ T3586] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 216.922284][ T3586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 216.937792][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 216.946893][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 216.956372][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 216.965824][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 216.974124][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 216.983157][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 216.991667][ T3631] bridge0: port 2(bridge_slave_1) entered blocking state
[ 216.998739][ T3631] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 217.006621][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 217.015538][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 217.023847][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 217.032380][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 217.041169][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 217.051693][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 217.074423][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 217.083669][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 217.105077][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state
[ 217.115123][ T3636] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 217.154881][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 217.163477][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 217.172423][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 217.180283][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 217.189881][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 217.198574][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 217.207253][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 217.215893][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state
[ 217.222954][ T3310] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 217.230742][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 217.239444][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 217.248111][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 217.257506][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 217.273323][ T3585] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 217.295243][ T7] Bluetooth: hci1: command 0x041b tx timeout
[ 217.301926][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 217.311919][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 217.321177][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 217.331585][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 217.340535][ T3310] Bluetooth: hci2: command 0x041b tx timeout
[ 217.347005][ T3310] Bluetooth: hci3: command 0x041b tx timeout
[ 217.356969][ T3587] device veth0_vlan entered promiscuous mode
[ 217.374421][ T3310] Bluetooth: hci0: command 0x041b tx timeout
[ 217.381031][ T3310] Bluetooth: hci4: command 0x041b tx timeout
[ 217.381611][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 217.401455][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 217.410314][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 217.421531][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 217.430065][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 217.438826][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 217.447194][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 217.455731][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 217.463998][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 217.473007][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 217.481628][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 217.490777][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 217.499476][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 217.508394][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 217.519661][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 217.537223][ T3597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 217.549539][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 217.563362][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 217.577862][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 217.588609][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 217.597870][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 217.606799][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 217.620802][ T3587] device veth1_vlan entered promiscuous mode
[ 217.683812][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 217.693645][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 217.709451][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 217.720690][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 217.729704][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 217.738032][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 217.748726][ T3586] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 217.764331][ T3585] device veth0_vlan entered promiscuous mode
[ 217.796306][ T3594] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 217.803604][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 217.813015][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 217.820876][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 217.830340][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 217.839347][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 217.846931][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 217.858283][ T3587] device veth0_macvtap entered promiscuous mode
[ 217.886550][ T3585] device veth1_vlan entered promiscuous mode
[ 217.894712][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 217.902801][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 217.914646][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 217.923725][ T3597] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 217.941736][ T3587] device veth1_macvtap entered promiscuous mode
[ 217.953141][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 217.968555][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 217.996822][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 218.015188][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 218.031629][ T3594] device veth0_vlan entered promiscuous mode
[ 218.061805][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 218.071358][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 218.087983][ T3585] device veth0_macvtap entered promiscuous mode
[ 218.106423][ T3587] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 218.119747][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 218.128643][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 218.136876][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 218.152203][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 218.162103][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 218.171190][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 218.180942][ T3594] device veth1_vlan entered promiscuous mode
[ 218.190925][ T3585] device veth1_macvtap entered promiscuous mode
[ 218.211175][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 218.219668][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 218.228218][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 218.236226][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 218.244535][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 218.254078][ T3587] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 218.268885][ T3586] device veth0_vlan entered promiscuous mode
[ 218.282351][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 218.290658][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 218.300789][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 218.309619][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 218.319708][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 218.331501][ T3587] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 218.341129][ T3587] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 218.350608][ T3587] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 218.359742][ T3587] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 218.389831][ T3586] device veth1_vlan entered promiscuous mode
[ 218.400594][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 218.408830][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 218.418365][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 218.427565][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 218.463374][ T3594] device veth0_macvtap entered promiscuous mode
[ 218.475232][ T3585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 218.489389][ T3585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 218.502276][ T3585] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 218.511633][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 218.520392][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 218.529285][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 218.538133][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 218.547700][ T3310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 218.558815][ T3594] device veth1_macvtap entered promiscuous mode
[ 218.605722][ T3585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 218.617394][ T3585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 218.630885][ T3585] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 218.640065][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 218.648196][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 218.657332][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 218.665815][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 218.673912][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 218.682503][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 218.691126][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 218.700281][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 218.708306][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 218.729607][ T3597] device veth0_vlan entered promiscuous mode
[ 218.748739][ T3586] device veth0_macvtap entered promiscuous mode
[ 218.758860][ T3594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 218.769805][ T3594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 218.780226][ T3594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 218.790762][ T3594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 218.802087][ T3594] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 218.812593][ T3585] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 218.823516][ T3585] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 218.832562][ T3585] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 218.841807][ T3585] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 218.856631][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 218.869943][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 218.878803][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 218.889650][ T3594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 218.901104][ T3594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 218.912986][ T3594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 218.923907][ T3594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 218.936037][ T3594] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 218.948590][ T3597] device veth1_vlan entered promiscuous mode
[ 218.958353][ T3586] device veth1_macvtap entered promiscuous mode
[ 218.981369][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 218.990555][ T3632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 219.001528][ T3594] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 219.010443][ T3594] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 219.019621][ T3594] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 219.028363][ T3594] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 219.083025][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 219.091679][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 219.101291][ T3586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 219.113368][ T3586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 219.123916][ T3586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 219.135119][ T3586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 219.145028][ T3586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 219.155804][ T3586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 219.167879][ T3586] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 219.177134][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 219.185937][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 219.194412][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 219.202119][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 219.210774][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 219.236871][ T3597] device veth0_macvtap entered promiscuous mode
[ 219.259705][ T3586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 219.273845][ T3586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 219.284093][ T3586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 219.301056][ T3586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 219.311065][ T3586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 219.321830][ T3586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 219.333093][ T3586] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 219.350815][ T3597] device veth1_macvtap entered promiscuous mode
[ 219.367112][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 219.377843][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 219.386255][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 219.397787][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 219.408966][ T3586] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 219.417993][ T7] Bluetooth: hci2: command 0x040f tx timeout
[ 219.420632][ T3586] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 219.424057][ T7] Bluetooth: hci1: command 0x040f tx timeout
[ 219.438002][ T3586] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 219.448154][ T3586] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 219.465092][ T3636] Bluetooth: hci4: command 0x040f tx timeout
[ 219.469060][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 219.471209][ T3636] Bluetooth: hci0: command 0x040f tx timeout
[ 219.489383][ T3636] Bluetooth: hci3: command 0x040f tx timeout
[ 219.497772][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 219.546031][ T3625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 219.552034][ T3597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 219.567021][ T3625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 219.570437][ T3597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 219.586313][ T3597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 219.597009][ T3597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 219.607018][ T3597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 219.619265][ T3597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 219.629585][ T3597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 219.640334][ T3597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 219.651343][ T3597] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 219.674520][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 219.682276][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 219.690226][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 219.701066][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 219.732773][ T3597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 219.743316][ T3597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 219.753794][ T3597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 219.764550][ T3597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 219.783176][ T3597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 219.793973][ T3597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 219.805427][ T3597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 219.815938][ T3597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 219.827516][ T3597] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 219.845734][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 219.853665][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 219.881340][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 219.899257][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 219.910205][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 219.935501][ T3597] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 219.949859][ T3597] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 219.959026][ T3597] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 219.969309][ T3597] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 219.994933][ T3666] FAULT_INJECTION: forcing a failure.
[ 219.994933][ T3666] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 219.995730][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 220.014035][ T3666] CPU: 0 PID: 3666 Comm: syz.0.1 Not tainted 5.15.164-syzkaller #0
[ 220.024293][ T3666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 220.033419][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 220.034360][ T3666] Call Trace:
[ 220.034370][ T3666] <TASK>
[ 220.034377][ T3666] dump_stack_lvl+0x1e3/0x2d0
[ 220.034412][ T3666] ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 220.034429][ T3666] ? panic+0x860/0x860
[ 220.034446][ T3666] ? validate_chain+0x112/0x5930
[ 220.067110][ T3666] ? validate_chain+0x112/0x5930
[ 220.072042][ T3666] should_fail+0x38a/0x4c0
[ 220.076443][ T3666] _copy_from_user+0x2d/0x170
[ 220.081108][ T3666] iovec_from_user+0x13b/0x390
[ 220.085993][ T3666] __import_iovec+0x72/0x4b0
[ 220.090596][ T3666] ? __ia32_sys_shutdown+0x60/0x60
[ 220.095697][ T3666] import_iovec+0xe6/0x120
[ 220.100105][ T3666] ___sys_sendmsg+0x215/0x2e0
[ 220.104774][ T3666] ? __sys_sendmsg+0x260/0x260
[ 220.109568][ T3666] ? __fdget+0x191/0x220
[ 220.113802][ T3666] __se_sys_sendmsg+0x19a/0x260
[ 220.118642][ T3666] ? __x64_sys_sendmsg+0x80/0x80
[ 220.124278][ T3666] ? syscall_enter_from_user_mode+0x2e/0x240
[ 220.130270][ T3666] ? lockdep_hardirqs_on+0x94/0x130
[ 220.135459][ T3666] ? syscall_enter_from_user_mode+0x2e/0x240
[ 220.141422][ T3666] do_syscall_64+0x3b/0xb0
[ 220.145810][ T3666] ? clear_bhb_loop+0x15/0x70
[ 220.150467][ T3666] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 220.156343][ T3666] RIP: 0033:0x7f339dd829f9
[ 220.160739][ T3666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 220.180419][ T3666] RSP: 002b:00007f339c1e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 220.188989][ T3666] RAX: ffffffffffffffda RBX: 00007f339df11058 RCX: 00007f339dd829f9
[ 220.197091][ T3666] RDX: 0000000000000000 RSI: 0000000020001400 RDI: 0000000000000004
[ 220.205058][ T3666] RBP: 00007f339c1e0090 R08: 0000000000000000 R09: 0000000000000000
[ 220.213035][ T3666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 220.221028][ T3666] R13: 0000000000000001 R14: 00007f339df11058 R15: 00007ffc0b7fa228
[ 220.228999][ T3666] </TASK>
[ 220.251339][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 220.262545][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 220.279193][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 220.298544][ T3625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 220.329423][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 220.336433][ T3625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 220.382703][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 220.451435][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 220.460546][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 220.493016][ T3675] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 220.524797][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 220.570904][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 220.599515][ T3669] loop0: detected capacity change from 0 to 4096
[ 220.607303][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 220.624575][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 220.633275][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 220.654245][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 220.669449][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 220.696851][ T3669] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[ 220.739983][ T3674] loop2: detected capacity change from 0 to 8192
[ 220.859904][ T3674] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[ 220.885460][ T26] audit: type=1800 audit(1722993999.314:2): pid=3669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6" name="bus" dev="loop0" ino=33 res=0 errno=0
[ 220.908540][ T3674] REISERFS (device loop2): using ordered data mode
[ 220.915280][ T3674] reiserfs: using flush barriers
[ 220.922098][ T26] audit: type=1800 audit(1722993999.344:3): pid=3688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6" name="bus" dev="loop0" ino=33 res=0 errno=0
[ 220.945638][ T3674] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 220.963370][ T3674] REISERFS (device loop2): checking transaction log (loop2)
[ 221.151631][ T3674] REISERFS (device loop2): Using tea hash to sort names
[ 221.171735][ T3674] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[ 221.182044][ T3636] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 221.465090][ T3667] Bluetooth: hci1: command 0x0419 tx timeout
[ 221.481504][ T3667] Bluetooth: hci2: command 0x0419 tx timeout
[ 221.488190][ T3636] usb 5-1: Using ep0 maxpacket: 8
[ 221.537863][ T3310] Bluetooth: hci3: command 0x0419 tx timeout
[ 221.545175][ T3310] Bluetooth: hci0: command 0x0419 tx timeout
[ 221.562087][ T3310] Bluetooth: hci4: command 0x0419 tx timeout
[ 221.635086][ T3636] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 221.642247][ T3694] device syzkaller0 entered promiscuous mode
[ 221.654378][ T3636] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[ 221.698384][ T3636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 221.732081][ T3636] usb 5-1: config 0 descriptor??
