last executing test programs: 21.653910921s ago: executing program 1 (id=2136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=r3, @ANYBLOB="0a0006"], 0x28}}, 0x0) 21.352846046s ago: executing program 1 (id=2137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000008704"]) 21.284603261s ago: executing program 4 (id=2139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000008000300", @ANYRES32=r3, @ANYBLOB="140050800800070001000000050002001c"], 0x30}}, 0x0) 20.93536096s ago: executing program 1 (id=2141): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx}, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[], 0x0) 20.774760613s ago: executing program 1 (id=2145): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000740), 0xfe, 0x499, &(0x7f0000001780)="$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") mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$jfs(&(0x7f0000005e00), &(0x7f0000005e40)='./file0\x00', 0x2000000, &(0x7f0000000140)=ANY=[], 0x0, 0x5e5c, &(0x7f000000bcc0)="$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") chdir(&(0x7f0000001180)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 17.436437575s ago: executing program 1 (id=2150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000008000300", @ANYRES32=r3, @ANYBLOB="140050800800070001000000050002001c"], 0x30}}, 0x0) 16.361983424s ago: executing program 3 (id=2154): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0x80000006, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @mss, @timestamp, @sack_perm, @window, @timestamp, @window, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 16.253884152s ago: executing program 3 (id=2155): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffda6}}, 0x1006) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12, &(0x7f0000000480)={[{@codepage={'codepage', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@type={'type', 0x3d, "aa5448a3"}}]}, 0x4, 0x339, &(0x7f00000004c0)="$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") mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 16.063135428s ago: executing program 3 (id=2157): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setresuid(0x0, r5, 0xee01) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}}], 0x1, 0x4000804) 15.770208102s ago: executing program 1 (id=2158): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000640)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f0000002540)='./file1\x00', 0x0, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000021c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000b0000000000000700000000000000000000000300000000020000000300000020000000090000000000000e0100000001000000002e2e002e302e2e00615f00a88477c019226edb2664fbc2b2c3bbd85ca7909ad01bad7a3cecc8e635c6df346626782434672cf7222696cabf902d78155034ec42b73e2e1547a0b3669e53c9bfdba70531ac73a8c1a62f2be066728e19159947f4104c17ab706a6bf2392104dcba1f87e988a76f87ae9fc7f99f90773857010d6f060b534115f30a5fffe52bdaf68dc61d36da12bc5484d5cfcc4fd8bec32041f186dfa62a435a216a6ef3a1bf40ee2ee635ef7e7c669167def455ea8539"], &(0x7f00000006c0)=""/70, 