last executing test programs: 1m50.809020147s ago: executing program 4 (id=873): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xbfd, 0x0, 0x0) 1m50.132050575s ago: executing program 4 (id=878): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000010000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 1m43.900102035s ago: executing program 2 (id=903): r0 = io_uring_setup(0x1de1, &(0x7f00000002c0)={0x0, 0xb6f1, 0x0, 0x1, 0x8}) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "32823e2a5aee3ff0", "94fed65d4a944e558b47dc85eba79bc0", "1a8b6919", "362c1aee1295e2d0"}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) 1m40.980060276s ago: executing program 2 (id=914): unshare(0x22020400) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[], 0x8, 0x2f4, &(0x7f0000000b80)="$eJzs3U1PE1sYwPGnLxRaAsPi5t5cE8OJbnQzgepaaQwkxiYSpMaXxGSQqTYdWzLTYGqM6Mqt8UO4ICzZkShfgI073bhxx8bEhSyMYzqdodAOb6VQAv9fQubJnPNMz+kMyXMmzLB+792zYt7R80ZFon1KIiIiGyJDEpVAxN9GvTghW72Wy/0/v5y/c//BrUw2Oz6l1ERm+kpaKTU4/PH5y6TfbaVX1oYerf9If1/7d+3/9T/TTwuOKjiqVK4oQ82Uv1WMGctUswWnqCs1aZmGY6pCyTHtenu53p63ynNzVWWUZgdSc7bpOMooVVXRrKpKWVXsqoo9MQolpeu6GkgJ9pJbnJoyMm0m93V4MDgitp0xYiKSbGnJLXZlQAAAoKua6/+oqE7W/0sXViv9d5cH/fp/JRFW/1/9Wj/Wtvq/Vl2G1v/B54fW/8bB6v/WiuhsOVT9j5NhONGyK9IIa412xkj5v7+eNw+XRqTn2AYIAAAAAAAAAAAAAAAAAAAAAAAOZ8N1Ndd1tWDrxkXEdbVe/wFv198fkhoTketdGDI6qOX8+z/7OP84BRoP7sUHRay387n5XH3rd1gVEUtMGRFNfnvXg68WB08eqZoh+WQt+PkL87mY15LJS8HLHxWtR5rzXXfiZnZ8VNVtz++R1Nb8tGjyT3h+OjQ/IZcubsnXRZPPj6Uslsx642jkvxpV6sbtbFN+0usHAAAAAMBpoKtNoet3Xd+pvZ6/ub5uvj8Qa6yvR0LX53E5F+/u3AEAAAAAOCuc6ouiYVmmvUuQlL37tB/Ej+jIwQz3mxX8LcPRzXSXIPjwbU3BP9jo+NcSOcDXskMQlXayhmuzUYedRXDbaKc+Mjl2/GfQC/57/+FX5w54bblvj5m2H8R2vwB4OTAAAABwCjWK/mDPWHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGXQcb0fr9hwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JvAAAA///+mQDw") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r0) 1m25.973426739s ago: executing program 4 (id=878): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000010000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 1m21.895030576s ago: executing program 2 (id=914): unshare(0x22020400) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[], 0x8, 0x2f4, &(0x7f0000000b80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r0) 1m0.826759061s ago: executing program 4 (id=878): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000010000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 57.61902529s ago: executing program 2 (id=914): unshare(0x22020400) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[], 0x8, 0x2f4, &(0x7f0000000b80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r0) 36.899272306s ago: executing program 4 (id=878): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000010000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 34.847586079s ago: executing program 2 (id=914): unshare(0x22020400) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[], 0x8, 0x2f4, &(0x7f0000000b80)="$eJzs3U1PE1sYwPGnLxRaAsPi5t5cE8OJbnQzgepaaQwkxiYSpMaXxGSQqTYdWzLTYGqM6Mqt8UO4ICzZkShfgI073bhxx8bEhSyMYzqdodAOb6VQAv9fQubJnPNMz+kMyXMmzLB+792zYt7R80ZFon1KIiIiGyJDEpVAxN9GvTghW72Wy/0/v5y/c//BrUw2Oz6l1ERm+kpaKTU4/PH5y6TfbaVX1oYerf9If1/7d+3/9T/TTwuOKjiqVK4oQ82Uv1WMGctUswWnqCs1aZmGY6pCyTHtenu53p63ynNzVWWUZgdSc7bpOMooVVXRrKpKWVXsqoo9MQolpeu6GkgJ9pJbnJoyMm0m93V4MDgitp0xYiKSbGnJLXZlQAAAoKua6/+oqE7W/0sXViv9d5cH/fp/JRFW/1/9Wj/Wtvq/Vl2G1v/B54fW/8bB6v/WiuhsOVT9j5NhONGyK9IIa412xkj5v7+eNw+XRqTn2AYIAAAAAAAAAAAAAAAAAAAAAAAOZ8N1Ndd1tWDrxkXEdbVe/wFv198fkhoTketdGDI6qOX8+z/7OP84BRoP7sUHRay387n5XH3rd1gVEUtMGRFNfnvXg68WB08eqZoh+WQt+PkL87mY15LJS8HLHxWtR5rzXXfiZnZ8VNVtz++R1Nb8tGjyT3h+OjQ/IZcubsnXRZPPj6Uslsx642jkvxpV6sbtbFN+0usHAAAAAMBpoKtNoet3Xd+pvZ6/ub5uvj8Qa6yvR0LX53E5F+/u3AEAAAAAOCuc6ouiYVmmvUuQlL37tB/Ej+jIwQz3mxX8LcPRzXSXIPjwbU3BP9jo+NcSOcDXskMQlXayhmuzUYedRXDbaKc+Mjl2/GfQC/57/+FX5w54bblvj5m2H8R2vwB4OTAAAABwCjWK/mDPWHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGXQcb0fr9hwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JvAAAA///+mQDw") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r0) 11.537659806s ago: executing program 3 (id=1315): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000740)={0x0, 0x5, 0x2, "9db7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x40, 0x13, 0x2, "f2db"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.723791284s ago: executing program 4 (id=878): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000010000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 9.008984379s ago: executing program 3 (id=1324): recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/12, 0x13}], 0x1}}], 0x71e, 0x142, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 8.908636778s ago: executing program 2 (id=914): unshare(0x22020400) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[], 0x8, 0x2f4, &(0x7f0000000b80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r0) 7.763263285s ago: executing program 3 (id=1326): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xa8, 0xff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) 6.193669969s ago: executing program 3 (id=1332): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20}}}}}]}}]}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f7, &(0x7f0000000000)={'bridge0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 3.07593135s ago: executing program 3 (id=1336): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10) userfaultfd(0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.866993659s ago: executing program 3 (id=1338): syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x7a, &(0x7f0000000000)=@string={0x7a, 0x3, "abe98397850d9289638d7120310994176d76ee8005e3bf5de76d569d98cc3ce7d4419c84da5f7e420900d136a14f65099da81db6c35a3e0c7fb9fe03b0fa265df2be125facefe74e0e21bb6a1889f400fb20971f7f4031183b1ef33a6b6292c4d96927f019fba2ad2987739c5e0d59351755863603e11b11"}}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 1.681502855s ago: executing program 1 (id=1343): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788fcd609100057", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.498964225s ago: executing program 0 (id=1345): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x0) 1.380091055s ago: executing program 1 (id=1346): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.310385435s ago: executing program 1 (id=1347): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x4000000) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0xe}, @window={0x3, 0x3, 0x81}]}}}}}}}}, 0x0) 1.203201364s ago: executing program 1 (id=1348): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000002c0)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000040)={'full', 0x20, 0x100001, 0x20, 0x100002}, 0x2f) write$cgroup_pressure(r2, &(0x7f00000005c0)={'full', 0x20, 0x7, 0x20, 0x1}, 0x2f) 1.135690114s ago: executing program 0 (id=1349): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000ad0000000000000000850000006d000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) add_key(0x0, 0x0, &(0x7f00000000c0)="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", 0x11d, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) 1.031506094s ago: executing program 0 (id=1350): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 898.635863ms ago: executing program 1 (id=1351): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1239, &(0x7f0000000680)="$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") r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) 860.278093ms ago: executing program 0 (id=1352): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000000)=r0, 0x4) recvmsg(r0, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x40000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) 392.817511ms ago: executing program 0 (id=1353): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000cc0)='./file1\x00', 0x800002, &(0x7f0000000040)=ANY=[], 0x1, 0x683, &(0x7f0000000d00)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007ffb) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 307.609451ms ago: executing program 1 (id=1354): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="000104000000a728a2"], 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=1355): setresuid(0xee01, 0xee01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgrp(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) sendmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x24008881) kernel console output (not intermixed with test programs): Vendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.024828][ T4299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 237.043375][ T4299] usb 2-1: SerialNumber: syz [ 237.444861][ T4973] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 237.485323][ T7624] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.492519][ T7624] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.503436][ T7624] device bridge_slave_0 entered promiscuous mode [ 237.521317][ T7624] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.554730][ T7624] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.563230][ T7624] device bridge_slave_1 entered promiscuous mode [ 237.645925][ T4973] usb 1-1: Using ep0 maxpacket: 8 [ 237.658886][ T4973] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 237.694436][ T4973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.694766][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.730249][ T4973] usb 1-1: Product: syz [ 237.735117][ T4973] usb 1-1: Manufacturer: syz [ 237.739855][ T4973] usb 1-1: SerialNumber: syz [ 237.783657][ T4973] usb 1-1: config 0 descriptor?? [ 237.811802][ T4973] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 237.841081][ T4299] cdc_ether 2-1:1.0 eth5: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 237.945784][ T7624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.066935][ T7624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.141598][ T4685] usb 2-1: USB disconnect, device number 11 [ 238.162990][ T4685] cdc_ether 2-1:1.0 eth5: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 238.381901][ T7677] loop3: detected capacity change from 0 to 32768 [ 238.426464][ T7624] team0: Port device team_slave_0 added [ 238.456946][ T7677] XFS (loop3): Mounting V5 Filesystem [ 238.494082][ T7624] team0: Port device team_slave_1 added [ 238.501302][ T4254] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.516822][ T4254] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.529001][ T4254] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.541075][ T4254] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.564071][ T4254] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 238.573770][ T4254] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.631578][ T7677] XFS (loop3): Ending clean mount [ 238.642344][ T7624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.659861][ T7624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.734797][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.756978][ T7624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.894958][ T4254] Bluetooth: hci2: command 0x041b tx timeout [ 239.025432][ T7624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.032475][ T7624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.065863][ T7624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.081230][ T4973] gspca_sonixj: reg_w1 err -71 [ 239.145736][ T4973] sonixj: probe of 1-1:0.0 failed with error -71 [ 239.150390][ T4264] XFS (loop3): Unmounting Filesystem [ 239.175341][ T4973] usb 1-1: USB disconnect, device number 10 [ 239.247931][ T46] device hsr_slave_0 left promiscuous mode [ 239.274471][ T46] device hsr_slave_1 left promiscuous mode [ 239.286089][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.293560][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.348056][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.374774][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.382985][ T46] device bridge_slave_1 left promiscuous mode [ 239.416544][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.436120][ T46] device bridge_slave_0 left promiscuous mode [ 239.442511][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.473922][ T7693] loop1: detected capacity change from 0 to 32768 [ 239.496503][ T7693] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.988 (7693) [ 239.575405][ T7693] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 239.604748][ T7693] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 239.613531][ T7693] BTRFS info (device loop1): using free space tree [ 239.627971][ T46] device veth1_macvtap left promiscuous mode [ 239.654684][ T46] device veth0_macvtap left promiscuous mode [ 239.661055][ T46] device veth1_vlan left promiscuous mode [ 239.704844][ T46] device veth0_vlan left promiscuous mode [ 239.774680][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 239.919561][ T7693] BTRFS info (device loop1): enabling ssd optimizations [ 240.227360][ T4253] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 240.654957][ T4254] Bluetooth: hci3: command 0x0409 tx timeout [ 240.751393][ T7729] loop3: detected capacity change from 0 to 32768 [ 240.759068][ T7729] XFS: ikeep mount option is deprecated. [ 240.823545][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.831093][ T7729] XFS (loop3): Mounting V5 Filesystem [ 240.904017][ T7729] XFS (loop3): Ending clean mount [ 240.929634][ T7729] XFS (loop3): Quotacheck needed: Please wait. [ 240.975010][ T4254] Bluetooth: hci2: command 0x040f tx timeout [ 241.064191][ T7729] XFS (loop3): Quotacheck: Done. [ 241.134219][ T27] audit: type=1804 audit(1738350956.672:49): pid=7729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.991" name="/newroot/200/file1/file1" dev="loop3" ino=1062 res=1 errno=0 [ 241.257087][ T4264] XFS (loop3): Unmounting Filesystem [ 241.495118][ T46] team0 (unregistering): Port device team_slave_1 removed [ 241.559074][ T46] team0 (unregistering): Port device team_slave_0 removed [ 241.594694][ T4979] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 241.633783][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.703724][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.774639][ T4979] usb 2-1: Using ep0 maxpacket: 8 [ 241.800299][ T4979] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 241.809866][ T4979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.818439][ T4979] usb 2-1: Product: syz [ 241.826393][ T4979] usb 2-1: Manufacturer: syz [ 241.831043][ T4979] usb 2-1: SerialNumber: syz [ 241.850238][ T4979] usb 2-1: config 0 descriptor?? [ 241.854786][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.860748][ T4979] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 242.745021][ T4254] Bluetooth: hci3: command 0x041b tx timeout [ 242.783880][ T46] bond0 (unregistering): Released all slaves [ 242.894704][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.962233][ T7716] netlink: 'syz.0.990': attribute type 1 has an invalid length. [ 242.971407][ T7716] netlink: 'syz.0.990': attribute type 4 has an invalid length. [ 243.004903][ T7716] netlink: 14694 bytes leftover after parsing attributes in process `syz.0.990'. [ 243.064884][ T4254] Bluetooth: hci2: command 0x0419 tx timeout [ 243.120197][ T4979] gspca_sonixj: reg_w1 err -71 [ 243.169361][ T7624] device hsr_slave_0 entered promiscuous mode [ 243.224414][ T4685] kernel write not supported for file bpf-prog (pid: 4685 comm: kworker/0:11) [ 243.234420][ T7624] device hsr_slave_1 entered promiscuous mode [ 243.245690][ T4979] sonixj: probe of 2-1:0.0 failed with error -71 [ 243.268253][ T4979] usb 2-1: USB disconnect, device number 12 [ 243.934682][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.022646][ T7685] chnl_net:caif_netlink_parms(): no params data found [ 244.419429][ T7766] loop0: detected capacity change from 0 to 40427 [ 244.443690][ T7766] F2FS-fs (loop0): invalid crc value [ 244.451662][ T7766] F2FS-fs (loop0): Found nat_bits in checkpoint [ 244.565795][ T7766] F2FS-fs (loop0): Start checkpoint disabled! [ 244.595065][ T7766] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 244.728679][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.817187][ T4254] Bluetooth: hci3: command 0x040f tx timeout [ 244.948889][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.974690][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.990907][ T56] kworker/u4:4: attempt to access beyond end of device [ 244.990907][ T56] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 245.170298][ T7793] loop1: detected capacity change from 0 to 32768 [ 245.191237][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.210390][ T7793] XFS (loop1): Mounting V5 Filesystem [ 245.264704][ T7793] XFS (loop1): Ending clean mount [ 245.296972][ T7685] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.309511][ T7685] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.343900][ T7685] device bridge_slave_0 entered promiscuous mode [ 245.370910][ T7685] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.421841][ T7685] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.487889][ T7685] device bridge_slave_1 entered promiscuous mode [ 245.535328][ T4253] XFS (loop1): Unmounting Filesystem [ 245.639887][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.722206][ T7818] loop3: detected capacity change from 0 to 64 [ 245.749034][ T7685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.849093][ T7685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.990858][ T7685] team0: Port device team_slave_0 added [ 246.014710][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 246.042346][ T7685] team0: Port device team_slave_1 added [ 246.103910][ T7624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.155333][ T7685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.162344][ T7685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.286935][ T7685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.338032][ T7624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.372841][ T7685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.389373][ T7685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.454281][ T7830] loop3: detected capacity change from 0 to 512 [ 246.472334][ T7685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.583882][ T7830] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 246.590957][ T7624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 246.614795][ T7830] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.645261][ T27] audit: type=1800 audit(1738350962.202:50): pid=7830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1016" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 246.665635][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.805632][ T7624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 246.859010][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 246.905154][ T4254] Bluetooth: hci3: command 0x0419 tx timeout [ 246.918434][ T7685] device hsr_slave_0 entered promiscuous mode [ 246.988514][ T7685] device hsr_slave_1 entered promiscuous mode [ 247.006336][ T7685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.014038][ T7685] Cannot create hsr debugfs directory [ 247.054683][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.804009][ T7870] loop3: detected capacity change from 0 to 64 [ 247.905594][ T7872] loop1: detected capacity change from 0 to 1024 [ 248.012775][ T4264] hfs: request for non-existent node 131072 in B*Tree [ 248.094722][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.212394][ T7872] hfsplus: xattr searching failed [ 248.228485][ T7624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.424946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.435825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.560013][ T7624] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.744817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.785667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.844486][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.851773][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.878173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.894079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.911997][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.919241][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.936219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.946286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.968456][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.985118][ T4254] Bluetooth: hci3: command 0x0411 tx timeout [ 249.026716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.039865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.050078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.063156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.071658][ T4973] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 249.083615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.134695][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.282783][ T4973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.296206][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.314998][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.324088][ T4973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.342556][ T4973] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 249.353017][ T4973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.366285][ T7624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.379186][ T4973] usb 2-1: config 0 descriptor?? [ 249.386074][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.418890][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.437956][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.793651][ T7685] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.820780][ T4973] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 249.838791][ T4973] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 249.852425][ T7916] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = -1, id = 0 [ 249.883763][ T4973] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0008/input/input23 [ 249.947250][ T4973] cm6533_jd 0003:0D8C:0022.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 250.031666][ T7685] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 250.081311][ T7685] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 250.152994][ T6572] usb 2-1: USB disconnect, device number 13 [ 250.160315][ T46] device hsr_slave_0 left promiscuous mode [ 250.174725][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.196570][ T46] device hsr_slave_1 left promiscuous mode [ 250.225503][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.233013][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.275766][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.319059][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.368574][ T46] device bridge_slave_1 left promiscuous mode [ 250.383662][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.422055][ T46] device bridge_slave_0 left promiscuous mode [ 250.438815][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.463631][ T7929] loop0: detected capacity change from 0 to 2048 [ 250.548988][ T46] device veth1_macvtap left promiscuous mode [ 250.555687][ T46] device veth0_macvtap left promiscuous mode [ 250.561932][ T46] device veth1_vlan left promiscuous mode [ 250.565024][ T7929] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 250.574171][ T46] device veth0_vlan left promiscuous mode [ 250.611110][ T7935] vivid-002: disconnect [ 250.687859][ T7934] vivid-002: reconnect [ 250.708571][ T27] audit: type=1800 audit(1738350966.262:51): pid=7938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1039" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 250.913414][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 251.214742][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.124390][ T46] team0 (unregistering): Port device team_slave_1 removed [ 252.254727][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.279687][ T46] team0 (unregistering): Port device team_slave_0 removed [ 252.391263][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.477478][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.743643][ T7983] loop1: detected capacity change from 0 to 512 [ 252.810076][ T7983] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 252.942462][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 253.115662][ T7987] Process accounting resumed [ 253.295440][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.701656][ T46] bond0 (unregistering): Released all slaves [ 253.875998][ T7685] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 253.895233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.902795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.903611][ T8000] loop1: detected capacity change from 0 to 512 [ 253.918487][ T8000] EXT4-fs: Ignoring removed i_version option [ 253.937861][ T8000] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 253.944784][ T7975] netlink: 'syz.0.1051': attribute type 2 has an invalid length. [ 253.955131][ T7975] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1051'. [ 253.997150][ T8000] EXT4-fs (loop1): failed to open journal device unknown-block(128,0) -6 [ 254.001729][ T7624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.170705][ T7999] device syzkaller1 entered promiscuous mode [ 254.290668][ T8006] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1063'. [ 254.302155][ T8007] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 254.334762][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.441899][ T7685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.486681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.500657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.532948][ T7685] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.928280][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.941159][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.971143][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.978384][ T4304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.007382][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.030427][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.050238][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.085412][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.092612][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.158055][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 255.196535][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 255.220392][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 255.247537][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 255.261852][ T8020] loop0: detected capacity change from 0 to 1024 [ 255.285615][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.296054][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.354325][ T7685] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.374751][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.376288][ T8020] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 255.421977][ T8020] EXT4-fs (loop0): shut down requested (0) [ 255.449045][ T7685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.510448][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.552882][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 255.578399][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.599268][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 255.614187][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.646388][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 255.663597][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 255.715249][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.721714][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.771674][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1073'. [ 255.801891][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 255.818530][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.864758][ T8033] IPVS: Error joining to the multicast group [ 255.888233][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 255.905408][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.924440][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.942943][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.983509][ T7624] device veth0_vlan entered promiscuous mode [ 256.049470][ T7624] device veth1_vlan entered promiscuous mode [ 256.151413][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 256.170556][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 256.209755][ T7624] device veth0_macvtap entered promiscuous mode [ 256.230019][ T7624] device veth1_macvtap entered promiscuous mode [ 256.346682][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.374580][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.384642][ T4254] Bluetooth: hci0: Malformed Event: 0x13 [ 256.414707][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.429203][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.461496][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.488253][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.510148][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.524240][ T7624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.547179][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 256.563088][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 256.580808][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 256.592166][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 256.613231][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.624808][ T7611] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 256.635269][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.645674][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.656740][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.667277][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.678603][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.706551][ T7624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.725840][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 256.733386][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 256.751550][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 256.766680][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 256.784411][ T7685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.798361][ T7624] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.815180][ T7611] usb 1-1: Using ep0 maxpacket: 16 [ 256.820659][ T7624] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.835592][ T7611] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 256.852682][ T7624] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.862021][ T7611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.879851][ T7611] usb 1-1: Product: syz [ 256.885337][ T7624] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.897709][ T7611] usb 1-1: Manufacturer: syz [ 256.908101][ T7611] usb 1-1: SerialNumber: syz [ 256.932843][ T7611] usb 1-1: config 0 descriptor?? [ 256.970625][ T7611] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 256.990535][ T7611] usb 1-1: Detected FT232H [ 257.005245][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 257.021616][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.152126][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 257.166328][ T8045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.201337][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.203291][ T8045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.224101][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.241632][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.265197][ T7611] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 257.276352][ T7685] device veth0_vlan entered promiscuous mode [ 257.282671][ T7611] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 257.321489][ T7611] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 257.346475][ T7685] device veth1_vlan entered promiscuous mode [ 257.354173][ T7611] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 257.381811][ T7611] usb 1-1: USB disconnect, device number 11 [ 257.402013][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.448767][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.454803][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.471046][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 257.471504][ T7611] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 257.498686][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.510394][ T7611] ftdi_sio 1-1:0.0: device disconnected [ 257.521523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 257.549441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.561881][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.563665][ T7685] device veth0_macvtap entered promiscuous mode [ 257.595637][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 257.604263][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 257.661558][ T7685] device veth1_macvtap entered promiscuous mode [ 257.755517][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.796744][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.818898][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.839808][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.868619][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.890411][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.918793][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.962171][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.039564][ T7685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.055776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 258.069246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.097261][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.109842][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.169626][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.190303][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.218772][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.241242][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.268686][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.291225][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.293291][ T8061] loop0: detected capacity change from 0 to 512 [ 258.326246][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.356619][ T7685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.370053][ T8061] EXT4-fs (loop0): Test dummy encryption mode enabled [ 258.446746][ T8061] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 234 vs 220 free clusters [ 258.494954][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.503722][ T8057] loop1: detected capacity change from 0 to 40427 [ 258.510787][ T8061] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1083: inode #1: comm syz.0.1083: iget: illegal inode # [ 258.539571][ T8057] F2FS-fs (loop1): invalid crc