[ 222.009853][ T3685] loop4: detected capacity change from 0 to 512
[ 222.040779][ T3711] loop0: detected capacity change from 0 to 128
[ 222.102972][ T3685] EXT4-fs (loop4): Invalid journal IO priority (must be 0-7)
[ 222.171072][ T3667] usb 5-1: USB disconnect, device number 2
[ 222.233543][ T3711] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 222.274812][ T3711] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[ 222.532969][ T3716] loop1: detected capacity change from 0 to 2048
[ 222.590788][ T3722] FAULT_INJECTION: forcing a failure.
[ 222.590788][ T3722] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 222.646790][ T3722] CPU: 1 PID: 3722 Comm: syz.2.17 Not tainted 5.15.164-syzkaller #0
[ 222.654814][ T3722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 222.664875][ T3722] Call Trace:
[ 222.668158][ T3722] <TASK>
[ 222.671084][ T3722] dump_stack_lvl+0x1e3/0x2d0
[ 222.675760][ T3722] ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 222.681393][ T3722] ? panic+0x860/0x860
[ 222.685459][ T3722] ? __might_sleep+0xc0/0xc0
[ 222.690056][ T3722] should_fail+0x38a/0x4c0
[ 222.694470][ T3722] copy_page_from_iter+0x33b/0x750
[ 222.699592][ T3722] tun_get_user+0x1c55/0x40f0
[ 222.704285][ T3722] ? tun_ring_recv+0xcc0/0xcc0
[ 222.709053][ T3722] ? rcu_lock_release+0x5/0x20
[ 222.713834][ T3722] tun_chr_write_iter+0x10c/0x1e0
[ 222.718870][ T3722] vfs_write+0xacd/0xe50
[ 222.723136][ T3722] ? file_end_write+0x250/0x250
[ 222.727996][ T3722] ? __fget_files+0x413/0x480
[ 222.732679][ T3722] ? __fdget_pos+0x1e9/0x380
[ 222.737262][ T3722] ? ksys_write+0x77/0x2c0
[ 222.741675][ T3722] ksys_write+0x1a2/0x2c0
[ 222.746005][ T3722] ? print_irqtrace_events+0x210/0x210
[ 222.751486][ T3722] ? __ia32_sys_read+0x80/0x80
[ 222.756276][ T3722] ? syscall_enter_from_user_mode+0x2e/0x240
[ 222.762289][ T3722] ? lockdep_hardirqs_on+0x94/0x130
[ 222.767594][ T3722] ? syscall_enter_from_user_mode+0x2e/0x240
[ 222.773582][ T3722] do_syscall_64+0x3b/0xb0
[ 222.777994][ T3722] ? clear_bhb_loop+0x15/0x70
[ 222.782669][ T3722] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 222.788560][ T3722] RIP: 0033:0x7f6614c1b4df
[ 222.792971][ T3722] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48
[ 222.812569][ T3722] RSP: 002b:00007f661309b000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 222.820982][ T3722] RAX: ffffffffffffffda RBX: 00007f6614daaf80 RCX: 00007f6614c1b4df
[ 222.828949][ T3722] RDX: 00000000000001ee RSI: 0000000020000640 RDI: 00000000000000c8
[ 222.836917][ T3722] RBP: 00007f661309b090 R08: 0000000000000000 R09: 0000000000000000
[ 222.844973][ T3722] R10: 00000000000001ee R11: 0000000000000293 R12: 0000000000000001
[ 222.852944][ T3722] R13: 0000000000000001 R14: 00007f6614daaf80 R15: 00007ffc0bfc0788
[ 222.860950][ T3722] </TASK>
[ 223.016270][ T3716] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 223.979988][ T3587] cgroup: fork rejected by pids controller in /syz0
[ 224.530993][ T3741] loop2: detected capacity change from 0 to 32768
[ 224.610358][ T3741] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.21 (3741)
[ 224.712264][ T3741] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[ 224.759353][ T3741] BTRFS info (device loop2): using free space tree
[ 224.787273][ T3741] BTRFS info (device loop2): has skinny extents
[ 224.816242][ T3745] loop4: detected capacity change from 0 to 32768
[ 224.931109][ T3745] XFS (loop4): Mounting V5 Filesystem
[ 224.950953][ T3748] loop3: detected capacity change from 0 to 32768
[ 224.976594][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[ 225.028024][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!!
[ 225.069453][ T3748] =======================================================
[ 225.069453][ T3748] WARNING: The mand mount option has been deprecated and
[ 225.069453][ T3748] and is ignored by this kernel. Remove the mand
[ 225.069453][ T3748] option from the mount to silence this warning.
[ 225.069453][ T3748] =======================================================
[ 225.146282][ T3741] BTRFS info (device loop2): enabling ssd optimizations
[ 225.262919][ T3787] capability: warning: `syz.2.21' uses 32-bit capabilities (legacy support in use)
[ 225.312104][ T3748] XFS (loop3): Mounting V5 Filesystem
[ 225.312826][ T3745] XFS (loop4): Ending clean mount
[ 225.322509][ T3741] fuse: Bad value for 'fd'
[ 225.331015][ T3780] chnl_net:caif_netlink_parms(): no params data found
[ 225.404032][ T3745] XFS (loop4): Quotacheck needed: Please wait.
[ 225.514802][ T3780] bridge0: port 1(bridge_slave_0) entered blocking state
[ 225.526981][ T3780] bridge0: port 1(bridge_slave_0) entered disabled state
[ 225.560814][ T3780] device bridge_slave_0 entered promiscuous mode
[ 225.610450][ T3745] XFS (loop4): Quotacheck: Done.
[ 225.614772][ T3748] XFS (loop3): Ending clean mount
[ 225.663156][ T3780] bridge0: port 2(bridge_slave_1) entered blocking state
[ 225.673122][ T3748] XFS (loop3): Quotacheck needed: Please wait.
[ 225.710466][ T3780] bridge0: port 2(bridge_slave_1) entered disabled state
[ 225.741472][ T3780] device bridge_slave_1 entered promiscuous mode
[ 225.755147][ T3745] XFS (loop4): User initiated shutdown received.
[ 225.769938][ T3748] XFS (loop3): Quotacheck: Done.
[ 225.801647][ T3745] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x150 (fs/xfs/xfs_fsops.c:481). Shutting down filesystem.
[ 225.834366][ T3745] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[ 225.863990][ T3780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 225.896108][ T3780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 226.042519][ T3597] XFS (loop4): Unmounting Filesystem
[ 226.047588][ T3809] loop2: detected capacity change from 0 to 128
[ 226.062881][ T3780] team0: Port device team_slave_0 added
[ 226.092604][ T3780] team0: Port device team_slave_1 added
[ 226.126661][ T3809] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 226.152275][ T3809] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[ 226.230106][ T3780] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 226.240882][ T3780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 226.272343][ T3780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 226.290119][ T3780] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 226.301448][ T3780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 226.334753][ T3780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 226.346116][ T3667] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 226.674422][ T3667] usb 4-1: Using ep0 maxpacket: 16
[ 226.804758][ T3667] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 226.858965][ T3667] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 226.919467][ T3667] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 226.968655][ T3667] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 227.018539][ T3667] usb 4-1: config 0 descriptor??
[ 227.082744][ T3780] device hsr_slave_0 entered promiscuous mode
[ 227.134280][ T3802] Bluetooth: hci2: command 0x0409 tx timeout
[ 227.188643][ T3780] device hsr_slave_1 entered promiscuous mode
[ 227.222255][ T3780] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 227.231011][ T3817] capability: warning: `syz.4.30' uses deprecated v2 capabilities in a way that may be insecure
[ 227.243013][ T3780] Cannot create hsr debugfs directory
[ 227.288155][ T3586] XFS (loop3): Unmounting Filesystem
[ 227.354385][ T3667] usbhid 4-1:0.0: can't add hid device: -71
[ 227.366496][ T3667] usbhid: probe of 4-1:0.0 failed with error -71
[ 227.413545][ T3667] usb 4-1: USB disconnect, device number 2
[ 227.701486][ T3823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.34'.
[ 227.911598][ T3780] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 227.984306][ T3802] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 228.092523][ T3780] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 228.130916][ T3833] loop4: detected capacity change from 0 to 1024
[ 228.197950][ T3780] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 228.244266][ T3802] usb 2-1: Using ep0 maxpacket: 16
[ 228.346009][ T26] audit: type=1804 audit(1722994006.774:4): pid=3837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.36" name="/newroot/6/file1/bus" dev="loop4" ino=25 res=1 errno=0
[ 228.364427][ T3802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 228.383385][ T3780] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 228.405375][ T3802] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 228.429747][ T3802] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 228.445674][ T3802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 228.475723][ T3802] usb 2-1: config 0 descriptor??
[ 228.535347][ T3825] loop2: detected capacity change from 0 to 65536
[ 228.683253][ T3780] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 228.797589][ T3780] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 228.855233][ T3780] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 229.030166][ T3825] XFS (loop2): Mounting V5 Filesystem
[ 229.087540][ T3780] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 229.116246][ T3846] FAULT_INJECTION: forcing a failure.