0x58, 0x46}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl(r4, 0xfffff000, &(0x7f0000000000)) 14.835286588s ago: executing program 3 (id=2160): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000740), 0xfe, 0x499, &(0x7f0000001780)="$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") mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$jfs(&(0x7f0000005e00), &(0x7f0000005e40)='./file0\x00', 0x2000000, &(0x7f0000000140)=ANY=[], 0x0, 0x5e5c, &(0x7f000000bcc0)="$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") chdir(&(0x7f0000001180)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 12.150500348s ago: executing program 3 (id=2166): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x5}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x8, 0x4}, {0x7fff, 0x0, 0x80, 0x4}, {0x4, 0x2f, 0x5, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SNAPSHOT_SET_SWAP_AREA(r4, 0x3309, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00'}, 0x90) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r5, 0x3, r0, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000016c0), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000004f0000000e0001006e657464657673696d0000000f02000000657464b8ba912160ecf69aff657673696d3000000800ab000000000008000b000000000006001100ffff0080"], 0x4c}}, 0x0) r11 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'gre0\x00'}) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010061e00cb2f4359b648d5ed0000388dcf66ac141415ef06e63a808a5e5cbd43af9111aa0c520f06"], 0x3000}], 0x1}, 0x0) sendfile(r11, r8, 0x0, 0x80004700) 11.62953263s ago: executing program 3 (id=2168): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffda6}}, 0x1006) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12, &(0x7f0000000480)={[{@codepage={'codepage', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@type={'type', 0x3d, "aa5448a3"}}]}, 0x4, 0x339, &(0x7f00000004c0)="$eJzs3U9P1EwcB/DvtLtL94EHK2BIPBmUxBMBPGi8QAzxNXgwRIQlIayYKCZKTETPxngzMfHIzbPRt6AX4xvQEwfjSS/EgzUzne5Ol5m2C7iF7PeTuHbb+fObttPO7GYpiKhvXVv4unNpV/4TVQA+gKuAByAAKgDOYDx4sLGZW5DfWhKIc4p9aZY3GrasAXQOLZTvKhgy19G/EUVR9C031c+exELlEWYPNnjAgO6danvQ88gObc62cjtuV38xjrDYwx4eYrjMcIiIqHz6/u/pu8SQHr97HjCpx+En9f6fSI1v9sqL41ho3f+9+H0k5P45pTbJ+d7aZrOxEk/h5NH3klmirSzrORG1d3cN8ZnlDxpDLqMWOxWLV19dazamtlUBzzCnGcnG1OsKkoYormhrwAyACcvcNENW27MNqjZUZRtmHfGPZtVonQB/+I5X9uoWPxWISXwUn8WiCPEaK63xXyUScueoIxV2dJU4/ml3iaqVYZwq1cp2+KdVJWd1DXj/tt3Kumu/BvBlLDayFNE5fg+TOF/W3LkwgvTHCnHrZtytU7lGgYpQswYz12wr0W9rrrHOuuqr1WZjavlu03XSHy3rjE68EDfEBH7gHRaM8b8nU0/C3TNTvVyolPrMyGxPRaV0HMcU1YHvdNUzSbmeuvgV8xy3cQXD9x9trS81m4175S8kXeWA2c8dcTzxiahPR7lG/m+kQSAXqgCc5VTdm6wLf6Iosm6qoBeHoKqaevlNu8lb60tCX/MOV4W8cnZsmncnBjAPQK9JrggHqf1JK9dAu8BC2X/Jo63W2E/IJKoedJCkqtQmHwOFekp935qdnFyP/z/YVYhOoPbRx/jNsoOhMsixg4jnf8Z8ZVpddeRLmDH/ifIKN0qcccyARtTrf8VmcK1inePEwWQhZ851/iJwoaNGD0mNTzuLDXWcOI7fSnb/VYZYwBfc4uf/REREREREREREREREREREREREREQnTbe/Rtj/c4L8hXSNu334hzeIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiA7HeP4v4KsnxtRsz//NelKT4sdPiAmO4vm/foHn/4rtLlpJRDZ/AwAA//9eD1xQ") mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 