value [ 258.548692][ T8057] F2FS-fs (loop1): Found nat_bits in checkpoint [ 258.555231][ T8061] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1083: error while reading EA inode 1 err=-117 [ 258.576172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.595513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.636481][ T8061] EXT4-fs (loop0): 1 orphan inode deleted [ 258.642296][ T8061] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 258.671079][ T7685] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.724747][ T7685] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.733501][ T7685] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.785671][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 258.800223][ T7685] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.811876][ T8057] F2FS-fs (loop1): Start checkpoint disabled! [ 258.814074][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 258.858752][ T8057] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 259.011636][ T5961] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.202020][ T5961] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.282082][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.302790][ T8074] loop3: detected capacity change from 0 to 512 [ 259.319828][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.359760][ T8074] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 259.403161][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 259.414416][ T8074] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.1087: bad orphan inode 131083 [ 259.445124][ T8074] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 259.451179][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.476595][ T8074] xt_hashlimit: size too large, truncated to 1048576 [ 259.502961][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.534836][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 259.601025][ T5961] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.638979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 259.744000][ T5961] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.067652][ T8085] gfs2: gfs2 mount does not exist [ 260.095685][ T4270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.109843][ T4270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.131231][ T4270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.143817][ T4270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.151896][ T4270] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 260.159343][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.528865][ T8086] chnl_net:caif_netlink_parms(): no params data found [ 260.574729][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 261.614265][ T46] kworker/u4:3: attempt to access beyond end of device [ 261.614265][ T46] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 261.614707][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 261.895004][ T8086] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.902142][ T8086] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.946112][ T8086] device bridge_slave_0 entered promiscuous mode [ 261.970496][ T8086] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.988010][ T8086] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.033501][ T8086] device bridge_slave_1 entered promiscuous mode [ 262.189467][ T8086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.253935][ T8086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.264933][ T4270] Bluetooth: hci2: command 0x0409 tx timeout [ 262.629963][ T8086] team0: Port device team_slave_0 added [ 262.654784][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.741004][ T8086] team0: Port device team_slave_1 added [ 262.926166][ T8086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.966341][ T8086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.064332][ T8086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.184386][ T8086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.204628][ T8086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.224704][ T4890] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 263.286930][ T8086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.324066][ T4254] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.339310][ T4254] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.347220][ T8116] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1098'. [ 263.356836][ T4256] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.365318][ T4254] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.373247][ T4254] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 263.383979][ T8117] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1098'. [ 263.388803][ T4254] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 263.426585][ T4890] usb 2-1: config 9 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 263.479429][ T4890] usb 2-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=af.04 [ 263.517466][ T4890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.592308][ T4890] usb 2-1: Product: syz [ 263.611426][ T4890] usb 2-1: Manufacturer: syz [ 263.634105][ T4890] usb 2-1: SerialNumber: syz [ 263.694690][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 263.717454][ T8129] loop0: detected capacity change from 0 to 16 [ 263.792641][ T8129] erofs: (device loop0): mounted with root inode @ nid 36. [ 263.840611][ T8086] device hsr_slave_0 entered promiscuous mode [ 263.848579][ T27] audit: type=1800 audit(1738350979.402:52): pid=8129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1099" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 263.888062][ T4890] pegasus: probe of 2-1:9.0 failed with error -71 [ 263.919215][ T8086] device hsr_slave_1 entered promiscuous mode [ 263.920998][ T4890] usb 2-1: USB disconnect, device number 14 [ 263.969122][ T8086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.982462][ T8086] Cannot create hsr debugfs directory [ 264.263901][ T8132] loop0: detected capacity change from 0 to 4096 [ 264.312824][ T8132] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 264.335011][ T4254] Bluetooth: hci2: command 0x041b tx timeout [ 264.433229][ T4258] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 264.461239][ T4258] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 264.489260][ T4258] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 264.734739][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 265.291322][ T8120] chnl_net:caif_netlink_parms(): no params data found [ 265.398288][ T5961] device hsr_slave_0 left promiscuous mode [ 265.414382][ T5961] device hsr_slave_1 left promiscuous mode [ 265.434115][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.454864][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.454965][ T4254] Bluetooth: hci3: command 0x0409 tx timeout [ 265.503720][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.515208][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 265.535309][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.573577][ T5961] device bridge_slave_1 left promiscuous mode [ 265.615193][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.652701][ T5961] device bridge_slave_0 left promiscuous mode [ 265.675970][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.774821][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 265.869451][ T5961] device veth1_macvtap left promiscuous mode [ 265.885474][ T5961] device veth0_macvtap left promiscuous mode [ 265.902000][ T5961] device veth1_vlan left promiscuous mode [ 265.949896][ T5961] device veth0_vlan left promiscuous mode [ 266.279697][ T8175] loop0: detected capacity change from 0 to 256 [ 266.292202][ T27] audit: type=1326 audit(1738350981.842:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8172 comm="syz.1.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12b98cda9 code=0x7fc00000 [ 266.371305][ T27] audit: type=1326 audit(1738350981.842:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8172 comm="syz.1.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff12b98cda9 code=0x7fc00000 [ 266.415020][ T4254] Bluetooth: hci2: command 0x040f tx timeout [ 266.539527][ T27] audit: type=1326 audit(1738350981.842:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8172 comm="syz.1.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12b98cda9 code=0x7fc00000 [ 266.607856][ T8178] autofs4:pid:8178:autofs_fill_super: pipe file descriptor does not contain proper ops [ 266.740341][ T8163] loop3: detected capacity change from 0 to 32768 [ 266.814667][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.931898][ T8163] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 266.964774][ T8163] XFS (loop3): Mounting V5 Filesystem [ 266.980462][ T8187] loop1: detected capacity change from 0 to 4096 [ 267.028799][ T8187] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 267.046857][ T8163] XFS (loop3): Ending clean mount [ 267.116199][ T8163] XFS (loop3): Quotacheck needed: Please wait. [ 267.210499][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 267.320799][ T8163] XFS (loop3): Quotacheck: Done. [ 267.534693][ T4254] Bluetooth: hci3: command 0x041b tx timeout [ 267.819848][ T4264] XFS (loop3): Unmounting Filesystem [ 267.828610][ T8206] loop1: detected capacity change from 0 to 1024 [ 267.865134][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.965223][ T4973] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 267.974086][ T8206] hfsplus: xattr searching failed [ 268.014447][ T27] audit: type=1800 audit(1738350983.562:56): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1122" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 268.062225][ T8206] hfsplus: xattr searching failed [ 268.126791][ T8207] hfsplus: xattr searching failed [ 268.214862][ T4973] usb 1-1: Using ep0 maxpacket: 16 [ 268.222485][ T4973] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 268.234441][ T4973] usb 1-1: config 0 has no interface number 0 [ 268.254427][ T4973] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 268.309016][ T4973] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 268.335000][ T4973] usb 1-1: config 0 interface 41 has no altsetting 0 [ 268.360921][ T4973] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 268.373184][ T4973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.392113][ T4973] usb 1-1: Product: syz [ 268.396725][ T4973] usb 1-1: Manufacturer: syz [ 268.401365][ T4973] usb 1-1: SerialNumber: syz [ 268.433155][ T4973] usb 1-1: config 0 descriptor?? [ 268.451561][ T8204] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.479209][ T8204] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.495572][ T4254] Bluetooth: hci2: command 0x0419 tx timeout [ 268.705413][ T8211] loop1: detected capacity change from 0 to 8192 [ 268.741412][ T8204] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.750630][ T8204] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.750752][ T8211] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 268.772644][ T8211] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 268.777716][ T5961] team0 (unregistering): Port device team_slave_1 removed [ 268.818063][ T8211] REISERFS (device loop1): using ordered data mode [ 268.846911][ T8211] reiserfs: using flush barriers [ 268.868573][ T8211] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 268.890613][ T8211] REISERFS (device loop1): checking transaction log (loop1) [ 268.898139][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 268.906512][ T5961] team0 (unregistering): Port device team_slave_0 removed [ 268.960923][ T8211] REISERFS (device loop1): Using r5 hash to sort names [ 269.061253][ T5961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.070403][ T8211] reiserfs: enabling write barrier flush mode [ 269.130341][ T8211] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 269.192601][ T5961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.397505][ T4973] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 269.620368][ T4254] Bluetooth: hci3: command 0x040f tx timeout [ 269.628332][ T4973] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 269.655088][ T4973] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 269.667740][ T4973] CoreChips: probe of 1-1:0.41 failed with error -71 [ 269.686409][ T4973] usb 1-1: USB disconnect, device number 12 [ 269.934710][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 269.978037][ T4335] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 270.206178][ T4335] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 270.244811][ T4335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.256656][ T4335] usb 4-1: config 0 descriptor?? [ 270.269064][ T4335] gspca_main: spca508-2.14.0 probing 8086:0110 [ 270.445184][ T5961] bond0 (unregistering): Released all slaves [ 270.493108][ T4335] gspca_spca508: reg_read err -32 [ 270.499361][ T4335] gspca_spca508: reg_read err -32 [ 270.505894][ T4335] gspca_spca508: reg_read err -32 [ 270.512093][ T4335] gspca_spca508: reg_read err -32 [ 270.719026][ T4335] gspca_spca508: reg write: error -71 [ 270.728866][ T4335] spca508: probe of 4-1:0.0 failed with error -71 [ 270.761798][ T4335] usb 4-1: USB disconnect, device number 7 [ 270.892603][ T8233] loop0: detected capacity change from 0 to 128 [ 270.939211][ T8233] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 270.964999][ T8233] ext4 filesystem being mounted at /252/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 270.974720][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.064183][ T8120] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.087656][ T8120] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.099969][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 271.101855][ T8120] device bridge_slave_0 entered promiscuous mode [ 271.132258][ T8120] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.143229][ T8120] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.194481][ T8120] device bridge_slave_1 entered promiscuous mode [ 271.436618][ T8120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.464982][ T8120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.500898][ T8242] netlink: 'syz.3.1133': attribute type 4 has an invalid length. [ 271.581287][ T4979] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 271.601337][ T8244] netlink: 'syz.3.1133': attribute type 4 has an invalid length. [ 271.696088][ T4254] Bluetooth: hci3: command 0x0419 tx timeout [ 271.716679][ T8120] team0: Port device team_slave_0 added [ 271.780990][ T4979] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 271.796013][ T4979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.813020][ T4979] usb 1-1: Product: syz [ 271.823722][ T8120] team0: Port device team_slave_1 added [ 271.827992][ T4979] usb 1-1: Manufacturer: syz [ 271.855377][ T4979] usb 1-1: SerialNumber: syz [ 271.869824][ T4979] usb 1-1: config 0 descriptor?? [ 271.949403][ T8086] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 271.989338][ T8120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.011360][ T8120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.037688][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.094730][ T8120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.107173][ T8086] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 272.150490][ T4973] usb 1-1: USB disconnect, device number 13 [ 272.156823][ T8086] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 272.335759][ T8120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.351567][ T8120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.419616][ T8120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.462114][ T8086] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 272.587575][ T5961] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.709134][ T8120] device hsr_slave_0 entered promiscuous mode [ 272.738220][ T8120] device hsr_slave_1 entered promiscuous mode [ 272.802905][ T5961] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.977934][ T5961] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.054718][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 273.193120][ T5961] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.429588][ T8086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.452953][ T8277] netlink: 'syz.3.1139': attribute type 39 has an invalid length. [ 273.523855][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.546135][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.611203][ T8086] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.703394][ T8285] loop1: detected capacity change from 0 to 512 [ 273.704780][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.726691][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.742286][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.749532][ T4317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.775131][ T8285] EXT4-fs (loop1): Test dummy encryption mode enabled [ 273.803603][ T8285] EXT4-fs error (device loop1): __ext4_iget:5055: inode #11: block 1: comm syz.1.1142: invalid block [ 273.909860][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.925554][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.951905][ T8285] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1142: couldn't read orphan inode 11 (err -117) [ 273.992289][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.011069][ T8285] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 274.025247][ T8279] loop0: detected capacity change from 0 to 32768 [ 274.031215][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.038891][ T4317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.065138][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.094670][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.161794][ T8279] XFS (loop0): Mounting V5 Filesystem [ 274.177903][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.228833][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.273174][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.294453][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 274.320432][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.335646][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.416179][ T8279] XFS (loop0): Ending clean mount [ 274.597672][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.617141][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.644379][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.696028][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.711700][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.768549][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.856087][ T4258] XFS (loop0): Unmounting Filesystem [ 275.108567][ T8320] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1150'. [ 275.136462][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 275.816395][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.834296][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.958305][ T8086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.071807][ T8120] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 276.093300][ T8351] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsŧ‘Ì [ 276.174353][ T8120] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 276.174803][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.263345][ T27] audit: type=1326 audit(1738350991.812:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8354 comm="syz.1.1158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff12b98cda9 code=0x0 [ 276.383096][ T8120] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 276.496166][ T8360] loop3: detected capacity change from 0 to 764 [ 276.507754][ T8120] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 277.214661][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 277.254770][ T5961] device hsr_slave_0 left promiscuous mode [ 277.269075][ T5961] device hsr_slave_1 left promiscuous mode [ 277.281685][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.294117][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.322324][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.331533][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.347534][ T5961] device bridge_slave_1 left promiscuous mode [ 277.353833][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.381906][ T5961] device bridge_slave_0 left promiscuous mode [ 277.388289][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.515637][ T5961] device veth1_macvtap left promiscuous mode [ 277.521841][ T5961] device veth0_macvtap left promiscuous mode [ 277.530448][ T8382] loop3: detected capacity change from 0 to 64 [ 277.555038][ T5961] device veth1_vlan left promiscuous mode [ 277.583157][ T5961] device veth0_vlan left promiscuous mode [ 277.600350][ T8382] hfs: keylen 94 too large [ 277.606402][ T8382] hfs: request for non-existent node 1818584064 in B*Tree [ 277.614254][ T8382] hfs: request for non-existent node 1818584064 in B*Tree [ 277.737881][ T8387] loop3: detected capacity change from 0 to 1024 [ 277.876409][ T11] hfsplus: b-tree write err: -5, ino 4 [ 277.976059][ T8392] loop3: detected capacity change from 0 to 512 [ 278.089314][ T8392] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 278.098589][ T8392] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 278.143281][ T27] audit: type=1800 audit(1738350993.692:58): pid=8392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1171" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 278.175093][ T27] audit: type=1800 audit(1738350993.692:59): pid=8392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1171" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 278.237340][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 278.260547][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.694770][ T4890] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 278.851070][ T5961] team0 (unregistering): Port device team_slave_1 removed [ 278.887088][ T4890] usb 4-1: Using ep0 maxpacket: 16 [ 278.894388][ T4890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.922059][ T4890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.932252][ T4890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 278.948797][ T5961] team0 (unregistering): Port device team_slave_0 removed [ 278.967073][ T4890] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 279.002353][ T4890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.021823][ T4890] usb 4-1: config 0 descriptor?? [ 279.040429][ T5961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.153438][ T5961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.305635][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 279.485196][ T4890] HID 045e:07da: Invalid code 65791 type 1 [ 279.496201][ T4890] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0009/input/input24 [ 279.518828][ T4890] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 279.720185][ T4685] usb 4-1: USB disconnect, device number 8 [ 280.094703][ T4890] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 280.239011][ T5961] bond0 (unregistering): Released all slaves [ 280.299056][ T4890] usb 1-1: Using ep0 maxpacket: 16 [ 280.307844][ T4890] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 280.324185][ T4890] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 280.334314][ T4890] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 280.342718][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.355254][ T4890] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 280.363454][ T4890] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 280.379463][ T4890] usb 1-1: config 0 has no interface number 0 [ 280.387865][ T4890] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 280.403905][ T4890] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 280.423162][ T4890] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 280.435826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.444423][ T4890] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 280.451823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.465299][ T4890] usb 1-1: config 0 interface 125 has no altsetting 0 [ 280.472553][ T4890] usb 1-1: config 0 interface 125 has no altsetting 2 [ 280.498075][ T4890] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 280.511045][ T4890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.512227][ T8086] device veth0_vlan entered promiscuous mode [ 280.528415][ T4890] usb 1-1: Product: syz [ 280.551486][ T8120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.554128][ T4890] usb 1-1: Manufacturer: syz [ 280.560256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.568862][ T4890] usb 1-1: SerialNumber: syz [ 280.592165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.602145][ T4890] usb 1-1: config 0 descriptor?? [ 280.620483][ T8086] device veth1_vlan entered promiscuous mode [ 280.630617][ T4890] usb 1-1: selecting invalid altsetting 2 [ 280.666497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.691196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.712166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.724291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.743769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.769533][ T8120] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.777529][ T8415] loop1: detected capacity change from 0 to 8192 [ 280.801244][ T4607] Bluetooth: (null): Invalid header checksum [ 280.826578][ T4607] Bluetooth: (null): Invalid header checksum [ 280.835118][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.859985][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 280.870361][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.918087][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.925289][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.933839][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.943298][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.952744][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.959925][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.969690][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.985618][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.009555][ T8086] device veth0_macvtap entered promiscuous mode [ 281.018527][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.027532][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 281.040199][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 281.049573][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.060584][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 281.072348][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.093006][ T8086] device veth1_macvtap entered promiscuous mode [ 281.128173][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 281.143753][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 281.186184][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.198255][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.207346][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.217749][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.238193][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 281.250855][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.269849][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 281.290867][ T8086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.324953][ T8086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.364582][ T8086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.375314][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.404676][ T8086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.414907][ T8086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.430535][ T8086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.442987][ T8086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.453851][ T4890] parport0: fix this legacy no-device port driver! [ 281.485107][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.494818][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.506103][ T8086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.517712][ T8086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.528145][ T8086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.560128][ T8086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.580414][ T8086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.591450][ T8086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.604264][ T8086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.617976][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.635565][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.658288][ T8086] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.668511][ T8086] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.678604][ T8086] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.688456][ T8086] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.718453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.731204][ T4685] usb 1-1: USB disconnect, device number 14 [ 281.740300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.778672][ T8120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.863598][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.865291][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.877816][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.888645][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.926575][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.949233][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.949310][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.950045][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.970196][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.977315][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.991132][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 282.001769][ T8120] device veth0_vlan entered promiscuous mode [ 282.016196][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 282.037200][ T8120] device veth1_vlan entered promiscuous mode [ 282.081382][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 282.090811][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 282.100808][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 282.110603][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 282.134503][ T8120] device veth0_macvtap entered promiscuous mode [ 282.153021][ T8120] device veth1_macvtap entered promiscuous mode [ 282.221513][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.232735][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.243053][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.260227][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.284636][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.296092][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.321747][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.346362][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.376531][ T8120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.390215][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 282.404244][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 282.414675][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.414885][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 282.438335][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 282.452767][ T8428] futex_wake_op: syz.1.1184 tries to shift op by -1; fix this program [ 282.485640][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.498437][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.514068][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.526330][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.537117][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.557911][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.594631][ T8120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.614748][ T8120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.647065][ T8120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.656002][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 282.682283][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 282.713960][ T8120] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.733067][ T8120] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.763531][ T8120] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.779967][ T8120] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.880552][ T4304] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.971989][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.992271][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.014365][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.017250][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 283.023039][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.043834][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 283.105354][ T4304] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.311676][ T4304] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.378595][ T8438] loop1: detected capacity change from 0 to 1024 [ 283.435355][ T8438] EXT4-fs: Ignoring removed orlov option [ 283.454666][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 283.555100][ T8438] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 283.580813][ T4304] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.822090][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 284.351181][ T4270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 284.362161][ T4270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 284.371862][ T4270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 284.381962][ T4270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 284.407923][ T4270] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 284.418197][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 284.494678][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 285.007824][ T4973] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 285.194843][ T4973] usb 1-1: Using ep0 maxpacket: 16 [ 285.202930][ T4973] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 285.214145][ T4973] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 285.223939][ T4973] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.237687][ T4973] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.247013][ T4973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.259711][ T8452] chnl_net:caif_netlink_parms(): no params data found [ 285.267818][ T4973] usb 1-1: Product: syz [ 285.272043][ T4973] usb 1-1: Manufacturer: syz [ 285.277122][ T4973] usb 1-1: SerialNumber: syz [ 285.485555][ T8452] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.494074][ T8452] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.531906][ T8452] device bridge_slave_0 entered promiscuous mode [ 285.538512][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 285.642198][ T8452] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.651637][ T8481] loop1: detected