[ 229.116246][ T3846] name failslab, interval 1, probability 0, space 0, times 1
[ 229.128933][ T3802] microsoft 0003:045E:07DA.0001: No inputs registered, leaving
[ 229.140150][ T3846] CPU: 0 PID: 3846 Comm: syz.3.38 Not tainted 5.15.164-syzkaller #0
[ 229.148150][ T3846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 229.158207][ T3846] Call Trace:
[ 229.161490][ T3846] <TASK>
[ 229.164422][ T3846] dump_stack_lvl+0x1e3/0x2d0
[ 229.168875][ T3802] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[ 229.169111][ T3846] ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 229.186298][ T3846] ? panic+0x860/0x860
[ 229.190386][ T3846] ? __might_sleep+0xc0/0xc0
[ 229.194994][ T3846] should_fail+0x38a/0x4c0
[ 229.199432][ T3846] should_failslab+0x5/0x20
[ 229.203938][ T3846] slab_pre_alloc_hook+0x53/0xc0
[ 229.208886][ T3846] __kmalloc+0x6e/0x300
[ 229.208977][ T3802] microsoft 0003:045E:07DA.0001: no inputs found
[ 229.213044][ T3846] ? tomoyo_encode+0x26b/0x530
[ 229.213074][ T3846] tomoyo_encode+0x26b/0x530
[ 229.213093][ T3846] ? sock_free_inode+0x20/0x20
[ 229.213113][ T3846] tomoyo_realpath_from_path+0x5a2/0x5e0
[ 229.213137][ T3846] tomoyo_path_number_perm+0x225/0x810
[ 229.244902][ T3846] ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 229.247178][ T3802] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway
[ 229.250400][ T3846] ? __fget_files+0x413/0x480
[ 229.263693][ T3846] security_file_ioctl+0x6d/0xa0
[ 229.268644][ T3846] __se_sys_ioctl+0x47/0x160
[ 229.273241][ T3846] do_syscall_64+0x3b/0xb0
[ 229.277666][ T3846] ? clear_bhb_loop+0x15/0x70
[ 229.282506][ T3846] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 229.288439][ T3846] RIP: 0033:0x7f50ece819f9
[ 229.292960][ T3846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 229.310066][ T3780] 8021q: adding VLAN 0 to HW filter on device bond0
[ 229.313019][ T3846] RSP: 002b:00007f50eb300038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 229.313043][ T3846] RAX: ffffffffffffffda RBX: 00007f50ed00ff80 RCX: 00007f50ece819f9
[ 229.313054][ T3846] RDX: 0000000020000800 RSI: 0000000000008923 RDI: 0000000000000005
[ 229.313065][ T3846] RBP: 00007f50eb300090 R08: 0000000000000000 R09: 0000000000000000
[ 229.313075][ T3846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 229.313084][ T3846] R13: 0000000000000000 R14: 00007f50ed00ff80 R15: 00007ffe6c7ed248
[ 229.313108][ T3846] </TASK>
[ 229.341947][ T3630] Bluetooth: hci2: command 0x041b tx timeout
[ 229.367350][ T3780] 8021q: adding VLAN 0 to HW filter on device team0
[ 229.392548][ T3846] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 229.400552][ T3825] XFS (loop2): Ending clean mount
[ 229.407494][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 229.423537][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 229.431132][ T3825] XFS (loop2): Quotacheck needed: Please wait.
[ 229.439021][ T3846] �: renamed from pim6reg1
[ 229.471661][ T3825] XFS (loop2): Quotacheck: Done.
[ 229.508746][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 229.523863][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 229.553123][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state
[ 229.559843][ T3853] tmpfs: Unknown parameter 'huways'
[ 229.560283][ T3636] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 229.611284][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 229.637890][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 229.664691][ T3636] bridge0: port 2(bridge_slave_1) entered blocking state
[ 229.671816][ T3636] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 229.711873][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 229.734968][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 229.756453][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 229.777356][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 229.787573][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 229.797011][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 229.815799][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 229.824903][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 229.835285][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 229.848830][ T3780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 229.866884][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 229.880841][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 229.892782][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 229.906693][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 229.999365][ T3857] Option '���^%����' to dns_resolver key: bad/missing value
[ 230.079186][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 230.093439][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 230.116912][ T3780] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 230.119548][ T3852] loop4: detected capacity change from 0 to 32768
[ 230.148823][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 230.167393][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 230.182722][ T3852] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.39 (3852)
[ 230.222756][ T3780] device veth0_vlan entered promiscuous mode
[ 230.241243][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 230.254362][ T3852] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[ 230.259184][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 230.281667][ T3852] BTRFS info (device loop4): using free space tree
[ 230.298557][ T3780] device veth1_vlan entered promiscuous mode
[ 230.302868][ T3852] BTRFS info (device loop4): has skinny extents
[ 230.327802][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 230.341065][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 230.358542][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 230.407450][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 230.438090][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 230.483238][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 230.518147][ T3780] device veth0_macvtap entered promiscuous mode
[ 230.565423][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 230.576821][ T3852] BTRFS info (device loop4): enabling ssd optimizations
[ 230.636538][ T3780] device veth1_macvtap entered promiscuous mode
[ 230.674305][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 230.693366][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 230.722309][ T3667] usb 2-1: USB disconnect, device number 2
[ 230.728357][ T26] audit: type=1800 audit(1722994009.154:5): pid=3852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.39" name="bus" dev="loop4" ino=263 res=0 errno=0
[ 230.776869][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 230.864222][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 230.898327][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 230.942218][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 230.993928][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 231.036101][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 231.077658][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 231.105655][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 231.135669][ T3780] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 231.170519][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 231.188343][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 231.237384][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 231.272605][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 231.303083][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 231.356104][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 231.385617][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 231.396692][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 231.406779][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 231.417315][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 231.427249][ T3780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 231.444185][ T3780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 231.459450][ T3805] Bluetooth: hci2: command 0x040f tx timeout
[ 231.480602][ T3780] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 231.504849][ T3585] XFS (loop2): Unmounting Filesystem
[ 231.510825][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 231.538446][ T3636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 231.575514][ T3780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 231.658867][ T3780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 231.672237][ T3780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 231.687861][ T3780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 231.907134][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 231.935443][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 231.981875][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 232.008796][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 232.031885][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 232.060532][ T3804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 232.371957][ T3884] loop1: detected capacity change from 0 to 65536
[ 232.436621][ T3884] XFS: ikeep mount option is deprecated.
[ 232.448637][ T3904] netlink: 'syz.0.44': attribute type 4 has an invalid length.
[ 232.573035][ T3884] XFS (loop1): Mounting V5 Filesystem
[ 232.683681][ T3884] XFS (loop1): Ending clean mount
[ 232.785231][ T3916] FAULT_INJECTION: forcing a failure.
[ 232.785231][ T3916] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 232.819460][ T3916] CPU: 1 PID: 3916 Comm: syz.0.45 Not tainted 5.15.164-syzkaller #0
[ 232.827736][ T3916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 232.838322][ T3916] Call Trace:
[ 232.841714][ T3916] <TASK>
[ 232.844660][ T3916] dump_stack_lvl+0x1e3/0x2d0
[ 232.849478][ T3916] ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 232.855289][ T3916] ? panic+0x860/0x860
[ 232.859383][ T3916] should_fail+0x38a/0x4c0
[ 232.863825][ T3916] _copy_from_user+0x2d/0x170
[ 232.868617][ T3916] __sys_bpf+0x1d5/0x670
[ 232.873225][ T3916] ? bpf_link_show_fdinfo+0x2d0/0x2d0
[ 232.878707][ T3916] ? syscall_enter_from_user_mode+0x2e/0x240
[ 232.884718][ T3916] ? lockdep_hardirqs_on+0x94/0x130
[ 232.890205][ T3916] __x64_sys_bpf+0x78/0x90
[ 232.894639][ T3916] do_syscall_64+0x3b/0xb0
[ 232.899060][ T3916] ? clear_bhb_loop+0x15/0x70
[ 232.903745][ T3916] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 232.909643][ T3916] RIP: 0033:0x7f01d33ff9f9
[ 232.914153][ T3916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 232.933927][ T3916] RSP: 002b:00007f01d187e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 232.942354][ T3916] RAX: ffffffffffffffda RBX: 00007f01d358df80 RCX: 00007f01d33ff9f9
[ 232.950336][ T3916] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011
[ 232.958318][ T3916] RBP: 00007f01d187e090 R08: 0000000000000000 R09: 0000000000000000
[ 232.966297][ T3916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 232.974275][ T3916] R13: 0000000000000000 R14: 00007f01d358df80 R15: 00007fff29999408
[ 232.982277][ T3916] </TASK>
[ 233.113326][ T3594] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x25 dinode
[ 233.183469][ T3911] loop2: detected capacity change from 0 to 32768
[ 233.190729][ T3594] XFS (loop1): Unmount and run xfs_repair
[ 233.197635][ T3594] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[ 233.205702][ T3594] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN..............
[ 233.235617][ T3594] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 233.246196][ T3594] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM
[ 233.256001][ T3594] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......'
[ 233.266467][ T3594] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 233.276854][ T3594] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI.
[ 233.286524][ T3594] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................
[ 233.293608][ T3920] loop0: detected capacity change from 0 to 8192
[ 233.297292][ T3594] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................
[ 233.316595][ T3594] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x25 dinode
[ 233.327428][ T3594] XFS (loop1): Unmount and run xfs_repair
[ 233.334618][ T3594] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[ 233.344443][ T3594] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN..............
[ 233.356441][ T3594] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 233.366184][ T3594] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM
[ 233.379243][ T3594] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......'
[ 233.389694][ T3594] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
[ 233.399268][ T3594] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI.
[ 233.405768][ T3911] XFS (loop2): Mounting V5 Filesystem
[ 233.408238][ T3594] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................
[ 233.423644][ T3594] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................
[ 233.441255][ T3920] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 233.503636][ T3930] loop4: detected capacity change from 0 to 2048
[ 233.551279][ T3892] Bluetooth: hci2: command 0x0419 tx timeout
[ 233.565622][ T3920] REISERFS (device loop0): using ordered data mode
[ 233.572146][ T3920] reiserfs: using flush barriers
[ 233.627262][ T3920] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 233.639732][ T3911] XFS (loop2): Ending clean mount
[ 233.651029][ T3911] XFS (loop2): Quotacheck needed: Please wait.
[ 233.662159][ T3920] REISERFS (device loop0): checking transaction log (loop0)
[ 233.681308][ T3594] XFS (loop1): Unmounting Filesystem
[ 233.692645][ T3920] REISERFS (device loop0): Using r5 hash to sort names
[ 233.701739][ T3920] REISERFS (device loop0): using 3.5.x disk format
[ 233.734075][ T3920] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 233.813119][ T3911] XFS (loop2): Quotacheck: Done.