4.447889657s ago: executing program 0 (id=2185): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000002c0)={0x0, 0x0, 0x2, "9a94"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x0, 0x0, 0xf, "9e40c244b11226774a2eeeb89ac02b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.403304053s ago: executing program 2 (id=2191): remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xfffffffffffffffe, 0x0) 2.32230968s ago: executing program 2 (id=2192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000540)="000300000004000022eae0a518b3", 0xe}], 0x1) 2.309854102s ago: executing program 4 (id=2140): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000180)='ext4_remove_blocks\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r7, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x31b0af55878553eb, 0x2, 0x5, &(0x7f0000000080)) 2.174396012s ago: executing program 4 (id=2193): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000005c, &(0x7f0000000500)=ANY=[], 0x1, 0x151b, &(0x7f0000001580)="$eJzs3AuUjlXbOPB97b3vMaZJT5Mchn3t6+ZJg22SJIeEHJIkSZKcEpImSRISQ05JQxJynCSHISSHaUwa5/Mh56TJK0mSkJBk/5fe3k/93/d7D+vt+7zrm+u31l6zr7mfaz/Xfq5Z89zPvdb9fNNjZN3m9Wo1JSLxb4E//0gVQsQKIYYKIa4RQgRCiIoJFRMuHc+vIPXfexL2x3ow40pXwK4k7n/exv3P27j/eRv3P2/j/udt3P+8jfuft3H/GcvLts0uei2PvDv4+n9exu///4ccLjfpiw3lru/5L6Rw//M27n/exv3P27j/eRv3P2/j/v/fV/PvHOP+523cf8bysv+6FnzBe/8fcD2ax//uuNJ/f4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG8oZz/jIthPjL/ErXxRhjjDHGGGOMsT+Oz3elK2CMMcYYY4wxxtj/PBBSKKFFIGJEPhEr8os4cZWIF1eLAuIaERHXigRxnSgorheFRGFRRBQViaKYKC6MQGEFiVCUECVFVNwgSokbRZIoLcqIssKJciJZ3CTKi5tFBXGLqChuFZXEbaKyqCKqimridlFd3CFqiJqilrhT1BZ1RF1RT9wl6ou7RQNxj2go7hWNxH2isbhfNBEPiKbiQdFMPCSai4dFC/GIaClaidaijWj7+/wp/1z+C6KPeFH0Ff1EqugvBoiXxEAxSAwWQ8RQ8bIYJl4Rw8WrIk2MECPFa2KUeF2MFm+IMWKsGCfeFOPFBDFRTBKTxRSRLt4SU8XbYpp4R0wXM8RMMUtkiNlijnhXzBXzxHzxnlgg3hcLxSKxWCwRmeIDkSWWimzxoVgmPhI5YrlYIVaKVWK1WCPWinVivdggNopNYrPYIraKbeJjsV3sEDvFLrFb7BF7xSdin/hU7BefiVzx+b+Yf/b/y+8JAgRIkKBBQwzEQCzEQhzEQTzEQwEoABGIQAIkQEEoCIWgEBSBIpAIiVAcigMCAgFBCSgBUYhCKSgFSZAEZaAMOHCQDMlQHm6GClABKkJFqASVoDJUgSpQDapBdagONaAG1IJaUBtqQ12oC3fBXXA3NIAG0BAaQiNoBI2hMTSBJtAUmkIzaAbNoTm0gBbQElpCa2gNbaEttIN20B7aQ0foCJ2gE3SGzpACKdAFukBX6ArdoBt0h+7QA3pAT+gFveAFeAFehBehH9SW/WEADICBMBAGwxAYAi/DMHgFXoFXIQ1GwEh4DV6D12E0nIExMBbGwTioLifARJgEJKdAOqTDVJgK02AaTIcZMANmQQbMhjkwB+bCPJgH78ECeB/eh0WwCJZAJmRCFiyFbMiGZXAWcmA5rICVsApWwypYC+tgLWyAjbABNsNm2Apb4WP4GHbADtgFu2AP7IFP4BP4FD6FNMiFXDgAB+AgHIRDcAgOw2E4AkfgKByFY3AMjsNxOAEn4RSchNNwGs7AWTgH5+A8nIcL8FziV832lF6fJuQlWmoZI2NkrIyVcTJOxst4WUAWkBEZkQkyQRaUBWUhWUgWkUVkokyUxWVxiRIlyVCWkCVkVEZlKVlKJskkWUaWkU46mSyTZXlZXlaQFWRFeausJG+TlWUV2cFVk9VkddnR1ZA1ZS1ZS9aWdWRdWU/Wk/VlfdlANpANZUPZSDaSjeX9sonsD4PhQXmpM83lCGghR0JL2Uq2lm3k6/CobCdHQ3vZQXaUj8uxMAY6y3YuRT4lu8iJ0FU+IyfBs7K7nAI95POyp+wle8sXZB/Z3vWV/eR06C8HyFkwUA6Sg+UQORfqyEsdqytflWlyhBwpX5NL4HU5Wr4hx8ixcpx8U46XE+REOUlOllNkunxLTpVvy2nyHTldzpAz5SyZIWfLOfJdOVfOk/Ple3KBfF8ulIvkYrlEZsoPZJZcKrPlh3KZ/EjmyOVyhVwpV8nVco1cK9fJ9XKD3Cg3yc1yi9wqt8mP5Xa5Q+6Uu+RuuUfulZ/IffJTuV9+JnPl5/KA/JM8KL+Qh+SX8rD8Sh6RX8