last executing test programs: 2m23.030456899s ago: executing program 1 (id=640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0x280}], 0x1) 1m57.122262701s ago: executing program 1 (id=640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0x280}], 0x1) 1m32.540222825s ago: executing program 1 (id=640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0x280}], 0x1) 1m8.18384026s ago: executing program 1 (id=640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0x280}], 0x1) 44.896508299s ago: executing program 1 (id=640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0x280}], 0x1) 24.659942088s ago: executing program 0 (id=1059): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x37}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) 24.562119426s ago: executing program 0 (id=1060): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x400448c8, 0x0) 24.478453933s ago: executing program 0 (id=1061): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000780)={0x2, {{0x2, 0x0, @multicast2}}, 0x1, 0x2, [{{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}]}, 0x190) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 24.127032852s ago: executing program 0 (id=1062): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000200de007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 23.857188374s ago: executing program 0 (id=1064): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) getpid() getegid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getresgid(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) 22.849062095s ago: executing program 0 (id=1066): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYRES64=r1], 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)="2a527aeeee0000287952bf9da170", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r4, &(0x7f0000000580)="df9cd2af5ef81907afe1274babaa9c077839699967a98a3b719b3cd44a0457df2c06f0f048eb155f3fae29c43be856a7d79510b12041f255dbd411fac8e7c32f78daa8f0a47aa41211a33b06a1ae8fb39e601e9d8cd23c02c6870ddfcd762c62f94a84aed6208a81a113b703542ee0d3a1820d9bf9dac80473a5370131511922db70d9f8729ebb91767221ee8c052eb546a0cbbd05be793596f9e3379bebe2e7119d6ad6", &(0x7f0000000740)=""/94, 0x4}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) syz_clone(0x640c7006, 0x0, 0x0, 0x0, 0x0, 0x0) 19.221227401s ago: executing program 1 (id=640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0x280}], 0x1) 5.827043184s ago: executing program 2 (id=1135): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="2daa0000000000007910a8000000000018090000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 5.705005964s ago: executing program 2 (id=1137): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x16, 0x0, 0x5, 0x0, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x48) r6 = fcntl$dupfd(r0, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) r7 = io_uring_setup(0x33b2, &(0x7f0000000180)={0x0, 0x0, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x75e5, &(0x7f00000000c0)={0x0, 0x0, 0x22, 0x0, 0x0, 0x0, r7}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000580)=ANY=[@ANYRESDEC=r2, @ANYRESDEC, @ANYBLOB="00fca7a0c900b708005d00000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000009500"/77], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x30, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000000000095000000000000009e44c9a5aa90687ff07cb04a39bfc405c659bb1f7af4ad95167a66a1028ee9acd798b45a7b844a1ee5b89470e6f3c79a68c8edbb5e89f6e871a7a1e65f36018da97043bb2e701ed070537d41fbcd850d19cc6fc80827bd7bcfef28c533eca5bbbf70b86f61716c7fc947cad692d047052010e134169f4baa098b19f25aab31956fc9e22ad158f35948ba1991d66ca4542ff03a114fa676ae2faeb5b2a418edcbe5255b81629b97922d6acf2f45b4aadb7763a8176d6df6cc65115d7f9438e2d59f5ca7c593e0ac49994ba6a46e026aa08d340bdb3abee091e157f3"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000000033fe20902e6c62aebfa2000000000021c22dce58dc9c3effb703000008000000b70400000000000085000000030000009500000000000000355a23b9e71f2e3b47a591aa0b46d5323cc2411f8f"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.270753691s ago: executing program 2 (id=1141): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={r2}, 0x8) 4.16213789s ago: executing program 2 (id=1143): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000e40)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,uid=forget,anchor=0000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB=',dmode=00000000000000000002004,undelete,partition=00000000000000000001,unhide,\x00'], 0x1, 0xc43, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcZy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQIWMzsW3FJkbYskhIlfz429Z2deW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xrl46nTaZsOhh9AYAOCBuDz21VNntnv+AwCPrSs7/f8/AAAAAAAAAAAAAABwUKQo4slIMXd5LU1Unzvql9p9t26PD49sX+1IqmoeqsqXP/XTZ86e+9ILQ+e7eak98wH199pn4rWxKxcbL8/enJufWliYmmyMz7SvzU5O3fMedlt/q8HqBDRuvn5r8vr1hcaZ589u2nx74P3+J44PXBh69uQz3bLjwyMjYxtF6r3la/fdkI6dRngcjiJORornvvfT1IqIInZ/LuoP9tpvdaTqxGDVifHhkaoj0+3WzGK5cbR7IoqIRk+lZvccbX8totb3QPuws2bEUtn8ssGDZffG5lrzravTU43R1vxie7E9OzOaOq0t+9OIIs6niOWIWO2/e3d9UUQtUnzn2Fq6mt/6UZ2HL1YDg3duR7GPfbwHZTsbfRHLxSNwzQ6w/iji1Ujxs3dOxLV8n6nuNV+IeLXMH0S8VeZLEan8YpyLeG+b7xGPploU8efl9b+wliar+0H3vnLpa42vzFyf7Snbva98xOfDXXeKh/R8OLIlH4wDfm+qRxGt6o6/lu7/NzsAAAAAAAAAAAAAAAAA7LUjUcSnI8Ur//ZH1bjiqMalH7sw9PsDv9w7ZvzpD9lPWfb5iFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vvWwGwMAAAAAAAAAAAAAAAAAAPCxVsRPIsWL755Iy9E7p3h75kbjSuvqdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaERPRyZX+h906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDUn4r4fqRo/EHzzrpaRKTq344T5S/nonm4zE9Gc6jMl6J5MWerylrzWw+h/exOXyrix5Giv/72nQuer39f59Odr0G89c2NT5+pdfJQd+PA+/1PHD92YWjkc0/vtJy2a8DgpfbMrduN8eGRkbGe1bV89E/2rBvIxy32putExMIbb77emp6emr//hfIrsIvqj9BCqn1cemqhWojagWjGw+n7JvWHdYNiX5XP//cixW+/++/dB37n+V+PX+p8uvOEj5//ycbz/8WtO7rH539ta738/C+f6ds9/5/sWfdi/t1IXy2ivnhzru94RH3hjTdPtm+2bkzdmJo5d+rUl4eGvnz2VN/hiPr19vRUz9KenC4AAAAAAAAAAAAAAACABycV8buRovXjtdSIiNvVeK2BC0PPnnzmUByqxlttGrf92tiVi42XZ2/OzU8tLExNNsZn2tdmJ6fu9XD1arjX+PDIvnTmQx3Z5/Yfqb88O/fGfPvGHy5uu/1o/eLVhcX51rXtN8eRKCKavWsGqwaPD49UjZ5ut2aqqqPbDqb/6PpSEf8RKa6da6TP53V5/P/WEf6bxv8vbd3RHo7//9zRjfF/n+gpWh4zpSJ+Hil+6y+ejs9X7Twad52zXO5vIsXg+c/mcnG4LNdtQ+e9Ap2RgWXZ/4kU//CLzWW74yGf3Ch7+iOd3EdAef2PRYrv/9l349fzus3vf9j++h/duqN9ev/DUz3rjm56X8Guu06+/icjxUtPvh2/Ua35vw98/0f33RsnOoU33s+xT9f/V3vWDeTj/uZedR4AAAAAAAAAAOAR1peK+NtI8cORWnohr7uXv/83uXVH+/T3vz7Vs25yb+Yr+tCFXZ9UAAAAADgg+lIRP4kUNxbfvjOGevP4757xn7+zMf5zOG3ZWv05369U7w3Yyz//6zWQjzux+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dQnqvH8kzvOp74SKV75r+dyuXS8LNedB36g+rV+eXbm5MXp6dl6LLauTk81xuZa16bKuk9FirW//myuW1Tzq3fnm+/M8b4xF/t8pBj5u27Zzlzs3bnJn9ooe7os+4lI8Z9/v7lsnpo6zx1dlT1Tlv2rSPH1f9q+7PGNsmfLst+NFD/6eqNb9mhZtvt+1E9tlH3+2myxD1cFAAAAAAAAAAAAAAAAAACAj5u+VMSfRor/vrl8Zyx/nv+/r+dj5a1v9sz3v8Xtap7/gWr+/52W72f+/+q9Aks7HRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5PKYp4M1LMXV5LK/3l5476pfbMrdvjwyPbVzuSqpqHqvLlT/30mbPnvvTC0PlufnD9vfbpeG3sysXGy7M35+anFhamJhvjM+1rs5NT97yH3dbfarA6AY2br9+avH59oXHm+bObNt8eeL//ieMDF4aePflMt+z48MjIWE+ZWt99H/0uaYf1h6OIv4wUz33vp+mH/RFF7P5cfMh3Z78dqToxWHVifHik6sh0uzWzWG4c7Z6IIqLRU6nZPUcP4FrsSjNiqWx+2eDBsntjc6351tXpqcZoa36xvdienRlNndaW/WlEEedTxHJErPbfvbu+KOL1SPGdY2vpn/sjDnXPwxcvj3311Jmd21HsYx/vQdnORl/EcvEIXLMDrD+K+MdI8bN3TsS/9EfUovMTX4h4tcwfRLwVneudyi/GuYj3tvke8WiqRRH/W17/C2vpnf7yftC9r1z6WuMrM9dne8p27yuP/PPhQTrg96Z6FPGj6o6/lv7Vf9cAAAAAAAAAAAAAAAAAB0gRvxYpXnz3RKrGB98ZU9yeudG40ro63RnW1x371x0zvb6+vt5InWzmnMi5lHM550rO1ZxR5Po5m2XW19cn8uelnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ2DwAAAAAAAAAAAAAAAAAAeLwU1T8pvv2NtbTe35lfeiI6uWI+0Mfe/wcAAP//dsP5HA==") r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef007b06000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000002100)) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x594}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) signalfd(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r3, &(0x7f0000001180)=@known='system.sockprotoname\x00', 0x0, 0x0) 2.670322182s ago: executing program 4 (id=1145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) 2.604381647s ago: executing program 2 (id=1146): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073111d00000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x703, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x436, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f00000001640705007e48930577f5d20addbc"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) ioctl$HIDIOCGUSAGE(r6, 0x40184810, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r7 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a05014000000000000109022d000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r9, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r9, 0x29, 0x6, 0x0, &(0x7f0000000080)) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000200000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) syz_usb_control_io$hid(r7, &(0x7f0000000e40)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2784ce10"}, @main=@item_4={0x3, 0x0, 0x0, "a9aedaa8"}, @main=@item_4={0x3, 0x0, 0x0, "afe1d386"}]}}, 0x0}, 0x0) 2.509317755s ago: executing program 4 (id=1147): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="2daa0000000000007910a8000000000018090000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 2.44394149s ago: executing program 4 (id=1149): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x2, r2, 0xb}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000a00)={0x0, 0x0, 0x2, r2, 0x7}) 2.204671839s ago: executing program 3 (id=1151): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x190, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x1}}) 2.150685194s ago: executing program 2 (id=1152): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x22000000) 2.149975774s ago: executing program 4 (id=1153): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'veth1_vlan\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000100)) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) r3 = socket(0x40000000015, 0x5, 0x0) sendmsg$xdp(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.879649666s ago: executing program 3 (id=1155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x38}}, 0x0) 1.849782178s ago: executing program 4 (id=1156): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 1.591992149s ago: executing program 3 (id=1157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) 1.432956573s ago: executing program 3 (id=1158): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0xa}) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x38156023ebcd7958}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x801c581f, &(0x7f0000000140)) 231.177841ms ago: executing program 3 (id=1159): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) 60.626734ms ago: executing program 3 (id=1160): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x4, 0x4, 0xbf22}, 0x48) socket$netlink(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="020d0300100000000000000000000000080012000200000000000000000000000600320003000000000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006"], 0x80}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718"], 0x398}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000440)=0x82, 0x49) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6c9, &(0x7f0000000e00)="$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") listxattr(0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000033c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=1161): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f00001b4000/0x4000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x240, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='\n\n6'], 0x31) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r1}, &(0x7f0000001280), &(0x7f00000012c0)='%pi6 \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3b, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x70) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x80, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r5, &(0x7f0000000180), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = eventfd(0x800a6) write$eventfd(r6, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) r7 = dup(r6) write$binfmt_script(r7, &(0x7f0000000140), 0xb9) read$eventfd(r7, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): unconfined pid=6845 comm="syz.4.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3a7577299 code=0x7ffc0000 [ 301.662959][ T4584] device veth1_macvtap left promiscuous mode [ 301.670538][ T4584] device veth0_macvtap left promiscuous mode [ 301.677427][ T4584] device veth1_vlan left promiscuous mode [ 301.683281][ T4584] device veth0_vlan left promiscuous mode [ 301.727230][ T3716] usb 4-1: device not accepting address 9, error -71 [ 301.795445][ T3718] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 301.821464][ T6863] loop2: detected capacity change from 0 to 2048 [ 301.914853][ T6865] loop3: detected capacity change from 0 to 2048 [ 301.924347][ T6863] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.828: bad orphan inode 8192 [ 301.944081][ T6863] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 302.079625][ T6865] Alternate GPT is invalid, using primary GPT. [ 302.113264][ T6865] loop3: p2 p3 p7 [ 302.186230][ T3718] usb 1-1: Using ep0 maxpacket: 16 [ 302.333747][ T3718] usb 1-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 302.450568][ T3718] usb 1-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 302.776525][ T3718] usb 1-1: config 0 interface 0 has no altsetting 0 [ 302.955741][ T3718] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 302.975134][ T3718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.001353][ T3718] usb 1-1: Product: syz [ 303.002903][ T6555] EXT4-fs (loop2): unmounting filesystem. [ 303.006173][ T3718] usb 1-1: Manufacturer: syz [ 303.016704][ T3718] usb 1-1: SerialNumber: syz [ 303.023155][ T3718] usb 1-1: config 0 descriptor?? [ 303.068924][ T3718] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 303.215458][ T3645] Bluetooth: hci3: command tx timeout [ 303.913316][ T4584] team0 (unregistering): Port device team_slave_1 removed [ 303.967024][ T4584] team0 (unregistering): Port device team_slave_0 removed [ 304.013585][ T4584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.059466][ T4584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.236371][ T6888] loop2: detected capacity change from 0 to 512 [ 304.324471][ T6888] EXT4-fs (loop2): 1 orphan inode deleted [ 304.339196][ T6888] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 304.354102][ T6888] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038 (0x7fffffff) [ 304.482309][ T4787] usb 1-1: USB disconnect, device number 15 [ 305.348392][ T6555] EXT4-fs warning (device loop2): __ext4_unlink:3289: inode #16: comm syz-executor: Deleting file 'file3' with no links [ 305.369531][ T6555] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 305.410349][ T6555] EXT4-fs (loop2): Remounting filesystem read-only [ 305.528256][ T6555] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 306.256381][ T4584] bond0 (unregistering): Released all slaves [ 306.377434][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.393130][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.402403][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.408089][ T6891] loop3: detected capacity change from 0 to 32768 [ 306.422625][ T4567] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.429793][ T4567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.446914][ T6891] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 306.457275][ T6849] netlink: 'syz.4.823': attribute type 27 has an invalid length. [ 306.472206][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 306.481717][ T6849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.503045][ T3683] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x1df/0x2a0, xfs_agf block 0x1 [ 306.507765][ T6899] netlink: 44 bytes leftover after parsing attributes in process `syz.0.836'. [ 306.539908][ T3683] XFS (loop3): Unmount and run xfs_repair [ 306.561944][ T3683] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 306.573225][ T3683] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 306.589035][ T3683] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 306.621109][ T3683] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 306.655432][ T3683] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 306.671155][ T3683] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 306.680343][ T3683] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 306.689697][ T3683] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 306.698741][ T3683] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 306.707743][ T6891] XFS (loop3): metadata I/O error in "xfs_read_agf+0x2e2/0x680" at daddr 0x1 len 1 error 74 [ 306.837182][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.867710][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.882356][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.902647][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.911830][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.921331][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.930198][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.939136][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.964949][ T6740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.966502][ T6555] EXT4-fs (loop2): unmounting filesystem. [ 306.985294][ T3718] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 307.009909][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 307.019493][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 307.028247][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.056062][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.155349][ T3716] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 307.355521][ T3718] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 307.375638][ T3718] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 307.395503][ T3716] usb 5-1: Using ep0 maxpacket: 8 [ 307.425538][ T3718] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 307.434615][ T3718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.464891][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.474231][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.475770][ T6912] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 307.495143][ T6740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.528841][ T3716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 59391, setting to 1024 [ 307.546341][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.560061][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.626872][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.634623][ T6921] loop3: detected capacity change from 0 to 1024 [ 307.646312][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.667776][ T6740] device veth0_vlan entered promiscuous mode [ 307.732365][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.741269][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.800482][ T3716] usb 5-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 308.404408][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 308.404463][ T26] audit: type=1800 audit(1722252202.575:198): pid=6922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.843" name="bus" dev="loop3" ino=25 res=0 errno=0 [ 308.426185][ T4795] usb 1-1: USB disconnect, device number 16 [ 308.485314][ T3716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.496275][ T6740] device veth1_vlan entered promiscuous mode [ 308.521676][ T3716] usb 5-1: Product: syz [ 308.528160][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 308.565351][ T3716] usb 5-1: Manufacturer: syz [ 308.570019][ T3716] usb 5-1: SerialNumber: syz [ 308.600600][ T3716] usb 5-1: config 0 descriptor?? [ 308.615927][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 308.635813][ T6914] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 308.643356][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.658039][ T3716] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 308.673314][ T6740] device veth0_macvtap entered promiscuous mode [ 308.675737][ T3716] radio-si470x: probe of 5-1:0.0 failed with error -5 [ 308.691721][ T6740] device veth1_macvtap entered promiscuous mode [ 308.708807][ T3716] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 308.752342][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.780178][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.789529][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.790335][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.808060][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.810435][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.818493][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.835956][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.838648][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.854283][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.855900][ T6740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.870673][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.844'. [ 308.875469][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 308.880329][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 308.894476][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 308.901881][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 308.929192][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.938244][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.950572][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.967769][ T4795] usb 5-1: USB disconnect, device number 14 [ 308.977077][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.987566][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.998285][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.013367][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.024127][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.036307][ T6740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.242750][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 309.251741][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 309.268699][ T6740] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.473432][ T6740] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.662722][ T6740] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.830290][ T6740] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.023315][ T3645] Bluetooth: hci0: command tx timeout [ 310.293976][ T6924] chnl_net:caif_netlink_parms(): no params data found [ 310.325626][ T3801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.372865][ T3904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.398099][ T3904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.446224][ T3801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.472570][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 310.564965][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 311.030459][ T3645] Bluetooth: hci3: command tx timeout [ 311.726560][ T3683] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 311.882694][ T6949] netlink: 44 bytes leftover after parsing attributes in process `syz.0.850'. [ 311.904644][ T6924] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.931615][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.950331][ T6924] device bridge_slave_0 entered promiscuous mode [ 311.987079][ T6924] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.009055][ T3683] usb 5-1: Using ep0 maxpacket: 8 [ 312.021532][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.044095][ T6924] device bridge_slave_1 entered promiscuous mode [ 312.091356][ T3645] Bluetooth: hci2: unexpected subevent 0x01 length: 78 > 18 [ 312.099098][ T3645] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 312.145576][ T3683] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 312.158250][ T3683] usb 5-1: config 0 has no interface number 0 [ 312.175611][ T3683] usb 5-1: config 0 interface 11 has no altsetting 0 [ 312.197040][ T3683] usb 5-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=5a.16 [ 312.220943][ T3683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.238281][ T3683] usb 5-1: config 0 descriptor?? [ 312.285631][ T3683] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 312.292827][ T3683] usb 5-1: selecting invalid altsetting 0 [ 312.302034][ T6924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.339422][ T2035] pvrusb2: Invalid write control endpoint [ 312.350226][ T6924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.504818][ T6924] team0: Port device team_slave_0 added [ 312.520869][ T2035] pvrusb2: Invalid write control endpoint [ 312.528454][ T2035] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 312.547575][ T3683] usb 5-1: USB disconnect, device number 15 [ 312.563213][ T6924] team0: Port device team_slave_1 added [ 312.573477][ T2035] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 312.605485][ T2035] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 312.635187][ T2035] pvrusb2: Device being rendered inoperable [ 312.680717][ T2035] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 312.702595][ T2035] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 312.721356][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.735033][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.775748][ T2035] pvrusb2: Attached sub-driver cx25840 [ 312.796289][ T6924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.835979][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.842959][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.945103][ T6924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.967400][ T2035] pvrusb2: Attempted to execute control transfer when device not ok [ 312.983277][ T2035] pvrusb2: Attempted to execute control transfer when device not ok [ 312.993346][ T2035] pvrusb2: Attempted to execute control transfer when device not ok [ 313.019020][ T2035] pvrusb2: Attempted to execute control transfer when device not ok [ 313.044446][ T2035] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 313.061304][ T3645] Bluetooth: hci3: command tx timeout [ 313.123868][ T6924] device hsr_slave_0 entered promiscuous mode [ 313.132276][ T6924] device hsr_slave_1 entered promiscuous mode [ 313.140902][ T6924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.148643][ T6924] Cannot create hsr debugfs directory [ 313.247933][ T2035] TUNER: Unable to find symbol tda829x_probe() [ 313.322833][ T2035] DVB: Unable to find symbol tda9887_attach() [ 313.329088][ T2035] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 313.337254][ T2035] pvrusb2: Attached sub-driver tuner [ 313.342549][ T2035] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 313.356078][ T2035] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 313.401178][ T6924] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.510100][ T4584] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.587900][ T6924] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.669344][ T4584] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.699984][ T6924] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.735380][ T4795] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 313.863570][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 313.882107][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.899127][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.911033][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.915038][ T4584] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.926768][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 313.928756][ T3683] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 313.937898][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.266740][ T6924] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.560436][ T4584] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.612027][ T4795] usb 4-1: Using ep0 maxpacket: 32 [ 314.737923][ T4795] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 314.751947][ T4795] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 314.777760][ T4795] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.795296][ T3683] usb 1-1: Using ep0 maxpacket: 8 [ 314.874295][ T6924] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 314.889610][ T6976] chnl_net:caif_netlink_parms(): no params data found [ 314.919611][ T6924] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 314.927053][ T3683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 59391, setting to 1024 [ 314.941228][ T6924] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 314.948587][ T4795] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.958786][ T4795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.966875][ T4795] usb 4-1: Product: syz [ 314.971195][ T4795] usb 4-1: Manufacturer: syz [ 314.976225][ T4795] usb 4-1: SerialNumber: syz [ 314.995527][ T6924] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 315.055936][ T26] audit: type=1326 audit(1722252209.225:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.4.860" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3a7577299 code=0x0 [ 315.134260][ T6976] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.135407][ T3654] Bluetooth: hci3: command tx timeout [ 315.146760][ T3683] usb 1-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 315.146788][ T3683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.146809][ T3683] usb 1-1: Product: syz [ 315.146824][ T3683] usb 1-1: Manufacturer: syz [ 315.146850][ T3683] usb 1-1: SerialNumber: syz [ 315.154022][ T3683] usb 1-1: config 0 descriptor?? [ 315.157839][ T6976] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.194347][ T6976] device bridge_slave_0 entered promiscuous mode [ 315.203213][ T6976] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.210452][ T6976] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.216473][ T6973] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 315.218922][ T6976] device bridge_slave_1 entered promiscuous mode [ 315.247606][ T3683] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 315.255068][ T3683] radio-si470x: probe of 1-1:0.0 failed with error -5 [ 315.265060][ T3683] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 315.348716][ T6976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.361824][ T6976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.432126][ T6976] team0: Port device team_slave_0 added [ 315.455150][ T3688] usb 1-1: USB disconnect, device number 17 [ 315.496286][ T6976] team0: Port device team_slave_1 added [ 315.543533][ T6976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.556764][ T6976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.584538][ T6976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.624936][ T6976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.640601][ T6976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.668363][ T6976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.711618][ T4795] usb 4-1: 0:2 : does not exist [ 315.723534][ T4795] usb 4-1: USB disconnect, device number 11 [ 315.773330][ T6924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.798120][ T6976] device hsr_slave_0 entered promiscuous mode [ 315.806216][ T6976] device hsr_slave_1 entered promiscuous mode [ 315.812819][ T6976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.820909][ T6976] Cannot create hsr debugfs directory [ 315.854974][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 315.865942][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 315.876817][ T6924] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.900409][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 315.909569][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 315.918317][ T3688] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.925485][ T3688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.947030][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 315.962370][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 315.972439][ T3688] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.979598][ T3688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.006240][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 316.096217][ T3654] Bluetooth: hci0: command tx timeout [ 316.173708][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 316.824002][ T6998] netlink: 44 bytes leftover after parsing attributes in process `syz.0.862'. [ 316.981545][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.988710][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.215299][ T3654] Bluetooth: hci3: command tx timeout [ 317.317779][ T7000] loop3: detected capacity change from 0 to 1024 [ 317.623485][ T3654] Bluetooth: hci5: unexpected subevent 0x01 length: 78 > 18 [ 317.655371][ T3654] Bluetooth: hci5: Invalid handle: 0x4100 > 0x0eff [ 317.739851][ T7004] loop4: detected capacity change from 0 to 1024 [ 317.750622][ T7004] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.858619][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 317.895794][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.605426][ T3654] Bluetooth: hci0: command tx timeout [ 318.768131][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.791029][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.802097][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.834178][ T6924] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.856612][ T6924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.989321][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 319.006469][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 319.035689][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.044187][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 319.085457][ T3716] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 319.134578][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.168397][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 319.335387][ T3716] usb 1-1: Using ep0 maxpacket: 8 [ 319.466420][ T3716] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 319.487093][ T3716] usb 1-1: config 0 has no interface number 0 [ 319.495823][ T3716] usb 1-1: config 0 interface 11 has no altsetting 0 [ 319.503019][ T3716] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=5a.16 [ 319.660976][ T3716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.696582][ T3716] usb 1-1: config 0 descriptor?? [ 319.751519][ T3716] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 319.823829][ T3716] usb 1-1: selecting invalid altsetting 0 [ 319.846347][ T2035] pvrusb2: Invalid write control endpoint [ 320.451551][ T4784] usb 1-1: USB disconnect, device number 18 [ 320.623204][ T2035] pvrusb2: Invalid write control endpoint [ 320.638661][ T2035] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 320.656241][ T3645] Bluetooth: hci0: command tx timeout [ 320.662022][ T6924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.685504][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.693138][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.715385][ T2035] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 320.722978][ T2035] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 320.775266][ T2035] pvrusb2: Device being rendered inoperable [ 320.792823][ T2035] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 320.811902][ T2035] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 320.832315][ T2035] pvrusb2: Attached sub-driver cx25840 [ 320.937401][ T2035] pvrusb2: Attempted to execute control transfer when device not ok [ 320.954325][ T2035] pvrusb2: Attempted to execute control transfer when device not ok [ 320.980771][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 320.990448][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 321.003458][ T2035] pvrusb2: Attempted to execute control transfer when device not ok [ 321.030325][ T2035] pvrusb2: Attempted to execute control transfer when device not ok [ 321.055905][ T2035] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 321.208994][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 321.225806][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 321.244938][ T6924] device veth0_vlan entered promiscuous mode [ 321.289511][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 321.297894][ T7032] loop3: detected capacity change from 0 to 32768 [ 321.314762][ T7032] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 scanned by syz.3.870 (7032) [ 321.316126][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 321.341996][ T2035] TUNER: Unable to find symbol tda829x_probe() [ 321.358514][ T7032] BTRFS info (device loop3): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 321.385565][ T4584] device hsr_slave_0 left promiscuous mode [ 321.395447][ T7032] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 321.411756][ T4584] device hsr_slave_1 left promiscuous mode [ 321.415032][ T7032] BTRFS info (device loop3): using free space tree [ 321.432167][ T4584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.452301][ T4584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.474560][ T4584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.495918][ T7035] loop4: detected capacity change from 0 to 40427 [ 321.499004][ T2035] DVB: Unable to find symbol tda9887_attach() [ 321.505383][ T4584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.515823][ T2035] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 321.517978][ T7035] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 321.523309][ T4584] device bridge_slave_1 left promiscuous mode [ 321.539026][ T7035] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 321.545386][ T2035] pvrusb2: Attached sub-driver tuner [ 321.549454][ T7035] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 321.558378][ T2035] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 321.562740][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.577528][ T2035] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 321.602866][ T4584] device bridge_slave_0 left promiscuous mode [ 321.607376][ T7035] F2FS-fs (loop4): Found nat_bits in checkpoint [ 321.609742][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.648557][ T7032] BTRFS info (device loop3): enabling ssd optimizations [ 321.664256][ T4584] device hsr_slave_0 left promiscuous mode [ 321.673853][ T7035] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 321.681632][ T4584] device hsr_slave_1 left promiscuous mode [ 321.688328][ T4584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.696646][ T7035] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 321.704862][ T4584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.716733][ T4584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.724277][ T4584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.732371][ T4584] device bridge_slave_1 left promiscuous mode [ 321.732679][ T7035] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 321.739043][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.759342][ T4584] device bridge_slave_0 left promiscuous mode [ 321.766150][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.830134][ T6267] BTRFS info (device loop3): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 321.907561][ T4584] device veth1_macvtap left promiscuous mode [ 321.913945][ T4584] device veth0_macvtap left promiscuous mode [ 321.930022][ T4584] device veth1_vlan left promiscuous mode [ 321.941801][ T4584] device veth0_vlan left promiscuous mode [ 321.965706][ T4784] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 322.059389][ T4584] device veth1_macvtap left promiscuous mode [ 322.076648][ T4584] device veth0_macvtap left promiscuous mode [ 322.082867][ T4584] device veth1_vlan left promiscuous mode [ 322.123429][ T4584] device veth0_vlan left promiscuous mode [ 322.129932][ T7064] loop4: detected capacity change from 0 to 1024 [ 322.245498][ T4784] usb 1-1: Using ep0 maxpacket: 32 [ 322.516594][ T26] audit: type=1800 audit(1722252216.695:200): pid=7065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.875" name="bus" dev="loop4" ino=25 res=0 errno=0 [ 322.565759][ T4784] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 322.575315][ T4784] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 322.589466][ T4784] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.736923][ T3645] Bluetooth: hci0: command tx timeout [ 323.033521][ T4784] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.043683][ T4784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.052459][ T4784] usb 1-1: Product: syz [ 323.058679][ T4784] usb 1-1: Manufacturer: syz [ 323.063391][ T4784] usb 1-1: SerialNumber: syz [ 323.242129][ T7072] Bluetooth: MGMT ver 1.22 [ 324.119259][ T7075] loop4: detected capacity change from 0 to 1024 [ 324.385459][ T4784] usb 1-1: 0:2 : does not exist [ 324.398220][ T4784] usb 1-1: USB disconnect, device number 19 [ 324.540567][ T3645] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 324.821744][ T3645] Bluetooth: hci0: command tx timeout [ 325.117925][ T4584] team0 (unregistering): Port device team_slave_1 removed [ 325.192978][ T4584] team0 (unregistering): Port device team_slave_0 removed [ 325.272786][ T4584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.551585][ T4584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.958223][ T3681] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 326.185064][ T4584] bond0 (unregistering): Released all slaves [ 326.209846][ T3681] usb 5-1: Using ep0 maxpacket: 8 [ 326.230080][ T26] audit: type=1326 audit(1722252220.405:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.0.884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e28b77299 code=0x0 [ 326.335732][ T3681] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 326.346866][ T26] audit: type=1326 audit(1722252220.525:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e28b77299 code=0x7ffc0000 [ 326.352766][ T3681] usb 5-1: config 0 has no interface number 0 [ 326.379060][ T3681] usb 5-1: config 0 interface 11 has no altsetting 0 [ 326.387333][ T3681] usb 5-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=5a.16 [ 326.394546][ T26] audit: type=1326 audit(1722252220.525:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f2e28b77299 code=0x7ffc0000 [ 326.402374][ T3681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.432334][ T26] audit: type=1326 audit(1722252220.525:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e28b77299 code=0x7ffc0000 [ 326.460875][ T26] audit: type=1326 audit(1722252220.525:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e28b77299 code=0x7ffc0000 [ 326.463255][ T3681] usb 5-1: config 0 descriptor?? [ 326.483488][ T26] audit: type=1326 audit(1722252220.525:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e28b77299 code=0x7ffc0000 [ 326.483544][ T26] audit: type=1326 audit(1722252220.525:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e28b77299 code=0x7ffc0000 [ 326.483579][ T26] audit: type=1326 audit(1722252220.525:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e28b77299 code=0x7ffc0000 [ 326.483613][ T26] audit: type=1326 audit(1722252220.525:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e28b77299 code=0x7ffc0000 [ 326.637610][ T3681] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 326.645033][ T3681] usb 5-1: selecting invalid altsetting 0 [ 326.660350][ T2035] pvrusb2: Invalid write control endpoint [ 326.735786][ T2035] pvrusb2: Invalid write control endpoint [ 326.743321][ T2035] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 326.763210][ T2035] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 326.771091][ T2035] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 326.781622][ T2035] pvrusb2: Device being rendered inoperable [ 326.787805][ T2035] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 326.795033][ T2035] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 326.805286][ T2035] pvrusb2: Attached sub-driver cx25840 [ 326.876734][ T2035] pvrusb2: Attempted to execute control transfer when device not ok [ 326.895515][ T2035] pvrusb2: Attempted to execute control transfer when device not ok [ 326.917883][ T2035] pvrusb2: Attempted to execute control transfer when device not ok [ 326.930258][ T2035] pvrusb2: Attempted to execute control transfer when device not ok [ 326.941585][ T2035] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 326.958188][ T4784] usb 5-1: USB disconnect, device number 16 [ 327.034687][ T4584] team0 (unregistering): Port device team_slave_1 removed [ 327.091219][ T2035] TUNER: Unable to find symbol tda829x_probe() [ 327.114890][ T4584] team0 (unregistering): Port device team_slave_0 removed [ 327.145182][ T2035] DVB: Unable to find symbol tda9887_attach() [ 327.151385][ T2035] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 327.166274][ T2035] pvrusb2: Attached sub-driver tuner [ 327.171596][ T2035] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 327.191086][ T2035] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 327.209172][ T4584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.261368][ T4584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.712035][ T4584] bond0 (unregistering): Released all slaves [ 328.824572][ T7096] netlink: 'syz.0.884': attribute type 27 has an invalid length. [ 328.834282][ T7096] device lo entered promiscuous mode [ 328.847908][ T7096] device tunl0 entered promiscuous mode [ 328.854862][ T7096] device gre0 entered promiscuous mode [ 328.867411][ T7096] device gretap0 entered promiscuous mode [ 328.873846][ T7096] device erspan0 entered promiscuous mode [ 328.888550][ T7096] device ip_vti0 entered promiscuous mode [ 328.896333][ T7096] device ip6_vti0 entered promiscuous mode [ 328.903169][ T7096] device sit0 entered promiscuous mode [ 328.911283][ T7096] device ip6tnl0 entered promiscuous mode [ 328.919312][ T7096] device ip6gre0 entered promiscuous mode [ 328.926114][ T7096] device syz_tun entered promiscuous mode [ 328.932325][ T7096] device ip6gretap0 entered promiscuous mode [ 328.939057][ T7096] device bridge0 entered promiscuous mode [ 328.945442][ T7096] device vcan0 entered promiscuous mode [ 328.951097][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 328.959021][ T7096] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 328.967410][ T7096] device bond0 entered promiscuous mode [ 328.973070][ T7096] device bond_slave_0 entered promiscuous mode [ 328.979447][ T7096] device bond_slave_1 entered promiscuous mode [ 328.985873][ T4784] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 328.997042][ T7096] device team0 entered promiscuous mode [ 329.002621][ T7096] device team_slave_0 entered promiscuous mode [ 329.009171][ T7096] device team_slave_1 entered promiscuous mode [ 329.016776][ T7096] device dummy0 entered promiscuous mode [ 329.023103][ T7096] device nlmon0 entered promiscuous mode [ 329.030272][ T7096] device caif0 entered promiscuous mode [ 329.036020][ T7096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 329.054334][ T6924] device veth1_vlan entered promiscuous mode [ 329.145395][ T6976] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 329.165715][ T6976] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 329.181205][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 329.190919][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 329.202298][ T6924] device veth0_macvtap entered promiscuous mode [ 329.210566][ T6976] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 329.223033][ T6924] device veth1_macvtap entered promiscuous mode [ 329.231931][ T4784] usb 5-1: Using ep0 maxpacket: 16 [ 329.233151][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 329.233165][ T26] audit: type=1326 audit(1722252223.405:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.0.888" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e28b77299 code=0x0 [ 329.239666][ T6976] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 329.310267][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.320889][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.331703][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.343742][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.356642][ T6924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.364747][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 329.373366][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 329.381447][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 329.390589][ T4784] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 329.402638][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 329.410907][ T4784] usb 5-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 329.424545][ T4784] usb 5-1: config 0 interface 0 has no altsetting 0 [ 329.437577][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.450755][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.461045][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.472110][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.490742][ T6924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.503883][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 329.514087][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 329.537930][ T6924] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.548180][ T6924] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.559382][ T6924] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.568404][ T6924] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.619906][ T4784] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 329.633200][ T4784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.641467][ T4784] usb 5-1: Product: syz [ 329.645938][ T4784] usb 5-1: Manufacturer: syz [ 329.650623][ T4784] usb 5-1: SerialNumber: syz [ 329.670349][ T4784] usb 5-1: config 0 descriptor?? [ 329.738991][ T4784] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 329.785995][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.794152][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.811756][ T6976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.846332][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 329.893073][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.901822][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.942053][ T6976] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.970344][ T3904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.988133][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.998924][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.000377][ T7122] loop3: detected capacity change from 0 to 1024 [ 330.007345][ T3904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.015967][ T3688] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.028445][ T3688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.053723][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 330.063139][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.071642][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.080639][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.089295][ T3688] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.096507][ T3688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.104549][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.168608][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.189027][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.222876][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.263815][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.294006][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.308985][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.320056][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.341835][ T6976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.443903][ T6976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.516076][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.524524][ T4797] usb 5-1: USB disconnect, device number 17 [ 330.528148][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.287890][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.580792][ T7139] loop2: detected capacity change from 0 to 2048 [ 332.396884][ T7139] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.427513][ T7154] loop2: detected capacity change from 0 to 128 [ 333.849336][ T6976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.867793][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 333.888081][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.948181][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.999018][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 334.065436][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 334.082438][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.116465][ T7165] loop2: detected capacity change from 0 to 4096 [ 334.124531][ T6976] device veth0_vlan entered promiscuous mode [ 334.138152][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 334.161729][ T7165] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 334.168073][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 334.247544][ T7165] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 334.274567][ T6976] device veth1_vlan entered promiscuous mode [ 334.293539][ T7165] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 334.356144][ T7165] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 334.393202][ T7165] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 334.429553][ T6976] device veth0_macvtap entered promiscuous mode [ 334.464436][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 334.473568][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 334.496812][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 334.516551][ T7165] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 334.523592][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.565798][ T6976] device veth1_macvtap entered promiscuous mode [ 334.573733][ T7165] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 334.596466][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 334.606903][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 334.625299][ T7165] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 334.640791][ T6976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.676004][ T6976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.695912][ T6976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.720642][ T7165] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 334.726732][ T6976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.744641][ T7165] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 334.765357][ T6976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.789625][ T7165] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 334.795217][ T6976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.822255][ T7165] ntfs: volume version 3.1. [ 334.837016][ T6976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.846819][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 334.876217][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 334.915494][ T6976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.953304][ T6976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.985285][ T6976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.015928][ T6976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.045417][ T6976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.081105][ T6976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.106959][ T6976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.116036][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.125082][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.162774][ T6976] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.181911][ T6976] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.202168][ T6976] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.211061][ T6976] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.398897][ T3904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.421167][ T3904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.498584][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 335.521344][ T3904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.535689][ T3904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.546965][ T3716] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 335.586809][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 335.825811][ T7178] netlink: 256 bytes leftover after parsing attributes in process `syz.3.906'. [ 335.837145][ T7178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.906'. [ 335.955371][ T3716] usb 3-1: Using ep0 maxpacket: 32 [ 336.079137][ T3716] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 336.177389][ T3716] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 336.546397][ T3716] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.746731][ T7183] loop3: detected capacity change from 0 to 1024 [ 336.754504][ T3716] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.780516][ T3716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.805532][ T3716] usb 3-1: Product: syz [ 336.809733][ T3716] usb 3-1: Manufacturer: syz [ 336.814320][ T3716] usb 3-1: SerialNumber: syz [ 336.995283][ T3718] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 338.155365][ T3718] usb 1-1: Using ep0 maxpacket: 32 [ 338.275460][ T3718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 338.367270][ T3716] usb 3-1: 0:2 : does not exist [ 338.384315][ T3716] usb 3-1: USB disconnect, device number 18 [ 338.412293][ T4584] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.455573][ T3718] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 338.464644][ T3718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.472801][ T3718] usb 1-1: Product: syz [ 338.477060][ T3718] usb 1-1: Manufacturer: syz [ 338.481674][ T3718] usb 1-1: SerialNumber: syz [ 338.488038][ T3718] usb 1-1: config 0 descriptor?? [ 338.526900][ T3718] pvrusb2: Hardware description: Terratec Grabster AV400 [ 338.533965][ T3718] pvrusb2: ********** [ 338.538143][ T3718] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 338.548537][ T3718] pvrusb2: Important functionality might not be entirely working. [ 338.556403][ T3718] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 338.567763][ T3718] pvrusb2: ********** [ 338.740665][ T4584] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.757211][ T2035] pvrusb2: Invalid write control endpoint [ 338.770610][ T7196] loop3: detected capacity change from 0 to 128 [ 338.844192][ T2035] pvrusb2: Invalid write control endpoint [ 338.852426][ T2035] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 338.902430][ T4584] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.906687][ T2035] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 338.965323][ T2035] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 338.970549][ T3718] usb 1-1: USB disconnect, device number 20 [ 338.985487][ T3654] Bluetooth: hci3: command tx timeout [ 339.031096][ T2035] pvrusb2: Device being rendered inoperable [ 339.042461][ T7202] loop2: detected capacity change from 0 to 256 [ 339.059137][ T4584] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.075408][ T2035] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 339.094687][ T2035] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 339.130068][ T2035] pvrusb2: Attached sub-driver cx25840 [ 339.165963][ T2035] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 339.193695][ T2035] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 339.243838][ T3645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.255112][ T3645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.264961][ T3645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.274789][ T3645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.284332][ T3645] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.294806][ T3645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.521811][ T7208] loop4: detected capacity change from 0 to 1024 [ 339.544151][ T7200] loop3: detected capacity change from 0 to 40427 [ 339.562785][ T7200] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 339.581741][ T7200] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 339.601767][ T7210] capability: warning: `syz.0.916' uses deprecated v2 capabilities in a way that may be insecure [ 339.629211][ T7200] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 339.665208][ T7200] F2FS-fs (loop3): Found nat_bits in checkpoint [ 339.729559][ T7208] loop4: detected capacity change from 0 to 4096 [ 339.763856][ T7208] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 339.815222][ T7200] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 339.830771][ T7200] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 339.958570][ T7200] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 340.021815][ T7222] netlink: 256 bytes leftover after parsing attributes in process `syz.0.918'. [ 340.081890][ T7205] chnl_net:caif_netlink_parms(): no params data found [ 340.118167][ T7222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.918'. [ 341.417701][ T3645] Bluetooth: hci0: command tx timeout [ 341.723969][ T7205] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.742802][ T7205] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.762320][ T7205] device bridge_slave_0 entered promiscuous mode [ 341.771493][ T7205] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.778876][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.788279][ T7205] device bridge_slave_1 entered promiscuous mode [ 341.842562][ T7205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.878709][ T7205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.916257][ T7205] team0: Port device team_slave_0 added [ 341.931544][ T3716] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 341.956532][ T7205] team0: Port device team_slave_1 added [ 341.975567][ T4790] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 341.991347][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.998710][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.032642][ T7205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.069572][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.077510][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.104973][ T7205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.175334][ T3716] usb 5-1: Using ep0 maxpacket: 32 [ 342.191496][ T7205] device hsr_slave_0 entered promiscuous mode [ 342.198491][ T7205] device hsr_slave_1 entered promiscuous mode [ 342.295429][ T3716] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 342.304164][ T3716] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 342.315562][ T4784] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 342.339597][ T3716] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.364088][ T4584] device hsr_slave_0 left promiscuous mode [ 342.373800][ T4584] device hsr_slave_1 left promiscuous mode [ 342.380119][ T4790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.388898][ T7251] loop2: detected capacity change from 0 to 2048 [ 342.400270][ T4790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.410447][ T4790] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 342.420233][ T7251] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.420247][ T4790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.438207][ T4584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.447010][ T4790] usb 4-1: config 0 descriptor?? [ 342.452127][ T4584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.460490][ T4584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.468076][ T4584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.477079][ T4584] device bridge_slave_1 left promiscuous mode [ 342.483405][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.494738][ T4584] device bridge_slave_0 left promiscuous mode [ 342.512405][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.518753][ T3716] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.529600][ T3716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.538145][ T3716] usb 5-1: Product: syz [ 342.542426][ T3716] usb 5-1: Manufacturer: syz [ 342.547758][ T3716] usb 5-1: SerialNumber: syz [ 342.565403][ T4784] usb 1-1: Using ep0 maxpacket: 32 [ 342.603261][ T4584] device veth1_macvtap left promiscuous mode [ 342.615278][ T4584] device veth0_macvtap left promiscuous mode [ 342.621837][ T4584] device veth1_vlan left promiscuous mode [ 342.628357][ T4584] device veth0_vlan left promiscuous mode [ 342.715636][ T4784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 342.925313][ T4784] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 342.934573][ T4784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.652870][ T3645] Bluetooth: hci0: command tx timeout [ 343.670898][ T4784] usb 1-1: Product: syz [ 343.675328][ T4784] usb 1-1: Manufacturer: syz [ 343.680095][ T4784] usb 1-1: SerialNumber: syz [ 343.688408][ T4784] usb 1-1: config 0 descriptor?? [ 343.715677][ T4790] kye 0003:0458:0138.000A: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.3-1/input0 [ 343.744098][ T4784] pvrusb2: Hardware description: Terratec Grabster AV400 [ 343.751466][ T4784] pvrusb2: ********** [ 343.762181][ T4784] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 343.772717][ T4784] pvrusb2: Important functionality might not be entirely working. [ 343.780933][ T4784] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 343.792627][ T4784] pvrusb2: ********** [ 343.915651][ T3716] usb 5-1: 0:2 : does not exist [ 343.939011][ T3716] usb 5-1: USB disconnect, device number 18 [ 343.973849][ T2035] pvrusb2: Invalid write control endpoint [ 343.993799][ T7255] loop2: detected capacity change from 0 to 40427 [ 344.010092][ T7255] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 344.024876][ T7255] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 344.035148][ T7255] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 344.053858][ T7255] F2FS-fs (loop2): Found nat_bits in checkpoint [ 344.100316][ T2035] pvrusb2: Invalid write control endpoint [ 344.108725][ T2035] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 344.123165][ T2035] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 344.133501][ T2035] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 344.148530][ T2035] pvrusb2: Device being rendered inoperable [ 344.154984][ T2035] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 344.168282][ T2035] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 344.175981][ T7255] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 344.185315][ T7255] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 344.203511][ T4790] usb 1-1: USB disconnect, device number 21 [ 344.212127][ T2035] pvrusb2: Attached sub-driver cx25840 [ 344.228318][ T2035] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 344.238962][ T7255] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 344.253998][ T2035] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 344.276781][ T4584] team0 (unregistering): Port device team_slave_1 removed [ 344.365079][ T4584] team0 (unregistering): Port device team_slave_0 removed [ 344.454976][ T4584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.506958][ T7265] loop4: detected capacity change from 0 to 1024 [ 344.534981][ T4584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.654110][ T7265] loop4: detected capacity change from 0 to 4096 [ 344.662221][ T7265] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 345.071465][ T4790] usb 4-1: USB disconnect, device number 12 [ 345.229911][ T7275] loop3: detected capacity change from 0 to 128 [ 345.753628][ T3645] Bluetooth: hci0: command tx timeout [ 346.208030][ T7280] loop4: detected capacity change from 0 to 2048 [ 346.231673][ T7280] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 346.493699][ T4584] bond0 (unregistering): Released all slaves [ 346.505473][ T7] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 346.895694][ T7] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 346.904768][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.914077][ T7] usb 4-1: config 0 descriptor?? [ 346.945291][ T4797] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 347.215430][ T4797] usb 3-1: Using ep0 maxpacket: 32 [ 347.227989][ T7205] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 347.239472][ T7300] loop4: detected capacity change from 0 to 1024 [ 347.251669][ T7205] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 347.262728][ T7205] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 347.273109][ T7205] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 347.336963][ T4797] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 347.365860][ T4797] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 347.395428][ T7] gs_usb 4-1:0.0: Configuring for 232 interfaces [ 347.405206][ T4797] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.414285][ T7] gs_usb 4-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 347.433780][ T7] gs_usb: probe of 4-1:0.0 failed with error -22 [ 347.452293][ T7300] loop4: detected capacity change from 0 to 4096 [ 347.458549][ T7205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.471858][ T7300] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 347.498807][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.514281][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.527760][ T7205] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.549438][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.564326][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.573335][ T4567] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.580589][ T4567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.599040][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 347.607614][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 347.625529][ T4797] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 347.626437][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.655080][ T4797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.660523][ T4567] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.663246][ T4797] usb 3-1: Product: syz [ 347.670365][ T4567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.672557][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 347.694199][ T4797] usb 3-1: Manufacturer: syz [ 347.708948][ T4797] usb 3-1: SerialNumber: syz [ 347.740575][ T4567] usb 4-1: USB disconnect, device number 13 [ 347.775644][ T3654] Bluetooth: hci0: command tx timeout [ 347.787846][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.806882][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.817994][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.827101][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 347.836475][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.846205][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.854644][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.863691][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.872302][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.890561][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 347.907146][ T7205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 349.125482][ T4797] usb 3-1: 0:2 : does not exist [ 349.161094][ T4797] usb 3-1: USB disconnect, device number 19 [ 349.526681][ T7329] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 350.172934][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 350.191241][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 350.234151][ T7205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.423332][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 350.434720][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 350.488296][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 350.510589][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 350.546552][ T7205] device veth0_vlan entered promiscuous mode [ 350.567567][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 350.575822][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 350.590209][ T7205] device veth1_vlan entered promiscuous mode [ 350.672227][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 350.685274][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 350.698468][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 350.722858][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 350.725907][ T4567] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 350.757297][ T7205] device veth0_macvtap entered promiscuous mode [ 350.778779][ T7205] device veth1_macvtap entered promiscuous mode [ 350.828428][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.849289][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.884472][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.911441][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.935334][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.955224][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.977961][ T7205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.003129][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 351.012525][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 351.031133][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 351.050396][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.069737][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.090581][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.114011][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.122655][ T4567] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 351.134963][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.152780][ T4567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.160400][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.183117][ T4567] usb 5-1: config 0 descriptor?? [ 351.188701][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.240738][ T7205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.277891][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 351.291193][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 351.387992][ T7205] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.422852][ T7205] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.471282][ T7205] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.515127][ T7205] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.755891][ T4567] gs_usb 5-1:0.0: Configuring for 232 interfaces [ 351.774701][ T4567] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 351.926239][ T4567] gs_usb: probe of 5-1:0.0 failed with error -22 [ 352.315451][ T4567] usb 5-1: USB disconnect, device number 19 [ 352.642326][ T7361] syz.2.968[7361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.642439][ T7361] syz.2.968[7361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.902752][ T4526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.028685][ T4526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.441802][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 353.555988][ T6570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.577343][ T6570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.588146][ T7372] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 353.662831][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 353.845811][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 353.845945][ T26] audit: type=1326 audit(1722252247.975:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7369 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a7577299 code=0x7ffc0000 [ 354.794610][ T26] audit: type=1326 audit(1722252247.975:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7369 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3a7577299 code=0x7ffc0000 [ 357.429813][ T4567] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 358.919303][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 358.992247][ T7429] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 359.135804][ T4784] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 359.547271][ T4784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.598184][ T4784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.681777][ T4784] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 359.758746][ T4784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.862542][ T4784] usb 5-1: config 0 descriptor?? [ 359.876379][ T4567] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 359.905921][ T4567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.941706][ T4567] usb 3-1: config 0 descriptor?? [ 360.097590][ T4567] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 360.114695][ T4567] gs_usb: probe of 3-1:0.0 failed with error -71 [ 360.314508][ T4567] usb 3-1: USB disconnect, device number 20 [ 360.337669][ T7441] loop3: detected capacity change from 0 to 4096 [ 360.380764][ T7441] ntfs: (device loop3): parse_ntfs_boot_sector(): Mft record size (16384) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 360.753275][ T7441] ntfs: (device loop3): ntfs_fill_super(): Unsupported NTFS filesystem. [ 361.178852][ T4784] kye 0003:0458:0138.000B: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.4-1/input0 [ 364.924945][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.988890][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 365.828426][ T4567] usb 5-1: USB disconnect, device number 20 [ 365.865247][ T3654] Bluetooth: hci1: command 0x0406 tx timeout [ 366.369512][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.148137][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.226313][ T3654] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 367.237358][ T3654] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 367.247944][ T3654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 367.255864][ T3654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 367.263442][ T3654] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 367.273228][ T3654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 367.301547][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.312479][ T7491] loop3: detected capacity change from 0 to 4096 [ 367.329362][ T7491] ntfs: (device loop3): parse_ntfs_boot_sector(): Mft record size (16384) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 367.335577][ T4567] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 367.418449][ T7491] ntfs: (device loop3): ntfs_fill_super(): Unsupported NTFS filesystem. [ 368.617787][ T26] audit: type=1326 audit(1722252262.765:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7507 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e28b77299 code=0x7ffc0000 [ 369.053796][ T26] audit: type=1326 audit(1722252262.765:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7507 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e28b77299 code=0x7ffc0000 [ 369.166678][ T4567] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 369.201617][ T4567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.203544][ T7496] chnl_net:caif_netlink_parms(): no params data found [ 369.233681][ T4567] usb 3-1: config 0 descriptor?? [ 369.291169][ T7521] loop3: detected capacity change from 0 to 1024 [ 369.298912][ T7521] EXT4-fs: Ignoring removed orlov option [ 369.304588][ T7521] EXT4-fs: Ignoring removed nomblk_io_submit option [ 369.377766][ T3654] Bluetooth: hci0: command tx timeout [ 369.384429][ T7521] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 369.600720][ T6267] EXT4-fs (loop3): unmounting filesystem. [ 369.626419][ T7496] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.633549][ T7496] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.656779][ T7496] device bridge_slave_0 entered promiscuous mode [ 369.695519][ T7496] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.707401][ T7496] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.731640][ T7496] device bridge_slave_1 entered promiscuous mode [ 369.745603][ T4567] gs_usb 3-1:0.0: Configuring for 232 interfaces [ 369.759437][ T4567] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 369.785220][ T4567] gs_usb: probe of 3-1:0.0 failed with error -22 [ 369.834566][ T3645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.866085][ T3645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.876046][ T3645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.892995][ T3645] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.901552][ T3645] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 369.910935][ T3645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.976952][ T3204] usb 3-1: USB disconnect, device number 21 [ 369.990464][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1018'. [ 370.006699][ T7496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.018642][ T7496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.137031][ T7496] team0: Port device team_slave_0 added [ 370.199144][ T7496] team0: Port device team_slave_1 added [ 370.310193][ T7496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.325326][ T7496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.356988][ T7496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.405896][ T7496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.420470][ T7496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.453381][ T7496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.519635][ T7496] device hsr_slave_0 entered promiscuous mode [ 371.526776][ T3654] Bluetooth: hci0: command tx timeout [ 371.576401][ T7496] device hsr_slave_1 entered promiscuous mode [ 371.577747][ T7560] loop2: detected capacity change from 0 to 4096 [ 371.589057][ T7496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.598026][ T7560] ntfs: (device loop2): parse_ntfs_boot_sector(): Mft record size (16384) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 371.613397][ T7560] ntfs: (device loop2): ntfs_fill_super(): Unsupported NTFS filesystem. [ 371.622444][ T7496] Cannot create hsr debugfs directory [ 372.696870][ T3654] Bluetooth: hci4: command tx timeout [ 372.721320][ T7537] chnl_net:caif_netlink_parms(): no params data found [ 372.819225][ T7570] loop3: detected capacity change from 0 to 1024 [ 372.827884][ T7570] EXT4-fs: Ignoring removed orlov option [ 372.833574][ T7570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 372.868271][ T7570] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 373.061310][ T6267] EXT4-fs (loop3): unmounting filesystem. [ 373.074816][ T7576] device wg2 entered promiscuous mode [ 373.097915][ T46] device hsr_slave_0 left promiscuous mode [ 373.124529][ T46] device hsr_slave_1 left promiscuous mode [ 373.134157][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.142221][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.150440][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.159698][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.168041][ T46] device bridge_slave_1 left promiscuous mode [ 373.174403][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.188311][ T46] device bridge_slave_0 left promiscuous mode [ 373.194563][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.232599][ T46] device veth1_macvtap left promiscuous mode [ 373.239245][ T46] device veth0_macvtap left promiscuous mode [ 373.245748][ T46] device veth1_vlan left promiscuous mode [ 373.252014][ T46] device veth0_vlan left promiscuous mode [ 373.535369][ T3645] Bluetooth: hci0: command tx timeout [ 373.793957][ T46] team0 (unregistering): Port device team_slave_1 removed [ 373.838662][ T46] team0 (unregistering): Port device team_slave_0 removed [ 373.881586][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.925905][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.513367][ T7595] futex_wake_op: syz.3.1035 tries to shift op by -1; fix this program [ 374.737579][ T3645] Bluetooth: hci4: command tx timeout [ 375.397226][ T46] bond0 (unregistering): Released all slaves [ 375.437998][ T7597] loop3: detected capacity change from 0 to 4096 [ 375.448263][ T7597] ntfs: (device loop3): parse_ntfs_boot_sector(): Mft record size (16384) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 375.463745][ T7597] ntfs: (device loop3): ntfs_fill_super(): Unsupported NTFS filesystem. [ 375.496568][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1032'. [ 375.585377][ T7537] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.613155][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.615387][ T3645] Bluetooth: hci0: command tx timeout [ 375.625404][ T7537] device bridge_slave_0 entered promiscuous mode [ 375.688953][ T7537] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.705441][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.713858][ T7537] device bridge_slave_1 entered promiscuous mode [ 375.721588][ T7599] sch_tbf: peakrate 8 is lower than or equals to rate 4294967294 ! [ 375.978090][ T7537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.374894][ T7537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.793625][ T7537] team0: Port device team_slave_0 added [ 376.843716][ T7537] team0: Port device team_slave_1 added [ 376.872762][ T3645] Bluetooth: hci4: command tx timeout [ 377.041450][ T7537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.062647][ T7537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.113965][ T7537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.138097][ T7613] netlink: 'syz.0.1043': attribute type 21 has an invalid length. [ 377.145616][ T7615] loop3: detected capacity change from 0 to 1024 [ 377.161553][ T7537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.179065][ T7537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.210877][ T7537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.416229][ T7537] device hsr_slave_0 entered promiscuous mode [ 377.433713][ T7537] device hsr_slave_1 entered promiscuous mode [ 377.650134][ T7496] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 377.674810][ T7496] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 377.749467][ T7496] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 377.779957][ T7496] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 377.978462][ T7537] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.025607][ T4797] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 378.122005][ T7496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.173143][ T7537] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.226277][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 378.234783][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 378.256727][ T7496] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.320003][ T7537] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.355427][ T3204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 378.364878][ T3204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 378.388526][ T3204] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.395815][ T3204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.405514][ T4797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.419017][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.426647][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.443565][ T4797] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 378.492236][ T4797] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 378.528846][ T4797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.560538][ T4797] usb 4-1: config 0 descriptor?? [ 378.670997][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 378.687021][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 378.706688][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 378.725437][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.732552][ T3683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.755737][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 378.764872][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 378.786486][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 378.816580][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 378.841299][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 378.859926][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 378.876798][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 378.895785][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 378.898012][ T3645] Bluetooth: hci4: command tx timeout [ 378.904333][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 378.946235][ T7625] sch_tbf: peakrate 8 is lower than or equals to rate 4294967294 ! [ 378.985633][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 378.994262][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 379.034905][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 379.057528][ T4797] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 379.065910][ T4797] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 379.133210][ T4797] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 379.358856][ T4784] usb 4-1: USB disconnect, device number 14 [ 379.428320][ T7537] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 379.473896][ T7537] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 379.519046][ T7537] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 379.550740][ T7537] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 379.585923][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 379.593658][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 379.619273][ T7496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.704398][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.716373][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.755424][ T4784] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 379.800862][ T7496] device veth0_vlan entered promiscuous mode [ 379.814551][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.824742][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.845172][ T7496] device veth1_vlan entered promiscuous mode [ 379.893579][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.916671][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 379.924580][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 379.967441][ T7537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.974656][ T7640] netlink: 'syz.0.1054': attribute type 21 has an invalid length. [ 380.015730][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 380.024138][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 380.060311][ T7537] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.088445][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 380.103189][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 380.135496][ T4784] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.153441][ T4784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.165076][ T4792] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.172232][ T4792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.188199][ T4784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.203053][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 380.214808][ T4784] usb 4-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 380.227921][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.240687][ T4784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.261009][ T7496] device veth0_macvtap entered promiscuous mode [ 380.271372][ T4784] usb 4-1: config 0 descriptor?? [ 380.305704][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 380.314379][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 380.326069][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 380.334783][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 380.343686][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.350827][ T3683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.358877][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 380.371611][ T7496] device veth1_macvtap entered promiscuous mode [ 380.437235][ T3204] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 380.446285][ T3204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 380.456676][ T3204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 380.469162][ T3204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 380.478770][ T3204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 380.489509][ T3204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 380.498462][ T3204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 380.507559][ T3204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 380.519015][ T3204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 380.532979][ T3204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 380.544317][ T3204] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 380.594016][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 380.614652][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.630797][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.641364][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.652078][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.662342][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.674868][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.686615][ T7496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.720542][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 380.735001][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 380.750998][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.768943][ T4784] wacom 0003:056A:4001.000D: unknown main item tag 0x0 [ 380.776787][ T4784] wacom 0003:056A:4001.000D: item fetching failed at offset 10/11 [ 380.782360][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.795031][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.795283][ T4784] wacom 0003:056A:4001.000D: parse failed [ 380.813510][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.824529][ T7496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.825372][ T4784] wacom: probe of 0003:056A:4001.000D failed with error -22 [ 380.845400][ T7496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.858394][ T7496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.889067][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 380.898316][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 380.914874][ T7496] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.933957][ T7496] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.953123][ T7496] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.972402][ T7496] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.062381][ T7662] Driver unsupported XDP return value 0 on prog (id 203) dev N/A, expect packet loss! [ 381.118288][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 381.127758][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 381.168847][ T7537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.162738][ T4584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.203392][ T4584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.254358][ T6658] usb 4-1: USB disconnect, device number 15 [ 382.297267][ T7676] netlink: 'syz.2.1065': attribute type 21 has an invalid length. [ 382.326466][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 382.453247][ T7682] loop3: detected capacity change from 0 to 1024 [ 382.500281][ T4584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.540107][ T4584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.575985][ T7683] device wg2 entered promiscuous mode [ 382.616941][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 382.635856][ T46] device hsr_slave_0 left promiscuous mode [ 382.644736][ T46] device hsr_slave_1 left promiscuous mode [ 382.690332][ T46] device veth0_to_hsr left promiscuous mode [ 382.703869][ T46] device veth1_macvtap left promiscuous mode [ 382.710537][ T46] device veth0_macvtap left promiscuous mode [ 382.724313][ T46] device veth1_vlan left promiscuous mode [ 382.731252][ T46] device veth0_vlan left promiscuous mode [ 382.823218][ T7694] loop3: detected capacity change from 0 to 1024 [ 382.831557][ T7694] EXT4-fs: Ignoring removed orlov option [ 382.841220][ T7694] EXT4-fs: Ignoring removed orlov option [ 382.908260][ T7694] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 383.007841][ T7694] EXT4-fs (loop3): pa ffff888074a64380: logic 0, phys. 112, len 25 [ 383.016553][ T7694] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4885: group 0, free 24, pa_free 13 [ 383.045419][ T7694] EXT4-fs (loop3): Remounting filesystem read-only [ 383.084518][ T7693] EXT4-fs (loop3): pa ffff8880704a0620: logic 0, phys. 144, len 23 [ 383.095520][ T7693] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4885: group 0, free 22, pa_free 19 [ 383.167330][ T6267] EXT4-fs (loop3): unmounting filesystem. [ 384.226861][ T7704] loop3: detected capacity change from 0 to 512 [ 384.248203][ T7704] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 384.261241][ T7704] System zones: 1-12 [ 384.266494][ T7704] EXT4-fs (loop3): orphan cleanup on readonly fs [ 384.267941][ T46] team0 (unregistering): Port device bond0 removed [ 384.286185][ T7704] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.1075: invalid block [ 384.302779][ T7704] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1075: invalid indirect mapped block 1819239214 (level 1) [ 384.323196][ T7704] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1075: bg 0: block 361: padding at end of block bitmap is not set [ 384.338130][ T7704] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 384.364161][ T7704] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1075: attempt to clear invalid blocks 33619980 len 1 [ 384.414579][ T7704] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1075: invalid indirect mapped block 1819239214 (level 0) [ 384.444945][ T7704] EXT4-fs (loop3): 1 truncate cleaned up [ 384.450737][ T7704] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 384.504390][ T46] bond0 (unregistering): Released all slaves [ 384.537414][ T7706] EXT4-fs error (device loop3): dx_probe:822: inode #2: comm syz.3.1075: Directory hole found