last executing test programs: 5m33.763445264s ago: executing program 1 (id=1549): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 4m44.54056671s ago: executing program 1 (id=1549): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 4m13.270598219s ago: executing program 1 (id=1549): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 3m23.382364936s ago: executing program 1 (id=1549): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 1m42.259153396s ago: executing program 1 (id=1549): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 49.979928308s ago: executing program 1 (id=1549): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 32.608466263s ago: executing program 2 (id=2766): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) 32.012495658s ago: executing program 2 (id=2768): r0 = timerfd_create(0x0, 0x0) r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) 31.855344924s ago: executing program 2 (id=2769): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000024c0)=@raw={'raw\x00', 0x8, 0x3, 0x1480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x13b0, 0xffffffff, 0xffffffff, 0x13b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x1100, 0xc8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'veth1_macvtap\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00'}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x14e0) 31.6589411s ago: executing program 2 (id=2771): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r1, 0x5490, 0x0) getdents(r1, 0x0, 0x0) 30.866398775s ago: executing program 2 (id=2774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setgid(0xee00) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000000), 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000140), 0x12) membarrier(0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{}, {0x2d}, {0x6}]}) read$FUSE(r3, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x1000)=nil, 0x2) open(0x0, 0x0, 0x0) 27.667328501s ago: executing program 2 (id=2785): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c200310"], 0xf) 23.143702541s ago: executing program 0 (id=2790): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x40086610, &(0x7f0000000180)={@desc={0x1, 0x2000000, @desc3}}) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x40086607, 0x0) 22.694349922s ago: executing program 0 (id=2793): fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mkdir(0x0, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0x2020) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x60}}, 0x0) 16.579561515s ago: executing program 0 (id=2800): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000003e0095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r3) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x891a, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {}, 0x0, {}, 'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) write$binfmt_misc(r8, &(0x7f00000001c0)=ANY=[], 0xfdef) write(r5, &(0x7f0000001100)="94", 0x1) tee(r4, r8, 0x81, 0x0) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002980)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 15.347155955s ago: executing program 0 (id=2804): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r1}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") process_vm_writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000a40)=""/157, 0x9d}, {&(0x7f0000000b00)=""/48, 0x30}, {&(0x7f0000000b40)=""/122, 0x7a}, {&(0x7f0000000bc0)=""/90, 0x5a}], 0x5, &(0x7f0000000f00)=[{&(0x7f0000000cc0)=""/164, 0xa4}, {&(0x7f0000000d80)=""/152, 0x98}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)=""/123, 0x7b}], 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x206100, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=unix']) close(r3) ftruncate(0xffffffffffffffff, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) 13.577496152s ago: executing program 0 (id=2808): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getpid() writev(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r1, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) write(r0, &(0x7f0000000040)="240000001e005f031400ff01000000f80700b3586ff606c2e553", 0x1a) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) sendfile(r6, r4, 0x0, 0x10000a006) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003080)=""/4106, 0x100a}, {&(0x7f00000003c0)=""/151, 0x97}, {0x0}], 0x3}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 12.847333903s ago: executing program 0 (id=2811): socket$packet(0x11, 0x2, 0x300) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0x4d) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'team0\x00', 0x44}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00') ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x9a, 0x80000009, 0x2, 0x1, 0x85}) socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x100, 0x1}, 0x70) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) r3 = socket(0x10, 0x3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000004c0)={0x0}) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) preadv(r7, &(0x7f0000000340)=[{&(0x7f0000000540)=""/118, 0x76}, {&(0x7f0000000400)=""/103, 0x67}], 0x2, 0x19df, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r2, 0x5}) connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0xffffff89) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) pipe2$watch_queue(&(0x7f0000000040), 0x80) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x3) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="00e80600079b", 0x6}], 0x1, 0x0, 0x0) 6.527204157s ago: executing program 5 (id=2828): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e030000000000000002000000000000040200000002000000000000110300000000000000002e5f"], 0x0, 0x54}, 0x20) 6.384249395s ago: executing program 5 (id=2829): syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x55, 0x32, 0x8a, 0x10, 0xf11, 0x1038, 0xf74e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xa}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "07a7a3ba2d"}]}}]}}]}}]}}, 0x0) 6.091127294s ago: executing program 4 (id=2832): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fcd846404c05c3060000000003010902240008000000000904000002ad163700090501027f030000000905"], 0x0) 4.72323497s ago: executing program 5 (id=2833): syz_open_procfs(0x0, &(0x7f0000000100)='net/nfsfs\x00') syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xfffffe00) 4.370294265s ago: executing program 4 (id=2834): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 4.240830583s ago: executing program 3 (id=2722): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000e80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc89000000000000b5090100000000009500000000000000b7020000000000007b9af0ff00000000b509000000000000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000280)={{r6}, 0x0, &(0x7f0000000240)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000ffffffff850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x43400) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.192747625s ago: executing program 4 (id=2835): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f0000001c00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 3.869495862s ago: executing program 4 (id=2836): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = signalfd4(r0, &(0x7f0000000100)={[0x8]}, 0x8, 0x81000) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000240)="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", 0x12d, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4040) writev(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@ipv6_delrule={0x38, 0x21, 0x200, 0x70bd2a, 0x25dfdbfe, {0xa, 0x20, 0x10, 0x0, 0x4, 0x0, 0x0, 0x7, 0x1}, [@FRA_SRC={0x14, 0x2, @mcast1}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}]}, 0x38}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x22, 0x2, 0x21) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000002480)=@filter={'filter\x00', 0x42, 0x4, 0x2d0, 0xffffffff, 0x98, 0x98, 0x180, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x60010000}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001a0000001a000000070000000c0000000100000f02"], 0x0, 0x3b}, 0x20) syz_usb_connect(0x0, 0x2d, &(0x7f0000000e40)=ANY=[], 0x0) 3.762864631s ago: executing program 3 (id=2837): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x0) unshare(0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = fanotify_init(0x0, 0x0) unshare(0x0) fanotify_mark(r4, 0x1, 0x0, r3, 0x0) vmsplice(r3, &(0x7f0000008280)=[{&(0x7f0000006100)}], 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000740)=@known='system.sockprotoname\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x126) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000100)={r7}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={r7, 0x7}, 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, 0x0) setsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @remote}, 0xc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.59934788s ago: executing program 5 (id=2838): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2402, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x2, 0x0, 0x2}, 0x8) 1.402968755s ago: executing program 5 (id=2839): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100005800c000380080003"], 0x34}}, 0x0) 1.248598929s ago: executing program 3 (id=2840): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) open$dir(&(0x7f0000000180)='./file0\x00', 0x607e, 0x0) 1.083241234s ago: executing program 5 (id=2841): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f100000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000540)="2de161cec6a2abe0333ca063a5fb0de3067784322a7e1944ce10c17bd3d94b8db1744c083cfe45621a8818a8e096ad08923553d19a9da191e5d70ad22491ee90ef95211ed2583af011dea11308e8e7d25eca5ef5599f490b00bffed20c9cdc848c3283db83718c148b16933d234c6e3689cf0ba697de27dbde228bc1eae03460f574642f7432c5018bdeb5c0ef01cee00bc2a063283232c614d6373b", 0x9c}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000e00000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1e0101ac1414bb00000000140000000000000000000000010000005872000000000000"], 0xd8}}], 0x1, 0xc1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) rmdir(&(0x7f0000000000)='./bus/file0\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@local}, &(0x7f0000000280)=0x14) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000300)='5', 0x1}], 0x1) 999.256819ms ago: executing program 3 (id=2842): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) io_uring_setup(0x1612, &(0x7f0000000200)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) dup(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 640.886392ms ago: executing program 3 (id=2843): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@dev}, {@in=@private, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x96}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0]}}]}, 0x158}}, 0x0) 346.478834ms ago: executing program 4 (id=2844): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, 0xffffffffffffffff, 0x0) 11.325599ms ago: executing program 4 (id=2845): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 0s ago: executing program 3 (id=2846): bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c8000400000002005b297aed4f8dd5fa9379772f72e31f8a09"], 0x9) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f0000000040)='veth0_to_bridge\x00'}) socket$inet(0x2, 0x3, 0x8d) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x73}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x72, @time={0x211}}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000280)) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) ppoll(&(0x7f0000000040)=[{r3}, {r3}], 0x2, 0x0, 0x0, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(r2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e07000220"], 0xa) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f0000000d40), 0x9, 0x61d, &(0x7f0000000700)="$eJzs3U1rXFUfAPD/nbwnz/MkDQ9qXWhAtAVt0qStFBG0CK5KqS8LwY1jk5ba6QtNRFMrTaFuBHHjQnDlwrrwO2hBcOUXcOHGlVSKSDdK0ZE7uTNOk7nJTMzMtJnfD8Y5556bOeea/HvOnDnnTgA9ayr9TyFid0RcSCIm68r6IyucWj3v9m+XT6SPJMrlV35N4vKVZKX+tZLseSwi0oI/xyP5LiIm+9bXu7h86UyxVFq4mOVnls5emFlcvrTv9NniqYVTC+fmnp47fOjgocOz++t+6uSLrV7frrr00WtvvTP+4bHXv/jsTjL75Y/Hkni+VpZeV6uvvZmpmIpypv54+v/18HZX1iV9tb+TfyRrD6z1QhsbREuqv7+BiHgwxqOv7rc5Hh+81NXGAW1VTqLWRwG9JhH/0KOq44Dqe/vm3gcPtnlUAnTCrSMRT9TifyAiqvHfvzo3GMOVuYHR28ld8zxJROzfhvrTOr7/9ti19BFtmocDGlu5OpTN26/t/5NKbE7EcCU3ertwV/wXsmnciWz+8OWNqxnPK5hak8/qH9rq9QDNW7kaEQ81Gv9vHv9vZM/p8Te3WH9O/AMAAAAAAABbcONIRDzV6PO/Qm39z2CD9T9jEXW757Zu88//Cje3oRqggVtHIp5tuP63UD1loi/L/beyHmAgOXm6tLA/Iv4XEXtjYCjNz9a/6Fd1Px0R+z6a/DSv/vr1f+kjrb+6FjBrx83+NauB5otLxW24dOh5t65GPNyfv/4n7f+TBv1/Gt8Xmqxj8vHrx/PKNo9/oF3Kn0fsadj/J7Vzko3vzzFTGQ/MVEcF6z3y3sdf59Uv/qF70v5/dOP4H0rq79ez2NrrD0bEgeX+cl75Vsf/g8mrfVG3E/Hd4tLSxdmIweTo+uNzrbUZ7ifDzZ/6fkRU4qEaL2n8731s4/m/2vi/Lg5Hsnt8NeOBv8Z+yivT/0P3pPE/v3H/P3F3/996Yu76xDd59R9vqv8/WOnT92ZHzP/BxpoN0G63EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADuR4WI+E8khelaulCYno4Yi4j/x2ihdH5x6cmT598+N5+WVb7/v1D9pt/x1XxS/f7/ibr83Jr8gYjYFRGf9I1U8tMnzpfmu33xAAAAAAAAAAAAAAAAAAAAcI8YW31at/8/9XNfV5sGdEJ/9izeoff0d7sBQNeIf+hd4h96V378/36nXNHR5gAd1Gz/X77S5oYAHbfF8b+PC2AH8P4fetVAc6cNt7sdQDfo/wEAAAAAYEfZ9eiNH5KIWHlmpPJIDWZltQ8GR7rVOqCdCnkFQ51tB9B51vBC77L0B3pXk4t/gR0sqaX+aLjZP3/1f9KeBgEAAAAAAAAAAAAA6+zZ3cT+f2BHyt3/D+x4G+z/b7Sxx+0CYAex/x96l9t8AdXBft43/dv/DwAAAAAAAAAAAAD3gOFLZ4ql0sLFxeWmE1daOfnfJ36JvKLnOtmM7UqsFO+JZtwPiYGIWFNUHl/9sz1TLL0WnW1PNWI6UddgB+vKSXTp3yMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCdvwMAAP//emUoLA==") mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1b8a877, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x30]}}]}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x1a}, @IFLA_MTU={0x8}]}, 0x48}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1004508, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x7}}, {@nolazytime}, {@grpquota}, {@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@dioread_nolock}, {@debug}]}, 0x11, 0x4b8, &(0x7f0000000540)="$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") kernel console output (not intermixed with test programs): /22 14:59 (1000) [ 871.415164][T14700] loop2: detected capacity change from 0 to 1024 [ 871.435036][T14365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.529105][T14700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 871.711149][T14697] overlayfs: upper fs needs to support d_type. [ 871.867844][T14365] veth0_vlan: entered promiscuous mode [ 871.882853][T14710] loop3: detected capacity change from 0 to 512 [ 871.883547][T14697] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 872.316569][T14710] EXT4-fs (loop3): #blocks per group too big: 16384 [ 872.382955][T14697] overlayfs: failed to set xattr on upper [ 872.388833][T14697] overlayfs: ...falling back to redirect_dir=nofollow. [ 872.581390][T14697] overlayfs: ...falling back to index=off. [ 872.653183][T14365] veth1_vlan: entered promiscuous mode [ 872.679528][T14697] overlayfs: ...falling back to uuid=null. [ 872.791366][T14365] veth0_macvtap: entered promiscuous mode [ 872.816565][T14715] lo speed is unknown, defaulting to 1000 [ 872.850165][T14365] veth1_macvtap: entered promiscuous mode [ 872.869057][T14715] lo speed is unknown, defaulting to 1000 [ 872.879240][ T5292] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 872.912468][T14715] lo speed is unknown, defaulting to 1000 [ 872.923959][T14365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.962477][T14365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.995755][T14715] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 873.013929][T14365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.039189][T14365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.047486][T14717] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 873.067924][T14715] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 873.076418][T14365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.097651][T14365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.101797][ T5292] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 873.119452][T14365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.144375][T14365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.148914][ T5292] usb 3-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 873.203137][T11445] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 873.212203][ T5292] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.217370][T14365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.229732][T11445] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 873.244528][ T5292] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 873.274481][T14365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.294007][ T5292] usb 3-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 873.308190][T14365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.319198][ T5292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.327399][ T5292] usb 3-1: Product: syz [ 873.339217][ T5292] usb 3-1: Manufacturer: syz [ 873.343885][ T5292] usb 3-1: SerialNumber: syz [ 873.349305][T14365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.364961][ T5292] usb 3-1: config 0 descriptor?? [ 873.377223][T14365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.406578][T14365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.455802][T14365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.492437][T14715] lo speed is unknown, defaulting to 1000 [ 873.507373][T14715] lo speed is unknown, defaulting to 1000 [ 873.519863][T14715] lo speed is unknown, defaulting to 1000 [ 873.521685][T14715] lo speed is unknown, defaulting to 1000 [ 873.523380][T14715] lo speed is unknown, defaulting to 1000 [ 873.525091][T14715] lo speed is unknown, defaulting to 1000 [ 873.526803][T14715] lo speed is unknown, defaulting to 1000 [ 873.528483][T14715] lo speed is unknown, defaulting to 1000 [ 873.536659][T14365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.643809][T14365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.665799][T14365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.698908][T14365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.739228][T14365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.751722][T14365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.764626][T14365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.775652][T14365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.785991][T14365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.796672][T14365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.806907][T14365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.817577][T14365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.827451][T14365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.838155][T14365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.852343][T14365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 874.077172][T14365] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.110855][T14365] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.145644][T14365] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.216637][T14365] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.975129][ T5292] usb 3-1: USB disconnect, device number 21 [ 875.270090][T14740] input: syz1 as /devices/virtual/input/input33 [ 875.371225][T14220] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 1537, max 0(0), depth 0(0) [ 875.491673][T14220] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 1537, max 0(0), depth 0(0) [ 875.519957][T14243] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.832308][T14243] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.105828][T14220] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.168693][T14243] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.476242][T14743] loop0: detected capacity change from 0 to 32768 [ 876.500055][T14749] loop4: detected capacity change from 0 to 256 [ 876.596074][T14749] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 876.613217][T14243] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.617989][T14749] FAT-fs (loop4): Filesystem has been set read-only [ 876.695174][T14749] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 876.772972][T14749] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 876.839456][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 876.839477][ T29] audit: type=1800 audit(2000000479.425:578): pid=14749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2580" name="file1" dev="loop4" ino=1048869 res=0 errno=0 [ 876.924670][T13270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.964330][T13270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.167480][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.219670][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.590293][T14243] bridge_slave_1: left allmulticast mode [ 877.595990][T14243] bridge_slave_1: left promiscuous mode [ 877.654946][T14243] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.721215][T14243] bridge_slave_0: left allmulticast mode [ 877.726951][T14243] bridge_slave_0: left promiscuous mode [ 877.739634][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 877.765174][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 877.804280][ T5242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 877.859208][T14243] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.871836][ T5242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 877.882265][ T5242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 877.898789][T14757] loop4: detected capacity change from 0 to 512 [ 877.905497][ T5242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 878.106276][T14757] EXT4-fs (loop4): 1 orphan inode deleted [ 878.190429][T14757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 878.303929][T14757] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.2584: Directory hole found for htree leaf block 0 [ 878.332432][T14763] loop3: detected capacity change from 0 to 256 [ 878.498025][ T5242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 878.510763][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 878.524191][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 878.580360][T14132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.589288][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 878.604516][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 878.611982][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 878.917418][T14776] loop0: detected capacity change from 0 to 256 [ 878.939998][T14776] msdos: Bad value for 'time_offset' [ 880.022019][T12932] Bluetooth: hci2: command tx timeout [ 880.499772][T14243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.533885][T14243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 880.554178][T14243] bond0 (unregistering): Released all slaves [ 880.694279][T14776] netlink: 'syz.0.2590': attribute type 5 has an invalid length. [ 880.712166][T14776] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2590'. [ 880.730069][T12932] Bluetooth: hci1: command tx timeout [ 881.224718][T14783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2592'. [ 881.244666][ T5290] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 881.246164][T14786] geneve2: entered allmulticast mode [ 881.268400][T14786] team0: Port device geneve2 added [ 881.276359][T14243] tipc: Left network mode [ 881.316951][T14764] lo speed is unknown, defaulting to 1000 [ 881.355421][T14754] lo speed is unknown, defaulting to 1000 [ 881.447349][ T5290] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.468066][ T5290] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 881.479061][ T5290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.499703][ T5290] usb 1-1: config 0 descriptor?? [ 881.515329][ T5290] pwc: Askey VC010 type 2 USB webcam detected. [ 881.703071][T14243] hsr_slave_0: left promiscuous mode [ 881.711271][T14243] hsr_slave_1: left promiscuous mode [ 881.717059][ T5290] pwc: send_video_command error -71 [ 881.731407][ T5290] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 881.739041][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.747310][ T5290] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 881.759109][T14243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.775867][ T5290] usb 1-1: USB disconnect, device number 31 [ 881.780323][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.789351][T14243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.828060][T14243] veth1_macvtap: left promiscuous mode [ 881.833830][T14243] veth0_macvtap: left promiscuous mode [ 881.839851][T14243] veth1_vlan: left promiscuous mode [ 881.845147][T14243] veth0_vlan: left promiscuous mode [ 882.089522][T12932] Bluetooth: hci2: command tx timeout [ 882.389477][ T5290] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 882.602462][ T5290] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.621828][ T5290] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 882.653069][ T5242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 882.664866][ T5242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 882.676315][ T5290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.702720][ T5242] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 882.722402][ T5242] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 882.731699][ T5242] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 882.739104][ T5242] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 882.750527][ T5290] usb 1-1: config 0 descriptor?? [ 882.776958][ T5290] pwc: Askey VC010 type 2 USB webcam detected. [ 882.827030][T12932] Bluetooth: hci1: command tx timeout [ 882.871991][T14806] loop4: detected capacity change from 0 to 32768 [ 882.909688][T14806] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section errors: entries out of order [ 882.909688][T14806] errors (size 40): [ 882.909688][T14806] (unknown error 65534) 65535 7 [ 882.909688][T14806] journal_entry_data_usage_bad_size0 1 [ 882.909688][T14806] [ 882.945679][T14806] bcachefs: bch2_fs_get_tree() error: invalid_sb_errors [ 883.195768][ T5290] pwc: recv_control_msg error -32 req 02 val 2b00 [ 883.221226][ T5290] pwc: recv_control_msg error -32 req 02 val 2700 [ 883.249662][ T5290] pwc: recv_control_msg error -32 req 02 val 2c00 [ 883.271402][ T5290] pwc: recv_control_msg error -32 req 04 val 1000 [ 883.303076][ T5290] pwc: recv_control_msg error -32 req 04 val 1300 [ 883.333688][ T5290] pwc: recv_control_msg error -32 req 04 val 1400 [ 883.370067][ T5290] pwc: recv_control_msg error -32 req 02 val 2000 [ 883.378289][ T5290] pwc: recv_control_msg error -32 req 02 val 2100 [ 883.412696][ T5290] pwc: recv_control_msg error -32 req 04 val 1500 [ 883.423305][ T5290] pwc: recv_control_msg error -32 req 02 val 2500 [ 883.456133][ T5290] pwc: recv_control_msg error -32 req 02 val 2400 [ 883.461725][ T8497] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 883.472504][ T5290] pwc: recv_control_msg error -32 req 02 val 2600 [ 883.480773][ T5290] pwc: recv_control_msg error -32 req 02 val 2900 [ 883.661315][ T8497] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 883.689523][ T8497] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 883.746261][ T8497] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 883.757290][ T5290] pwc: recv_control_msg error -71 req 04 val 1100 [ 883.765433][ T8497] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 883.775479][ T5290] pwc: recv_control_msg error -71 req 04 val 1200 [ 883.793461][T14243] team0 (unregistering): Port device team_slave_1 removed [ 883.805639][ T8497] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.806723][ T5290] pwc: Registered as video71. [ 883.822511][ T5290] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input34 [ 883.829717][ T8497] usb 4-1: Product: syz [ 883.850137][ T8497] usb 4-1: Manufacturer: syz [ 883.854806][ T8497] usb 4-1: SerialNumber: syz [ 883.859655][ T5290] usb 1-1: USB disconnect, device number 32 [ 883.890345][ T8497] usb 4-1: config 0 descriptor?? [ 883.932070][ T8497] kvaser_usb 4-1:0.0: Cannot get usb endpoint(s) [ 884.053174][T14243] team0 (unregistering): Port device team_slave_0 removed [ 884.164984][ T8497] usb 4-1: USB disconnect, device number 29 [ 884.187999][T12932] Bluetooth: hci2: command tx timeout [ 884.981779][T12932] Bluetooth: hci4: command tx timeout [ 884.989568][ T5242] Bluetooth: hci1: command tx timeout [ 885.106694][T14827] loop0: detected capacity change from 0 to 128 [ 886.249585][ T5242] Bluetooth: hci2: command tx timeout [ 886.915333][T14838] loop3: detected capacity change from 0 to 4096 [ 886.962160][T14838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 887.079430][ T5242] Bluetooth: hci1: command tx timeout [ 887.086978][T12932] Bluetooth: hci4: command tx timeout [ 888.567787][T14825] lo speed is unknown, defaulting to 1000 [ 888.720851][T13303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.016164][T14807] lo speed is unknown, defaulting to 1000 [ 889.130992][ T5242] Bluetooth: hci4: command tx timeout [ 889.278073][T14764] chnl_net:caif_netlink_parms(): no params data found [ 889.634027][T14859] loop3: detected capacity change from 0 to 256 [ 890.546600][T14754] chnl_net:caif_netlink_parms(): no params data found [ 891.220597][T12932] Bluetooth: hci4: command tx timeout [ 891.323209][T14807] chnl_net:caif_netlink_parms(): no params data found [ 891.344348][T14764] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.354332][T14764] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.364374][T14764] bridge_slave_0: entered allmulticast mode [ 891.376791][T14764] bridge_slave_0: entered promiscuous mode [ 891.392062][T14764] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.406111][T14764] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.425670][T14764] bridge_slave_1: entered allmulticast mode [ 891.446521][T14764] bridge_slave_1: entered promiscuous mode [ 891.555110][T14878] loop3: detected capacity change from 0 to 2048 [ 891.601008][T14878] EXT4-fs: Ignoring removed orlov option [ 891.697132][T14878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 891.743094][T14754] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.750483][ T5292] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 891.786209][T14754] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.829519][T14754] bridge_slave_0: entered allmulticast mode [ 891.871103][T14870] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 891.872399][T14754] bridge_slave_0: entered promiscuous mode [ 891.931250][T14870] EXT4-fs (loop3): Remounting filesystem read-only [ 891.999257][ T5292] usb 1-1: Using ep0 maxpacket: 16 [ 892.017083][T14764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.043405][ T5292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 892.057970][T14754] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.069519][ T5292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 892.085475][ T5292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 892.097724][T14754] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.109006][T14754] bridge_slave_1: entered allmulticast mode [ 892.144158][ T5292] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=15.7a [ 892.160415][T14754] bridge_slave_1: entered promiscuous mode [ 892.166357][ T5292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.181732][ T5292] usb 1-1: Product: syz [ 892.185922][ T5292] usb 1-1: Manufacturer: syz [ 892.224575][ T5292] usb 1-1: SerialNumber: syz [ 892.232937][T13303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.259342][T12932] Bluetooth: hci0: command 0x0406 tx timeout [ 892.271326][ T5292] usb 1-1: config 0 descriptor?? [ 892.317604][ T5292] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 892.396043][T14889] loop4: detected capacity change from 0 to 512 [ 892.438961][T14889] EXT4-fs (loop4): Test dummy encryption mode enabled [ 892.517865][T14243] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.529957][T14889] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.2617: corrupted in-inode xattr: invalid ea_ino [ 892.545343][T14889] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2617: couldn't read orphan inode 12 (err -117) [ 892.580975][T14889] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 892.648728][T14764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.692148][ T5292] usb 1-1: USB disconnect, device number 33 [ 892.737881][T14889] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.2617: Directory hole found for htree leaf block 0 [ 892.836710][T14754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.852049][T14889] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.2617: Directory hole found for htree leaf block 0 [ 892.916676][ T6074] udevd[6074]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 893.041477][T14243] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.158622][T14754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.207999][T14807] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.229463][T14807] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.236614][ T5242] Bluetooth: hci5: unexpected event for opcode 0x0419 [ 893.236718][T14807] bridge_slave_0: entered allmulticast mode [ 893.271801][T14807] bridge_slave_0: entered promiscuous mode [ 893.417411][T14132] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 893.441186][T14904] loop0: detected capacity change from 0 to 256 [ 893.467778][T14243] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.559706][T14904] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 893.578252][T14764] team0: Port device team_slave_0 added [ 893.679042][T14908] loop4: detected capacity change from 0 to 512 [ 893.724001][T14904] exFAT-fs (loop0): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967286) [ 893.724001][T14904] [ 893.741731][T14904] exFAT-fs (loop0): Filesystem has been set read-only [ 893.748521][T14904] exFAT-fs (loop0): error, failed to bmap (inode : ffff888058d8a868 iblock : 0, err : -5) [ 893.772738][T14908] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz.4.2621: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 893.803859][T14807] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.812725][T14908] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2621: couldn't read orphan inode 15 (err -117) [ 893.826897][T14908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 893.861759][T14807] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.869044][T14807] bridge_slave_1: entered allmulticast mode [ 893.942438][T14807] bridge_slave_1: entered promiscuous mode [ 893.995160][T14132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.092423][T14243] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.153222][T14764] team0: Port device team_slave_1 added [ 894.165769][T14754] team0: Port device team_slave_0 added [ 894.208841][T14919] loop4: detected capacity change from 0 to 512 [ 894.225777][T14919] ext4: Unknown parameter 'euid' [ 894.230230][T14807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.289594][T14915] bond0: entered promiscuous mode [ 894.312042][T14915] bond_slave_0: entered promiscuous mode [ 894.317979][T14915] bond_slave_1: entered promiscuous mode [ 894.433614][T14754] team0: Port device team_slave_1 added [ 894.463573][T14807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.491960][T14764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.508564][T14764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.556483][T14764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.598968][ T5292] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 894.696277][T14764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.707404][T14764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.739081][T14764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.776440][T14754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.784022][T14754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.810382][ T5292] usb 4-1: Using ep0 maxpacket: 8 [ 894.818324][T14754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.842291][ T5292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 894.849992][T14807] team0: Port device team_slave_0 added [ 894.853471][ T5292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 894.874257][ T5292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 894.888480][ T5292] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=93.e8 [ 894.900072][ T5292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.908154][ T5292] usb 4-1: Product: syz [ 894.910235][T14807] team0: Port device team_slave_1 added [ 894.912665][ T5292] usb 4-1: Manufacturer: syz [ 894.925430][ T5292] usb 4-1: SerialNumber: syz [ 894.952572][ T5292] usb 4-1: config 0 descriptor?? [ 894.965279][ T5292] usbtest 4-1:0.0: couldn't get endpoints, -22 [ 894.972640][ T5292] usbtest 4-1:0.0: probe with driver usbtest failed with error -22 [ 895.017524][T14754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.025053][T14754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.054984][T14754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.070327][T14914] bond0: left promiscuous mode [ 895.075875][T14914] bond_slave_0: left promiscuous mode [ 895.089893][T14914] bond_slave_1: left promiscuous mode [ 895.251319][T14764] hsr_slave_0: entered promiscuous mode [ 895.261005][T14764] hsr_slave_1: entered promiscuous mode [ 895.276575][ T5292] usb 4-1: USB disconnect, device number 30 [ 895.283539][T14764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 895.305937][T14764] Cannot create hsr debugfs directory [ 895.330731][T14807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.338360][T14807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.374729][T14807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.443402][T14807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.454238][T14807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.487090][T14807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.868057][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 896.091096][T14942] loop3: detected capacity change from 0 to 1024 [ 896.098524][T14942] hfsplus: creator requires a 4 character value [ 896.146274][T14942] hfsplus: unable to parse mount options [ 896.183434][T14243] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.293541][T14754] hsr_slave_0: entered promiscuous mode [ 896.301529][T14754] hsr_slave_1: entered promiscuous mode [ 896.315931][T14754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 896.331092][T14754] Cannot create hsr debugfs directory [ 896.351340][T14807] hsr_slave_0: entered promiscuous mode [ 896.371162][T14807] hsr_slave_1: entered promiscuous mode [ 896.399412][T14807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 896.419642][T14807] Cannot create hsr debugfs directory [ 896.471906][T14944] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 896.677396][T14243] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.142500][T14243] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.162745][T14961] loop3: detected capacity change from 0 to 8 [ 897.190281][T14961] SQUASHFS error: lzo decompression failed, data probably corrupt [ 897.198155][T14961] SQUASHFS error: Failed to read block 0x91: -5 [ 897.259388][T14961] SQUASHFS error: Unable to read metadata cache entry [8f] [ 897.266646][T14961] SQUASHFS error: Unable to read inode 0x11f [ 897.289322][ T5242] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 897.298371][ T5242] Bluetooth: hci5: Injecting HCI hardware error event [ 897.315538][T12932] Bluetooth: hci5: hardware error 0x00 [ 897.401639][T14963] loop0: detected capacity change from 0 to 512 [ 897.511164][T14967] loop0: detected capacity change from 0 to 512 [ 897.527298][T14967] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 897.540618][T14243] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.593851][T14967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 897.689611][T14967] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 897.891224][ T29] audit: type=1326 audit(2000000500.485:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14962 comm="syz.0.2641" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febcd1779f9 code=0x0 [ 898.314668][T13622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 898.593696][T14243] bridge_slave_1: left allmulticast mode [ 898.619160][T14243] bridge_slave_1: left promiscuous mode [ 898.625038][T14243] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.698866][T14243] bridge_slave_0: left allmulticast mode [ 898.716998][T14243] bridge_slave_0: left promiscuous mode [ 898.740323][T14243] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.832181][T14243] bridge_slave_1: left allmulticast mode [ 898.837904][T14243] bridge_slave_1: left promiscuous mode [ 898.864553][T14243] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.908160][T14243] bridge_slave_0: left allmulticast mode [ 898.918540][T14243] bridge_slave_0: left promiscuous mode [ 898.929476][T14243] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.449872][T12932] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 899.870098][T14996] loop4: detected capacity change from 0 to 512 [ 899.928076][T14996] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 899.976846][T14996] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 900.013727][T14996] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 900.326675][T14988] loop3: detected capacity change from 0 to 32768 [ 900.443120][T14988] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2651 (14988) [ 900.516107][T14988] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 900.563055][T14988] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 900.651295][T14988] BTRFS info (device loop3): using free-space-tree [ 901.945132][T14988] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 902.166863][T14988] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 902.316193][T14988] BTRFS error (device loop3): open_ctree failed [ 903.580627][T15022] loop3: detected capacity change from 0 to 128 [ 903.619744][T15022] vfat: Unknown parameter '/dev/net/tun' [ 903.707745][T15020] loop3: detected capacity change from 0 to 512 [ 903.729839][T15020] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 903.738585][T15020] EXT4-fs (loop3): 1 truncate cleaned up [ 903.745510][T15020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 904.280514][T14243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 904.293293][T14243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 904.305978][T14243] bond0 (unregistering): Released all slaves [ 904.591534][T14243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 904.616739][T14243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 904.641490][T14243] bond0 (unregistering): Released all slaves [ 904.799855][T14998] lo speed is unknown, defaulting to 1000 [ 904.996546][T13303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.852609][T15041] loop3: detected capacity change from 0 to 2048 [ 906.931039][T15041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 907.088232][T13303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.132412][T14764] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 907.289675][T14764] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 907.986446][T14764] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 908.647296][T14764] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 908.725916][T14243] hsr_slave_0: left promiscuous mode [ 908.734350][T14243] hsr_slave_1: left promiscuous mode [ 908.741511][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 908.748945][T14243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.794045][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 908.827464][T14243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 909.019732][T14243] hsr_slave_0: left promiscuous mode [ 909.052968][T14243] hsr_slave_1: left promiscuous mode [ 909.079032][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.094230][T14243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 909.120708][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 909.128176][T14243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 909.150625][ T29] audit: type=1400 audit(2000000511.725:580): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=15060 comm="syz.3.2666" [ 909.286709][T15064] loop0: detected capacity change from 0 to 512 [ 909.294571][T14243] veth1_macvtap: left promiscuous mode [ 909.301365][T14243] veth0_macvtap: left promiscuous mode [ 909.307085][T14243] veth1_vlan: left promiscuous mode [ 909.316489][T14243] veth0_vlan: left promiscuous mode [ 909.325034][T14243] veth1_macvtap: left promiscuous mode [ 909.334743][T15064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 909.353635][T14243] veth0_macvtap: left promiscuous mode [ 909.359790][T14243] veth1_vlan: left promiscuous mode [ 909.367483][T15064] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 909.387459][T14243] veth0_vlan: left promiscuous mode [ 909.531714][T15064] loop0: detected capacity change from 512 to 0 [ 909.562431][T15073] syz.0.2667: attempt to access beyond end of device [ 909.562431][T15073] loop0: rw=12288, sector=60, nr_sectors = 4 limit=0 [ 909.584914][T15073] Quota error (device loop0): find_next_id: Can't read quota tree block 4 [ 909.672266][T13622] syz-executor: attempt to access beyond end of device [ 909.672266][T13622] loop0: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 909.708630][T13622] syz-executor: attempt to access beyond end of device [ 909.708630][T13622] loop0: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 909.726853][T13622] syz-executor: attempt to access beyond end of device [ 909.726853][T13622] loop0: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 909.743934][T13622] syz-executor: attempt to access beyond end of device [ 909.743934][T13622] loop0: rw=12288, sector=136, nr_sectors = 4 limit=0 [ 909.758709][T13622] EXT4-fs error (device loop0): ext4_get_inode_loc:4574: inode #2: block 34: comm syz-executor: unable to read itable block [ 909.775057][T13622] syz-executor: attempt to access beyond end of device [ 909.775057][T13622] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 909.789499][T13622] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 909.797936][T13622] EXT4-fs (loop0): I/O error while writing superblock [ 909.808264][T13622] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5810: IO failure [ 909.828527][T13622] syz-executor: attempt to access beyond end of device [ 909.828527][T13622] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 909.844407][T13622] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 909.856367][T13622] EXT4-fs (loop0): I/O error while writing superblock [ 909.863934][T13622] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 909.875973][T13622] syz-executor: attempt to access beyond end of device [ 909.875973][T13622] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 909.892316][T13622] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 909.906316][T13622] EXT4-fs (loop0): I/O error while writing superblock [ 909.930066][T15043] ext4lazyinit: attempt to access beyond end of device [ 909.930066][T15043] loop0: rw=536576, sector=8, nr_sectors = 4 limit=0 [ 909.961024][T15043] ext4lazyinit: attempt to access beyond end of device [ 909.961024][T15043] loop0: rw=12288, sector=8, nr_sectors = 4 limit=0 [ 909.984787][T15043] EXT4-fs error (device loop0): ext4_wait_block_bitmap:584: comm ext4lazyinit: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 910.016663][T15043] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 910.026700][T15043] EXT4-fs (loop0): I/O error while writing superblock [ 910.054845][ T12] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4559: inode #2: block 34: comm kworker/u8:1: unable to read itable block [ 910.071671][ T12] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 910.081654][ T12] EXT4-fs (loop0): I/O error while writing superblock [ 910.109700][T13622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 910.124091][T13622] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 910.133718][T13622] EXT4-fs (loop0): I/O error while writing superblock [ 910.149963][T15067] Buffer I/O error on dev loop0, logical block 12, lost sync page write [ 910.669449][T14243] team0 (unregistering): Port device team_slave_1 removed [ 910.728877][T14243] team0 (unregistering): Port device team_slave_0 removed [ 912.155712][T14243] team0 (unregistering): Port device team_slave_1 removed [ 912.252157][T14243] team0 (unregistering): Port device team_slave_0 removed [ 913.510268][T15079] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 913.516839][T15079] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 913.532824][T15079] vhci_hcd vhci_hcd.0: Device attached [ 913.723727][T15082] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 913.729601][ T8497] vhci_hcd: vhci_device speed not set [ 913.819862][ T8497] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 913.933246][ T1164] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 913.978380][T14754] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 914.127296][T14754] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 914.146768][ T1164] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 914.167698][T14754] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 914.174997][ T1164] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 914.230265][T14754] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 914.237138][ T1164] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 914.258631][ T1164] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 914.273892][ T1164] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 914.292103][ T1164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.309495][ T1164] usb 5-1: Product: syz [ 914.318619][ T1164] usb 5-1: Manufacturer: syz [ 914.335447][T15080] vhci_hcd: connection closed [ 914.337627][ T35] vhci_hcd: stop threads [ 914.343747][ T1164] usb 5-1: SerialNumber: syz [ 914.359293][ T35] vhci_hcd: release socket [ 914.367432][ T35] vhci_hcd: disconnect device [ 914.405582][T14764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.668934][ T1164] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 914.678933][T14764] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.688290][ T1164] usb 5-1: 2:1 : unsupported sample bitwidth 0 in 6 bytes [ 914.764385][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.771613][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.819314][ T1164] usb 5-1: USB disconnect, device number 21 [ 914.937154][ T5287] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.944524][ T5287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.101478][T15075] udevd[15075]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 915.152717][ T5242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 915.165054][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 915.174904][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 915.183850][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 915.193712][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 915.201400][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 915.265464][T15091] loop3: detected capacity change from 0 to 512 [ 915.288293][T15091] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 915.297098][T15091] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 915.309655][T15091] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 915.466529][ T35] wlan1: Trigger new scan to find an IBSS to join [ 915.547462][T14807] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 915.698433][T14807] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 915.809234][ T1164] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 915.839739][T14754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.927553][T15092] lo speed is unknown, defaulting to 1000 [ 915.999501][ T1164] usb 5-1: Using ep0 maxpacket: 8 [ 916.157423][ T1164] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 916.166981][ T1164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.187407][ T1164] usb 5-1: Product: syz [ 916.196610][ T1164] usb 5-1: Manufacturer: syz [ 916.226369][ T1164] usb 5-1: SerialNumber: syz [ 916.279431][ T1164] usb 5-1: config 0 descriptor?? [ 916.334788][ T1164] radioshark2 5-1:0.0: Invalid radioSHARK2 device [ 916.341870][ T1164] radioshark2 5-1:0.0: probe with driver radioshark2 failed with error -22 [ 916.354964][ T1164] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 916.456774][T14807] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 917.292115][T12932] Bluetooth: hci0: command tx timeout [ 917.770360][T15088] lo speed is unknown, defaulting to 1000 [ 917.799063][ T1164] usb 5-1: USB disconnect, device number 22 [ 917.812647][T14807] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 917.966060][T14754] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.098831][ T8515] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.106070][ T8515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.163585][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.170822][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.227380][T14764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.448990][T15108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2678'. [ 918.478334][T15108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2678'. [ 918.498928][T15108] netlink: 'syz.4.2678': attribute type 1 has an invalid length. [ 918.738524][T14764] veth0_vlan: entered promiscuous mode [ 918.814295][T14764] veth1_vlan: entered promiscuous mode [ 918.859816][T14807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.870077][T15088] chnl_net:caif_netlink_parms(): no params data found [ 918.979572][ T8497] vhci_hcd: vhci_device speed not set [ 919.083999][T15118] loop3: detected capacity change from 0 to 2048 [ 919.111473][T15118] EXT4-fs: Ignoring removed mblk_io_submit option [ 919.197797][T15118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 919.273105][T14807] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.314842][T14764] veth0_macvtap: entered promiscuous mode [ 919.343529][T14764] veth1_macvtap: entered promiscuous mode [ 919.350112][ T29] audit: type=1800 audit(2000000521.925:581): pid=15118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2681" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 919.389308][T12932] Bluetooth: hci0: command tx timeout [ 919.450131][ T12] wlan1: Trigger new scan to find an IBSS to join [ 920.132996][T15088] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.157362][T15088] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.180022][T15088] bridge_slave_0: entered allmulticast mode [ 920.242016][T15088] bridge_slave_0: entered promiscuous mode [ 920.260276][T15117] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2681: bg 0: block 234: padding at end of block bitmap is not set [ 920.279552][T15088] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.286747][T15088] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.300687][T15088] bridge_slave_1: entered allmulticast mode [ 920.307947][T15088] bridge_slave_1: entered promiscuous mode [ 920.328478][ T8497] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.335705][ T8497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 920.358793][T15117] EXT4-fs (loop3): Remounting filesystem read-only [ 920.416989][ T7619] wlan1: Creating new IBSS network, BSSID 86:d8:83:44:75:97 [ 920.557963][T15088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 920.620657][T13303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.631480][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.669275][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.687561][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.712723][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.727847][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.787922][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.811650][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.825925][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.849669][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.871469][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.896331][T14764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 920.918225][T15088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.956942][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.964125][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.019426][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.048405][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.070283][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.109264][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.133081][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.160956][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.187833][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.207005][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.232606][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.254345][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.277752][T14764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 921.327114][T15088] team0: Port device team_slave_0 added [ 921.374831][T15147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 921.404611][T15147] bond0: (slave rose0): Enslaving as an active interface with an up link [ 921.432943][T14764] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.449931][T12932] Bluetooth: hci0: command tx timeout [ 921.465621][T14764] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.480698][T14764] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.497787][T14764] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.523154][T14754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.538881][T15088] team0: Port device team_slave_1 added [ 921.717521][T15152] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 922.300312][T15158] program syz.3.2691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 923.106371][T15088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.147995][T15088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.218547][T15088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.421314][T15088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.443922][T15088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.501214][T15088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.530010][T12932] Bluetooth: hci0: command tx timeout [ 923.596975][T15168] loop4: detected capacity change from 0 to 512 [ 923.665752][T15168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.680134][T15168] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 923.796277][ T29] audit: type=1326 audit(2000000526.385:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15167 comm="syz.4.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bc7779f9 code=0x7ffc0000 [ 923.818848][ T29] audit: type=1326 audit(2000000526.385:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15167 comm="syz.4.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bc7779f9 code=0x7ffc0000 [ 923.849072][T15175] netlink: 'syz.3.2695': attribute type 1 has an invalid length. [ 923.849407][ T29] audit: type=1326 audit(2000000526.385:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15167 comm="syz.4.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7ff6bc7779f9 code=0x7ffc0000 [ 923.882693][T15171] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 923.884932][T15088] hsr_slave_0: entered promiscuous mode [ 923.932703][ T29] audit: type=1326 audit(2000000526.385:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15167 comm="syz.4.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bc7779f9 code=0x7ffc0000 [ 923.967674][T15088] hsr_slave_1: entered promiscuous mode [ 924.034440][ T29] audit: type=1326 audit(2000000526.385:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15167 comm="syz.4.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff6bc7779f9 code=0x7ffc0000 [ 924.064457][ T29] audit: type=1326 audit(2000000526.385:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15167 comm="syz.4.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bc7779f9 code=0x7ffc0000 [ 924.087897][T15168] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2694'. [ 924.097295][ T29] audit: type=1326 audit(2000000526.385:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15167 comm="syz.4.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bc7779f9 code=0x7ffc0000 [ 924.097368][ T29] audit: type=1326 audit(2000000526.385:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15167 comm="syz.4.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7ff6bc7779f9 code=0x7ffc0000 [ 924.097432][ T29] audit: type=1326 audit(2000000526.445:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15167 comm="syz.4.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6bc7779f9 code=0x7ffc0000 [ 924.216287][T15179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2696'. [ 924.229330][T15179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2696'. [ 924.275080][T14132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.473785][T15183] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2697'. [ 924.494132][T15183] NCSI netlink: No device for ifindex 0 [ 924.668679][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.686105][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.713403][T15189] loop4: detected capacity change from 0 to 1024 [ 924.850253][T15194] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2700'. [ 924.940232][T15088] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.983459][T14243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.996567][T14243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.028710][T14754] veth0_vlan: entered promiscuous mode [ 925.050921][T14807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.110315][T15088] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.169479][ T8497] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 925.262958][T15088] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.306075][T14754] veth1_vlan: entered promiscuous mode [ 925.361635][ T8497] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 925.391611][ T8497] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 925.419395][ T8497] usb 5-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 925.422845][T15088] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.437455][ T8497] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.462294][ T8497] usb 5-1: config 0 descriptor?? [ 925.478226][ T8497] appletouch 5-1:0.0: Could not find int-in endpoint [ 925.485349][ T8497] appletouch 5-1:0.0: probe with driver appletouch failed with error -5 [ 925.496157][ T8497] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 925.543989][T14807] veth0_vlan: entered promiscuous mode [ 925.577322][T14754] veth0_macvtap: entered promiscuous mode [ 925.612406][T14754] veth1_macvtap: entered promiscuous mode [ 925.632366][T14807] veth1_vlan: entered promiscuous mode [ 925.733950][ T5425] usb 5-1: USB disconnect, device number 23 [ 925.756399][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.789582][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.809570][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.820634][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.832085][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.843047][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.856967][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.867708][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.878036][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.893046][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.904379][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.915151][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.935044][T14754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.003329][T14807] veth0_macvtap: entered promiscuous mode [ 926.040560][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.064848][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.077964][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.090980][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.101419][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.112212][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.132407][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.143776][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.154022][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.166362][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.207084][T14754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.218484][T14754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.233872][T14754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.298149][T14754] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.335998][T14754] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.347217][T14754] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.368932][T14754] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.450384][T15088] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 926.470581][T15088] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 926.503642][T15088] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 926.524612][T15088] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 926.722019][T14807] veth1_macvtap: entered promiscuous mode [ 927.749340][T15217] loop4: detected capacity change from 0 to 64 [ 928.030980][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.076670][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.112952][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.159406][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.189257][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.229189][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.269192][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.309316][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.343767][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.362065][T15227] loop4: detected capacity change from 0 to 1024 [ 928.379170][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.398220][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.436494][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.462138][T15231] loop3: detected capacity change from 0 to 2048 [ 928.469634][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.485851][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.498518][ T8011] hfsplus: b-tree write err: -5, ino 4 [ 928.516139][T14807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.529340][T15231] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 928.588556][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.602855][ T7652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.623144][ T7652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.629175][T15231] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 928.660182][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.702436][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.705945][T15235] loop2: detected capacity change from 0 to 128 [ 928.720981][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.745052][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.754337][T15235] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 928.775737][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.783563][T15235] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 928.793835][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.821649][T12932] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 928.837509][T12932] Bluetooth: hci3: Injecting HCI hardware error event [ 928.855590][ T5242] Bluetooth: hci3: hardware error 0x00 [ 928.892428][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.936250][T15235] fscrypt (loop2, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 928.962440][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.022332][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.103693][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.195239][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.210791][T14807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.223505][T13303] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh [ 929.233511][T13303] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh [ 929.248848][T14807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.304675][T14807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.532450][T14764] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 929.687070][T14807] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.699006][T14807] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.708109][T14807] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.717587][T14807] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.924415][T14243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.944527][T14243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.120666][T15248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2720'. [ 930.343784][T15250] loop5: detected capacity change from 0 to 2048 [ 930.352992][T15088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 930.434809][T15250] Dev loop5: unable to read partition block 3191046 [ 930.456268][T14243] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.472672][T15250] loop5: RDSK (816907776) unable to read partition table [ 930.481841][T15250] loop5: partition table beyond EOD, truncated [ 930.488027][T15250] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 930.532687][ T4674] Dev loop5: unable to read partition block 3191046 [ 930.556121][ T4674] loop5: RDSK (816907776) unable to read partition table [ 930.578115][ T4674] loop5: partition table beyond EOD, truncated [ 930.655878][T15255] netlink: 'syz.4.2724': attribute type 8 has an invalid length. [ 930.670717][T15256] loop2: detected capacity change from 0 to 2048 [ 930.673710][T15088] 8021q: adding VLAN 0 to HW filter on device team0 [ 930.679222][T15255] netlink: 'syz.4.2724': attribute type 7 has an invalid length. [ 930.753202][T15258] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 930.759464][T15255] netlink: 198180 bytes leftover after parsing attributes in process `syz.4.2724'. [ 930.796808][T14243] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.892738][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.920116][T15258] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 930.922963][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.981808][T15258] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 931.036821][T15258] Remounting filesystem read-only [ 931.048470][T15260] NILFS (loop2): mounting fs with errors [ 931.137405][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.282558][T15263] input: syz1 as /devices/virtual/input/input36 [ 931.321418][T14243] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.397642][T15256] gfs2: path_lookup on 0.:: returned error -2 [ 931.610465][ T5242] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 931.982761][T15258] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 932.002741][T15258] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 932.025010][T15258] Remounting filesystem read-only [ 932.045568][T14243] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.065953][ T7650] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 932.083024][ T7650] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 932.125847][ T8497] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.133126][ T8497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.139325][ T7650] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 932.193608][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.204163][ T7650] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 932.205057][T12932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 932.223869][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.226496][T12932] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 932.239546][ T7650] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 932.239674][ T7650] NILFS (loop2): discard dirty page: offset=0, ino=12 [ 932.239699][ T7650] NILFS (loop2): discard dirty block: blocknr=17, size=1024 [ 932.239723][ T7650] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 932.239749][ T7650] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 932.239782][ T7650] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 932.239841][ T7650] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 932.239864][ T7650] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 932.239888][ T7650] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 932.239913][ T7650] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 932.239938][ T7650] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 932.239992][ T7650] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 932.240016][ T7650] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 932.240040][ T7650] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 932.240063][ T7650] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 932.240086][ T7650] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 932.240118][ T7650] NILFS (loop2): discard dirty page: offset=131072, ino=3 [ 932.240141][ T7650] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 932.240167][ T7650] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 932.240192][ T7650] NILFS (loop2): discard dirty block: blocknr=46, size=1024 [ 932.240216][ T7650] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 932.240263][ T7650] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 932.240286][ T7650] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 932.240310][ T7650] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 932.240336][ T7650] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 932.240361][ T7650] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 932.241784][T14764] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 932.449994][T12932] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 932.478539][T12932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 932.488409][T12932] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 932.496361][T12932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 932.533259][ T8497] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.540512][ T8497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.552947][T15269] loop5: detected capacity change from 0 to 1024 [ 932.569608][T15269] EXT4-fs: Ignoring removed oldalloc option [ 932.640098][T15269] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 932.722976][T14764] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 932.735622][T14764] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 932.746694][T14764] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 932.786918][T14764] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 932.801751][T15269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 932.847289][T14764] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 932.900472][T15266] lo speed is unknown, defaulting to 1000 [ 933.231099][T15283] loop2: detected capacity change from 0 to 8 [ 933.639469][T14243] bridge_slave_1: left allmulticast mode [ 934.554330][T14243] bridge_slave_1: left promiscuous mode [ 934.651558][T12932] Bluetooth: hci5: command tx timeout [ 934.719577][T15283] SQUASHFS error: zlib decompression failed, data probably corrupt [ 934.740207][T14754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.773481][T14243] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.799242][T15283] SQUASHFS error: Failed to read block 0x9b: -5 [ 934.807182][T15283] SQUASHFS error: Unable to read metadata cache entry [99] [ 934.820850][T15283] SQUASHFS error: Unable to read inode 0x127 [ 934.875873][T14243] bridge_slave_0: left allmulticast mode [ 934.901967][T14243] bridge_slave_0: left promiscuous mode [ 934.907817][T14243] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.294751][T15295] loop2: detected capacity change from 0 to 1024 [ 935.317839][T15295] hfsplus: unable to parse mount options [ 935.706527][T14243] team0: Port device geneve2 removed [ 936.038158][T14243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 936.054373][T14243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 936.065877][T14243] bond0 (unregistering): Released all slaves [ 936.384060][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2734'. [ 936.729735][T12932] Bluetooth: hci5: command tx timeout [ 936.817954][T15088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.048723][T15266] chnl_net:caif_netlink_parms(): no params data found [ 937.263018][T15088] veth0_vlan: entered promiscuous mode [ 937.271985][T15316] loop4: detected capacity change from 0 to 1024 [ 937.418930][ T5242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 937.445279][ T5242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 937.456598][T15088] veth1_vlan: entered promiscuous mode [ 937.466014][ T5242] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 937.686334][ T5242] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 937.695888][ T5242] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 937.706146][ T5242] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 937.786618][T15328] loop5: detected capacity change from 0 to 512 [ 937.849402][T15328] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.2739: corrupted in-inode xattr: invalid ea_ino [ 937.868894][T15328] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2739: couldn't read orphan inode 15 (err -117) [ 938.090622][T15334] QAT: failed to copy from user cfg_data. [ 938.601415][T15328] EXT4-fs (loop5): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 938.817210][ T5242] Bluetooth: hci5: command tx timeout [ 938.965881][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 938.965901][ T29] audit: type=1326 audit(2000000541.555:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15336 comm="syz.2.2741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa526f779f9 code=0x0 [ 939.027135][T15266] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.055129][T15266] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.080415][T15266] bridge_slave_0: entered allmulticast mode [ 939.126224][T15266] bridge_slave_0: entered promiscuous mode [ 939.184385][T15266] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.204521][T15266] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.226759][T15266] bridge_slave_1: entered allmulticast mode [ 939.248863][T15266] bridge_slave_1: entered promiscuous mode [ 939.347468][T15322] lo speed is unknown, defaulting to 1000 [ 939.440306][T14754] EXT4-fs (loop5): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 939.446815][T15266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.491067][ T7619] hfsplus: b-tree write err: -5, ino 4 [ 939.527700][T15266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.775521][T15266] team0: Port device team_slave_0 added [ 939.779666][ T5242] Bluetooth: hci4: command tx timeout [ 939.953220][T15266] team0: Port device team_slave_1 added [ 939.976467][T15088] veth0_macvtap: entered promiscuous mode [ 940.119819][ T8494] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 940.314625][ T8494] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 940.346452][T15351] loop2: detected capacity change from 0 to 512 [ 940.352817][T15266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.352839][T15266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.352876][T15266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.388051][T15266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.401050][ T8494] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 940.416189][T15266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.440221][ T8494] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 940.458511][T15351] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 940.494214][ T8494] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 940.540636][T15266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.546532][ T8494] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 940.575971][T15088] veth1_macvtap: entered promiscuous mode [ 940.603423][T15351] EXT4-fs (loop2): 1 orphan inode deleted [ 940.633499][ T8494] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 940.648446][T15351] EXT4-fs (loop2): 1 truncate cleaned up [ 940.661219][ T8494] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 940.693434][T15351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 940.721979][ T8494] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 940.755556][ T8494] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 940.770871][ T8494] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 940.784066][ T8494] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 940.791719][ T8494] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 940.802192][ T8494] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 940.812299][ T8494] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 940.823863][ T8494] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 940.825661][T15351] syz.2.2746[15351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 940.846873][ T8494] usb 6-1: string descriptor 0 read error: -22 [ 940.895505][ T8494] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 940.899712][ T5242] Bluetooth: hci5: command tx timeout [ 940.928337][T15351] syz.2.2746[15351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 940.948638][ T8494] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.985964][T15357] loop4: detected capacity change from 0 to 8 [ 941.020127][T15351] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 941.036809][T15357] squashfs: Unknown parameter 'ÿÿ' [ 941.084861][ T8494] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 941.098934][T15357] loop4: detected capacity change from 0 to 128 [ 941.119654][T15351] EXT4-fs (loop2): Remounting filesystem read-only [ 941.142619][T15351] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 12, error -5) [ 941.487548][T14764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 942.971386][ T5242] Bluetooth: hci4: command tx timeout [ 943.194696][T14243] hsr_slave_0: left promiscuous mode [ 943.243551][ T9] usb 6-1: USB disconnect, device number 25 [ 943.255108][T14243] hsr_slave_1: left promiscuous mode [ 943.314718][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.355302][T14243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.412061][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.440117][T14243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.572808][T14243] veth1_macvtap: left promiscuous mode [ 943.578431][T14243] veth0_macvtap: left promiscuous mode [ 943.589475][T14243] veth1_vlan: left promiscuous mode [ 943.594915][T14243] veth0_vlan: left promiscuous mode [ 944.157432][T15365] loop2: detected capacity change from 0 to 4096 [ 944.229287][T15365] ntfs3: loop2: Primary boot: invalid bytes per MFT record 4 (-2). [ 944.237356][T15365] ntfs3: loop2: try to read out of volume at offset 0x1ffe00 [ 944.278237][T15370] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2752'. [ 944.509363][T15372] xt_connbytes: Forcing CT accounting to be enabled [ 944.516119][T15372] xt_bpf: check failed: parse error [ 944.879496][ T8497] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 944.883757][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 945.049346][ T5242] Bluetooth: hci4: command tx timeout [ 945.069292][ T8497] usb 5-1: Using ep0 maxpacket: 32 [ 945.084220][ T8497] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 945.104971][ T8497] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.117371][ T8497] usb 5-1: Product: syz [ 945.122431][ T8497] usb 5-1: Manufacturer: syz [ 945.127037][ T8497] usb 5-1: SerialNumber: syz [ 945.137237][ T8497] usb 5-1: config 0 descriptor?? [ 945.137808][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 945.146011][ T8497] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 945.179227][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 945.214305][ T9] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 945.239588][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.247624][ T9] usb 3-1: Product: syz [ 945.278472][ T9] usb 3-1: Manufacturer: syz [ 945.289137][ T9] usb 3-1: SerialNumber: syz [ 945.301440][ T9] usb 3-1: config 0 descriptor?? [ 945.319365][ T9] redrat3 3-1:0.0: Couldn't find all endpoints [ 945.476233][T14243] team0 (unregistering): Port device team_slave_1 removed [ 945.552528][ T1164] usb 3-1: USB disconnect, device number 22 [ 945.604239][T14243] team0 (unregistering): Port device team_slave_0 removed [ 946.346321][T15266] hsr_slave_0: entered promiscuous mode [ 946.395793][T15266] hsr_slave_1: entered promiscuous mode [ 946.406684][T15266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 946.414942][T15266] Cannot create hsr debugfs directory [ 946.461421][ T5290] lo speed is unknown, defaulting to 1000 [ 946.470777][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.482213][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.496922][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.509496][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.536651][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.563335][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.588562][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.607648][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.623251][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.634367][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.636443][T15382] loop5: detected capacity change from 0 to 512 [ 946.644964][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.663084][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.713896][T15382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 946.729024][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.759525][T15382] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 946.779180][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.806313][T15088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 946.860653][T15380] tipc: Started in network mode [ 946.865625][T15380] tipc: Node identity , cluster identity 4711 [ 946.882395][T15380] tipc: Failed to set node id, please configure manually [ 946.907484][T15380] tipc: Enabling of bearer rejected, failed to enable media [ 946.961008][T15385] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 947.139366][ T5242] Bluetooth: hci4: command tx timeout [ 947.147286][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.189596][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.221985][ T8497] gspca_ov534_9: sccb_read failed 1 [ 947.230033][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.240722][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.250679][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.261312][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.271240][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.282306][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.317554][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.338719][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.360113][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.399739][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.419187][T15088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.431712][ T8497] gspca_ov534_9: reg_w failed -71 [ 947.446056][T15088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.456842][T15386] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 511 with error 28 [ 947.478380][T15088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.509734][T15386] EXT4-fs (loop5): This should not happen!! Data will be lost [ 947.509734][T15386] [ 947.548932][T15386] EXT4-fs (loop5): Total free blocks count 0 [ 947.558281][T15386] EXT4-fs (loop5): Free/Dirty block details [ 947.565834][T15386] EXT4-fs (loop5): free_blocks=65280 [ 947.617545][T15386] EXT4-fs (loop5): dirty_blocks=511 [ 947.634656][T15386] EXT4-fs (loop5): Block reservation details [ 947.645405][T15386] EXT4-fs (loop5): i_reserved_data_blocks=511 [ 947.729331][ T8497] gspca_ov534_9: Unknown sensor 0000 [ 947.729440][ T8497] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 947.775485][ T8497] usb 5-1: USB disconnect, device number 24 [ 947.913777][T15088] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.932018][T15088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.983186][T15088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.023723][T15088] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.521156][T15322] chnl_net:caif_netlink_parms(): no params data found [ 949.215663][T14243] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.493787][T15397] loop4: detected capacity change from 0 to 32768 [ 949.551112][T15397] BTRFS: device /dev/loop4 (7:4) using temp-fsid 0eb0cd65-656c-4e55-a30f-83615e2bc412 [ 949.565475][T14243] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.591859][T15397] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2761 (15397) [ 949.722088][T15397] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 949.756743][T15397] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 949.765513][T15397] BTRFS info (device loop4): using free-space-tree [ 949.792811][T14754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.866671][T14243] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.084009][T15402] loop2: detected capacity change from 0 to 32768 [ 950.114237][T15402] XFS: ikeep mount option is deprecated. [ 950.126007][T15402] XFS: noikeep mount option is deprecated. [ 950.144232][T15322] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.169975][T15322] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.177231][T15322] bridge_slave_0: entered allmulticast mode [ 950.221957][T15322] bridge_slave_0: entered promiscuous mode [ 950.235766][T15402] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 950.247595][T15420] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2764'. [ 950.268979][T15322] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.282757][T15402] XFS (loop2): Ending clean mount [ 950.291060][T15402] XFS (loop2): Quotacheck needed: Please wait. [ 950.312519][T15322] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.330809][T12932] Bluetooth: hci4: command 0x0405 tx timeout [ 950.345234][T15322] bridge_slave_1: entered allmulticast mode [ 950.401195][T15322] bridge_slave_1: entered promiscuous mode [ 950.403370][T12029] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 950.416799][T15402] XFS (loop2): Quotacheck: Done. [ 950.482252][T12029] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 950.507155][T14764] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 950.508872][T14243] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.578141][T15423] netlink: 308 bytes leftover after parsing attributes in process `syz.5.2764'. [ 950.618386][T14132] BTRFS info (device loop4): last unmount of filesystem 0eb0cd65-656c-4e55-a30f-83615e2bc412 [ 950.643573][ T5662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.666921][ T5662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.951737][T15322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.015004][T15322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.169266][T14675] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 951.313938][T15322] team0: Port device team_slave_0 added [ 951.352055][T15322] team0: Port device team_slave_1 added [ 951.392437][T15266] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 951.399734][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.407558][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.411093][T14675] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 951.462574][T14675] usb 6-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 951.515718][T14675] usb 6-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 951.572639][T14675] usb 6-1: config 0 interface 0 has no altsetting 0 [ 951.604720][T14675] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 951.625962][T15447] loop2: detected capacity change from 0 to 1024 [ 951.644832][T14675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.684953][T14675] usb 6-1: Product: syz [ 951.709275][T14675] usb 6-1: Manufacturer: syz [ 951.714326][T14675] usb 6-1: SerialNumber: syz [ 951.721963][T14675] usb 6-1: config 0 descriptor?? [ 951.756788][T15447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 951.786041][T15266] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 951.896060][T15322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.903244][T15322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.948568][T15435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.999874][T15435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.041597][T15322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.060317][T15435] netlink: 684 bytes leftover after parsing attributes in process `syz.5.2767'. [ 952.115382][T15435] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2767'. [ 952.191730][T14675] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 952.213910][T15266] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 952.220039][T14675] usb 6-1: selecting invalid altsetting 0 [ 952.242463][T15266] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 952.271730][T14675] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 952.289022][T14675] usb 6-1: USB disconnect, device number 26 [ 952.290668][T14764] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 952.351758][T15322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.358726][T15322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.409494][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2773'. [ 952.428614][T15322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.439878][T14764] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 952.560118][T15098] udevd[15098]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 952.752920][T14243] bridge_slave_1: left allmulticast mode [ 952.758634][T14243] bridge_slave_1: left promiscuous mode [ 952.798552][T15461] loop0: detected capacity change from 0 to 4096 [ 952.824484][T15461] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 952.843901][T14243] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.897454][T14243] bridge_slave_0: left allmulticast mode [ 952.920796][T14243] bridge_slave_0: left promiscuous mode [ 952.959117][T14243] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.966085][T15464] loop5: detected capacity change from 0 to 256 [ 953.001571][T15461] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 953.195769][T15459] ntfs3: loop0: ino=21, The size of extended attributes must not exceed 64KiB [ 953.445260][T15470] loop5: detected capacity change from 0 to 8 [ 953.489902][T15470] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 953.534233][T15470] cramfs: unsupported filesystem features [ 954.070520][T15474] loop5: detected capacity change from 0 to 64 [ 954.154049][T15474] hfs: invalid catalog max_key_len 7 [ 954.161147][T15474] hfs: unable to open catalog tree [ 954.902334][T14243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.915063][T14243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.927705][T14243] bond0 (unregistering): Released all slaves [ 955.065193][T15322] hsr_slave_0: entered promiscuous mode [ 955.077098][T15322] hsr_slave_1: entered promiscuous mode [ 955.084103][T15322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 955.092042][T15322] Cannot create hsr debugfs directory [ 955.212853][T14764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.439402][ T5292] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 957.495627][T15493] loop4: detected capacity change from 0 to 256 [ 957.513521][T15493] vfat: Unknown parameter 'u' [ 957.654611][ T5292] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 957.709174][ T5292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.790334][ T5292] usb 1-1: config 0 descriptor?? [ 957.852371][ T5292] usb 1-1: selecting invalid altsetting 1 [ 957.937281][T15497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 958.453686][ T5292] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 958.611143][T15098] udevd[15098]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 958.707920][T15499] loop4: detected capacity change from 0 to 512 [ 958.740891][T15499] ext4: Unknown parameter 'appraise_type' [ 958.789721][T14243] hsr_slave_0: left promiscuous mode [ 958.813083][T14243] hsr_slave_1: left promiscuous mode [ 958.999703][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 959.007247][T14243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 959.071378][T12932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 959.087798][T12932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 959.112367][T12932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 959.125301][T12932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 959.134247][T12932] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 959.140326][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 959.144765][T12932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 959.148695][T14243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 959.807632][ T8515] usb 1-1: USB disconnect, device number 34 [ 959.909297][T14243] veth1_macvtap: left promiscuous mode [ 959.919729][T14243] veth0_macvtap: left promiscuous mode [ 959.969456][T14243] veth1_vlan: left promiscuous mode [ 959.988679][T15505] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00106019, b_size=4096, device sda1 blocksize: 4096 [ 960.007035][T15505] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 960.007058][T14243] veth0_vlan: left promiscuous mode [ 960.016141][T15505] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 960.301175][T15495] loop5: detected capacity change from 0 to 32768 [ 960.356738][T15510] loop4: detected capacity change from 0 to 512 [ 960.399700][T15495] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 960.475901][T15510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.489637][T15510] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 960.802976][T15495] XFS (loop5): Ending clean mount [ 963.108495][T12932] Bluetooth: hci1: command tx timeout [ 963.480297][T14754] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 963.741504][T14132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.058203][T15531] loop4: detected capacity change from 0 to 1024 [ 964.295937][T15535] loop5: detected capacity change from 0 to 8 [ 964.305800][T15535] squashfs image failed sanity check [ 964.963069][T14243] team0 (unregistering): Port device team_slave_1 removed [ 965.114728][T14243] team0 (unregistering): Port device team_slave_0 removed [ 965.159236][T12932] Bluetooth: hci1: command tx timeout [ 966.223228][T15525] ip6gretap0 speed is unknown, defaulting to 1000 [ 966.232144][T15525] ip6gretap0 speed is unknown, defaulting to 1000 [ 966.240574][T15525] ip6gretap0 speed is unknown, defaulting to 1000 [ 966.258601][T15525] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 966.297556][T15525] ip6gretap0 speed is unknown, defaulting to 1000 [ 966.306247][T15525] ip6gretap0 speed is unknown, defaulting to 1000 [ 966.314438][T15525] ip6gretap0 speed is unknown, defaulting to 1000 [ 966.322677][T15525] ip6gretap0 speed is unknown, defaulting to 1000 [ 966.334184][T15525] ip6gretap0 speed is