capacity change from 0 to 2048 [ 285.660403][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.694392][ T8452] device bridge_slave_1 entered promiscuous mode [ 285.735255][ T4973] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 286.144150][ T8485] loop3: detected capacity change from 0 to 32768 [ 286.187444][ T8485] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1198 (8485) [ 286.221793][ T8481] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 286.246191][ T8481] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.495010][ T4254] Bluetooth: hci2: command 0x0409 tx timeout [ 286.574682][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 286.731617][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 286.812289][ T4973] usb 1-1: 2:1: cannot get freq at ep 0x82 [ 286.977702][ T4973] usb 1-1: USB disconnect, device number 15 [ 287.135836][ T8452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.192439][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 287.205943][ T4256] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 287.222511][ T8485] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 287.234671][ T8485] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 287.244177][ T8485] BTRFS info (device loop3): use zlib compression, level 3 [ 287.245637][ T8452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.251505][ T8485] BTRFS info (device loop3): using free space tree [ 287.261361][ T4270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 287.300340][ T4270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 287.311431][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 287.319319][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 287.393103][ T8503] loop1: detected capacity change from 0 to 256 [ 287.489357][ T8503] FAT-fs (loop1): Directory bread(block 64) failed [ 287.496695][ T8503] FAT-fs (loop1): Directory bread(block 65) failed [ 287.521852][ T8503] FAT-fs (loop1): Directory bread(block 66) failed [ 287.553956][ T8452] team0: Port device team_slave_0 added [ 287.562009][ T8503] FAT-fs (loop1): Directory bread(block 67) failed [ 287.579680][ T8503] FAT-fs (loop1): Directory bread(block 68) failed [ 287.614672][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 287.615654][ T8503] FAT-fs (loop1): Directory bread(block 69) failed [ 287.645035][ T8503] FAT-fs (loop1): Directory bread(block 70) failed [ 287.651651][ T8503] FAT-fs (loop1): Directory bread(block 71) failed [ 287.677549][ T8485] BTRFS info (device loop3): enabling ssd optimizations [ 287.735809][ T8503] FAT-fs (loop1): Directory bread(block 72) failed [ 287.742416][ T8503] FAT-fs (loop1): Directory bread(block 73) failed [ 287.890733][ T8485] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 288.031277][ T4264] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 288.031420][ T8452] team0: Port device team_slave_1 added [ 288.574844][ T4254] Bluetooth: hci2: command 0x041b tx timeout [ 288.628239][ T8536] loop0: detected capacity change from 0 to 512 [ 288.654675][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.767751][ T4304] device hsr_slave_0 left promiscuous mode [ 288.791375][ T4304] device hsr_slave_1 left promiscuous mode [ 288.819908][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.828972][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.848579][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.879543][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.894136][ T4304] device bridge_slave_1 left promiscuous mode [ 288.905169][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.928149][ T4304] device bridge_slave_0 left promiscuous mode [ 288.934430][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.082987][ T4304] device veth1_macvtap left promiscuous mode [ 289.104708][ T4304] device veth0_macvtap left promiscuous mode [ 289.110956][ T4304] device veth1_vlan left promiscuous mode [ 289.122833][ T4304] device veth0_vlan left promiscuous mode [ 289.369045][ T8547] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 289.386511][ T4254] Bluetooth: hci3: command 0x0409 tx timeout [ 289.443528][ T8549] loop0: detected capacity change from 0 to 512 [ 289.473687][ T8549] EXT4-fs: inline encryption not supported [ 289.709289][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 289.728470][ T8549] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.1211: corrupted inode contents [ 289.742113][ T8549] EXT4-fs (loop0): Remounting filesystem read-only [ 289.749371][ T8549] EXT4-fs error (device loop0): ext4_dirty_inode:6089: inode #16: comm syz.0.1211: mark_inode_dirty error [ 289.768751][ T8549] EXT4-fs (loop0): Remounting filesystem read-only [ 289.775585][ T8549] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.1211: corrupted inode contents [ 289.791127][ T8549] EXT4-fs (loop0): Remounting filesystem read-only [ 289.798303][ T8549] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.1211: mark_inode_dirty error [ 289.817203][ T8549] EXT4-fs (loop0): Remounting filesystem read-only [ 289.825113][ T8549] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.1211: corrupted inode contents [ 289.844722][ T4299] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 289.884680][ T8549] EXT4-fs (loop0): Remounting filesystem read-only [ 289.891278][ T8549] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 289.920448][ T8549] EXT4-fs (loop0): Remounting filesystem read-only [ 289.929743][ T8549] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.1211: corrupted inode contents [ 289.958154][ T8549] EXT4-fs (loop0): Remounting filesystem read-only [ 289.974153][ T8549] EXT4-fs error (device loop0): ext4_truncate:4311: inode #16: comm syz.0.1211: mark_inode_dirty error [ 289.986611][ T8549] EXT4-fs (loop0): Remounting filesystem read-only [ 289.993184][ T8549] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 290.010313][ T8549] EXT4-fs (loop0): Remounting filesystem read-only [ 290.035530][ T8549] EXT4-fs (loop0): 1 truncate cleaned up [ 290.054800][ T8549] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 290.064903][ T8549] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.078863][ T5961] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 290.095677][ T4299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.114675][ T4299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.131469][ T5961] EXT4-fs error (device loop0): ext4_release_dquot:6817: comm kworker/u4:8: Failed to release dquot type 1 [ 290.134728][ T4299] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 290.166064][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.171529][ T5961] EXT4-fs (loop0): Remounting filesystem read-only [ 290.188347][ T4299] usb 4-1: config 0 descriptor?? [ 290.263447][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 290.634293][ T4299] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 290.645891][ T8570] loop0: detected capacity change from 0 to 1024 [ 290.655707][ T8570] EXT4-fs: Ignoring removed bh option [ 290.668906][ T8570] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 290.673960][ T4254] Bluetooth: hci2: command 0x040f tx timeout [ 290.738242][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.757817][ T8570] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 290.907137][ T4304] team0 (unregistering): Port device team_slave_1 removed [ 290.946317][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 291.033367][ T4304] team0 (unregistering): Port device team_slave_0 removed [ 291.109630][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.179380][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.450501][ T4299] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 291.463134][ T4254] Bluetooth: hci3: command 0x041b tx timeout [ 291.473154][ T4299] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 291.481595][ T4299] pyra: probe of 0003:1E7D:2CF6.000A failed with error -71 [ 291.493270][ T4299] usb 4-1: USB disconnect, device number 9 [ 291.785074][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.013842][ T8577] loop0: detected capacity change from 0 to 64 [ 292.070481][ T8577] hfs: request for non-existent node 1280 in B*Tree [ 292.096387][ T8577] hfs: request for non-existent node 1280 in B*Tree [ 292.108088][ T8577] hfs: request for non-existent node 1280 in B*Tree [ 292.117326][ T8577] hfs: request for non-existent node 1280 in B*Tree [ 292.217232][ T4304] bond0 (unregistering): Released all slaves [ 292.229136][ T8578] hfs: request for non-existent node 1280 in B*Tree [ 292.257378][ T8578] hfs: request for non-existent node 1280 in B*Tree [ 292.411305][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.423628][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.469623][ T8452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.482484][ T8562] bond0: (slave team0): Error: Slave device does not support XDP [ 292.503557][ T8563] netlink: 'syz.1.1215': attribute type 10 has an invalid length. [ 292.512996][ T8585] binder: 8584:8585 ioctl c0306201 20000140 returned -14 [ 292.541299][ T8563] device syz_tun entered promiscuous mode [ 292.560255][ T8563] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 292.594220][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.607582][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.694705][ T8452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.734692][ T4254] Bluetooth: hci2: command 0x0419 tx timeout [ 292.823465][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.851302][ T8452] device hsr_slave_0 entered promiscuous mode [ 292.861107][ T8452] device hsr_slave_1 entered promiscuous mode [ 292.938511][ T8452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.973011][ T8452] Cannot create hsr debugfs directory [ 293.080203][ T8597] loop3: detected capacity change from 0 to 2048 [ 293.104182][ T8597] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.521058][ T8493] chnl_net:caif_netlink_parms(): no params data found [ 293.537459][ T4254] Bluetooth: hci3: command 0x040f tx timeout [ 293.818217][ T4304] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.854830][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.120980][ T4304] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.325509][ T8493] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.332667][ T8493] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.347310][ T8493] device bridge_slave_0 entered promiscuous mode [ 294.416428][ T4304] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.429440][ T8493] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.437553][ T8493] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.446593][ T8493] device bridge_slave_1 entered promiscuous mode [ 294.646674][ T4304] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.780575][ T8493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.819964][ T8493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.894825][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.924445][ T8493] team0: Port device team_slave_0 added [ 294.933276][ T8493] team0: Port device team_slave_1 added [ 295.054185][ T8493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.074617][ T8493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.134673][ T8493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.135928][ T8647] loop1: detected capacity change from 0 to 2048 [ 295.181335][ T8493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.188920][ T8493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.227511][ T8493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.287418][ T8647] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 295.305204][ T4979] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 295.332120][ T8452] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 295.484010][ T8493] device hsr_slave_0 entered promiscuous mode [ 295.504812][ T4979] usb 4-1: Using ep0 maxpacket: 32 [ 295.510454][ T8493] device hsr_slave_1 entered promiscuous mode [ 295.512295][ T4979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.529813][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 295.539642][ T8493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.552232][ T4979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.570241][ T8493] Cannot create hsr debugfs directory [ 295.584481][ T8452] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 295.614783][ T4254] Bluetooth: hci3: command 0x0419 tx timeout [ 295.639105][ T4979] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 295.665439][ T4979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.698545][ T4979] usb 4-1: config 0 descriptor?? [ 295.812770][ T8452] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 295.934758][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 295.956103][ T8452] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 296.183036][ T4979] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 296.483820][ T4976] usb 4-1: USB disconnect, device number 10 [ 296.964141][ T8452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.974791][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.035258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 297.058738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 297.084959][ T8452] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.191334][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 297.213531][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 297.237396][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.244639][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.461910][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 297.492252][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 297.518139][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 297.527607][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.534781][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.583119][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 297.613926][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 298.000445][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 298.014785][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 298.021367][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 298.076698][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 298.111912][ T8452] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 298.125486][ T8452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.166277][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 298.206488][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 298.227166][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 298.246284][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 298.260138][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 298.279406][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 298.322515][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 298.359242][ T4304] device hsr_slave_0 left promiscuous mode [ 298.420856][ T4304] device hsr_slave_1 left promiscuous mode [ 298.435191][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.463160][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.475378][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.509717][ T8736] loop0: detected capacity change from 0 to 256 [ 298.517883][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.572835][ T4304] device bridge_slave_1 left promiscuous mode [ 298.612579][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.652629][ T4304] device bridge_slave_0 left promiscuous mode [ 298.661581][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.827822][ T4304] device veth1_macvtap left promiscuous mode [ 298.833939][ T4304] device veth0_macvtap left promiscuous mode [ 298.850782][ T4304] device veth1_vlan left promiscuous mode [ 298.856808][ T4304] device veth0_vlan left promiscuous mode [ 298.982672][ T8727] loop3: detected capacity change from 0 to 32768 [ 299.043010][ T8727] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1257 (8727) [ 299.055521][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.135449][ T8727] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 299.194871][ T8727] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 299.204363][ T8727] BTRFS info (device loop3): using free space tree [ 299.414102][ T8762] loop0: detected capacity change from 0 to 128 [ 299.472466][ T8762] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 299.663123][ T8727] BTRFS info (device loop3): enabling ssd optimizations [ 300.094785][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 300.144843][ T4755] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 300.182458][ T4264] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 300.391820][ T4755] usb 2-1: config 0 has no interfaces? [ 300.399384][ T4755] usb 2-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=80.90 [ 300.424949][ T4755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.481433][ T4755] usb 2-1: config 0 descriptor?? [ 300.637314][ T8797] use of bytesused == 0 is deprecated and will be removed in the future, [ 300.675794][ T8797] use the actual size instead. [ 300.870211][ T4758] usb 2-1: USB disconnect, device number 15 [ 301.134906][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.339583][ T8809] loop3: detected capacity change from 0 to 2048 [ 301.383282][ T8809] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 301.423082][ T8809] UDF-fs: Scanning with blocksize 512 failed [ 301.443290][ T8809] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 301.481840][ T8809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.966664][ T4304] team0 (unregistering): Port device team_slave_1 removed [ 302.077763][ T8823] block nbd0: shutting down sockets [ 302.132777][ T4304] team0 (unregistering): Port device team_slave_0 removed [ 302.174765][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 302.254942][ T4254] Bluetooth: hci1: command 0x0409 tx timeout [ 302.322803][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.424462][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.767495][ T8835] loop1: detected capacity change from 0 to 512 [ 302.792372][ T8835] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 302.834778][ T8835] EXT4-fs (loop1): 1 orphan inode deleted [ 302.839437][ T8827] loop3: detected capacity change from 0 to 32768 [ 302.843967][ T8835] EXT4-fs (loop1): 1 truncate cleaned up [ 302.852767][ T8835] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 302.886970][ T8835] EXT4-fs (loop1): shut down requested (1) [ 303.076791][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 303.099765][ T8827] XFS (loop3): Mounting V5 Filesystem [ 303.214740][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.240773][ T8827] XFS (loop3): Ending clean mount [ 303.268082][ T8827] XFS (loop3): Quotacheck needed: Please wait. [ 303.375751][ T8827] XFS (loop3): Quotacheck: Done. [ 303.579153][ T4264] XFS (loop3): Unmounting Filesystem [ 303.915594][ T8865] loop1: detected capacity change from 0 to 512 [ 304.004687][ T4332] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 304.254766][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.270713][ T8871] loop1: detected capacity change from 0 to 1024 [ 304.289927][ T8871] EXT4-fs: Ignoring removed nobh option [ 304.303358][ T8871] EXT4-fs: Ignoring removed bh option [ 304.328391][ T8871] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 304.457341][ T8871] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 304.458842][ T4304] bond0 (unregistering): Released all slaves [ 304.562371][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 304.863558][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 304.875748][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 304.898819][ T8493] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 304.978422][ T8493] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 304.992536][ T8493] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 305.008482][ T8452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.021376][ T8493] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 305.281232][ T8493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.294745][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.317872][ T8493] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.324953][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.332995][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.361505][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 305.385769][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.413027][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.420273][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.459001][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.488961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 305.500900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.523169][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.530404][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.576044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 305.596621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.620576][ T8902] loop3: detected capacity change from 0 to 2048 [ 305.677317][ T8902] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 305.693935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 305.760284][ T8902] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 305.786211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 305.804892][ T8902] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 305.814767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 305.828837][ T8902] EXT4-fs (loop3): This should not happen!! Data will be lost [ 305.828837][ T8902] [ 305.840462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 305.842725][ T8902] EXT4-fs (loop3): Total free blocks count 0 [ 305.854830][ T8902] EXT4-fs (loop3): Free/Dirty block details [ 305.860376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 305.861339][ T8902] EXT4-fs (loop3): free_blocks=2415919504 [ 305.874957][ T8902] EXT4-fs (loop3): dirty_blocks=48 [ 305.880117][ T8902] EXT4-fs (loop3): Block reservation details [ 305.882977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 305.886678][ T8902] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 305.919113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 305.932110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 305.944230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 305.962629][ T8493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 305.990721][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 306.010411][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.064001][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 306.080102][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.102110][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 306.111775][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.120845][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.141979][ T8452] device veth0_vlan entered promiscuous mode [ 306.170485][ T8452] device veth1_vlan entered promiscuous mode [ 306.236523][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 306.245670][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 306.256129][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 306.280885][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.302407][ T8452] device veth0_macvtap entered promiscuous mode [ 306.322162][ T8452] device veth1_macvtap entered promiscuous mode [ 306.334765][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 306.372250][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.393113][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.404963][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.415867][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.429454][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.450329][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.476815][ T8452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.497055][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 306.507308][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.516500][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.539162][ T4607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.559293][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.571451][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.582013][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.593344][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.624759][ T8452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.635409][ T8452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.664379][ T8452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.679868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 306.706136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.728542][ T8452] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.762283][ T8452] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.794735][ T8452] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.825263][ T8452] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.867322][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 306.882002][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 306.908623][ T8493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.021675][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.047280][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.116017][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.140400][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.175904][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.194142][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.241391][ T8493] device veth0_vlan entered promiscuous mode [ 307.259862][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.288581][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.302803][ T8493] device veth1_vlan entered promiscuous mode [ 307.360131][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 307.374274][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 307.381842][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.395235][ T8938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1311'. [ 307.447422][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.464165][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 307.487502][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.505717][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.538904][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.585905][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 307.596931][ T8493] device veth0_macvtap entered promiscuous mode [ 307.642052][ T8493] device veth1_macvtap entered promiscuous mode [ 307.716200][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.753498][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.774969][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.795172][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.819818][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.865130][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.898757][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.916729][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.953057][ T8493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.990271][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.025800][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.042939][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.054215][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.070724][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.081834][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.092311][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.103294][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.116464][ T8493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.130506][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 308.145476][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 308.180828][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.191815][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.208650][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.224872][ T126] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 308.236185][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.363715][ T8493] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.373512][ T8493] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.384215][ T8493] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.405607][ T8493] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.414889][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.424268][ T8956] loop0: detected capacity change from 0 to 2048 [ 308.443886][ T126] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 308.473202][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.483607][ T126] usb 4-1: config 0 descriptor?? [ 308.504841][ T8957] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 308.670922][ T8957] NILFS (loop0): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 308.745919][ T8957] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=2) [ 308.750798][ T4607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.765149][ T4607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.777662][ T8957] Remounting filesystem read-only [ 308.782880][ T4304] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 308.791483][ T4304] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 308.804713][ T4304] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 308.816339][ T4304] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 308.842122][ T4304] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 308.870209][ T4304] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 308.882573][ T5961] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.914662][ T4304] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 308.959928][ T4304] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 308.986072][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 308.995443][ T4304] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 309.016519][ T4304] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 309.016624][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.041137][ T4304] NILFS (loop0): discard dirty page: offset=0, ino=12 [ 309.059060][ T4304] NILFS (loop0): discard dirty block: blocknr=17, size=1024 [ 309.074705][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.091176][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 309.113314][ T4304] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 309.146444][ T4304] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 309.174244][ T4304] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 309.193887][ T4304] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 309.234999][ T4304] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 309.244850][ T4304] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 309.274349][ T4304] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 309.275099][ T5961] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.294675][ T4304] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 309.315055][ T8956] NILFS (loop0): mounting fs with errors [ 309.455495][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.477024][ T8957] NILFS (loop0): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 309.501960][ T8957] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=2) [ 309.514722][ T8957] Remounting filesystem read-only [ 309.538239][ T8960] loop1: detected capacity change from 0 to 32768 [ 309.576353][ T4258] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 309.589949][ T5961] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.619613][ T4258] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 309.639961][ T8960] XFS (loop1): Mounting V5 Filesystem [ 309.640758][ T4258] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 309.653303][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 309.674675][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 309.699301][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 309.709654][ T4258] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 309.716805][ T4258] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 309.722655][ T126] pegasus 4-1:0.0: can't reset MAC [ 309.724327][ T4258] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 309.737369][ T4258] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 309.745042][ T4258] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 309.752528][ T4258] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 309.759612][ T4258] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 309.760096][ T126] pegasus: probe of 4-1:0.0 failed with error -5 [ 309.767191][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 309.767221][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 309.767241][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 309.768264][ T4258] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 309.807544][ T4258] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 309.811232][ T126] usb 4-1: USB disconnect, device number 11 [ 309.814931][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 309.814957][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 309.814977][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 309.860311][ T8960] XFS (loop1): Ending clean mount [ 309.879068][ T5961] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.909638][ T8960] XFS (loop1): Quotacheck needed: Please wait. [ 310.010614][ T8960] XFS (loop1): Quotacheck: Done. [ 310.230329][ T4253] XFS (loop1): Unmounting Filesystem [ 310.494691][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.843646][ T4254] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.857111][ T4254] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 310.866566][ T4254] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.892989][ T4254] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.904019][ T4254] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 310.912014][ T4254] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.421143][ T8985] chnl_net:caif_netlink_parms(): no params data found [ 311.534668][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 311.581553][ T8985] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.588973][ T8985] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.597751][ T8985] device bridge_slave_0 entered promiscuous mode [ 311.608915][ T8985] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.616796][ T8985] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.624758][ T8985] device bridge_slave_1 entered promiscuous mode [ 311.887002][ T8985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.956029][ T8985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.006583][ T9011] loop0: detected capacity change from 0 to 512 [ 312.040781][ T9011] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 312.083316][ T9011] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 312.156684][ T9011] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.1328: corrupted in-inode xattr [ 312.221998][ T9011] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1328: couldn't read orphan inode 15 (err -117) [ 312.293289][ T9011] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 312.413157][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 312.428800][ T4270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 312.443784][ T4270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 312.460841][ T4270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 312.472239][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 312.482385][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 312.529444][ T8985] team0: Port device team_slave_0 added [ 312.574652][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 312.617246][ T8985] team0: Port device team_slave_1 added [ 312.649817][ T9008] loop3: detected capacity change from 0 to 40427 [ 312.679876][ T9008] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 312.704125][ T9008] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 312.718060][ T5961] device hsr_slave_0 left promiscuous mode [ 312.752103][ T9008] F2FS-fs (loop3): invalid crc value [ 312.758343][ T5961] device hsr_slave_1 left promiscuous mode [ 312.770962][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.790501][ T9008] F2FS-fs (loop3): Found nat_bits in checkpoint [ 312.797030][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.824149][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.850022][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.876256][ T5961] device bridge_slave_1 left promiscuous mode [ 312.882564][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.888581][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 312.915088][ T5961] device bridge_slave_0 left promiscuous mode [ 312.921502][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.965135][ T9008] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 312.972248][ T9008] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 312.980636][ T4254] Bluetooth: hci2: command 0x0409 tx timeout [ 313.038943][ T5961] device veth1_macvtap left promiscuous mode [ 313.045785][ T5961] device veth0_macvtap left promiscuous mode [ 313.051945][ T5961] device veth1_vlan left promiscuous mode [ 313.058779][ T5961] device veth0_vlan left promiscuous mode [ 313.614663][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.961783][ T9038] loop1: detected capacity change from 0 to 40427 [ 313.969543][ T9038] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 313.974754][ T126] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 313.984854][ T9038] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 313.997070][ T9038] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x3ffff [ 314.029222][ T9038] F2FS-fs (loop1): invalid crc value [ 314.072910][ T9038] F2FS-fs (loop1): Found nat_bits in checkpoint [ 314.162541][ T9038] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 314.174635][ T9038] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 314.206932][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 314.249430][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.259601][ T126] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 314.268934][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.299844][ T126] usb 4-1: config 0 descriptor?? [ 314.323957][ T9038] syz.1.1331: attempt to access beyond end of device [ 314.323957][ T9038] loop1: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 314.513171][ T4254] Bluetooth: hci4: unknown advertising packet type: 0x65 [ 314.513293][ T4254] Bluetooth: hci4: Malformed LE Event: 0x02 [ 314.517959][ T126] usbhid 4-1:0.0: can't add hid device: -71 [ 314.552663][ T126] usbhid: probe of 4-1:0.0 failed with error -71 [ 314.560638][ T5961] team0 (unregistering): Port device team_slave_1 removed [ 314.590144][ T4254] Bluetooth: hci3: command 0x0409 tx timeout [ 314.634986][ T126] usb 4-1: USB disconnect, device number 12 [ 314.654731][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.695403][ T5961] team0 (unregistering): Port device team_slave_0 removed [ 315.054901][ T4254] Bluetooth: hci2: command 0x041b tx timeout [ 315.065108][ T5961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.455893][ T5961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.694693][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 316.674901][ T4254] Bluetooth: hci3: command 0x041b tx timeout [ 316.744109][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.142957][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.149538][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.154635][ T4254] Bluetooth: hci2: command 0x040f tx timeout [ 317.220944][ T5961] bond0 (unregistering): Released all slaves [ 317.369833][ T8985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.381510][ T8985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.415867][ T8985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.520419][ T8985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.533813][ T8985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.540111][ T9069] loop1: detected capacity change from 0 to 1024 [ 317.560230][ T8985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.752432][ T8985] device hsr_slave_0 entered promiscuous mode [ 317.774674][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.800120][ T8985] device hsr_slave_1 entered promiscuous mode [ 318.236584][ T9018] chnl_net:caif_netlink_parms(): no params data found [ 318.738228][ T5961] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.754546][ T4254] Bluetooth: hci3: command 0x040f tx timeout [ 318.814656][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 318.851881][ T9105] loop1: detected capacity change from 0 to 8192 [ 318.859820][ T9018] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.878177][ T9018] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.898605][ T9018] device bridge_slave_0 entered promiscuous mode [ 318.906596][ T9105] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 319.010887][ T5961] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.040206][ T9018] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.050251][ T9018] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.075106][ T9018] device bridge_slave_1 entered promiscuous mode [ 319.216252][ T4254] Bluetooth: hci2: command 0x0419 tx timeout [ 319.223684][ T9113] loop0: detected capacity change from 0 to 1024 [ 319.269041][ T5961] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.477386][ T5961] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.517148][ T9018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.550609][ T9018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.557685][ T9117] [ 319.562023][ T9117] ===================================================== [ 319.568956][ T9117] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 319.576495][ T9117] 6.1.127-syzkaller #0 Not tainted [ 319.581604][ T9117] ----------------------------------------------------- [ 319.588534][ T9117] syz.0.1355/9117 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 319.596167][ T9117] ffffffff8d00a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigurg+0xea/0x3b0 [ 319.604799][ T9117] [ 319.604799][ T9117] and this task is already holding: [ 319.612156][ T9117] ffff88807d4e88b0 (&f->f_owner.lock){...-}-{2:2}, at: send_sigurg+0x25/0x3b0 [ 319.621048][ T9117] which would create a new lock dependency: [ 319.626929][ T9117] (&f->f_owner.lock){...-}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 319.634688][ T9117] [ 319.634688][ T9117] but this new dependency connects a HARDIRQ-irq-safe lock: [ 319.644133][ T9117] (&dev->event_lock#2){-...}-{2:2} [ 319.644167][ T9117] [ 319.644167][ T9117] ... which became HARDIRQ-irq-safe at: [ 319.657051][ T9117] lock_acquire+0x1f8/0x5a0 [ 319.661679][ T9117] _raw_spin_lock_irqsave+0xd1/0x120 [ 319.667074][ T9117] input_event+0x8d/0xd0 [ 319.671429][ T9117] psmouse_report_standard_packet+0x50/0x200 [ 319.677512][ T9117] psmouse_process_byte+0x45b/0x640 [ 319.682813][ T9117] psmouse_handle_byte+0x46/0x4b0 [ 319.688013][ T9117] psmouse_interrupt+0x697/0x10a0 [ 319.693209][ T9117] serio_interrupt+0x88/0x130 [ 319.697975][ T9117] i8042_interrupt+0x357/0x750 [ 319.702833][ T9117] __handle_irq_event_percpu+0x2a8/0xb20 [ 319.708559][ T9117] handle_irq_event+0x85/0x1e0 [ 319.713412][ T9117] handle_edge_irq+0x245/0xbf0 [ 319.718268][ T9117] __common_interrupt+0xd7/0x1f0 [ 319.723299][ T9117] common_interrupt+0xae/0xd0 [ 319.728064][ T9117] asm_common_interrupt+0x22/0x40 [ 319.733183][ T9117] _raw_spin_unlock_irqrestore+0xd4/0x130 [ 319.738994][ T9117] i8042_aux_write+0x112/0x190 [ 319.743849][ T9117] ps2_do_sendbyte+0x20a/0x720 [ 319.748706][ T9117] ps2_sendbyte+0x5c/0x120 [ 319.753213][ T9117] cypress_send_ext_cmd+0x21d/0x900 [ 319.758506][ T9117] cypress_detect+0x8f/0x220 [ 319.763188][ T9117] psmouse_extensions+0xc2a/0x1550 [ 319.768398][ T9117] psmouse_switch_protocol+0x308/0x840 [ 319.773946][ T9117] psmouse_connect+0x903/0x14c0 [ 319.778883][ T9117] serio_driver_probe+0x74/0x90 [ 319.783822][ T9117] really_probe+0x2ab/0xcb0 [ 319.788413][ T9117] __driver_probe_device+0x1a2/0x3d0 [ 319.793788][ T9117] driver_probe_device+0x50/0x420 [ 319.798901][ T9117] __driver_attach+0x458/0x6f0 [ 319.803751][ T9117] bus_for_each_dev+0x17c/0x1f0 [ 319.808685][ T9117] serio_handle_event+0x56a/0x8f0 [ 319.813800][ T9117] process_one_work+0x8a9/0x11d0 [ 319.818829][ T9117] worker_thread+0xa47/0x1200 [ 319.823596][ T9117] kthread+0x28d/0x320 [ 319.827750][ T9117] ret_from_fork+0x1f/0x30 [ 319.832262][ T9117] [ 319.832262][ T9117] to a HARDIRQ-irq-unsafe lock: [ 319.839276][ T9117] (tasklist_lock){.+.+}-{2:2} [ 319.839305][ T9117] [ 319.839305][ T9117] ... which became HARDIRQ-irq-unsafe at: [ 319.851926][ T9117] ... [ 319.851933][ T9117] lock_acquire+0x1f8/0x5a0 [ 319.859113][ T9117] _raw_read_lock+0x32/0x40 [ 319.863712][ T9117] do_wait+0x2c6/0xb80 [ 319.867874][ T9117] kernel_wait+0xe5/0x230 [ 319.872404][ T9117] call_usermodehelper_exec_work+0xb5/0x220 [ 319.878396][ T9117] process_one_work+0x8a9/0x11d0 [ 319.883423][ T9117] worker_thread+0xa47/0x1200 [ 319.888190][ T9117] kthread+0x28d/0x320 [ 319.892340][ T9117] ret_from_fork+0x1f/0x30 [ 319.896849][ T9117] [ 319.896849][ T9117] other info that might help us debug this: [ 319.896849][ T9117] [ 319.907073][ T9117] Chain exists of: [ 319.907073][ T9117] &dev->event_lock#2 --> &f->f_owner.lock --> tasklist_lock [ 319.907073][ T9117] [ 319.920296][ T9117] Possible interrupt unsafe locking scenario: [ 319.920296][ T9117] [ 319.928613][ T9117] CPU0 CPU1 [ 319.933977][ T9117] ---- ---- [ 319.939425][ T9117] lock(tasklist_lock); [ 319.943673][ T9117] local_irq_disable(); [ 319.950422][ T9117] lock(&dev->event_lock#2); [ 319.957630][ T9117] lock(&f->f_owner.lock); [ 319.964681][ T9117] [ 319.968134][ T9117] lock(&dev->event_lock#2); [ 319.972996][ T9117] [ 319.972996][ T9117] *** DEADLOCK *** [ 319.972996][ T9117] [ 319.981147][ T9117] 2 locks held by syz.0.1355/9117: [ 319.986279][ T9117] #0: ffff88807d67c680 (&u->lock){+.+.}-{2:2}, at: queue_oob+0x4c4/0xaf0 [ 319.994823][ T9117] #1: ffff88807d4e88b0 (&f->f_owner.lock){...-}-{2:2}, at: send_sigurg+0x25/0x3b0 [ 320.004155][ T9117] [ 320.004155][ T9117] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 320.014556][ T9117] -> (&dev->event_lock#2){-...}-{2:2} { [ 320.020303][ T9117] IN-HARDIRQ-W at: [ 320.024458][ T9117] lock_acquire+0x1f8/0x5a0 [ 320.030977][ T9117] _raw_spin_lock_irqsave+0xd1/0x120 [ 320.038356][ T9117] input_event+0x8d/0xd0 [ 320.044610][ T9117] psmouse_report_standard_packet+0x50/0x200 [ 320.052599][ T9117] psmouse_process_byte+0x45b/0x640 [ 320.059806][ T9117] psmouse_handle_byte+0x46/0x4b0 [ 320.066917][ T9117] psmouse_interrupt+0x697/0x10a0 [ 320.073943][ T9117] serio_interrupt+0x88/0x130 [ 320.080665][ T9117] i8042_interrupt+0x357/0x750 [ 320.087530][ T9117] __handle_irq_event_percpu+0x2a8/0xb20 [ 320.095258][ T9117] handle_irq_event+0x85/0x1e0 [ 320.102025][ T9117] handle_edge_irq+0x245/0xbf0 [ 320.108795][ T9117] __common_interrupt+0xd7/0x1f0 [ 320.115737][ T9117] common_interrupt+0xae/0xd0 [ 320.122416][ T9117] asm_common_interrupt+0x22/0x40 [ 320.129458][ T9117] _raw_spin_unlock_irqrestore+0xd4/0x130 [ 320.137196][ T9117] i8042_aux_write+0x112/0x190 [ 320.143971][ T9117] ps2_do_sendbyte+0x20a/0x720 [ 320.150747][ T9117] ps2_sendbyte+0x5c/0x120 [ 320.157171][ T9117] cypress_send_ext_cmd+0x21d/0x900 [ 320.164376][ T9117] cypress_detect+0x8f/0x220 [ 320.170969][ T9117] psmouse_extensions+0xc2a/0x1550 [ 320.178078][ T9117] psmouse_switch_protocol+0x308/0x840 [ 320.185533][ T9117] psmouse_connect+0x903/0x14c0 [ 320.192383][ T9117] serio_driver_probe+0x74/0x90 [ 320.199236][ T9117] really_probe+0x2ab/0xcb0 [ 320.205741][ T9117] __driver_probe_device+0x1a2/0x3d0 [ 320.213028][ T9117] driver_probe_device+0x50/0x420 [ 320.220058][ T9117] __driver_attach+0x458/0x6f0 [ 320.226822][ T9117] bus_for_each_dev+0x17c/0x1f0 [ 320.233670][ T9117] serio_handle_event+0x56a/0x8f0 [ 320.240698][ T9117] process_one_work+0x8a9/0x11d0 [ 320.247639][ T9117] worker_thread+0xa47/0x1200 [ 320.254431][ T9117] kthread+0x28d/0x320 [ 320.260502][ T9117] ret_from_fork+0x1f/0x30 [ 320.266922][ T9117] INITIAL USE at: [ 320.270989][ T9117] lock_acquire+0x1f8/0x5a0 [ 320.277505][ T9117] _raw_spin_lock_irqsave+0xd1/0x120 [ 320.284797][ T9117] input_inject_event+0xc1/0x330 [ 320.291664][ T9117] led_trigger_event+0x130/0x210 [ 320.298515][ T9117] kbd_led_trigger_activate+0xb9/0x100 [ 320.305894][ T9117] led_trigger_set+0x55a/0x970 [ 320.312572][ T9117] led_trigger_set_default+0x1c2/0x200 [ 320.319945][ T9117] led_classdev_register_ext+0x600/0x7e0 [ 320.327494][ T9117] input_leds_connect+0x48f/0x630 [ 320.334437][ T9117] input_register_device+0xcec/0x1080 [ 320.341723][ T9117] atkbd_connect+0x79d/0x9e0 [ 320.348232][ T9117] serio_driver_probe+0x74/0x90 [ 320.355002][ T9117] really_probe+0x2ab/0xcb0 [ 320.361456][ T9117] __driver_probe_device+0x1a2/0x3d0 [ 320.368683][ T9117] driver_probe_device+0x50/0x420 [ 320.375643][ T9117] __driver_attach+0x458/0x6f0 [ 320.382335][ T9117] bus_for_each_dev+0x17c/0x1f0 [ 320.389104][ T9117] serio_handle_event+0x56a/0x8f0 [ 320.396060][ T9117] process_one_work+0x8a9/0x11d0 [ 320.402918][ T9117] worker_thread+0xa47/0x1200 [ 320.409530][ T9117] kthread+0x28d/0x320 [ 320.415544][ T9117] ret_from_fork+0x1f/0x30 [ 320.421883][ T9117] } [ 320.424567][ T9117] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 320.433826][ T9117] -> (&new->fa_lock){....}-{2:2} { [ 320.439060][ T9117] INITIAL USE at: [ 320.443041][ T9117] lock_acquire+0x1f8/0x5a0 [ 320.449296][ T9117] _raw_write_lock_irq+0xcf/0x110 [ 320.456071][ T9117] fasync_remove_entry+0xfb/0x1d0 [ 320.462844][ T9117] __fput+0x75e/0x8d0 [ 320.468568][ T9117] task_work_run+0x246/0x300 [ 320.474903][ T9117] exit_to_user_mode_loop+0xde/0x100 [ 320.481926][ T9117] exit_to_user_mode_prepare+0xb1/0x140 [ 320.489211][ T9117] syscall_exit_to_user_mode+0x60/0x270 [ 320.496529][ T9117] do_syscall_64+0x47/0xb0 [ 320.502857][ T9117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.510497][ T9117] INITIAL READ USE at: [ 320.514914][ T9117] lock_acquire+0x1f8/0x5a0 [ 320.521596][ T9117] _raw_read_lock_irqsave+0xd9/0x120 [ 320.529149][ T9117] kill_fasync+0x196/0x4d0 [ 320.535952][ T9117] mousedev_notify_readers+0x719/0xc80 [ 320.543590][ T9117] mousedev_event+0x554/0x1260 [ 320.550531][ T9117] input_pass_values+0x9ee/0x12a0 [ 320.557745][ T9117] input_event_dispose+0x366/0x650 [ 320.565050][ T9117] input_handle_event+0x97d/0xb00 [ 320.572257][ T9117] input_inject_event+0x224/0x330 [ 320.579462][ T9117] evdev_write+0x668/0x7c0 [ 320.586055][ T9117] vfs_write+0x2d9/0xbc0 [ 320.592472][ T9117] ksys_write+0x19c/0x2c0 [ 320.598973][ T9117] do_syscall_64+0x3b/0xb0 [ 320.605563][ T9117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.613651][ T9117] } [ 320.616238][ T9117] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 320.625008][ T9117] ... acquired at: [ 320.628948][ T9117] lock_acquire+0x1f8/0x5a0 [ 320.633633][ T9117] _raw_read_lock_irqsave+0xd9/0x120 [ 320.639114][ T9117] kill_fasync+0x196/0x4d0 [ 320.643714][ T9117] mousedev_notify_readers+0x719/0xc80 [ 320.649353][ T9117] mousedev_event+0x554/0x1260 [ 320.654315][ T9117] input_pass_values+0x9ee/0x12a0 [ 320.659516][ T9117] input_event_dispose+0x366/0x650 [ 320.664812][ T9117] input_handle_event+0x97d/0xb00 [ 320.670021][ T9117] input_inject_event+0x224/0x330 [ 320.675230][ T9117] evdev_write+0x668/0x7c0 [ 320.679849][ T9117] vfs_write+0x2d9/0xbc0 [ 320.684298][ T9117] ksys_write+0x19c/0x2c0 [ 320.688823][ T9117] do_syscall_64+0x3b/0xb0 [ 320.693425][ T9117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.699508][ T9117] [ 320.701830][ T9117] -> (&f->f_owner.lock){...