uj8ht5TH4rj8vv5Al5Up6S38vT8gd5Rp6V5+SP8rz8SV6QP8uL0kuhQEmllFaBilH5VKzKr+LUVSpeXa0KqGtURF2rEtR1qqC6XhVShVURVVQlqmKquDIKlVWkQlVClVRRdYMqpW5USaq0KqPKKqfKqWR1kyqvblYV1C2qorpVVVK3qcqqiqqqqqnbVXV1h6qhaqpa6k5VW9VRdVU9dZeqr+5WDdQ9qqG6VzVS96nG6n7VRD2gmqoHVTP1kGquHlYt1COqpWqlWqs2qq16VLVTj6n2qoPqqB5XndQTqrN6UqWop1QX9bTqqp5R3dSzqrt6TvVQz6ueqpfqrX5WF5VXfVU/lar6qwHqJTVQDVKD1RA1VL2shqlX1HD1qkpTI9RI9ZoapV5Xo9Ubaowaq8apN9V4NUFNVJPUZDVFpau31FT1tpqm3lHT1Qw1U81SGWq2GvzrSvP/ify3/0b+8F+efavapj5W29UOtVPtUrvVHrVX7VX71D61X+1XuSpXHVAH1EF1UB1Sh9RhdVgdUUfUUXVUHVPH1HF1XJ1QJ9WP6nt1Wv2gzqiz6qz6UZ1X59WFX18DoUFLrbTWgY7R+XSszq/j9FU6Xl+tC+hrdERfqxP0dbqgvl4X0oV1EV1UJ+piurg2GrXVpENdQpfUUX2DLqVv1Em6tC6jy2qny+lkfdO/nf+P6mur2+p2up1ur9vrjrqj7qQ76c66s07RKbqL7qK76q66m+6mu+vuuofuoXvqnrq37q376D66r+6rU3WqHqBf0gP1ID1YD9FD9ct6mB6mh+vhOk2n6ZF6pB6lR+nRerQeo8focXqcHq/H64l6op6sJ+t0na6n6ql6mp6mp+vpeqaeqTN0hp6j5+i5eq6er+frBXqBXqgX6sV6sc7UmTpLZ+lsna2X6WU6Ry/Xy/VKvVKv1qv1Wr1Wr9fr9Ua9UW/Wm3WO3qa36e16u96pd+rderfeq/fqfXqf3q/361ydqw/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4Pq5P6BP6lD6lT+vT+ow+o8/pc/q8Pq8v6Av6or546bQvkIEMdKCDmCAmiA1ig7ggLogP4oMCQYEgEkSChCAhKBhcHxQKCgdFgqJBYlAsKB6YAAMbUBAGJYKSQTS4ISgV3BgkBaWDMkHZwAXlguTgpqB8cHNQIbglqBjcGlQKbgsqB1WCqkG14PagenBHUCOoGdQK7gxqB3WCukG94K6gfnB30CC4J2gY3Bs0Cu4LGgf3B02CB4KmwYNBs+ChoHnwcNAieCRoGbQKWgdtgrZ/6Prenyn8mOtr+plU098MMC+ZgWaQGWyGmKHmZTPMvGKGm1dNmhlhRprXzCjzuhlt3jBjzFgzzrxpxpsJZqKZZCabKSbdvGWmmrfNNPOOmW5mmJlmlskws80c866Za+aZ+eY9s8C8bxaaRWaxWWIyzQcmyyw12eZDs8x8ZHLMcrPCrDSrzGqzxqw168x6s8FsNJvMZrPFbDXbzMdmu9lhdppdZrfZY/aaT8w+86nZbz4zueZzc8D8yRw0X5hD5ktz2HxljpivzVHzjTlmvjXHzXfmhDlpTpnvzWnzgzljzppz5kdz3vxkLpifzUXjL53cX3p7R40aYzAGYzEW4zAO4zEeC2ABjGAEEzABC2JBLISFsAgWwURMxOJYHC8hJCyBJTCKUSyFpTAJk7AMlkGHDpMxGctjeayAFbAiVsRKWAkrY2WsilXxdrwd78A7sCbWxDvxTqyDdbAe1sP6WB8bYANsiA2xETbCxtgYm2ATbIpNsRk2w+bYHFtgC2yJLbE1tsa22BbbYTtsj+2xI3bETtgJO2NnTMEU7IJdsCt2xW7YDbtjd+yBPbAn9sTe2Bv7YB/si30xFVNxAA7AgTgQB+NgHIpDcRgOw+E4HNMwDUfiSByFo3A0jsYxOBbH4Zs4HifgRJyEk3EKpmM6TsWpOA2n4XScjjNxJmZgBs7BOTgX5+J8nI8LcAEuxIW4GBdjJmZiFmZhNmbjMlyGOZiDK3AFrsJVuAbX4DpchxtwA27CTbgFt+A23IbbcTvuxJ24G3fjXtyL+3Af7sf9mIu5eAAP4EE8iIfwEB7Gw3gEj+BRPIrH8Bgex+N4Ak/gKTyFp/E0nsEzeA7P4Xn8CS/gz3gRPcZaKeLsVTbeXm0L2GtsrM1vfxsXsUVtoi1mi1tjC9nCv4vRWptkS9sytqx2tpxNtjf9JbZ/iSvbKraqrWZvt9XtHbbGX8X17d22gb3HNrT32nr2rt/Fjex9trF92Daxj9imtpVtZtvY5vZh28I+YlvaVra1bWM72SdsZ/ukTbFP2S726b+Ks+xSu86utxvsRrvPfmrP2R/tUfuNPW9/sn1tPzvUvmyH2VfscPuqTbMj/ioeZ9+04+0EO9FOspPtlL+KZ9pZNsPOtnMsiLl23m/id+2lONN+YBdYAQvtIrvYLvklvlRTtv3QLrMf2Ry73K6wK+0qu9qusWv/q9aVdrPdYrfavfYTu93usDvtLrvb7vklvrSP/fYzm2s/t0fs1/ag/cIessfsYfvVL/Gl/R2z39rj9jt7wp60p+z39rT9wZ6xZ3/Z/6W9f29/thett4KAJCnSFFAM5aNYyk9xdBXF09VUgK6hCF1LCXQdFaTrqRAVpiJUlBKpGBUnQ0iWiEIqQSUpSjdQKbqRkqg0laGy5KgcJdNNVJ5upgp0C1WkW6kS3UaVqQpVpWp0O1WnO6gG1aRadCfVpjpUl+rRXVSf7qYGdA81pHupEd1Hjel+akIPUFN6kJrRQ9ScHqYW9Ai1pFbUmtpQW3qU2tFj1J46UEd6nDrRE9SZnqQUeoq60NPUlZ6hbvQsdafnqAc9Tz2pF/WmF6gPvUh9qR+lUn8aQC/RQBpEg2kIDaWXaRi9QsPpVUqjETSSXqNR9DqNpjdoDI2lcfQmjacJNJEm0WSaQun0Fk2lt2kavUPTaQbNpFmUQbNpDr1Lc2kezaf3aAG9TwtpES2mJZRJH1AWLaVs+pCW0UeUQ8tpBa2kVbSa1tBaWkfraQNtpE20mbbQVtpGH9N22