for htree index block [ 384.568435][ T6267] EXT4-fs (loop3): unmounting filesystem. [ 384.697694][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 384.709989][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 384.727668][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 384.736516][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 384.746718][ T7537] device veth0_vlan entered promiscuous mode [ 384.757551][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 384.766191][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 384.777639][ T7537] device veth1_vlan entered promiscuous mode [ 385.575359][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 385.583786][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 385.600499][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 385.611783][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 385.629174][ T7537] device veth0_macvtap entered promiscuous mode [ 385.669074][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 385.691805][ T7537] device veth1_macvtap entered promiscuous mode [ 385.720763][ T7537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.739189][ T7537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.751708][ T7537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.768708][ T7537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.781875][ T7537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.792608][ T7537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.802530][ T7537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.813088][ T7537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.824784][ T7537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.837766][ T7537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.848312][ T7537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.883380][ T7537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.921777][ T7537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.936481][ T7537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.965197][ T7537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.975086][ T7537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.988381][ T7537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.010657][ T7537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.028913][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 386.038920][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 386.053576][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 386.063985][ T6658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 386.083717][ T7537] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.092967][ T7537] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.105488][ T7537] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.114237][ T7537] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.225273][ T3904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.233501][ T3904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.256433][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 386.275022][ T3904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.284385][ T3904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.310091][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 386.916082][ T7722] loop2: detected capacity change from 0 to 1024 [ 388.210116][ T7736] loop3: detected capacity change from 0 to 512 [ 389.135749][ T7736] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 389.165467][ T7736] System zones: 1-12 [ 389.170539][ T7736] EXT4-fs (loop3): orphan cleanup on readonly fs [ 389.235930][ T7736] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.1085: invalid block [ 389.254399][ T7736] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1085: invalid indirect mapped block 1819239214 (level 1) [ 389.286253][ T3654] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 389.297636][ T3654] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 389.306238][ T3654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 389.315988][ T7736] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1085: bg 0: block 361: padding at end of block bitmap is not set [ 389.339564][ T3654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 389.348665][ T3654] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 389.356380][ T3654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 389.373369][ T7736] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 389.385063][ T7736] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1085: attempt to clear invalid blocks 33619980 len 1 [ 389.402987][ T7736] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1085: invalid indirect mapped block 1819239214 (level 0) [ 389.523781][ T7736] EXT4-fs (loop3): 1 truncate cleaned up [ 389.534426][ T7736] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 389.584230][ T7753] sctp: [Deprecated]: syz.2.1089 (pid 7753) Use of struct sctp_assoc_value in delayed_ack socket option. [ 389.584230][ T7753] Use struct sctp_sack_info instead [ 389.956934][ T7755] EXT4-fs error (device loop3): dx_probe:822: inode #2: comm syz.3.1085: Directory hole found for htree index block [ 390.530807][ T6267] EXT4-fs (loop3): unmounting filesystem. [ 390.780538][ T7745] chnl_net:caif_netlink_parms(): no params data found [ 390.997197][ T7775] Bluetooth: MGMT ver 1.22 [ 391.175727][ T3683] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 391.587053][ T3645] Bluetooth: hci0: command tx timeout [ 391.895920][ T7770] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 391.902990][ T7770] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 391.914489][ T7770] vhci_hcd vhci_hcd.0: Device attached [ 391.996678][ T7780] vhci_hcd: connection closed [ 392.019945][ T3904] vhci_hcd: stop threads [ 392.033035][ T7782] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1096'. [ 392.054949][ T3904] vhci_hcd: release socket [ 392.073826][ T7745] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.101138][ T7745] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.106159][ T3904] vhci_hcd: disconnect device [ 392.135735][ T7745] device bridge_slave_0 entered promiscuous mode [ 392.162162][ T7745] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.175590][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.206736][ T7745] device bridge_slave_1 entered promiscuous mode [ 392.225517][ T3683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.260855][ T3683] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 392.350760][ T3683] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.379469][ T7745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.388670][ T3683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.407304][ T3683] usb 5-1: config 0 descriptor?? [ 392.453988][ T7745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.660444][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.714950][ T7745] team0: Port device team_slave_0 added [ 392.815138][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.843291][ T7745] team0: Port device team_slave_1 added [ 392.867167][ T3645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 392.882342][ T7793] sctp: [Deprecated]: syz.3.1101 (pid 7793) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.882342][ T7793] Use struct sctp_sack_info instead [ 392.882379][ T3645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 392.917281][ T3683] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 392.925609][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 392.928832][ T3683] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 392.935829][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 392.944140][ T3683] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 392.948074][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 392.980197][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 393.640002][ T3645] Bluetooth: hci0: command tx timeout [ 393.899229][ T3683] usb 5-1: USB disconnect, device number 21 [ 394.006985][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.066081][ T7801] loop3: detected capacity change from 0 to 1024 [ 394.142292][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.206959][ T7745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.213944][ T7745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.293064][ T7745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.344805][ T7745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.352178][ T7745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.355423][ T3683] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 394.393561][ T7745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.337228][ T3645] Bluetooth: hci5: command tx timeout [ 395.377543][ T7745] device hsr_slave_0 entered promiscuous mode [ 395.386631][ T7745] device hsr_slave_1 entered promiscuous mode [ 395.409672][ T7745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.426890][ T7745] Cannot create hsr debugfs directory [ 395.585537][ T3683] usb 5-1: device not accepting address 22, error -71 [ 395.695984][ T3645] Bluetooth: hci0: command tx timeout [ 395.696443][ T7827] sctp: [Deprecated]: syz.2.1112 (pid 7827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 395.696443][ T7827] Use struct sctp_sack_info instead [ 395.767106][ T7830] loop3: detected capacity change from 0 to 1024 [ 396.003548][ T7792] chnl_net:caif_netlink_parms(): no params data found [ 396.935350][ T4792] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 397.081878][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.116466][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.133182][ T7792] device bridge_slave_0 entered promiscuous mode [ 397.154915][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.172423][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.199226][ T7792] device bridge_slave_1 entered promiscuous mode [ 397.243485][ T7858] device wg2 left promiscuous mode [ 397.271186][ T7859] device wg2 entered promiscuous mode [ 397.335799][ T4792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.357646][ T4792] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 397.375529][ T3645] Bluetooth: hci5: command tx timeout [ 397.398156][ T4792] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.425220][ T4792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.452607][ T7792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.468419][ T4792] usb 4-1: config 0 descriptor?? [ 397.585021][ T7792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.660223][ T7745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 397.775416][ T3645] Bluetooth: hci0: command tx timeout [ 397.806180][ T7745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 397.829245][ T7792] team0: Port device team_slave_0 added [ 397.848205][ T7792] team0: Port device team_slave_1 added [ 397.860821][ T7745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 397.884273][ T7745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 397.919366][ T11] device hsr_slave_0 left promiscuous mode [ 397.941041][ T11] device hsr_slave_1 left promiscuous mode [ 397.950203][ T4792] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 397.966797][ T4792] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 397.985433][ T4792] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 398.004519][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.025290][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.047992][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.071535][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.080143][ T11] device bridge_slave_1 left promiscuous mode [ 398.086573][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.103594][ T11] device bridge_slave_0 left promiscuous mode [ 398.113470][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.191977][ T11] device veth1_macvtap left promiscuous mode [ 398.205274][ T11] device veth0_macvtap left promiscuous mode [ 398.211436][ T11] device veth1_vlan left promiscuous mode [ 398.228858][ T11] device veth0_vlan left promiscuous mode [ 398.249117][ T7] usb 4-1: USB disconnect, device number 16 [ 398.656190][ T7] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 399.056028][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.107459][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.128915][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.168894][ T7] usb 4-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 399.184913][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.198800][ T7] usb 4-1: config 0 descriptor?? [ 399.415484][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 399.421519][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 399.454646][ T7] usb 4-1: USB disconnect, device number 17 [ 399.502942][ T3645] Bluetooth: hci5: command tx timeout [ 401.042002][ T7906] loop2: detected capacity change from 0 to 2048 [ 401.062810][ T7906] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 401.485538][ T11] team0 (unregistering): Port device team_slave_1 removed [ 401.543726][ T3654] Bluetooth: hci5: command tx timeout [ 401.575118][ T11] team0 (unregistering): Port device team_slave_0 removed [ 401.650392][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.706257][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.222774][ T11] bond0 (unregistering): Released all slaves [ 402.319642][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.326718][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.352997][ T7792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.366483][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.373454][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.411780][ T7792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.477457][ T6924] UDF-fs: error (device loop2): udf_read_inode: (ino 1440) failed !bh [ 402.517405][ T6924] UDF-fs: error (device loop2): udf_read_inode: (ino 1440) failed !bh [ 402.553116][ T7792] device hsr_slave_0 entered promiscuous mode [ 402.574493][ T7792] device hsr_slave_1 entered promiscuous mode [ 402.623364][ T7792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.634503][ T7792] Cannot create hsr debugfs directory [ 402.909227][ T7745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.960388][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 402.970414][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 402.990139][ T7745] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.002949][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 403.013341][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 403.028064][ T4562] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.035256][ T4562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.180506][ T7792] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.256523][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 403.264777][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 403.300081][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 403.326263][ T3688] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.333479][ T3688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.360809][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 403.378636][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 403.457459][ T7792] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.513587][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 403.544398][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 403.576285][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 403.595523][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 403.624726][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 403.660303][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 403.736288][ T7792] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.913365][ T7745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 403.925335][ T3645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 403.946479][ T3645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 403.957421][ T7745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 403.967758][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 403.977041][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 403.987292][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 403.997756][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 404.005778][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 404.013186][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 404.026908][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 405.124840][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1160'. [ 405.181503][ T7947] loop3: detected capacity change from 0 to 1024 [ 405.235637][ T7947] [ 405.238028][ T7947] ====================================================== [ 405.245062][ T7947] WARNING: possible circular locking dependency detected [ 405.252094][ T7947] 6.1.102-syzkaller #0 Not tainted [ 405.257222][ T7947] ------------------------------------------------------ [ 405.264250][ T7947] syz.3.1160/7947 is trying to acquire lock: [ 405.270245][ T7947] ffff8880687b3048 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x1d2/0x1b10 [ 405.281432][ T7947] [ 405.281432][ T7947] but task is already holding lock: [ 405.288810][ T7947] ffff888077ef20b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0 [ 405.298381][ T7947] [ 405.298381][ T7947] which lock already depends on the new lock. [ 405.298381][ T7947] [ 405.308794][ T7947] [ 405.308794][ T7947] the existing dependency chain (in reverse order) is: [ 405.317861][ T7947] [ 405.317861][ T7947] -> #1 (&tree->tree_lock){+.