-}-{2:2} { [ 320.707226][ T9117] IN-SOFTIRQ-R at: [ 320.711205][ T9117] lock_acquire+0x1f8/0x5a0 [ 320.717372][ T9117] _raw_read_lock_irqsave+0xd9/0x120 [ 320.724320][ T9117] send_sigurg+0x25/0x3b0 [ 320.730310][ T9117] sk_send_sigurg+0x6a/0xb0 [ 320.736494][ T9117] tcp_check_urg+0x202/0x740 [ 320.742763][ T9117] tcp_urg+0x154/0x440 [ 320.748509][ T9117] tcp_rcv_established+0xe58/0x1f00 [ 320.755371][ T9117] tcp_v4_do_rcv+0x487/0xb00 [ 320.761621][ T9117] tcp_v4_rcv+0x29e0/0x3250 [ 320.767793][ T9117] ip_protocol_deliver_rcu+0x381/0x740 [ 320.774927][ T9117] ip_local_deliver_finish+0x304/0x580 [ 320.782044][ T9117] NF_HOOK+0x39d/0x450 [ 320.787769][ T9117] NF_HOOK+0x39d/0x450 [ 320.793489][ T9117] __netif_receive_skb+0x1c6/0x530 [ 320.800261][ T9117] process_backlog+0x381/0x760 [ 320.806698][ T9117] __napi_poll+0xc7/0x470 [ 320.812688][ T9117] net_rx_action+0x70f/0xeb0 [ 320.818935][ T9117] handle_softirqs+0x2ee/0xa40 [ 320.825449][ T9117] run_ksoftirqd+0xc6/0x120 [ 320.831601][ T9117] smpboot_thread_fn+0x52c/0xa30 [ 320.838304][ T9117] kthread+0x28d/0x320 [ 320.844043][ T9117] ret_from_fork+0x1f/0x30 [ 320.850143][ T9117] INITIAL USE at: [ 320.854048][ T9117] lock_acquire+0x1f8/0x5a0 [ 320.860130][ T9117] _raw_write_lock_irq+0xcf/0x110 [ 320.866728][ T9117] __f_setown+0x38/0x350 [ 320.872547][ T9117] fcntl_dirnotify+0x6cc/0x8d0 [ 320.878881][ T9117] do_fcntl+0x60e/0x1500 [ 320.884686][ T9117] __se_sys_fcntl+0xd5/0x1b0 [ 320.890847][ T9117] do_syscall_64+0x3b/0xb0 [ 320.896826][ T9117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.904303][ T9117] INITIAL READ USE at: [ 320.908636][ T9117] lock_acquire+0x1f8/0x5a0 [ 320.915147][ T9117] _raw_read_lock_irqsave+0xd9/0x120 [ 320.922460][ T9117] send_sigio+0x2f/0x360 [ 320.928717][ T9117] kill_fasync+0x232/0x4d0 [ 320.935146][ T9117] mousedev_notify_readers+0x719/0xc80 [ 320.942618][ T9117] mousedev_event+0x554/0x1260 [ 320.949424][ T9117] input_pass_values+0x9ee/0x12a0 [ 320.956470][ T9117] input_event_dispose+0x366/0x650 [ 320.963598][ T9117] input_handle_event+0x97d/0xb00 [ 320.970632][ T9117] input_inject_event+0x224/0x330 [ 320.977672][ T9117] evdev_write+0x668/0x7c0 [ 320.984113][ T9117] vfs_write+0x2d9/0xbc0 [ 320.990380][ T9117] ksys_write+0x19c/0x2c0 [ 320.996723][ T9117] do_syscall_64+0x3b/0xb0 [ 321.003167][ T9117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.011074][ T9117] } [ 321.013571][ T9117] ... key at: [] __alloc_file.__key+0x0/0x10 [ 321.021661][ T9117] ... acquired at: [ 321.025463][ T9117] lock_acquire+0x1f8/0x5a0 [ 321.030239][ T9117] _raw_read_lock_irqsave+0xd9/0x120 [ 321.035711][ T9117] send_sigio+0x2f/0x360 [ 321.040137][ T9117] kill_fasync+0x232/0x4d0 [ 321.044737][ T9117] mousedev_notify_readers+0x719/0xc80 [ 321.050399][ T9117] mousedev_event+0x554/0x1260 [ 321.055358][ T9117] input_pass_values+0x9ee/0x12a0 [ 321.060574][ T9117] input_event_dispose+0x366/0x650 [ 321.065902][ T9117] input_handle_event+0x97d/0xb00 [ 321.071120][ T9117] input_inject_event+0x224/0x330 [ 321.076330][ T9117] evdev_write+0x668/0x7c0 [ 321.080932][ T9117] vfs_write+0x2d9/0xbc0 [ 321.085372][ T9117] ksys_write+0x19c/0x2c0 [ 321.089876][ T9117] do_syscall_64+0x3b/0xb0 [ 321.094466][ T9117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.100547][ T9117] [ 321.102867][ T9117] [ 321.102867][ T9117] the dependencies between the lock to be acquired [ 321.102876][ T9117] and HARDIRQ-irq-unsafe lock: [ 321.116396][ T9117] -> (tasklist_lock){.+.+}-{2:2} { [ 321.121532][ T9117] HARDIRQ-ON-R at: [ 321.125510][ T9117] lock_acquire+0x1f8/0x5a0 [ 321.131674][ T9117] _raw_read_lock+0x32/0x40 [ 321.137835][ T9117] do_wait+0x2c6/0xb80 [ 321.143565][ T9117] kernel_wait+0xe5/0x230 [ 321.149558][ T9117] call_usermodehelper_exec_work+0xb5/0x220 [ 321.157115][ T9117] process_one_work+0x8a9/0x11d0 [ 321.163706][ T9117] worker_thread+0xa47/0x1200 [ 321.170049][ T9117] kthread+0x28d/0x320 [ 321.175769][ T9117] ret_from_fork+0x1f/0x30 [ 321.181950][ T9117] SOFTIRQ-ON-R at: [ 321.185929][ T9117] lock_acquire+0x1f8/0x5a0 [ 321.192287][ T9117] _raw_read_lock+0x32/0x40 [ 321.198449][ T9117] do_wait+0x2c6/0xb80 [ 321.204176][ T9117] kernel_wait+0xe5/0x230 [ 321.210166][ T9117] call_usermodehelper_exec_work+0xb5/0x220 [ 321.217724][ T9117] process_one_work+0x8a9/0x11d0 [ 321.224404][ T9117] worker_thread+0xa47/0x1200 [ 321.230737][ T9117] kthread+0x28d/0x320 [ 321.236542][ T9117] ret_from_fork+0x1f/0x30 [ 321.242630][ T9117] INITIAL USE at: [ 321.246525][ T9117] lock_acquire+0x1f8/0x5a0 [ 321.252606][ T9117] _raw_write_lock_irq+0xcf/0x110 [ 321.259205][ T9117] copy_process+0x24b6/0x4060 [ 321.265452][ T9117] kernel_clone+0x222/0x920 [ 321.271523][ T9117] user_mode_thread+0x12e/0x190 [ 321.277938][ T9117] rest_init+0x23/0x300 [ 321.283663][ T9117] start_kernel+0x0/0x53f [ 321.289563][ T9117] start_kernel+0x496/0x53f [ 321.295654][ T9117] secondary_startup_64_no_verify+0xcf/0xdb [ 321.303120][ T9117] INITIAL READ USE at: [ 321.307448][ T9117] lock_acquire+0x1f8/0x5a0 [ 321.313986][ T9117] _raw_read_lock+0x32/0x40 [ 321.320496][ T9117] do_wait+0x2c6/0xb80 [ 321.326570][ T9117] kernel_wait+0xe5/0x230 [ 321.332909][ T9117] call_usermodehelper_exec_work+0xb5/0x220 [ 321.340808][ T9117] process_one_work+0x8a9/0x11d0 [ 321.347746][ T9117] worker_thread+0xa47/0x1200 [ 321.354437][ T9117] kthread+0x28d/0x320 [ 321.360501][ T9117] ret_from_fork+0x1f/0x30 [ 321.367358][ T9117] } [ 321.369855][ T9117] ... key at: [] tasklist_lock+0x18/0x40 [ 321.377665][ T9117] ... acquired at: [ 321.381460][ T9117] lock_acquire+0x1f8/0x5a0 [ 321.386221][ T9117] _raw_read_lock+0x32/0x40 [ 321.390925][ T9117] send_sigurg+0xea/0x3b0 [ 321.395450][ T9117] sk_send_sigurg+0x6a/0xb0 [ 321.400143][ T9117] queue_oob+0x81a/0xaf0 [ 321.404671][ T9117] unix_stream_sendmsg+0xe10/0x1070 [ 321.410091][ T9117] ____sys_sendmsg+0x5a5/0x8f0 [ 321.415047][ T9117] __sys_sendmsg+0x2a9/0x390 [ 321.419821][ T9117] do_syscall_64+0x3b/0xb0 [ 321.424420][ T9117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.430501][ T9117] [ 321.432826][ T9117] [ 321.432826][ T9117] stack backtrace: [ 321.438720][ T9117] CPU: 1 PID: 9117 Comm: syz.0.1355 Not tainted 6.1.127-syzkaller #0 [ 321.446788][ T9117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 321.456851][ T9117] Call Trace: [ 321.460141][ T9117] [ 321.463073][ T9117] dump_stack_lvl+0x1e3/0x2cb [ 321.467763][ T9117] ? nf_tcp_handle_invalid+0x642/0x642 [ 321.473255][ T9117] ? panic+0x764/0x764 [ 321.477330][ T9117] ? print_shortest_lock_dependencies+0xee/0x150 [ 321.483668][ T9117] validate_chain+0x4d16/0x5950 [ 321.488530][ T9117] ? reacquire_held_locks+0x660/0x660 [ 321.493923][ T9117] ? reacquire_held_locks+0x660/0x660 [ 321.499309][ T9117] ? __lock_acquire+0x125b/0x1f80 [ 321.504344][ T9117] ? mark_lock+0x9a/0x340 [ 321.508711][ T9117] __lock_acquire+0x125b/0x1f80 [ 321.513615][ T9117] lock_acquire+0x1f8/0x5a0 [ 321.518150][ T9117] ? send_sigurg+0xea/0x3b0 [ 321.522676][ T9117] ? read_lock_is_recursive+0x10/0x10 [ 321.528149][ T9117] ? _raw_read_lock_irqsave+0xac/0x120 [ 321.533629][ T9117] ? do_raw_read_lock+0x38/0x80 [ 321.538483][ T9117] ? _raw_read_lock_irqsave+0xe5/0x120 [ 321.543949][ T9117] ? _raw_read_lock+0x40/0x40 [ 321.548631][ T9117] ? do_raw_spin_lock+0x14a/0x370 [ 321.553677][ T9117] _raw_read_lock+0x32/0x40 [ 321.558195][ T9117] ? send_sigurg+0xea/0x3b0 [ 321.562705][ T9117] send_sigurg+0xea/0x3b0 [ 321.567043][ T9117] sk_send_sigurg+0x6a/0xb0 [ 321.571558][ T9117] queue_oob+0x81a/0xaf0 [ 321.575811][ T9117] ? scm_stat_add+0xb0/0xb0 [ 321.580318][ T9117] ? apparmor_socket_getpeersec_dgram+0x5/0x10 [ 321.586482][ T9117] ? security_socket_getpeersec_dgram+0x99/0xb0 [ 321.592726][ T9117] unix_stream_sendmsg+0xe10/0x1070 [ 321.597932][ T9117] ? tomoyo_socket_bind_permission+0x330/0x330 [ 321.604089][ T9117] ? unix_show_fdinfo+0x2d0/0x2d0 [ 321.609117][ T9117] ? __import_iovec+0x316/0x4c0 [ 321.613975][ T9117] ? aa_sock_msg_perm+0x91/0x150 [ 321.618916][ T9117] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 321.624207][ T9117] ? security_socket_sendmsg+0x7d/0xa0 [ 321.629668][ T9117] ? unix_show_fdinfo+0x2d0/0x2d0 [ 321.634701][ T9117] ____sys_sendmsg+0x5a5/0x8f0 [ 321.639503][ T9117] ? __sys_sendmsg_sock+0x30/0x30 [ 321.644603][ T9117] __sys_sendmsg+0x2a9/0x390 [ 321.649220][ T9117] ? ____sys_sendmsg+0x8f0/0x8f0 [ 321.654184][ T9117] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 321.660184][ T9117] ? syscall_enter_from_user_mode+0x2e/0x230 [ 321.666172][ T9117] ? lockdep_hardirqs_on+0x94/0x130 [ 321.671374][ T9117] ? syscall_enter_from_user_mode+0x2e/0x230 [ 321.677360][ T9117] do_syscall_64+0x3b/0xb0 [ 321.681774][ T9117] ? clear_bhb_loop+0x45/0xa0 [ 321.686452][ T9117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.692358][ T9117] RIP: 0033:0x7f4c88f8cda9 [ 321.696788][ T9117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.716397][ T9117] RSP: 002b:00007f4c89de1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.724813][ T9117] RAX: ffffffffffffffda RBX: 00007f4c891a5fa0 RCX: 00007f4c88f8cda9 [ 321.732785][ T9117] RDX: 0000000024008881 RSI: 0000000020000080 RDI: 0000000000000003 [ 321.740756][ T9117] RBP: 00007f4c8900e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 321.748726][ T9117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 321.756698][ T9117] R13: 0000000000000000 R14: 00007f4c891a5fa0 R15: 00007fff0a419fd8 [ 321.764680][ T9117] [ 321.768808][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 321.776465][ T4302] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 321.785477][ T4254] Bluetooth: hci3: command 0x0419 tx timeout [ 321.997218][ T4302] usb 2-1: Using ep0 maxpacket: 32 [ 322.055676][ T4302] usb 2-1: device descriptor read/all, error -71 [ 322.507055][ T6950] bond0: (slave syz_tun): Releasing backup interface [ 322.516984][ T6950] device syz_tun left promiscuous mode [ 322.814835][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.333772][ T5961] device hsr_slave_0 left promiscuous mode [ 323.341240][ T5961] device hsr_slave_1 left promiscuous mode [ 323.350463][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.358247][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.368638][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.376548][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.384131][ T5961] device bridge_slave_1 left promiscuous mode [ 323.390519][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.399114][ T5961] device bridge_slave_0 left promiscuous mode [ 323.405590][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.415956][ T5961] device veth1_macvtap left promiscuous mode [ 323.421986][ T5961] device veth0_macvtap left promiscuous mode [ 323.428130][ T5961] device veth1_vlan left promiscuous mode [ 323.433920][ T5961] device veth0_vlan left promiscuous mode [ 323.599441][ T5961] team0 (unregistering): Port device team_slave_1 removed [ 323.638049][ T5961] team0 (unregistering): Port device team_slave_0 removed [ 323.675424][ T5961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.713645][ T5961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.770153][ T5961] bond0 (unregistering): Released all slaves [ 323.866080][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 324.232583][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.343245][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.389306][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.430500][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.529321][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.571141][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.619570][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.668408][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.760907][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.789145][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.831476][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.889030][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.899790][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 325.072125][ T35] tipc: Disabling bearer [ 325.077810][ T35] tipc: Left network mode [ 325.099129][ T35] tipc: Disabling bearer [ 325.104241][ T35] tipc: Left network mode [ 325.816206][ T35] IPVS: stopping master sync thread 7916 ... [ 326.399009][ T35] device hsr_slave_0 left promiscuous mode [ 326.407356][ T35] device hsr_slave_1 left promiscuous mode [ 326.413851][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.422807][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.432679][ T35] device bridge_slave_1 left promiscuous mode [ 326.443074][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.453769][ T35] device bridge_slave_0 left promiscuous mode [ 326.460770][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.473953][ T35] device hsr_slave_0 left promiscuous mode [ 326.480446][ T35] device hsr_slave_1 left promiscuous mode [ 326.489151][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.496957][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.506887][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.514376][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.522405][ T35] device bridge_slave_1 left promiscuous mode [ 326.529062][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.537824][ T35] device bridge_slave_0 left promiscuous mode [ 326.544053][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.554366][ T35] device bridge_slave_1 left promiscuous mode [ 326.565636][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.573958][ T35] device bridge_slave_0 left promiscuous mode [ 326.582730][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.594013][ T35] device hsr_slave_0 left promiscuous mode [ 326.602532][ T35] device hsr_slave_1 left promiscuous mode [ 326.609242][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.618947][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.626937][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.634377][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.644393][ T35] device bridge_slave_1 left promiscuous mode [ 326.650890][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.661345][ T35] device bridge_slave_0 left promiscuous mode [ 326.668219][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.679476][ T35] device hsr_slave_0 left promiscuous mode [ 326.686280][ T35] device hsr_slave_1 left promiscuous mode [ 326.692656][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.700632][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.708675][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.716504][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.724193][ T35] device bridge_slave_1 left promiscuous mode [ 326.730920][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.739598][ T35] device bridge_slave_0 left promiscuous mode [ 326.746013][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.758987][ T35] device veth1_macvtap left promiscuous mode [ 326.765143][ T35] device veth0_macvtap left promiscuous mode [ 326.771210][ T35] device veth0_vlan left promiscuous mode [ 326.777818][ T35] device veth1_macvtap left promiscuous mode [ 326.783920][ T35] device veth0_macvtap left promiscuous mode [ 326.790116][ T35] device veth1_vlan left promiscuous mode [ 326.796792][ T35] device veth0_vlan left promiscuous mode [ 326.803186][ T35] device veth1_macvtap left promiscuous mode [ 326.809590][ T35] device veth0_macvtap left promiscuous mode [ 326.815867][ T35] device veth1_vlan left promiscuous mode [ 326.821723][ T35] device veth0_vlan left promiscuous mode [ 327.058678][ T35] team0 (unregistering): Port device team_slave_1 removed [ 327.069563][ T35] team0 (unregistering): Port device team_slave_0 removed [ 327.101409][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.134477][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.181123][ T35] bond0 (unregistering): Released all slaves [ 327.532219][ T35] team0 (unregistering): Port device team_slave_1 removed [ 327.570784][ T35] team0 (unregistering): Port device team_slave_0 removed [ 327.582218][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.591079][ T35] device bond_slave_1 left promiscuous mode [ 327.601191][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.610271][ T35] device bond_slave_0 left promiscuous mode [ 327.874298][ T35] bond0 (unregistering): Released all slaves [ 327.940978][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.952938][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.986034][ T35] bond0 (unregistering): Released all slaves [ 328.143078][ T35] team0 (unregistering): Port device team_slave_1 removed [ 328.177249][ T35] team0 (unregistering): Port device team_slave_0 removed [ 328.209902][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.218671][ T35] device bond_slave_1 left promiscuous mode [ 328.251513][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.261011][ T35] device bond_slave_0 left promiscuous mode [ 328.499395][ T35] bond0 (unregistering): Released all slaves [ 328.602929][ T35] team0 (unregistering): Port device vlan0 removed [ 328.706880][ T35] device team_slave_1 left promiscuous mode [ 328.713286][ T35] team0 (unregistering): Port device team_slave_1 removed [ 328.724185][ T35] device team_slave_0 left promiscuous mode [ 328.732207][ T35] team0 (unregistering): Port device team_slave_0 removed [ 328.767921][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.776787][ T35] device bond_slave_1 left promiscuous mode [ 328.808797][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.817713][ T35] device bond_slave_0 left promiscuous mode [ 329.034073][ T35] bond0 (unregistering): (slave team0): Releasing backup interface [ 329.042252][ T126] infiniband syz1: ib_query_port failed (-19) [ 329.048830][ T35] device team0 left promiscuous mode [ 329.250713][ T35] bond0 (unregistering): Released all slaves