[ 233.819105][ T3930] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 233.901159][ T3585] XFS (loop2): Unmounting Filesystem
[ 233.941526][ T151] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 234.235090][ T3940] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 234.251676][ T3940] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[ 234.264361][ T3940] EXT4-fs (loop4): This should not happen!! Data will be lost
[ 234.264361][ T3940]
[ 234.274409][ T3940] EXT4-fs (loop4): Total free blocks count 0
[ 234.280452][ T3940] EXT4-fs (loop4): Free/Dirty block details
[ 234.286519][ T3940] EXT4-fs (loop4): free_blocks=2415919104
[ 234.292343][ T3940] EXT4-fs (loop4): dirty_blocks=16
[ 234.297560][ T3940] EXT4-fs (loop4): Block reservation details
[ 234.304117][ T3940] EXT4-fs (loop4): i_reserved_data_blocks=1
[ 234.348907][ T3940] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28
[ 234.361369][ T3940] EXT4-fs (loop4): This should not happen!! Data will be lost
[ 234.361369][ T3940]
[ 234.455597][ T3940] Zero length message leads to an empty skb
[ 234.818382][ T151] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 234.875673][ T3942] fuse: Bad value for 'fd'
[ 234.988460][ T151] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 235.177948][ T151] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 235.359439][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[ 235.397830][ T3957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 235.416637][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[ 235.433449][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[ 235.443430][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[ 235.453555][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[ 235.463453][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[ 235.486156][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[ 235.516095][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[ 236.348939][ T3957] loop2: detected capacity change from 0 to 32768
[ 237.525978][ T3957] XFS: ikeep mount option is deprecated.
[ 237.532006][ T3957] XFS: noikeep mount option is deprecated.
[ 237.573950][ T3961] netlink: 'syz.3.56': attribute type 10 has an invalid length.
[ 237.692026][ T3957] XFS (loop2): Mounting V5 Filesystem
[ 237.783123][ T3957] XFS (loop2): Ending clean mount
[ 237.791540][ T3957] XFS (loop2): Quotacheck needed: Please wait.
[ 237.818081][ T3961] team0: Port device netdevsim0 added
[ 237.833372][ T3969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 237.883581][ T3957] XFS (loop2): Quotacheck: Done.
[ 238.401138][ T3987] loop0: detected capacity change from 0 to 512
[ 238.512782][ T3987] EXT4-fs (loop0): Unrecognized mount option "nobh"" or missing value
[ 238.552971][ T3585] XFS (loop2): Unmounting Filesystem
[ 239.102365][ T3999] loop3: detected capacity change from 0 to 512
[ 239.124372][ T3973] chnl_net:caif_netlink_parms(): no params data found
[ 239.211991][ T4004] loop2: detected capacity change from 0 to 512
[ 239.249742][ T3999] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,user_xattr,auto_da_alloc,,errors=continue. Quota mode: writeback.
[ 239.270502][ T3999] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff)
[ 239.543997][ T4017] loop2: detected capacity change from 0 to 1024
[ 239.641687][ T4020] loop4: detected capacity change from 0 to 16
[ 239.661254][ T3973] bridge0: port 1(bridge_slave_0) entered blocking state
[ 239.674400][ T3973] bridge0: port 1(bridge_slave_0) entered disabled state
[ 239.694409][ T4010] kvm [4009]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111
[ 239.695333][ T3973] device bridge_slave_0 entered promiscuous mode
[ 239.715110][ T4020] erofs: Unknown parameter '����t�5�;��} �7_c��������N�����"L������a�m)p�� �����'6~�'
[ 239.764404][ T4015] loop0: detected capacity change from 0 to 1024
[ 239.821767][ T3973] bridge0: port 2(bridge_slave_1) entered blocking state
[ 239.831907][ T3973] bridge0: port 2(bridge_slave_1) entered disabled state
[ 239.866263][ T3973] device bridge_slave_1 entered promiscuous mode
[ 239.935318][ T3803] Bluetooth: hci3: command 0x0409 tx timeout
[ 239.955849][ T4015] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 239.975800][ T4015] EXT4-fs (loop0): Ignoring removed orlov option
[ 240.034504][ T4015] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[ 240.247004][ T3973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 240.276336][ T3973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 240.449805][ T3973] team0: Port device team_slave_0 added
[ 240.532587][ T3973] team0: Port device team_slave_1 added
[ 240.626331][ T3973] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 240.643749][ T3973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 240.752019][ T3973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 240.848723][ T151] device hsr_slave_0 left promiscuous mode
[ 240.890858][ T151] device hsr_slave_1 left promiscuous mode
[ 240.933506][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 240.972210][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 241.001418][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 241.023129][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 241.050595][ T151] device bridge_slave_1 left promiscuous mode
[ 241.075901][ T151] bridge0: port 2(bridge_slave_1) entered disabled state
[ 241.138140][ T151] device bridge_slave_0 left promiscuous mode
[ 241.155722][ T151] bridge0: port 1(bridge_slave_0) entered disabled state
[ 241.257416][ T151] device veth1_macvtap left promiscuous mode
[ 241.293564][ T151] device veth0_macvtap left promiscuous mode
[ 241.304601][ T151] device veth1_vlan left promiscuous mode
[ 241.310781][ T151] device veth0_vlan left promiscuous mode
[ 242.014882][ T3803] Bluetooth: hci3: command 0x041b tx timeout
[ 242.099403][ T151] team0 (unregistering): Port device team_slave_1 removed
[ 242.145418][ T151] team0 (unregistering): Port device team_slave_0 removed
[ 242.186714][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 242.292549][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 242.484056][ T151] bond0 (unregistering): Released all slaves
[ 242.640085][ T3973] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 242.657669][ T3973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 242.753472][ T3973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 242.965945][ T3973] device hsr_slave_0 entered promiscuous mode
[ 243.003472][ T3973] device hsr_slave_1 entered promiscuous mode
[ 243.033545][ T3973] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 243.064249][ T3973] Cannot create hsr debugfs directory
[ 244.094305][ T3894] Bluetooth: hci3: command 0x040f tx timeout
[ 244.179081][ T3973] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 244.245901][ T3973] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 244.271765][ T3973] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 244.302081][ T3973] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 244.501036][ T4121] loop4: detected capacity change from 0 to 1024
[ 244.626887][ T3973] 8021q: adding VLAN 0 to HW filter on device bond0
[ 244.668429][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 244.686656][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 244.706149][ T4121] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.92: bad orphan inode 2097152
[ 244.771532][ T4121] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 244.788171][ T3973] 8021q: adding VLAN 0 to HW filter on device team0
[ 244.825164][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 244.864731][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 244.873176][ T3667] bridge0: port 1(bridge_slave_0) entered blocking state
[ 244.880393][ T3667] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 245.078906][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 245.111565][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 245.157543][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 245.189032][ T7] bridge0: port 2(bridge_slave_1) entered blocking state
[ 245.196176][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 245.232159][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 245.258495][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 245.281412][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 245.308634][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 245.330562][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 245.360663][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 245.380662][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 245.431491][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 245.450449][ T3894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 245.500849][ T3973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 245.575691][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 245.593684][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 245.630486][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 245.911753][ T4154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'.
[ 246.681860][ T3803] Bluetooth: hci3: command 0x0419 tx timeout
[ 246.811144][ T3973] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 246.849280][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 246.865015][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 246.932661][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 246.945998][ T4161] loop4: detected capacity change from 0 to 2048
[ 246.955162][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 247.016515][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 247.046373][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 247.064531][ T3973] device veth0_vlan entered promiscuous mode
[ 247.085385][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 247.115393][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 247.125972][ T4161] EXT4-fs (loop4): Mount option "nodelalloc" incompatible with ext3
[ 247.176387][ T3973] device veth1_vlan entered promiscuous mode
[ 247.262517][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 247.280220][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 247.326756][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 247.367007][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 247.410639][ T3973] device veth0_macvtap entered promiscuous mode
[ 247.462017][ T3973] device veth1_macvtap entered promiscuous mode
[ 247.501478][ T4178] loop3: detected capacity change from 0 to 512
[ 247.552740][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 247.591635][ T4178] EXT4-fs (loop3): Unrecognized mount option "fsmagic=0x0000000000000008" or missing value
[ 247.609687][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 247.643516][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 247.672410][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 247.699630][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 247.729224][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 247.762287][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 247.802349][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 247.865891][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 247.924484][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 247.992918][ T3973] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 248.041818][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 248.058480][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 248.082162][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 248.101036][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 248.141281][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 248.172002][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 248.193247][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 248.210679][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 248.222442][ T4173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 248.236848][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 248.261321][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 248.283117][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 248.314734][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 248.346343][ T3973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 248.408083][ T3973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 248.435105][ T3973] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 248.454313][ T3803] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 248.470631][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 248.489278][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 248.527179][ T3973] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 248.546421][ T3973] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 248.562546][ T4207] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[ 248.569222][ T3973] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 248.672061][ T3973] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 248.834496][ T3803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 248.853596][ T3803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 248.898696][ T3803] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 248.916490][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 248.934625][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 248.955651][ T3803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 249.017037][ T3803] usb 3-1: config 0 descriptor??
[ 249.042997][ T3735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 249.051874][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 249.072547][ T3735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 249.148136][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 249.208373][ T4232] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[ 249.230201][ T3629] Bluetooth: hci0: command 0x2016 tx timeout
[ 249.253035][ T4227] loop4: detected capacity change from 0 to 2048
[ 249.420952][ T4227] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[ 249.823370][ T4237] loop1: detected capacity change from 0 to 40427
[ 249.955945][ T4237] F2FS-fs (loop1): invalid crc value
[ 249.970966][ T4237] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 250.025325][ T3803] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71
[ 250.053882][ T3803] uclogic 0003:256C:006D.0002: failed probing parameters: -71
[ 250.078422][ T3803] uclogic: probe of 0003:256C:006D.0002 failed with error -71
[ 250.114484][ T3803] usb 3-1: USB disconnect, device number 2
[ 250.122775][ T4237] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[ 250.142114][ T4262] loop4: detected capacity change from 0 to 2048
[ 250.190570][ T26] audit: type=1800 audit(1722994028.614:6): pid=4246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.112" name="/" dev="fuse" ino=1 res=0 errno=0
[ 250.234421][ T4262] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[ 250.284081][ T4237] overlayfs: failed to resolve './file0': -2
[ 250.344547][ T3973] attempt to access beyond end of device
[ 250.344547][ T3973] loop1: rw=2049, want=45120, limit=40427
[ 250.490788][ T4270] loop4: detected capacity change from 0 to 512
[ 250.614578][ T4270] EXT4-fs (loop4): Invalid want_extra_isize 7
[ 250.654040][ T26] audit: type=1326 audit(1722994029.074:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4271 comm="syz.2.123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6614c1c9f9 code=0x0
[ 251.127420][ T4281] loop4: detected capacity change from 0 to 2048
[ 251.586670][ T4281] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 251.848102][ T4268] loop3: detected capacity change from 0 to 40427
[ 251.911907][ T4293] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[ 251.978108][ T4268] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 252.136607][ T4268] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 252.381148][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 253.299391][ T4312] loop1: detected capacity change from 0 to 512
[ 253.353860][ T4312] EXT4-fs (loop1): Ignoring removed nobh option
[ 253.387514][ T4312] EXT4-fs (loop1): 1 truncate cleaned up
[ 253.400689][ T4312] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,grpquota,errors=continue,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback.