unknown, defaulting to 1000 [ 966.342419][T15525] ip6gretap0 speed is unknown, defaulting to 1000 [ 966.350732][T15525] ip6gretap0 speed is unknown, defaulting to 1000 [ 966.358949][T15525] ip6gretap0 speed is unknown, defaulting to 1000 [ 966.368775][T15525] ip6gretap0 speed is unknown, defaulting to 1000 [ 966.388425][T15500] ip6gretap0 speed is unknown, defaulting to 1000 [ 966.630443][T15545] random: crng reseeded on system resumption [ 966.821977][T15550] bridge0: entered promiscuous mode [ 966.919844][T15266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.209694][T12932] Bluetooth: hci1: command tx timeout [ 967.413251][T15266] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.499137][T15544] bridge0: left promiscuous mode [ 967.682215][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.689487][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.721145][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.728324][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.112774][T15572] loop0: detected capacity change from 0 to 128 [ 968.408391][T15572] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 968.498235][T15572] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 968.606159][T14243] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.689800][T15500] chnl_net:caif_netlink_parms(): no params data found [ 968.809746][ T5290] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 968.921948][T14243] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.985464][T15266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 969.001721][ T5290] usb 6-1: config 0 has no interfaces? [ 969.007481][ T5290] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 969.038488][ T5290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.069785][ T5290] usb 6-1: config 0 descriptor?? [ 969.289615][T12932] Bluetooth: hci1: command tx timeout [ 969.379644][T14243] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.447169][T15583] netlink: 'syz.5.2806': attribute type 4 has an invalid length. [ 969.583985][T15589] loop4: detected capacity change from 0 to 512 [ 969.690529][T15589] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 969.715588][T15589] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2809: invalid indirect mapped block 1 (level 1) [ 969.760255][T15589] EXT4-fs (loop4): 1 truncate cleaned up [ 969.761756][T14243] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.767556][T15589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 969.808013][T15578] netlink: 'syz.5.2806': attribute type 4 has an invalid length. [ 969.946815][T14132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.114510][T15500] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.117983][ T9] usb 6-1: USB disconnect, device number 27 [ 970.127440][T15500] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.138080][T15500] bridge_slave_0: entered allmulticast mode [ 970.161166][T15088] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 970.174175][T15500] bridge_slave_0: entered promiscuous mode [ 970.255743][T15500] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.272100][T15500] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.279386][ T5287] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 970.287787][T15500] bridge_slave_1: entered allmulticast mode [ 970.296095][T15500] bridge_slave_1: entered promiscuous mode [ 970.313992][T15266] veth0_vlan: entered promiscuous mode [ 970.339475][T15322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 970.365855][T15322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 970.489300][ T5287] usb 5-1: Using ep0 maxpacket: 16 [ 970.494699][T15322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 970.517112][ T5287] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 970.532077][ T5287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.533545][T15322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 970.559618][ T5287] usb 5-1: Product: syz [ 970.563810][ T5287] usb 5-1: Manufacturer: syz [ 970.568503][ T5287] usb 5-1: SerialNumber: syz [ 970.583029][T15500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.612576][ T5287] r8152-cfgselector 5-1: Unknown version 0x0000 [ 970.618859][ T5287] r8152-cfgselector 5-1: config 0 descriptor?? [ 970.626333][T15500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.890352][T15266] veth1_vlan: entered promiscuous mode [ 970.959727][T15500] team0: Port device team_slave_0 added [ 970.985627][T15500] team0: Port device team_slave_1 added [ 971.001115][T14243] bridge_slave_1: left allmulticast mode [ 971.006816][T14243] bridge_slave_1: left promiscuous mode [ 971.046144][T14243] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.075831][T14243] bridge_slave_0: left allmulticast mode [ 971.089368][T14243] bridge_slave_0: left promiscuous mode [ 971.098418][T14243] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.120429][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 971.139600][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 971.159772][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 971.179808][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 971.201332][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 971.210769][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 971.363965][ T8515] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 971.589383][ T8515] usb 6-1: Using ep0 maxpacket: 8 [ 971.598168][ T8515] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.615511][ T8515] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 971.629339][ T8515] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 971.640142][ T8515] usb 6-1: SerialNumber: syz [ 971.681834][ T8515] usb 6-1: config 0 descriptor?? [ 971.965746][ T8515] usb 6-1: Found UVC 0.00 device (05ac:8501) [ 971.976438][ T8515] usb 6-1: No valid video chain found. [ 972.510191][T14243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.527065][T14243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.547165][T14243] bond0 (unregistering): Released all slaves [ 972.724313][T15500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.737856][T15500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.765687][T15500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.780119][T15609] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 972.848247][T15608] IPv6: sit1: Disabled Multicast RS [ 972.855596][T15608] sit1: entered allmulticast mode [ 972.917322][T15500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.924888][T15500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.951880][T15500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.026735][T15602] ip6gretap0 speed is unknown, defaulting to 1000 [ 973.215103][T15500] hsr_slave_0: entered promiscuous mode [ 973.229584][T15500] hsr_slave_1: entered promiscuous mode [ 973.237700][T15500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 973.245487][T15500] Cannot create hsr debugfs directory [ 973.260636][T15266] veth0_macvtap: entered promiscuous mode [ 973.290584][ T5233] Bluetooth: hci0: command tx timeout [ 973.324402][T14243] hsr_slave_0: left promiscuous mode [ 973.339007][T14243] hsr_slave_1: left promiscuous mode [ 973.346749][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.354707][T14243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.364663][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.373812][T14243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.407999][T14243] veth1_macvtap: left promiscuous mode [ 973.413657][T14243] veth0_macvtap: left promiscuous mode [ 973.420748][T14243] veth1_vlan: left promiscuous mode [ 973.426133][T14243] veth0_vlan: left promiscuous mode [ 974.120297][ T5287] usb 6-1: USB disconnect, device number 28 [ 974.606754][T14243] team0 (unregistering): Port device team_slave_1 removed [ 974.737098][T14243] team0 (unregistering): Port device team_slave_0 removed [ 975.369986][ T5233] Bluetooth: hci0: command tx timeout [ 976.293694][T15607] r8152-cfgselector 5-1: USB disconnect, device number 25 [ 976.450605][T15266] veth1_macvtap: entered promiscuous mode [ 976.506581][T15636] nbd: device at index 5 is going down [ 976.652440][T15266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.686937][T15266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.729665][T15266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.760511][T15266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.805784][T15266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.819885][T15266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.830448][T15266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.841292][T15266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.851501][T15266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.870479][T15266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.899194][T15266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.914994][T15266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.943665][T15266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 976.973436][T15266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.009178][T15266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.019008][T15266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.039491][T15607] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 977.045460][T15266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.058027][T15266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.069038][T15266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.079791][T15266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.094482][T15266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.108054][T15266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.119841][T15266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.131769][T15266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 977.142361][T15266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.164567][T15266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.237833][T15266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.239151][T15607] usb 6-1: Using ep0 maxpacket: 16 [ 977.247384][T15266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.262314][T15266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.266516][T15607] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 977.271532][T15266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.293243][T15607] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 977.304877][T15607] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 45, changing to 9 [ 977.322682][T15607] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 41635, setting to 1024 [ 977.369795][T15607] usb 6-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 977.382931][ T1164] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 977.414914][T15607] usb 6-1: New USB device found, idVendor=0f11, idProduct=1038, bcdDevice=f7.4e [ 977.433604][T15607] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.438126][T15322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.449760][ T5233] Bluetooth: hci0: command tx timeout [ 977.455264][T15607] usb 6-1: Product: syz [ 977.459720][T15607] usb 6-1: Manufacturer: syz [ 977.464332][T15607] usb 6-1: SerialNumber: syz [ 977.480334][T15607] usb 6-1: config 0 descriptor?? [ 977.493600][T15607] ldusb 6-1:0.0: Interrupt in endpoint not found [ 977.640264][ T1164] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 977.668072][ T1164] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 977.705044][ T1164] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 977.719507][ T1164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 1024 [ 977.727091][T14675] usb 6-1: USB disconnect, device number 29 [ 977.731479][ T1164] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 977.789943][ T1164] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 977.808034][T15322] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.818052][ T1164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 977.828799][ T1164] usb 5-1: SerialNumber: syz [ 977.851016][ T1164] usb 5-1: config 0 descriptor?? [ 977.856831][T15650] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 977.869568][T15650] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 977.887686][ T8497] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.894901][ T8497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.921057][ C0] port100 5-1:0.0: NFC: Urb failure (status -71) [ 977.930837][ C0] port100 5-1:0.0: NFC: Urb failure (status -71) [ 977.939022][ T1164] port100 5-1:0.0: NFC: Could not get supported command types [ 977.983570][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.995471][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.005719][T15602] chnl_net:caif_netlink_parms(): no params data found [ 978.047403][ T8497] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.054587][ T8497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.124646][ T1164] usb 5-1: USB disconnect, device number 26 [ 978.373386][T14243] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.442178][ T7619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.490657][ T7619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.635407][T14243] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.885862][T14243] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.922499][T15602] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.942047][T15602] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.966708][T15602] bridge_slave_0: entered allmulticast mode [ 978.987545][T15602] bridge_slave_0: entered promiscuous mode [ 979.014781][T15602] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.032177][T15602] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.039808][T15602] bridge_slave_1: entered allmulticast mode [ 979.047836][T15602] bridge_slave_1: entered promiscuous mode [ 979.156423][T14243] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.210240][T15665] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.391311][T15672] ipt_REJECT: TCP_RESET invalid for non-tcp [ 979.541491][ T5233] Bluetooth: hci0: command tx timeout [ 979.696059][T15602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.761249][ T8494] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 981.147265][T15500] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 981.209251][ T8494] usb 5-1: device descriptor read/64, error -71 [ 981.230821][T15602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 981.419255][T15500] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 981.488051][ T7653] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 981.501156][ T8494] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 981.612528][T15602] team0: Port device team_slave_0 added [ 981.654830][T15500] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 981.669580][ T8494] usb 5-1: device descriptor read/64, error -71 [ 981.723362][T15500] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 981.795087][ T8494] usb usb5-port1: attempt power cycle [ 981.823110][T15602] team0: Port device team_slave_1 added [ 982.118117][T15602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.154929][T15602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.195403][T15689] loop5: detected capacity change from 0 to 512 [ 982.206720][T15602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.209382][ T8494] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 982.286475][T15689] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.353467][T14243] bridge_slave_1: left allmulticast mode [ 982.361089][T14243] bridge_slave_1: left promiscuous mode [ 982.367060][T14243] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.382021][T15689] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 982.431826][T14243] bridge_slave_0: left allmulticast mode [ 982.441910][ T8494] usb 5-1: device descriptor read/8, error -71 [ 982.500472][T14243] bridge_slave_0: left promiscuous mode [ 982.506345][T14243] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.577576][T14243] bridge_slave_1: left allmulticast mode [ 982.623129][T14243] bridge_slave_1: left promiscuous mode [ 982.643663][T14243] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.677716][T14243] bridge_slave_0: left allmulticast mode [ 982.702386][T14243] bridge_slave_0: left promiscuous mode [ 982.729861][T15671] delete_channel: no stack [ 982.754482][T14243] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.274570][ T5233] BUG: workqueue leaked atomic, lock or RCU: kworker/u9:5[5233] [ 983.274570][ T5233] preempt=0x00000000 lock=0->1 RCU=0->0 workfn=hci_rx_work [ 983.290849][ T5233] 1 lock held by kworker/u9:5/5233: [ 983.296062][ T5233] #0: ffff888023973518 (&chan->lock/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x7ce/0x10840 [ 983.306662][ T5233] CPU: 1 UID: 0 PID: 5233 Comm: kworker/u9:5 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 983.317536][ T5233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 983.327608][ T5233] Workqueue: hci5 hci_rx_work [ 983.332311][ T5233] Call Trace: [ 983.335603][ T5233] [ 983.338548][ T5233] dump_stack_lvl+0x241/0x360 [ 983.343261][ T5233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 983.348486][ T5233] ? skb_dequeue+0x113/0x150 [ 983.353120][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 983.358784][ T5233] process_scheduled_works+0x1121/0x1830 [ 983.364485][ T5233] ? __pfx_process_scheduled_works+0x10/0x10 [ 983.370512][ T5233] ? assign_work+0x364/0x3d0 [ 983.375138][ T5233] worker_thread+0x86d/0xd40 [ 983.379776][ T5233] ? __kthread_parkme+0x169/0x1d0 [ 983.384835][ T5233] ? __pfx_worker_thread+0x10/0x10 [ 983.389973][ T5233] kthread+0x2f2/0x390 [ 983.394075][ T5233] ? __pfx_worker_thread+0x10/0x10 [ 983.399212][ T5233] ? __pfx_kthread+0x10/0x10 [ 983.403834][ T5233] ret_from_fork+0x4d/0x80 [ 983.408279][ T5233] ? __pfx_kthread+0x10/0x10 [ 983.412902][ T5233] ret_from_fork_asm+0x1a/0x30 [ 983.417721][ T5233] [ 983.452357][ T5233] [ 983.454708][ T5233] ====================================================== [ 983.461725][ T5233] WARNING: possible circular locking dependency detected [ 983.468830][ T5233] 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 Not tainted [ 983.475938][ T5233] ------------------------------------------------------ [ 983.482955][ T5233] kworker/u9:5/5233 is trying to acquire lock: [ 983.489110][ T5233] ffff88807ae0d948 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 983.499692][ T5233] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 983.499692][ T5233] but task is already holding lock: [ 983.507052][ T5233] ffff888023973518 (&chan->lock/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x7ce/0x10840 [ 983.516433][ T5233] [ 983.516433][ T5233] which lock already depends on the new lock. [ 983.516433][ T5233] [ 983.526834][ T5233] [ 983.526834][ T5233] the existing dependency chain (in reverse order) is: [ 983.535851][ T5233] [ 983.535851][ T5233] -> #1 (&chan->lock/1){+.