kE7aRftpj20lz6hffQp7afPKJc+pwP0JzpIX9Ah+pIO01d0hL6mo/QNHaNv6Th9RyfoJJ2i7+k0/UBn6Cydox/pPP1EF+hnukieRAihDFWowyCMCfOFsWH+MC68KowPrw4LhNeEkfDaMCG8LiwYXh8WCguHRcKiYWJYLCwemhBDG1IYhiXCkmE0vCEsFd4YJoWlwzJh2dCF5cLk8KawfHhzWCG8JawY3hpWCm8LK4dVwofvrRbeHlYP7whrhDXDWuGdYe2wTlg3rBfeFdYP7w4bhPeEDcN7wwrhfWHj8P6wSfhA2DR8MGwWPhQ2Dx8OW4SPhC3DVmHrsE3YNnw0bBc+FrYPO4Qdw8fDTuETYefwyTAlfCrsEj79D4+nhv3DAeFL4Uuh9/eoxdEl0czoB9Gs6NJodvTD6LLoR9Gc6PLoiujK6Kro6uia6Nrouuj66Iboxuim6ObolujWqPf18gkHTjrltAtcjMvnYl1+F+eucvHualfAXeMi7lqX4K5zBd31rpAr7Iq4oi7RFXPFnXHorCMXuhKupIu6G1wpd6NLcqVdGVfWOVfOJbs2rq1r69q5x1x718F1dI+7x90T7gn3pHvSPeW6uKddV/eM6+aedd3dc+4597zr6Xq53u4F18e96Pq6fi7VpboBboAb6Aa6wW6wG+qGumFumBvuhrs0l+ZGupFulBvlRrvRbowb48a5cW68G+8muoluspvs0l26m+qmumlumpvupruZbqbLcBlujpvj5rq5br6b7xYkLXAL3UK32C12mS7TZbksl+2y3TK3zOW4HLfCrXCr3Cq3xq1x69w6t8FtcJvcJrfFbXHb3Da33W13O91Ot9vtdnvdXrfP7XP73X6X63LdAXfAHXQH3SH3pTvsvnJH3NfuqPvGHXPfuuPuO3fCnXSn3PfutPvBnXFn3Tn3ozvvfnIX3M/uovMuPfJWZGrk7ci0yDuR6ZEZkZmRWZGMyOzInMi7kbmReZH5kfciCyLvRxZGFkUWR5ZEMiMfRLIiSyPZkQ8jyyIfRXIiyyMrIisjqyKrI94X2x76Er6kj/obfCl/o0/ypX0ZX9Y7X84n+5t8eX+zr+Bv8RX9rb6Sv81X9lV8Vf+Ib+lb+da+jW/rH/Xt/GO+ve/gO/rHfSf/hO/sn/Qp/infxT/tu/pnfDf/rO/un/M9/PO+p+/le/sXfB//ou/r+/lU398P8C/5gX6QH+yH+KH+ZT/Mv+KH+1d9mh/hR/rX/Cj/uh/t3/Bj/Fg/zr/px/sJfqKf5Cf7KT7dv+Wn+rf9NP+On+5n+Jl+ls/ws/0c/66f6+f5+f49v8C/7xf6RX6xX+Iz/Qc+yy/12f5Dv8x/5HP8cr/Cr/Sr/Gq/xq/16/x6v8Fv9Jv8Zr/Fb/Xb/Md+u9/hd/pdfrff4/f6T/w+/6nf7z/zuf5zf8D/yR/0X/hD/kt/2H/lj/iv/VH/jT/mv/XH/Xf+hD/pT/nv/Wn/gz/jz/pz/kd/3v/kL/if/UW+Z40xxhhj7J/yj+717/83fid/HZcMEEJcvaPos789roUQmwr9eT5IJnaKCCGe6tfjwb+M2rVTU1N/fWyOEkHJRUKIyOX8GHE5Xi46iidEiuggyv/N+gbJXufp76wPJ7yP3ipE3G9yYsXl+PL6N/836z/6+LisSuG5hN+vf+HX1+1S/dFFQiSVvJyTX1yOL69f4b9Zv3C7v1d/jhL5v0gXov1vcuLF5fjy+sniMfG0SPndIxljjDHGGGOMsT8bJKt2q/pPfD5P1Jdz8onL8T/6fM4YY4wxxhhjjLEr79levZ98NCWlQ7c8PYkR/xFl8IQn/zGTK/2fiTHGGGOMMfZHu3zS/y8k9Yb/wYoYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLG853/j68Su9B4ZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxK+3/BQAA//8vFUY1") chdir(&(0x7f0000000000)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) 2.121525537s ago: executing program 2 (id=2194): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xcb, 0x0, 0x2) 2.000022087s ago: executing program 0 (id=2195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004"], 0xfe44, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000008e2ff4503"]) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x2, 0x0, @empty, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210003}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@private}, {@broadcast}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) inotify_init() bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0xe3, &(0x7f00000006c0)={@multicast, @random="eb3e18160747", @void, {@generic={0x88a2, "546f0032a9fd7ccceed48f049f266d7ae4890ce0b04e6e08a7b634bc9c7a46fc46210030d01870a0ecca67ace025a2f3f3b2ba8ba75d90531ec2965f21432178f44c356107a8e7ff5a3515e2dc00d72a948a81ded3639d1336478ef64ce5c07c4915658a9645d06152bd5f76ebdafe9bc82097be4a61475eb489bb9c55ea503ee201ff0f28049e6949380166e1f1ad45026c9947ba74e8bbc66a2addd06797bd7666f51cf1eea67d5f0b88082d7ddbcc74b9c63861e5d6ca1bb273e82b9f14d138943cfab4df634ab71ef8cc86b7f96b5309e6e182"}}}, &(0x7f0000000180)={0x1, 