[ 253.475062][ T7] usb 5-1: Using ep0 maxpacket: 16
[ 253.714656][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 254.091283][ T4321] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.134: invalid indirect mapped block 234881024 (level 0)
[ 254.118950][ T4321] EXT4-fs (loop1): Remounting filesystem read-only
[ 254.413519][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 254.423837][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 254.436746][ T7] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 254.446246][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 254.466786][ T7] usb 5-1: config 0 descriptor??
[ 254.952785][ T7] microsoft 0003:045E:07DA.0003: nested delimiters
[ 254.966538][ T26] audit: type=1326 audit(1722994033.394:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000
[ 254.996513][ T7] microsoft 0003:045E:07DA.0003: item 0 4 2 10 parsing failed
[ 255.021511][ T26] audit: type=1326 audit(1722994033.424:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000
[ 255.034573][ T7] microsoft 0003:045E:07DA.0003: parse failed
[ 255.049241][ T26] audit: type=1326 audit(1722994033.434:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000
[ 255.064248][ T7] microsoft: probe of 0003:045E:07DA.0003 failed with error -22
[ 255.808611][ T26] audit: type=1326 audit(1722994033.434:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000
[ 255.835765][ T1387] ieee802154 phy0 wpan0: encryption failed: -22
[ 255.840106][ T7] usb 5-1: USB disconnect, device number 3
[ 255.843145][ T1387] ieee802154 phy1 wpan1: encryption failed: -22
[ 255.994669][ T26] audit: type=1326 audit(1722994033.434:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000
[ 256.078022][ T26] audit: type=1326 audit(1722994033.434:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000
[ 256.154422][ T26] audit: type=1326 audit(1722994033.434:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000
[ 256.244293][ T26] audit: type=1326 audit(1722994033.434:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000
[ 257.141188][ T4357] loop4: detected capacity change from 0 to 1024
[ 257.365359][ T4357] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 257.402818][ T4357] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038 (0x7fffffff)
[ 257.422261][ T26] audit: type=1326 audit(1722994035.844:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6614c1c9f9 code=0x7ffc0000
[ 257.448671][ T26] audit: type=1326 audit(1722994035.844:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6614c1c9f9 code=0x7ffc0000
[ 257.478807][ T26] audit: type=1326 audit(1722994035.844:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6614c1c9f9 code=0x7ffc0000
[ 257.577602][ T26] audit: type=1326 audit(1722994035.844:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6614c1c9f9 code=0x7ffc0000
[ 257.605779][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state
[ 257.615124][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state
[ 257.664263][ T4380] loop2: detected capacity change from 0 to 1024
[ 257.679236][ T4381] loop0: detected capacity change from 0 to 512
[ 257.723459][ T26] audit: type=1326 audit(1722994035.844:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4370 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6614c1c9f9 code=0x7ffc0000
[ 257.783105][ T4384] device bridge_slave_1 left promiscuous mode
[ 257.793140][ T4380] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[ 257.804236][ T4380] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[ 257.814380][ T4380] EXT4-fs (loop2): filesystem has both journal inode and journal device!
[ 257.836358][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state
[ 257.869989][ T4381] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349)
[ 257.886270][ T4384] device bridge_slave_0 left promiscuous mode
[ 257.904669][ T4381] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[ 257.914011][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state
[ 257.929822][ T4381] System zones: 1-12
[ 257.954958][ T4381] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 257.993003][ T4381] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.157: Inode bitmap for bg 0 marked uninitialized
[ 258.025822][ T4381] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 258.231247][ T4391] netlink: 44 bytes leftover after parsing attributes in process `syz.2.162'.
[ 258.394653][ T4399] device wireguard0 entered promiscuous mode
[ 258.660276][ T4410] device bond_slave_0 entered promiscuous mode
[ 258.666897][ T4410] device bond_slave_1 entered promiscuous mode
[ 258.727802][ T4410] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 258.743228][ T4414] loop3: detected capacity change from 0 to 1024
[ 258.773023][ T4410] team0: Port device macvlan2 added
[ 258.927245][ T4414] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000005,jqfmt=vfsold,jqfmt=vfsv0,discard,data_err=abort,. Quota mode: none.
[ 259.047825][ T4414] netlink: 'syz.3.172': attribute type 10 has an invalid length.
[ 259.170464][ T4422] netlink: 'syz.3.172': attribute type 10 has an invalid length.
[ 259.210183][ T4422] team0: Port device netdevsim0 removed
[ 259.607928][ T4437] loop3: detected capacity change from 0 to 1024
[ 259.691701][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 259.736503][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 259.761968][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 259.804884][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 259.864509][ T4437] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,data_err=abort,resuid=0x0000000000000000,errors=remount-ro,norecovery,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000005,jqfmt=vfsold,jqfmt=vfsv0,discard,data_err=abort,. Quota mode: none.
[ 260.084561][ T4437] netlink: 'syz.3.179': attribute type 10 has an invalid length.
[ 260.117637][ T4452] loop2: detected capacity change from 0 to 256
[ 260.156196][ T4453] loop0: detected capacity change from 0 to 512
[ 260.364670][ T4453] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 260.394900][ T4453] ext4 filesystem being mounted at /33/bus supports timestamps until 2038 (0x7fffffff)
[ 260.558689][ T4462] loop2: detected capacity change from 0 to 512
[ 260.733649][ T4462] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[ 260.946282][ T4462] EXT4-fs (loop2): 1 truncate cleaned up
[ 260.951986][ T4462] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback.
[ 261.107350][ T4478] netlink: 'syz.3.194': attribute type 10 has an invalid length.
[ 261.118109][ T4478] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 261.632985][ T4484] loop1: detected capacity change from 0 to 512
[ 261.692088][ T4488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.199'.
[ 261.701493][ T4488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'.
[ 261.763280][ T4484] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[ 261.814217][ T4490] 8021q: adding VLAN 0 to HW filter on device macvlan3
[ 261.822379][ T4490] team0: Port device macvlan3 added
[ 261.845693][ T4484] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 261.845810][ T4490] netlink: 'syz.0.201': attribute type 4 has an invalid length.
[ 261.873750][ T4490] netlink: 152 bytes leftover after parsing attributes in process `syz.0.201'.
[ 261.907957][ T4484] EXT4-fs (loop1): 1 truncate cleaned up
[ 261.921958][ T4490] device bond_slave_0 left promiscuous mode
[ 261.929944][ T4490] device bond_slave_1 left promiscuous mode
[ 262.002390][ T4484] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none.
[ 262.003968][ T4497] tipc: Failed to obtain node identity
[ 262.037635][ T4497] tipc: Enabling of bearer <ib:batadv0> rejected, failed to enable media
[ 262.059343][ T4492] loop3: detected capacity change from 0 to 2048
[ 262.249385][ T4492] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 262.258398][ T4506] loop2: detected capacity change from 0 to 512
[ 262.319362][ T4506] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 262.364527][ T4505] loop0: detected capacity change from 0 to 8192
[ 262.396133][ T26] kauditd_printk_skb: 25 callbacks suppressed
[ 262.396147][ T26] audit: type=1804 audit(1722994040.824:46): pid=4492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.202" name="/newroot/43/file1/bus" dev="loop3" ino=18 res=1 errno=0
[ 262.457193][ T4492] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 262.520778][ T4505] netlink: 277 bytes leftover after parsing attributes in process `syz.0.207'.
[ 262.546489][ T26] audit: type=1804 audit(1722994040.874:47): pid=4492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.202" name="/newroot/43/file1/bus" dev="loop3" ino=18 res=1 errno=0
[ 262.574721][ T4492] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 23 with error 28
[ 262.601660][ T4506] EXT4-fs (loop2): 1 truncate cleaned up
[ 262.602760][ T4492] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 262.602760][ T4492]
[ 262.622190][ T4492] EXT4-fs (loop3): Total free blocks count 0
[ 262.628724][ T4492] EXT4-fs (loop3): Free/Dirty block details
[ 262.635386][ T4492] EXT4-fs (loop3): free_blocks=2415919104
[ 262.641273][ T4492] EXT4-fs (loop3): dirty_blocks=48
[ 262.646971][ T4492] EXT4-fs (loop3): Block reservation details
[ 262.653099][ T4492] EXT4-fs (loop3): i_reserved_data_blocks=3
[ 262.674346][ T4506] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none.
[ 262.701630][ T4492] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 32 with max blocks 1 with error 28
[ 262.701725][ T4492] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 262.701725][ T4492]
[ 263.887169][ T4528] loop3: detected capacity change from 0 to 128
[ 264.189258][ T4538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.221'.
[ 264.900187][ T4541] loop2: detected capacity change from 0 to 32768
[ 264.974963][ T4541] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.221 (4541)
[ 265.028180][ T4541] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[ 265.071641][ T4541] BTRFS info (device loop2): using free space tree
[ 265.097700][ T4541] BTRFS info (device loop2): has skinny extents
[ 265.243957][ T4541] BTRFS info (device loop2): enabling ssd optimizations
[ 266.609091][ T4590] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[ 267.014738][ T4578] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 267.239416][ T4603] loop3: detected capacity change from 0 to 256
[ 267.284973][ T4603] exfat: Deprecated parameter 'namecase'
[ 267.295799][ T4603] exfat: Deprecated parameter 'utf8'
[ 267.313523][ T4603] exfat: Deprecated parameter 'namecase'
[ 267.365877][ T4603] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[ 267.575238][ T4578] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 267.584474][ T4393] syz.4.163 (4393) used greatest stack depth: 17248 bytes left
[ 267.603356][ T4578] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 267.616553][ T4578] usb 3-1: Product: syz
[ 267.620759][ T4578] usb 3-1: Manufacturer: syz
[ 267.625839][ T4578] usb 3-1: SerialNumber: syz
[ 267.647326][ T4578] usb 3-1: config 0 descriptor??