+.}-{3:3}: [ 983.543354][ T5233] reacquire_held_locks+0x3eb/0x690 [ 983.549067][ T5233] lock_release+0x396/0xa30 [ 983.554109][ T5233] process_scheduled_works+0xb34/0x1830 [ 983.560182][ T5233] worker_thread+0x86d/0xd40 [ 983.565321][ T5233] kthread+0x2f2/0x390 [ 983.569941][ T5233] ret_from_fork+0x4d/0x80 [ 983.574904][ T5233] ret_from_fork_asm+0x1a/0x30 [ 983.580214][ T5233] [ 983.580214][ T5233] -> #0 ((wq_completion)hci5#2){+.+.}-{0:0}: [ 983.588415][ T5233] validate_chain+0x18e0/0x5900 [ 983.593797][ T5233] __lock_acquire+0x137a/0x2040 [ 983.599188][ T5233] lock_acquire+0x1ed/0x550 [ 983.604318][ T5233] process_scheduled_works+0x91f/0x1830 [ 983.610409][ T5233] worker_thread+0x86d/0xd40 [ 983.615536][ T5233] kthread+0x2f2/0x390 [ 983.620144][ T5233] ret_from_fork+0x4d/0x80 [ 983.625095][ T5233] ret_from_fork_asm+0x1a/0x30 [ 983.630391][ T5233] [ 983.630391][ T5233] other info that might help us debug this: [ 983.630391][ T5233] [ 983.640613][ T5233] Possible unsafe locking scenario: [ 983.640613][ T5233] [ 983.648078][ T5233] CPU0 CPU1 [ 983.653434][ T5233] ---- ---- [ 983.658790][ T5233] lock(&chan->lock/1); [ 983.663047][ T5233] lock((wq_completion)hci5#2); [ 983.670515][ T5233] lock(&chan->lock/1); [ 983.677292][ T5233] lock((wq_completion)hci5#2); [ 983.682248][ T5233] [ 983.682248][ T5233] *** DEADLOCK *** [ 983.682248][ T5233] [ 983.690385][ T5233] 1 lock held by kworker/u9:5/5233: [ 983.695581][ T5233] #0: ffff888023973518 (&chan->lock/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x7ce/0x10840 [ 983.705365][ T5233] [ 983.705365][ T5233] stack backtrace: [ 983.711250][ T5233] CPU: 1 UID: 0 PID: 5233 Comm: kworker/u9:5 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 983.722096][ T5233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 983.732150][ T5233] Workqueue: hci5 hci_rx_work [ 983.736835][ T5233] Call Trace: [ 983.740115][ T5233] [ 983.743042][ T5233] dump_stack_lvl+0x241/0x360 [ 983.747736][ T5233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 983.752952][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 983.758594][ T5233] ? print_circular_bug+0x130/0x1a0 [ 983.763810][ T5233] check_noncircular+0x36a/0x4a0 [ 983.768759][ T5233] ? __pfx_check_noncircular+0x10/0x10 [ 983.774223][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 983.779860][ T5233] ? lockdep_lock+0x123/0x2b0 [ 983.784549][ T5233] ? validate_chain+0x11e/0x5900 [ 983.789489][ T5233] ? __pfx_validate_chain+0x10/0x10 [ 983.794685][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 983.800324][ T5233] validate_chain+0x18e0/0x5900 [ 983.805370][ T5233] ? __schedule+0x1808/0x4a60 [ 983.810149][ T5233] ? __pfx_validate_chain+0x10/0x10 [ 983.815349][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 983.821012][ T5233] ? mark_lock+0x9a/0x350 [ 983.825379][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 983.831015][ T5233] ? __lock_acquire+0x137a/0x2040 [ 983.836061][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 983.841704][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 983.847370][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 983.853007][ T5233] ? mark_lock+0x9a/0x350 [ 983.857350][ T5233] ? debug_object_deactivate+0x2d5/0x390 [ 983.863007][ T5233] __lock_acquire+0x137a/0x2040 [ 983.867885][ T5233] lock_acquire+0x1ed/0x550 [ 983.872400][ T5233] ? process_scheduled_works+0x90a/0x1830 [ 983.878137][ T5233] ? __pfx_lock_acquire+0x10/0x10 [ 983.883171][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 983.888809][ T5233] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 983.894808][ T5233] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 983.901165][ T5233] ? _raw_spin_unlock_irq+0x23/0x50 [ 983.906372][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 983.912009][ T5233] process_scheduled_works+0x91f/0x1830 [ 983.917565][ T5233] ? process_scheduled_works+0x90a/0x1830 [ 983.923337][ T5233] ? __pfx_process_scheduled_works+0x10/0x10 [ 983.929334][ T5233] ? assign_work+0x364/0x3d0 [ 983.933934][ T5233] worker_thread+0x86d/0xd40 [ 983.938571][ T5233] ? __kthread_parkme+0x169/0x1d0 [ 983.943704][ T5233] ? __pfx_worker_thread+0x10/0x10 [ 983.948831][ T5233] kthread+0x2f2/0x390 [ 983.952919][ T5233] ? __pfx_worker_thread+0x10/0x10 [ 983.958040][ T5233] ? __pfx_kthread+0x10/0x10 [ 983.962650][ T5233] ret_from_fork+0x4d/0x80 [ 983.967081][ T5233] ? __pfx_kthread+0x10/0x10 [ 983.971688][ T5233] ret_from_fork_asm+0x1a/0x30 [ 983.976477][ T5233] [ 983.987972][ T5233] BUG: workqueue leaked atomic, lock or RCU: kworker/u9:5[5233] [ 983.987972][ T5233] preempt=0x00000000 lock=1->0 RCU=0->0 workfn=hci_rx_work [ 984.004750][ T5233] INFO: lockdep is turned off. [ 984.009882][ T5233] CPU: 1 UID: 0 PID: 5233 Comm: kworker/u9:5 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 984.020744][ T5233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 984.030806][ T5233] Workqueue: hci5 hci_rx_work [ 984.035494][ T5233] Call Trace: [ 984.038767][ T5233] [ 984.041700][ T5233] dump_stack_lvl+0x241/0x360 [ 984.046484][ T5233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 984.051698][ T5233] ? __pfx__printk+0x10/0x10 [ 984.056299][ T5233] ? hci_rx_work+0xc38/0xca0 [ 984.060986][ T5233] process_scheduled_works+0x1121/0x1830 [ 984.066651][ T5233] ? __pfx_process_scheduled_works+0x10/0x10 [ 984.072649][ T5233] ? assign_work+0x364/0x3d0 [ 984.077251][ T5233] worker_thread+0x86d/0xd40 [ 984.082039][ T5233] ? __kthread_parkme+0x169/0x1d0 [ 984.087075][ T5233] ? __pfx_worker_thread+0x10/0x10 [ 984.092194][ T5233] kthread+0x2f2/0x390 [ 984.096275][ T5233] ? __pfx_worker_thread+0x10/0x10 [ 984.101394][ T5233] ? __pfx_kthread+0x10/0x10 [ 984.105999][ T5233] ret_from_fork+0x4d/0x80 [ 984.110448][ T5233] ? __pfx_kthread+0x10/0x10 [ 984.115056][ T5233] ret_from_fork_asm+0x1a/0x30 [ 984.119846][ T5233] [ 984.230335][T15705] loop3: detected capacity change from 0 to 1024 [ 984.326828][T14754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.340292][T15705] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 984.367104][T15705] JBD2: no valid journal superblock found [ 984.390340][T15705] EXT4-fs (loop3): Could not load journal inode [ 985.445687][T14243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.456853][T14243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.468275][T14243] bond0 (unregistering): Released all slaves [ 985.627607][T14243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.643872][T14243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.653966][T14243] bond0 (unregistering): Released all slaves [ 985.665463][T15602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.672766][T15602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.700432][T15602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.793548][ T5289] ip6gretap0 speed is unknown, defaulting to 1000 [ 986.551533][T14243] hsr_slave_0: left promiscuous mode [ 986.557434][T14243] hsr_slave_1: left promiscuous mode [ 986.571817][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.581775][T14243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.590612][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 986.598005][T14243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.617247][T14243] hsr_slave_0: left promiscuous mode [ 986.623606][T14243] hsr_slave_1: left promiscuous mode [ 986.631574][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.638968][T14243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.647254][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 986.657840][T14243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.674279][T14243] veth1_macvtap: left promiscuous mode [ 986.684318][T14243] veth0_macvtap: left promiscuous mode [ 986.693324][T14243] veth1_vlan: left promiscuous mode [ 986.698662][T14243] veth0_vlan: left promiscuous mode [ 986.707253][T14243] veth1_macvtap: left promiscuous mode [ 986.725575][T14243] veth0_macvtap: left promiscuous mode [ 986.737270][T14243] veth1_vlan: left promiscuous mode [ 986.744843][T14243] veth0_vlan: left promiscuous mode [ 987.189449][T14243] team0 (unregistering): Port device team_slave_1 removed [ 987.241839][T14243] team0 (unregistering): Port device team_slave_0 removed [ 987.660618][T14243] team0 (unregistering): Port device team_slave_1 removed [ 987.727749][T14243] team0 (unregistering): Port device team_slave_0 removed [ 988.760700][T14243] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.808177][T14243] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.848610][T14243] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.887509][T14243] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.981730][T14243] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.026563][T14243] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.076568][T14243] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.125196][T14243] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.232803][T14243] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.286073][T14243] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.346739][T14243] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.395259][T14243] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.506332][T14243] bridge_slave_1: left allmulticast mode [ 989.512623][T14243] bridge_slave_1: left promiscuous mode [ 989.518333][T14243] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.527386][T14243] bridge_slave_0: left allmulticast mode [ 989.533627][T14243] bridge_slave_0: left promiscuous mode [ 989.539656][T14243] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.552073][T14243] bridge_slave_1: left allmulticast mode [ 989.557701][T14243] bridge_slave_1: left promiscuous mode [ 989.564153][T14243] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.573127][T14243] bridge_slave_0: left allmulticast mode [ 989.579543][T14243] bridge_slave_0: left promiscuous mode [ 989.585229][T14243] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.595385][T14243] bridge_slave_1: left allmulticast mode [ 989.603076][T14243] bridge_slave_1: left promiscuous mode [ 989.608735][T14243] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.617811][T14243] bridge_slave_0: left allmulticast mode [ 989.624198][T14243] bridge_slave_0: left promiscuous mode [ 989.630089][T14243] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.642850][T14243] bridge_slave_1: left allmulticast mode [ 989.648497][T14243] bridge_slave_1: left promiscuous mode [ 989.654426][T14243] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.664035][T14243] bridge_slave_0: left allmulticast mode [ 989.669961][T14243] bridge_slave_0: left promiscuous mode [ 989.675630][T14243] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.236326][T14243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.249511][T14243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.260077][T14243] bond0 (unregistering): Released all slaves [ 990.274739][T14243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.285146][T14243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.301617][T14243] bond0 (unregistering): Released all slaves [ 990.316223][T14243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.330260][T14243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.343631][T14243] bond0 (unregistering): Released all slaves [ 990.362803][T14243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.374402][T14243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.384526][T14243] bond0 (unregistering): Released all slaves [ 990.985361][T14243] hsr_slave_0: left promiscuous mode [ 990.991818][T14243] hsr_slave_1: left promiscuous mode [ 990.997695][T14243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.005871][T14243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.022998][T14243] hsr_slave_0: left promiscuous mode [ 991.028865][T14243] hsr_slave_1: left promiscuous mode [ 991.035202][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 991.042797][T14243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.050868][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.058302][T14243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.072722][T14243] hsr_slave_0: left promiscuous mode [ 991.078632][T14243] hsr_slave_1: left promiscuous mode [ 991.084834][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 991.092308][T14243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.103273][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.111419][T14243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.125691][T14243] hsr_slave_0: left promiscuous mode [ 991.138380][T14243] hsr_slave_1: left promiscuous mode [ 991.147196][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 991.154882][T14243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.162991][T14243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.171405][T14243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.185208][T14243] veth1_macvtap: left promiscuous mode [ 991.190861][T14243] veth0_macvtap: left promiscuous mode [ 991.196439][T14243] veth1_vlan: left promiscuous mode [ 991.201808][T14243] veth0_vlan: left promiscuous mode [ 991.208076][T14243] veth1_macvtap: left promiscuous mode [ 991.217447][T14243] veth0_macvtap: left promiscuous mode [ 991.223220][T14243] veth1_vlan: left promiscuous mode [ 991.228495][T14243] veth0_vlan: left promiscuous mode [ 991.234905][T14243] veth1_macvtap: left promiscuous mode [ 991.240546][T14243] veth0_macvtap: left promiscuous mode [ 991.246227][T14243] veth1_vlan: left promiscuous mode [ 991.251728][T14243] veth0_vlan: left promiscuous mode [ 991.665936][T14243] team0 (unregistering): Port device team_slave_1 removed [ 991.710709][T14243] team0 (unregistering): Port device team_slave_0 removed [ 992.044980][T14243] team0 (unregistering): Port device team_slave_1 removed [ 992.077585][T14243] team0 (unregistering): Port device team_slave_0 removed [ 992.424422][T14243] team0 (unregistering): Port device team_slave_1 removed [ 992.463231][T14243] team0 (unregistering): Port device team_slave_0 removed [ 992.573783][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.767259][T14243] team0 (unregistering): Port device team_slave_1 removed [ 992.805177][T14243] team0 (unregistering): Port device team_slave_0 removed