+.}-{3:3}: [ 405.325628][ T7947] lock_acquire+0x1f8/0x5a0 [ 405.330789][ T7947] __mutex_lock+0x132/0xd80 [ 405.335856][ T7947] hfsplus_file_truncate+0x80d/0xb40 [ 405.341710][ T7947] hfsplus_delete_inode+0x170/0x220 [ 405.347464][ T7947] hfsplus_unlink+0x50d/0x7f0 [ 405.352705][ T7947] vfs_unlink+0x359/0x5f0 [ 405.357589][ T7947] do_unlinkat+0x4a5/0x820 [ 405.362553][ T7947] __x64_sys_unlink+0x45/0x50 [ 405.367870][ T7947] do_syscall_64+0x3b/0xb0 [ 405.372846][ T7947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.379297][ T7947] [ 405.379297][ T7947] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}: [ 405.388381][ T7947] validate_chain+0x1661/0x5950 [ 405.393795][ T7947] __lock_acquire+0x125b/0x1f80 [ 405.399199][ T7947] lock_acquire+0x1f8/0x5a0 [ 405.404254][ T7947] __mutex_lock+0x132/0xd80 [ 405.409317][ T7947] hfsplus_file_extend+0x1d2/0x1b10 [ 405.415093][ T7947] hfsplus_bmap_reserve+0x101/0x4e0 [ 405.420877][ T7947] hfsplus_create_cat+0x1a9/0x1ba0 [ 405.426543][ T7947] hfsplus_fill_super+0x13e6/0x1c90 [ 405.432279][ T7947] mount_bdev+0x2c9/0x3f0 [ 405.437141][ T7947] legacy_get_tree+0xeb/0x180 [ 405.442353][ T7947] vfs_get_tree+0x88/0x270 [ 405.447302][ T7947] do_new_mount+0x2ba/0xb40 [ 405.452332][ T7947] __se_sys_mount+0x2d5/0x3c0 [ 405.457536][ T7947] do_syscall_64+0x3b/0xb0 [ 405.462484][ T7947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.468930][ T7947] [ 405.468930][ T7947] other info that might help us debug this: [ 405.468930][ T7947] [ 405.479178][ T7947] Possible unsafe locking scenario: [ 405.479178][ T7947] [ 405.486629][ T7947] CPU0 CPU1 [ 405.492014][ T7947] ---- ---- [ 405.497398][ T7947] lock(&tree->tree_lock); [ 405.502084][ T7947] lock(&HFSPLUS_I(inode)->extents_lock); [ 405.510415][ T7947] lock(&tree->tree_lock); [ 405.517442][ T7947] lock(&HFSPLUS_I(inode)->extents_lock); [ 405.523248][ T7947] [ 405.523248][ T7947] *** DEADLOCK *** [ 405.523248][ T7947] [ 405.531478][ T7947] 3 locks held by syz.3.1160/7947: [ 405.536593][ T7947] #0: ffff8880745c40e0 (&type->s_umount_key#57/1){+.+.}-{3:3}, at: alloc_super+0x217/0x930 [ 405.546738][ T7947] #1: ffff8880636ee198 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_fill_super+0x1378/0x1c90 [ 405.556758][ T7947] #2: ffff888077ef20b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0 [ 405.566685][ T7947] [ 405.566685][ T7947] stack backtrace: [ 405.572584][ T7947] CPU: 0 PID: 7947 Comm: syz.3.1160 Not tainted 6.1.102-syzkaller #0 [ 405.580650][ T7947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 405.590910][ T7947] Call Trace: [ 405.594196][ T7947] [ 405.597150][ T7947] dump_stack_lvl+0x1e3/0x2cb [ 405.601849][ T7947] ? nf_tcp_handle_invalid+0x642/0x642 [ 405.607341][ T7947] ? print_circular_bug+0x12b/0x1a0 [ 405.612543][ T7947] check_noncircular+0x2fa/0x3b0 [ 405.617482][ T7947] ? is_bpf_text_address+0x22/0x2a0 [ 405.622727][ T7947] ? add_chain_block+0x850/0x850 [ 405.627683][ T7947] ? lockdep_lock+0x11f/0x2a0 [ 405.632376][ T7947] ? __lock_acquire+0x125b/0x1f80 [ 405.637586][ T7947] ? mark_lock+0x9a/0x340 [ 405.641926][ T7947] ? _find_first_zero_bit+0xd0/0x100 [ 405.647221][ T7947] validate_chain+0x1661/0x5950 [ 405.652096][ T7947] ? __lock_acquire+0x125b/0x1f80 [ 405.657232][ T7947] ? reacquire_held_locks+0x660/0x660 [ 405.662797][ T7947] ? mark_lock+0x9a/0x340 [ 405.667142][ T7947] ? __lock_acquire+0x125b/0x1f80 [ 405.672196][ T7947] ? look_up_lock_class+0x77/0x140 [ 405.677333][ T7947] ? register_lock_class+0x100/0x990 [ 405.682652][ T7947] ? is_dynamic_key+0x260/0x260 [ 405.687536][ T7947] ? validate_chain+0x112/0x5950 [ 405.692502][ T7947] ? mark_lock+0x9a/0x340 [ 405.696842][ T7947] __lock_acquire+0x125b/0x1f80 [ 405.701711][ T7947] lock_acquire+0x1f8/0x5a0 [ 405.706231][ T7947] ? hfsplus_file_extend+0x1d2/0x1b10 [ 405.711625][ T7947] ? read_lock_is_recursive+0x10/0x10 [ 405.717018][ T7947] ? stack_trace_save+0x1c0/0x1c0 [ 405.722059][ T7947] ? __might_sleep+0xb0/0xb0 [ 405.726661][ T7947] ? __kernel_text_address+0x9/0x40 [ 405.731878][ T7947] ? unwind_get_return_address+0x49/0x80 [ 405.737533][ T7947] ? arch_stack_walk+0xf3/0x140 [ 405.742430][ T7947] ? mark_lock+0x9a/0x340 [ 405.746795][ T7947] __mutex_lock+0x132/0xd80 [ 405.751333][ T7947] ? hfsplus_file_extend+0x1d2/0x1b10 [ 405.756732][ T7947] ? hfsplus_file_extend+0x1d2/0x1b10 [ 405.762116][ T7947] ? mutex_lock_nested+0x10/0x10 [ 405.767081][ T7947] hfsplus_file_extend+0x1d2/0x1b10 [ 405.772303][ T7947] ? __might_sleep+0xb0/0xb0 [ 405.776903][ T7947] ? trace_raw_output_contention_end+0xd0/0xd0 [ 405.783071][ T7947] ? hfsplus_get_block+0x14e0/0x14e0 [ 405.788365][ T7947] ? trace_contention_end+0x61/0x170 [ 405.793657][ T7947] ? __mutex_lock+0x2f7/0xd80 [ 405.798347][ T7947] ? hfsplus_find_init+0x146/0x1c0 [ 405.803594][ T7947] ? mutex_lock_nested+0x10/0x10 [ 405.808587][ T7947] hfsplus_bmap_reserve+0x101/0x4e0 [ 405.813802][ T7947] hfsplus_create_cat+0x1a9/0x1ba0 [ 405.819015][ T7947] ? do_raw_spin_lock+0x14a/0x370 [ 405.824050][ T7947] ? hfsplus_find_cat+0x5c0/0x5c0 [ 405.829192][ T7947] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 405.835146][ T7947] ? do_raw_spin_unlock+0x137/0x8a0 [ 405.840380][ T7947] ? _raw_spin_unlock+0x24/0x40 [ 405.845264][ T7947] ? hfsplus_new_inode+0x5c9/0x740 [ 405.850419][ T7947] hfsplus_fill_super+0x13e6/0x1c90 [ 405.855650][ T7947] ? hfsplus_mount+0x40/0x40 [ 405.860287][ T7947] ? snprintf+0xd6/0x120 [ 405.864724][ T7947] ? vscnprintf+0x80/0x80 [ 405.869083][ T7947] ? set_blocksize+0x1c6/0x350 [ 405.873875][ T7947] mount_bdev+0x2c9/0x3f0 [ 405.878325][ T7947] ? hfsplus_mount+0x40/0x40 [ 405.882945][ T7947] legacy_get_tree+0xeb/0x180 [ 405.887650][ T7947] ? hfsplus_mark_mdb_dirty+0x1b0/0x1b0 [ 405.893309][ T7947] vfs_get_tree+0x88/0x270 [ 405.897739][ T7947] do_new_mount+0x2ba/0xb40 [ 405.902265][ T7947] ? ns_capable+0x85/0xe0 [ 405.906618][ T7947] ? do_move_mount_old+0x160/0x160 [ 405.911747][ T7947] __se_sys_mount+0x2d5/0x3c0 [ 405.916457][ T7947] ? __x64_sys_mount+0xc0/0xc0 [ 405.921324][ T7947] ? syscall_enter_from_user_mode+0x2e/0x230 [ 405.927422][ T7947] ? lockdep_hardirqs_on+0x94/0x130 [ 405.932679][ T7947] ? __x64_sys_mount+0x1c/0xc0 [ 405.937476][ T7947] do_syscall_64+0x3b/0xb0 [ 405.941921][ T7947] ? clear_bhb_loop+0x45/0xa0 [ 405.946630][ T7947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.952547][ T7947] RIP: 0033:0x7f458ab7899a [ 405.957036][ T7947] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.976909][ T7947] RSP: 002b:00007f458b978e78 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 405.985372][ T7947] RAX: ffffffffffffffda RBX: 00007f458b978f00 RCX: 00007f458ab7899a [ 405.993362][ T7947] RDX: 0000000020000000 RSI: 0000000020002900 RDI: 00007f458b978ec0 [ 406.001352][ T7947] RBP: 0000000020000000 R08: 00007f458b978f00 R09: 0000000002000010 [ 406.009329][ T7947] R10: 0000000002000010 R11: 0000000000000202 R12: 0000000020002900 [ 406.017304][ T7947] R13: 00007f458b978ec0 R14: 00000000000006c9 R15: 00000000200022c0 [ 406.025290][ T7947] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 406.033192][ T7937] chnl_net:caif_netlink_parms(): no params data found [ 406.105294][ T3654] Bluetooth: hci2: command tx timeout [ 406.606545][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.730918][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.849353][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.898759][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.707727][ T11] device hsr_slave_0 left promiscuous mode [ 407.714047][ T11] device hsr_slave_1 left promiscuous mode [ 407.720496][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.728001][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.735807][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.743439][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.751230][ T11] device bridge_slave_1 left promiscuous mode [ 407.757464][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.766076][ T11] device bridge_slave_0 left promiscuous mode [ 407.772238][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.783524][ T11] device hsr_slave_0 left promiscuous mode [ 407.789853][ T11] device hsr_slave_1 left promiscuous mode [ 407.798310][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.805910][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.813550][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.821106][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.828746][ T11] device veth3 left promiscuous mode [ 407.834203][ T11] bridge0: port 3(veth3) entered disabled state [ 407.841287][ T11] device bridge_slave_1 left promiscuous mode [ 407.847832][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.856125][ T11] device bridge_slave_0 left promiscuous mode [ 407.862368][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.873892][ T11] device veth1_macvtap left promiscuous mode [ 407.880159][ T11] device veth0_macvtap left promiscuous mode [ 407.886298][ T11] device veth1_vlan left promiscuous mode [ 407.892152][ T11] device veth0_vlan left promiscuous mode [ 407.898624][ T11] device veth1_macvtap left promiscuous mode [ 407.904626][ T11] device veth0_macvtap left promiscuous mode [ 407.910993][ T11] device veth1_vlan left promiscuous mode [ 407.916890][ T11] device veth0_vlan left promiscuous mode [ 408.118873][ T11] team0 (unregistering): Port device team_slave_1 removed [ 408.143034][ T11] team0 (unregistering): Port device team_slave_0 removed [ 408.173101][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.204591][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.264132][ T11] bond0 (unregistering): Released all slaves [ 408.501711][ T11] device team_slave_1 left promiscuous mode [ 408.508345][ T11] team0 (unregistering): Port device team_slave_1 removed [ 408.519519][ T11] device team_slave_0 left promiscuous mode [ 408.526091][ T11] team0 (unregistering): Port device team_slave_0 removed [ 408.556929][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.565964][ T11] device bond_slave_1 left promiscuous mode [ 408.589351][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.598260][ T11] device bond_slave_0 left promiscuous mode [ 408.651297][ T11] bond0 (unregistering): Released all slaves [ 409.745697][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.808996][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.858905][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.939170][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.006289][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.069185][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.109510][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.168777][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.297623][ T11] device hsr_slave_0 left promiscuous mode [ 411.303803][ T11] device hsr_slave_1 left promiscuous mode [ 411.310426][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.317964][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.325543][ T11] device bridge_slave_1 left promiscuous mode [ 411.331714][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.339631][ T11] device bridge_slave_0 left promiscuous mode [ 411.345937][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.356477][ T11] device hsr_slave_0 left promiscuous mode [ 411.362679][ T11] device hsr_slave_1 left promiscuous mode [ 411.368949][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.376515][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.384443][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.391937][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.399671][ T11] device bridge_slave_1 left promiscuous mode [ 411.405881][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.413770][ T11] device bridge_slave_0 left promiscuous mode [ 411.420425][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.431287][ T11] device hsr_slave_0 left promiscuous mode [ 411.437678][ T11] device hsr_slave_1 left promiscuous mode [ 411.443854][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.451302][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.458884][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.466350][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.473844][ T11] device bridge_slave_1 left promiscuous mode [ 411.480185][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.488235][ T11] device bridge_slave_0 left promiscuous mode [ 411.494401][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.504742][ T11] device hsr_slave_0 left promiscuous mode [ 411.510999][ T11] device hsr_slave_1 left promiscuous mode [ 411.517391][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.525902][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.533389][ T11] device bridge_slave_1 left promiscuous mode [ 411.539601][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.547295][ T11] device bridge_slave_0 left promiscuous mode [ 411.553439][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.565683][ T11] device veth1_macvtap left promiscuous mode [ 411.571711][ T11] device veth0_macvtap left promiscuous mode [ 411.577803][ T11] device veth1_vlan left promiscuous mode [ 411.583557][ T11] device veth0_vlan left promiscuous mode [ 411.590044][ T11] device veth1_macvtap left promiscuous mode [ 411.596304][ T11] device veth0_macvtap left promiscuous mode [ 411.602353][ T11] device veth1_vlan left promiscuous mode [ 411.608314][ T11] device veth0_vlan left promiscuous mode [ 411.794906][ T11] team0 (unregistering): Port device team_slave_1 removed [ 411.820402][ T11] team0 (unregistering): Port device team_slave_0 removed [ 411.842975][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.867539][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.913630][ T11] bond0 (unregistering): Released all slaves [ 412.032425][ T11] team0 (unregistering): Port device team_slave_1 removed [ 412.043453][ T11] team0 (unregistering): Port device team_slave_0 removed [ 412.066314][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.090322][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.138436][ T11] bond0 (unregistering): Released all slaves [ 412.345029][ T11] device team_slave_1 left promiscuous mode [ 412.351611][ T11] team0 (unregistering): Port device team_slave_1 removed [ 412.375587][ T11] device team_slave_0 left promiscuous mode [ 412.381957][ T11] team0 (unregistering): Port device team_slave_0 removed [ 412.392378][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.401208][ T11] device bond_slave_1 left promiscuous mode [ 412.410481][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.419362][ T11] device bond_slave_0 left promiscuous mode [ 412.469749][ T11] bond0 (unregistering): Released all slaves [ 412.597695][ T11] team0 (unregistering): Port device team_slave_1 removed [ 412.620416][ T11] team0 (unregistering): Port device team_slave_0 removed [ 412.630986][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.654912][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.695629][ T11] bond0 (unregistering): Released all slaves [ 412.757830][ T11] bond0 (unregistering): Released all slaves