[ 267.742923][ T4578] ch341 3-1:0.0: ch341-uart converter detected
[ 268.205453][ T4619] 9pnet_virtio: no channels available for device syz
[ 269.035609][ T4578] ch341-uart ttyUSB0: failed to read break control: -71
[ 269.057700][ T4578] ch341-uart: probe of ttyUSB0 failed with error -71
[ 269.173437][ T4578] usb 3-1: USB disconnect, device number 3
[ 269.221495][ T4578] ch341 3-1:0.0: device disconnected
[ 269.854428][ T4578] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 269.942107][ T4657] netlink: 76 bytes leftover after parsing attributes in process `syz.1.254'.
[ 270.046839][ T26] audit: type=1326 audit(1722994048.474:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000
[ 270.111899][ T4663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'.
[ 270.139060][ T26] audit: type=1326 audit(1722994048.474:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000
[ 270.184474][ T4665] loop3: detected capacity change from 0 to 2048
[ 270.214578][ T4578] usb 1-1: config 0 has no interfaces?
[ 270.220641][ T4578] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 270.230561][ T26] audit: type=1326 audit(1722994048.474:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000
[ 270.303822][ T26] audit: type=1326 audit(1722994048.474:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000
[ 270.314253][ T4578] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 270.328126][ T26] audit: type=1326 audit(1722994048.474:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000
[ 270.360145][ T26] audit: type=1326 audit(1722994048.504:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4660 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x7ffc0000
[ 270.389016][ T4665] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 270.500093][ T4578] usb 1-1: config 0 descriptor??
[ 270.829774][ T4578] usb 1-1: USB disconnect, device number 2
[ 270.984118][ T4672] loop4: detected capacity change from 0 to 512
[ 271.028741][ T4691] fuse: Unknown parameter '����'
[ 271.112379][ T4672] EXT4-fs (loop4): Ignoring removed orlov option
[ 271.158392][ T4672] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[ 271.181623][ T4672] EXT4-fs (loop4): Mount option "journal_checksum" incompatible with ext3
[ 271.244100][ T4677] loop2: detected capacity change from 0 to 32768
[ 271.246569][ T4699] loop3: detected capacity change from 0 to 256
[ 271.275903][ T4701] loop1: detected capacity change from 0 to 2048
[ 271.286675][ T4677] XFS: ikeep mount option is deprecated.
[ 271.311609][ T4699] FAT-fs (loop3): Directory bread(block 64) failed
[ 271.323689][ T4699] FAT-fs (loop3): Directory bread(block 65) failed
[ 271.332962][ T4699] FAT-fs (loop3): Directory bread(block 66) failed
[ 271.340401][ T4672] loop4: detected capacity change from 0 to 512
[ 271.356825][ T4677] XFS (loop2): Mounting V5 Filesystem
[ 271.365685][ T4699] FAT-fs (loop3): Directory bread(block 67) failed
[ 271.384191][ T4699] FAT-fs (loop3): Directory bread(block 68) failed
[ 271.392489][ T4699] FAT-fs (loop3): Directory bread(block 69) failed
[ 271.399718][ T4699] FAT-fs (loop3): Directory bread(block 70) failed
[ 271.407457][ T4699] FAT-fs (loop3): Directory bread(block 71) failed
[ 271.415876][ T4699] FAT-fs (loop3): Directory bread(block 72) failed
[ 271.422414][ T4699] FAT-fs (loop3): Directory bread(block 73) failed
[ 271.462927][ T4701] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 271.523298][ T4677] XFS (loop2): Ending clean mount
[ 271.535216][ T4715] attempt to access beyond end of device
[ 271.535216][ T4715] loop3: rw=1, want=1228, limit=256
[ 271.555193][ T4672] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 271.566759][ T4672] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038 (0x7fffffff)
[ 271.590886][ T26] audit: type=1326 audit(1722994050.021:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4697 comm="syz.3.269" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50ece819f9 code=0x0
[ 271.616175][ T4677] XFS (loop2): Quotacheck needed: Please wait.
[ 271.623221][ T4672] netlink: 'syz.4.259': attribute type 3 has an invalid length.
[ 271.637229][ T4701] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 271.678763][ T4701] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[ 271.734100][ T4677] XFS (loop2): Quotacheck: Done.
[ 271.742999][ T4701] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 271.742999][ T4701]
[ 271.768304][ T4701] EXT4-fs (loop1): Total free blocks count 0
[ 271.779451][ T4701] EXT4-fs (loop1): Free/Dirty block details
[ 271.788950][ T4701] EXT4-fs (loop1): free_blocks=2415919104
[ 271.800587][ T4701] EXT4-fs (loop1): dirty_blocks=16
[ 271.808898][ T4701] EXT4-fs (loop1): Block reservation details
[ 271.835796][ T4701] EXT4-fs (loop1): i_reserved_data_blocks=1
[ 271.919422][ T3585] XFS (loop2): Unmounting Filesystem
[ 272.055471][ T4721] syz.0.274[4721] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 272.055565][ T4721] syz.0.274[4721] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 272.174515][ T4725] netlink: 36 bytes leftover after parsing attributes in process `syz.1.273'.
[ 272.210746][ T4727] loop3: detected capacity change from 0 to 512
[ 272.286595][ T4729] loop1: detected capacity change from 0 to 1024
[ 272.315675][ T4727] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 272.338970][ T4735] loop0: detected capacity change from 0 to 512
[ 272.369021][ T4727] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038 (0x7fffffff)
[ 272.447565][ T4729] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[ 272.514410][ T4729] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,usrquota,grpjquota=,lazytime,jqfmt=vfsold,grpid,data_err=abort,,errors=continue. Quota mode: writeback.
[ 272.543497][ T4741] netlink: 'syz.2.272': attribute type 10 has an invalid length.
[ 272.582652][ T4735] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 272.605573][ T4735] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038 (0x7fffffff)
[ 272.683666][ T4717] loop4: detected capacity change from 0 to 32768
[ 272.690425][ T4741] team0: Port device netdevsim0 added
[ 272.735516][ T4717] XFS: ikeep mount option is deprecated.
[ 272.843312][ T4717] XFS (loop4): Mounting V5 Filesystem
[ 272.917877][ T4717] XFS (loop4): Ending clean mount
[ 272.933981][ T4717] XFS (loop4): Quotacheck needed: Please wait.
[ 273.021047][ T4717] XFS (loop4): Quotacheck: Done.
[ 273.098166][ T3597] XFS (loop4): Unmounting Filesystem
[ 273.153199][ T4745] overlayfs: './file0' not a directory
[ 273.299640][ T4762] overlayfs: './file0' not a directory
[ 273.488411][ T4769] loop2: detected capacity change from 0 to 4096
[ 273.497639][ T4771] loop4: detected capacity change from 0 to 512
[ 273.586291][ T4771] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349)
[ 273.602809][ T4771] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e098, mo2=0002]
[ 273.611244][ T4771] System zones: 1-12
[ 273.616162][ T4771] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 273.622533][ T4771] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.280: Inode bitmap for bg 0 marked uninitialized
[ 273.646765][ T4771] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,nogrpid,,errors=continue. Quota mode: none.
[ 273.664385][ T26] audit: type=1326 audit(1722994052.091:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6614c1c9f9 code=0x7ffc0000
[ 273.686732][ T26] audit: type=1326 audit(1722994052.091:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6614c1c9f9 code=0x7ffc0000
[ 273.767185][ T26] audit: type=1326 audit(1722994052.141:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.2.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6614c1c9f9 code=0x7ffc0000
[ 274.786200][ T4784] loop0: detected capacity change from 0 to 512
[ 274.923854][ T4784] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 274.944672][ T4784] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038 (0x7fffffff)
[ 275.035549][ T4797] loop2: detected capacity change from 0 to 512
[ 275.156914][ T4797] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 275.194466][ T4797] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038 (0x7fffffff)
[ 275.375460][ T4811] loop2: detected capacity change from 0 to 512
[ 275.447926][ T4809] loop4: detected capacity change from 0 to 4096
[ 275.470261][ T4811] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 275.484477][ T4811] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038 (0x7fffffff)
[ 275.550554][ T4809] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[ 275.691045][ T26] kauditd_printk_skb: 4 callbacks suppressed
[ 275.691059][ T26] audit: type=1800 audit(1722994054.121:62): pid=4809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.300" name="bus" dev="loop4" ino=33 res=0 errno=0
[ 275.726879][ T26] audit: type=1800 audit(1722994054.121:63): pid=4809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.300" name="bus" dev="loop4" ino=33 res=0 errno=0
[ 276.195067][ T4824] loop0: detected capacity change from 0 to 512
[ 276.308110][ T4824] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 276.361428][ T4824] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038 (0x7fffffff)
[ 276.372662][ T4827] loop2: detected capacity change from 0 to 32768
[ 276.405004][ T4827] XFS: ikeep mount option is deprecated.
[ 276.428313][ T4824] netlink: 'syz.0.306': attribute type 3 has an invalid length.
[ 276.695817][ T4827] XFS (loop2): Mounting V5 Filesystem
[ 276.849768][ T4827] XFS (loop2): Ending clean mount
[ 276.862415][ T4827] XFS (loop2): Quotacheck needed: Please wait.
[ 277.535506][ C1] Dead loop on virtual device ipvlan1, fix it urgently!
[ 277.621932][ T4827] XFS (loop2): Quotacheck: Done.
[ 277.726374][ T3585] XFS (loop2): Unmounting Filesystem
[ 279.504503][ T3892] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 279.854498][ T3892] usb 1-1: Using ep0 maxpacket: 8
[ 280.185450][ T3892] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 280.204256][ T3892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 280.235115][ T3892] usb 1-1: Product: syz
[ 280.280938][ T3892] usb 1-1: Manufacturer: syz
[ 280.308200][ T3892] usb 1-1: SerialNumber: syz
[ 280.349876][ T3892] usb 1-1: config 0 descriptor??
[ 280.452563][ T3892] gspca_main: sq930x-2.14.0 probing 2770:930c
[ 280.560295][ T4964] loop2: detected capacity change from 0 to 64
[ 280.666847][ T3892] gspca_sq930x: reg_r 001f failed -32
[ 280.672532][ T3892] sq930x: probe of 1-1:0.0 failed with error -32
[ 280.746152][ T4964] hfs: request for non-existent node 1280 in B*Tree
[ 280.765005][ T4964] hfs: request for non-existent node 1280 in B*Tree
[ 281.036961][ T4980] netlink: 'syz.1.360': attribute type 10 has an invalid length.
[ 281.132918][ T4980] team0: Port device netdevsim0 added
[ 281.311318][ T4991] netlink: 'syz.2.365': attribute type 9 has an invalid length.
[ 281.342595][ T4991] netlink: 92148 bytes leftover after parsing attributes in process `syz.2.365'.
[ 281.756339][ T5002] nfs: Unknown parameter '
[ 281.756339][ T5002] '
[ 281.778947][ T5002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.370'.
[ 282.233572][ T4578] usb 1-1: USB disconnect, device number 3
[ 282.783601][ T5041] autofs4:pid:5041:autofs_fill_super: called with bogus options
[ 283.214651][ T4580] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 283.464431][ T4580] usb 3-1: Using ep0 maxpacket: 8
[ 283.584871][ T4580] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 283.610047][ T4580] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 283.661568][ T4580] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 283.739880][ T5054] raw_sendmsg: syz.1.389 forgot to set AF_INET. Fix it!
[ 283.824377][ T4580] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 283.848121][ T4580] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 283.877131][ T4580] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 283.924401][ T5081] vivid-001: ================= START STATUS =================
[ 283.938806][ T5081] vivid-001: Test Pattern: 75% Colorbar
[ 283.947103][ T5081] vivid-001: Fill Percentage of Frame: 100
[ 283.963365][ T5081] vivid-001: Horizontal Movement: No Movement
[ 283.994482][ T5081] vivid-001: Vertical Movement: No Movement
[ 284.014479][ T4580] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 284.029104][ T4580] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 284.041385][ T5081] vivid-001: OSD Text Mode: All
[ 284.070491][ T5081] vivid-001: Show Border: false
[ 284.108251][ T4580] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 284.148761][ T5081] vivid-001: Show Square: false
[ 284.179577][ T5081] vivid-001: Sensor Flipped Horizontally: false
[ 284.188661][ T5081] vivid-001: Sensor Flipped Vertically: false
[ 284.199652][ T5081] vivid-001: Insert SAV Code in Image: false
[ 284.208009][ T5081] vivid-001: Insert EAV Code in Image: false
[ 284.215127][ T5081] vivid-001: Reduced Framerate: false
[ 284.224662][ T5081] vivid-001: Enable Capture Cropping: true
[ 284.232698][ T5081] vivid-001: Enable Capture Composing: true
[ 284.239718][ T5081] vivid-001: Enable Capture Scaler: true
[ 284.246793][ T5081] vivid-001: Timestamp Source: End of Frame
[ 284.253774][ T5081] vivid-001: Colorspace: sRGB
[ 284.261980][ T5081] vivid-001: Transfer Function: Default
[ 284.275434][ T5081] vivid-001: Y'CbCr Encoding: Default
[ 284.287028][ T5081] vivid-001: HSV Encoding: Hue 0-179
[ 284.294311][ T5081] vivid-001: Quantization: Default
[ 284.308384][ T5081] vivid-001: Apply Alpha To Red Only: false
[ 284.315081][ T5081] vivid-001: Standard Aspect Ratio: 4x3
[ 284.324475][ T5081] vivid-001: DV Timings Signal Mode: Current DV Timings inactive
[ 284.332497][ T5081] vivid-001: DV Timings: 640x480p59 inactive
[ 284.340848][ T5081] vivid-001: DV Timings Aspect Ratio: Source Width x Height
[ 284.360040][ T5081] vivid-001: Maximum EDID Blocks: 2
[ 284.366826][ T5081] vivid-001: Limited RGB Range (16-235): false
[ 284.379397][ T5081] vivid-001: Rx RGB Quantization Range: Automatic
[ 284.390941][ T5081] vivid-001: Power Present: 0x00000001
[ 284.394487][ T4580] usb 3-1: string descriptor 0 read error: -22
[ 284.406630][ T5081]
[ 284.412568][ T5081] tpg source WxH: 640x360 (Y'CbCr)
[ 284.419404][ T5081] tpg field: 1
[ 284.424206][ T5081] tpg crop: 640x360@0x0
[ 284.429826][ T5081] tpg compose: 640x360@0x0
[ 284.436254][ T5081] tpg colorspace: 8
[ 284.441816][ T5081] tpg transfer function: 0/0
[ 284.447617][ T4580] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 284.456983][ T5081] tpg Y'CbCr encoding: 0/0
[ 284.461591][ T5081] tpg quantization: 0/0
[ 284.468715][ T5081] tpg RGB range: 0/2
[ 284.474596][ T5081] vivid-001: ================== END STATUS ==================
[ 284.604943][ T4580] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 284.675365][ T4580] adutux 3-1:168.0: interrupt endpoints not found
[ 284.881560][ T4580] usb 3-1: USB disconnect, device number 4
[ 284.953000][ T5101] sctp: [Deprecated]: syz.3.405 (pid 5101) Use of int in maxseg socket option.
[ 284.953000][ T5101] Use struct sctp_assoc_value instead
[ 285.030860][ T5103] syz.4.406 uses obsolete (PF_INET,SOCK_PACKET)
[ 286.869645][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters.
[ 287.008783][ T5194] device syz_tun entered promiscuous mode
[ 287.037889][ T5194] device batadv_slave_0 entered promiscuous mode
[ 287.354712][ T5198] ebtables: ebtables: counters copy to user failed while replacing table
[ 287.860796][ T9] tipc: Subscription rejected, illegal request
[ 288.158113][ T5214] netlink: 256 bytes leftover after parsing attributes in process `syz.0.451'.
[ 288.738491][ T5224] netlink: 48 bytes leftover after parsing attributes in process `syz.0.456'.
[ 288.796745][ T5224] dccp_invalid_packet: P.Data Offset(0) too small
[ 289.341778][ T5246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.465'.
[ 289.662655][ T5258] delete_channel: no stack
[ 290.005159][ T5273] device syz_tun entered promiscuous mode
[ 290.027812][ T5274] loop1: detected capacity change from 0 to 2048
[ 290.041587][ T5273] device batadv_slave_0 entered promiscuous mode
[ 290.071314][ T5273] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[ 290.105885][ T5273] Cannot create hsr debugfs directory
[ 290.113681][ T5274] EXT4-fs (loop1): Ignoring removed bh option
[ 290.145141][ T5287] netlink: 'syz.2.481': attribute type 10 has an invalid length.
[ 290.153625][ T5274] EXT4-fs error (device loop1): ext4_fill_super:4840: inode #2: comm syz.1.476: casefold flag without casefold feature
[ 290.185424][ T5274] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[ 290.199741][ T5274] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[ 290.208084][ T5274] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,norecovery,,errors=continue. Quota mode: writeback.
[ 290.251081][ T5291] netlink: 44 bytes leftover after parsing attributes in process `syz.4.484'.
[ 290.491202][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 290.536312][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 290.579071][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 290.834570][ T5312] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 291.031992][ T5302] Dead loop on virtual device ipvlan1, fix it urgently!
[ 291.040008][ T5317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.494'.
[ 291.069256][ T5317] netlink: 32 bytes leftover after parsing attributes in process `syz.3.494'.
[ 291.134289][ T3893] Bluetooth: hci0: command 0x0c20 tx timeout
[ 291.254628][ T5302] syz.1.476 (5302) used greatest stack depth: 11192 bytes left
[ 291.780079][ T5345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.504'.
[ 292.093024][ T5364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'.
[ 292.130065][ T5364] ------------[ cut here ]------------
[ 292.156540][ T5364] WARNING: CPU: 1 PID: 5364 at net/mac80211/rate.c:282 ieee80211_check_rate_mask+0x23b/0x3b0
[ 292.210885][ T5364] Modules linked in:
[ 292.230889][ T5364] CPU: 1 PID: 5364 Comm: syz.2.511 Not tainted 5.15.164-syzkaller #0
[ 292.251558][ T5364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 292.280757][ T5364] RIP: 0010:ieee80211_check_rate_mask+0x23b/0x3b0
[ 292.296105][ T5364] Code: b6 04 38 84 c0 0f 85 99 00 00 00 89 2a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6e 99 bd f7 0f 0b eb e8 e8 65 99 bd f7 <0f> 0b eb df 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fe ff ff e8 1c
[ 292.317134][ T5364] RSP: 0018:ffffc90003257270 EFLAGS: 00010283
[ 292.323331][ T5364] RAX: ffffffff89c2c7fb RBX: ffff888063054c80 RCX: 0000000000040000
[ 292.354771][ T5364] RDX: ffffc90003f6c000 RSI: 0000000000003260 RDI: 0000000000003261
[ 292.368118][ T5364] RBP: ffff88807e083510 R08: ffffffff89c2c689 R09: ffffffff89c4a966
[ 292.384621][ T5364] R10: 0000000000000002 R11: ffff888016f0d940 R12: 0000000000000000
[ 292.392667][ T5364] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807e080da0
[ 292.402009][ T5364] FS: 00007f661309b6c0(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 292.411382][ T5364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 292.418375][ T5364] CR2: 00007f01d355b178 CR3: 000000004a953000 CR4: 00000000003506e0
[ 292.427120][ T5364] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 292.435382][ T5364] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 292.443448][ T5364] Call Trace:
[ 292.448055][ T5364] <TASK>
[ 292.451071][ T5364] ? __warn+0x15b/0x300
[ 292.455720][ T5364] ? ieee80211_check_rate_mask+0x23b/0x3b0
[ 292.461617][ T5364] ? report_bug+0x1b7/0x2e0
[ 292.466624][ T5364] ? handle_bug+0x3d/0x70
[ 292.471120][ T5364] ? exc_invalid_op+0x16/0x40
[ 292.476242][ T5364] ? asm_exc_invalid_op+0x16/0x20
[ 292.481440][ T5364] ? ieee80211_change_bss+0x276/0x910
[ 292.487365][ T5364] ? ieee80211_check_rate_mask+0xc9/0x3b0
[ 292.493163][ T5364] ? ieee80211_check_rate_mask+0x23b/0x3b0
[ 292.501756][ T5364] ? ieee80211_check_rate_mask+0x23b/0x3b0
[ 292.509720][ T5364] ieee80211_change_bss+0x462/0x910
[ 292.519568][ T5364] nl80211_set_bss+0x84c/0xce0
[ 292.527077][ T5364] ? nl80211_del_mpath+0x3a0/0x3a0
[ 292.532571][ T5364] genl_rcv_msg+0xfbd/0x14a0
[ 292.542255][ T5364] ? genl_bind+0x420/0x420
[ 292.549463][ T5364] ? local_bh_enable+0x5/0x20
[ 292.558846][ T5364] ? mark_lock+0x98/0x340
[ 292.563370][ T5364] ? __lock_acquire+0x1295/0x1ff0
[ 292.571404][ T5364] ? nl80211_del_mpath+0x3a0/0x3a0
[ 292.589706][ T5364] netlink_rcv_skb+0x1cf/0x410
[ 292.605323][ T5364] ? genl_bind+0x420/0x420
[ 292.609786][ T5364] ? netlink_ack+0xb10/0xb10
[ 292.621212][ T5364] ? down_read+0x1b3/0x2e0
[ 292.626091][ T5364] ? genl_rcv+0x9/0x40
[ 292.630354][ T5364] genl_rcv+0x24/0x40
[ 292.641396][ T5364] netlink_unicast+0x7b6/0x980
[ 292.646484][ T5364] ? netlink_detachskb+0x90/0x90
[ 292.651451][ T5364] ? __virt_addr_valid+0x3bb/0x460
[ 292.663479][ T5364] ? 0xffffffff81000000
[ 292.670948][ T5364] ? __check_object_size+0x300/0x410
[ 292.683784][ T5364] ? bpf_lsm_netlink_send+0x5/0x10
[ 292.689261][ T5364] netlink_sendmsg+0xa30/0xd60
[ 292.701121][ T5364] ? netlink_getsockopt+0x5b0/0x5b0
[ 292.708208][ T5364] ? futex_wait+0x634/0x740
[ 292.713714][ T5364] ? aa_sock_msg_perm+0x91/0x150
[ 292.720152][ T5364] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 292.726003][ T5364] ? security_socket_sendmsg+0x7d/0xa0
[ 292.731653][ T5364] ? netlink_getsockopt+0x5b0/0x5b0
[ 292.737010][ T5364] ____sys_sendmsg+0x59e/0x8f0
[ 292.741952][ T5364] ? iovec_from_user+0x300/0x390
[ 292.747016][ T5364] ? __sys_sendmsg_sock+0x30/0x30
[ 292.752255][ T5364] ___sys_sendmsg+0x252/0x2e0
[ 292.757151][ T5364] ? __sys_sendmsg+0x260/0x260
[ 292.762166][ T5364] ? __fdget+0x191/0x220
[ 292.766539][ T5364] __se_sys_sendmsg+0x19a/0x260
[ 292.771600][ T5364] ? __x64_sys_sendmsg+0x80/0x80
[ 292.776718][ T5364] ? syscall_enter_from_user_mode+0x2e/0x240
[ 292.782934][ T5364] ? lockdep_hardirqs_on+0x94/0x130
[ 292.788281][ T5364] ? syscall_enter_from_user_mode+0x2e/0x240
[ 292.794494][ T5364] do_syscall_64+0x3b/0xb0
[ 292.798917][ T5364] ? clear_bhb_loop+0x15/0x70
[ 292.803600][ T5364] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 292.810533][ T5364] RIP: 0033:0x7f6614c1c9f9
[ 292.815235][ T5364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 292.836428][ T5364] RSP: 002b:00007f661309b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 292.845004][ T5364] RAX: ffffffffffffffda RBX: 00007f6614daaf80 RCX: 00007f6614c1c9f9
[ 292.853008][ T5364] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004
[ 292.861274][ T5364] RBP: 00007f6614c8a8ee R08: 0000000000000000 R09: 0000000000000000
[ 292.869305][ T5364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 292.881080][ T5364] R13: 0000000000000000 R14: 00007f6614daaf80 R15: 00007ffc0bfc0788
[ 292.889493][ T5364] </TASK>
[ 292.892671][ T5364] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 292.900478][ T5364] CPU: 0 PID: 5364 Comm: syz.2.511 Not tainted 5.15.164-syzkaller #0
[ 292.910304][ T5364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 292.920658][ T5364] Call Trace:
[ 292.924061][ T5364] <TASK>
[ 292.927113][ T5364] dump_stack_lvl+0x1e3/0x2d0
[ 292.931998][ T5364] ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 292.937763][ T5364] ? panic+0x860/0x860
[ 292.941856][ T5364] ? ieee80211_check_rate_mask+0x140/0x3b0
[ 292.947672][ T5364] ? ieee80211_check_rate_mask+0x140/0x3b0
[ 292.953807][ T5364] panic+0x318/0x860
[ 292.957706][ T5364] ? __warn+0x16a/0x300
[ 292.961866][ T5364] ? fb_is_primary_device+0xd0/0xd0
[ 292.967076][ T5364] ? ieee80211_check_rate_mask+0x23b/0x3b0
[ 292.972883][ T5364] __warn+0x2b2/0x300
[ 292.976883][ T5364] ? ieee80211_check_rate_mask+0x23b/0x3b0
[ 292.982714][ T5364] report_bug+0x1b7/0x2e0
[ 292.987064][ T5364] handle_bug+0x3d/0x70
[ 292.991223][ T5364] exc_invalid_op+0x16/0x40
[ 292.995725][ T5364] asm_exc_invalid_op+0x16/0x20
[ 293.000581][ T5364] RIP: 0010:ieee80211_check_rate_mask+0x23b/0x3b0
[ 293.007003][ T5364] Code: b6 04 38 84 c0 0f 85 99 00 00 00 89 2a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 6e 99 bd f7 0f 0b eb e8 e8 65 99 bd f7 <0f> 0b eb df 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fe ff ff e8 1c
[ 293.026701][ T5364] RSP: 0018:ffffc90003257270 EFLAGS: 00010283
[ 293.032783][ T5364] RAX: ffffffff89c2c7fb RBX: ffff888063054c80 RCX: 0000000000040000
[ 293.042436][ T5364] RDX: ffffc90003f6c000 RSI: 0000000000003260 RDI: 0000000000003261
[ 293.050426][ T5364] RBP: ffff88807e083510 R08: ffffffff89c2c689 R09: ffffffff89c4a966
[ 293.058504][ T5364] R10: 0000000000000002 R11: ffff888016f0d940 R12: 0000000000000000
[ 293.066657][ T5364] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807e080da0
[ 293.074646][ T5364] ? ieee80211_change_bss+0x276/0x910
[ 293.080109][ T5364] ? ieee80211_check_rate_mask+0xc9/0x3b0
[ 293.085829][ T5364] ? ieee80211_check_rate_mask+0x23b/0x3b0
[ 293.091652][ T5364] ieee80211_change_bss+0x462/0x910
[ 293.096858][ T5364] nl80211_set_bss+0x84c/0xce0
[ 293.101750][ T5364] ? nl80211_del_mpath+0x3a0/0x3a0
[ 293.106883][ T5364] genl_rcv_msg+0xfbd/0x14a0
[ 293.111484][ T5364] ? genl_bind+0x420/0x420
[ 293.116613][ T5364] ? local_bh_enable+0x5/0x20
[ 293.121324][ T5364] ? mark_lock+0x98/0x340
[ 293.125676][ T5364] ? __lock_acquire+0x1295/0x1ff0
[ 293.130723][ T5364] ? nl80211_del_mpath+0x3a0/0x3a0
[ 293.135934][ T5364] netlink_rcv_skb+0x1cf/0x410
[ 293.140703][ T5364] ? genl_bind+0x420/0x420
[ 293.145118][ T5364] ? netlink_ack+0xb10/0xb10
[ 293.149729][ T5364] ? down_read+0x1b3/0x2e0
[ 293.154145][ T5364] ? genl_rcv+0x9/0x40
[ 293.158213][ T5364] genl_rcv+0x24/0x40
[ 293.162229][ T5364] netlink_unicast+0x7b6/0x980
[ 293.167009][ T5364] ? netlink_detachskb+0x90/0x90
[ 293.171945][ T5364] ? __virt_addr_valid+0x3bb/0x460
[ 293.177061][ T5364] ? 0xffffffff81000000
[ 293.181209][ T5364] ? __check_object_size+0x300/0x410
[ 293.186495][ T5364] ? bpf_lsm_netlink_send+0x5/0x10
[ 293.191608][ T5364] netlink_sendmsg+0xa30/0xd60
[ 293.196385][ T5364] ? netlink_getsockopt+0x5b0/0x5b0
[ 293.201583][ T5364] ? futex_wait+0x634/0x740
[ 293.206094][ T5364] ? aa_sock_msg_perm+0x91/0x150
[ 293.211035][ T5364] ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 293.216465][ T5364] ? security_socket_sendmsg+0x7d/0xa0
[ 293.221935][ T5364] ? netlink_getsockopt+0x5b0/0x5b0
[ 293.227141][ T5364] ____sys_sendmsg+0x59e/0x8f0
[ 293.231909][ T5364] ? iovec_from_user+0x300/0x390
[ 293.236853][ T5364] ? __sys_sendmsg_sock+0x30/0x30
[ 293.241897][ T5364] ___sys_sendmsg+0x252/0x2e0
[ 293.244353][ T3892] Bluetooth: hci0: command 0x0c1a tx timeout
[ 293.246574][ T5364] ? __sys_sendmsg+0x260/0x260
[ 293.257437][ T5364] ? __fdget+0x191/0x220
[ 293.261700][ T5364] __se_sys_sendmsg+0x19a/0x260
[ 293.266565][ T5364] ? __x64_sys_sendmsg+0x80/0x80
[ 293.271516][ T5364] ? syscall_enter_from_user_mode+0x2e/0x240
[ 293.277498][ T5364] ? lockdep_hardirqs_on+0x94/0x130
[ 293.282697][ T5364] ? syscall_enter_from_user_mode+0x2e/0x240
[ 293.288798][ T5364] do_syscall_64+0x3b/0xb0
[ 293.293242][ T5364] ? clear_bhb_loop+0x15/0x70
[ 293.297953][ T5364] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 293.303885][ T5364] RIP: 0033:0x7f6614c1c9f9
[ 293.308313][ T5364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 293.330271][ T5364] RSP: 002b:00007f661309b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 293.338721][ T5364] RAX: ffffffffffffffda RBX: 00007f6614daaf80 RCX: 00007f6614c1c9f9
[ 293.346713][ T5364] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004
[ 293.354782][ T5364] RBP: 00007f6614c8a8ee R08: 0000000000000000 R09: 0000000000000000
[ 293.362849][ T5364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 293.370819][ T5364] R13: 0000000000000000 R14: 00007f6614daaf80 R15: 00007ffc0bfc0788
[ 293.378813][ T5364] </TASK>
[ 293.382047][ T5364] Kernel Offset: disabled
[ 293.386612][ T5364] Rebooting in 86400 seconds..