0x2, [0xdfd, 0xefe, 0x179, 0x97]}) 1.999807967s ago: executing program 2 (id=2196): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x150f, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/42, 0x2a) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.891163286s ago: executing program 2 (id=2197): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x5}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x8, 0x4}, {0x7fff, 0x0, 0x80, 0x4}, {0x4, 0x2f, 0x5, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SNAPSHOT_SET_SWAP_AREA(r4, 0x3309, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00'}, 0x90) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r5, 0x3, r0, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000016c0), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000004f0000000e0001006e657464657673696d0000000f02000000657464b8ba912160ecf69aff657673696d3000000800ab000000000008000b000000000006001100ffff0080"], 0x4c}}, 0x0) r11 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'gre0\x00'}) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010061e00cb2f4359b648d5ed0000388dcf66ac141415ef06e63a808a5e5cbd43af9111aa0c520f06"], 0x3000}], 0x1}, 0x0) sendfile(r11, r8, 0x0, 0x80004700) 1.795376223s ago: executing program 4 (id=2198): r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) 1.71551307s ago: executing program 0 (id=2199): bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000), 0x18) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.23067149s ago: executing program 0 (id=2200): socket$netlink(0x10, 0x3, 0x0) unshare(0x20000400) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000140)="a6bea8a120e5f8320c30e45010b2", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @local}, 0x14) 1.097854771s ago: executing program 0 (id=2201): openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "470033c7e7e76015"}, 0x2}}]}, 0x2c}}, 0x0) 837.996842ms ago: executing program 4 (id=2202): r0 = epoll_create1(0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x8142) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)) write$P9_RFSYNC(r1, 0x0, 0x0) 812.398634ms ago: executing program 2 (id=2203): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000001000), 0x89, 0x0, 0x0, 0x0, 0x2) 24.336508ms ago: executing program 4 (id=2204): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0x1, 0x6a2, &(0x7f0000000100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r1, 0x40045431, &(0x7f0000000040)) 0s ago: executing program 0 (id=2205): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000002c0)={0x0, 0x0, 0x2, "9a94"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x0, 0x0, 0xf, "9e40c244b11226774a2eeeb89ac02b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): nitialize mballoc (-12) [ 497.917591][T10003] EXT4-fs (loop4): mount failed [ 498.251391][ T9998] loop3: detected capacity change from 0 to 32768 [ 498.259432][ T9998] XFS: ikeep mount option is deprecated. [ 498.265260][ T9998] XFS: ikeep mount option is deprecated. [ 498.319552][ T9] team0 (unregistering): Port device team_slave_1 removed [ 498.370289][ T9998] XFS (loop3): Mounting V5 Filesystem [ 498.459040][ T9] team0 (unregistering): Port device team_slave_0 removed [ 498.520883][ T9998] XFS (loop3): Ending clean mount [ 498.529461][ T9998] XFS (loop3): Quotacheck needed: Please wait. [ 498.612399][ T9998] XFS (loop3): Quotacheck: Done. [ 498.741410][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.797159][ T9236] XFS (loop3): Unmounting Filesystem [ 498.803259][ T3563] Bluetooth: hci0: command tx timeout [ 498.894152][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.679835][ T3787] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 499.770978][ T9] team0 (unregistering): Port device dummy0 removed [ 499.875842][T10067] loop3: detected capacity change from 0 to 2048 [ 500.034242][T10067] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 500.043506][ T3787] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 500.111732][T10067] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 500.133534][ T3787] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 500.134494][T10067] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 500.148425][ T3787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 500.164193][ T3787] usb 1-1: SerialNumber: syz [ 500.174554][T10067] EXT4-fs (loop3): This should not happen!! Data will be lost [ 500.174554][T10067] [ 500.187545][T10067] EXT4-fs (loop3): Total free blocks count 0 [ 500.193749][T10067] EXT4-fs (loop3): Free/Dirty block details [ 500.199789][T10067] EXT4-fs (loop3): free_blocks=2415919104 [ 500.206211][T10067] EXT4-fs (loop3): dirty_blocks=48 [ 500.211491][T10067] EXT4-fs (loop3): Block reservation details [ 500.217647][T10067] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 500.358551][ T9236] EXT4-fs (loop3): unmounting filesystem. [ 500.565931][ T9] bond0 (unregistering): Released all slaves [ 500.883485][ T3553] Bluetooth: hci0: command 0x040f tx timeout [ 501.489650][ T6650] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 501.523598][ T6650] usb 3-1: USB disconnect, device number 28 [ 501.530612][ T6650] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 501.580249][T10003] mac80211_hwsim hwsim43 wlan1: refused to change device tx_queue_len [ 501.608122][ T3787] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 501.695485][ T3787] usb 1-1: USB disconnect, device number 28 [ 501.702566][ T3787] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 502.013525][T10110] bridge0: port 3(gretap0) entered blocking state [ 502.020800][T10110] bridge0: port 3(gretap0) entered disabled state [ 502.040454][T10110] device gretap0 entered promiscuous mode [ 502.051713][T10110] bridge0: port 3(gretap0) entered blocking state [ 502.060881][T10110] bridge0: port 3(gretap0) entered forwarding state [ 502.105611][T10110] device gretap0 left promiscuous mode [ 502.111827][T10110] bridge0: port 3(gretap0) entered disabled state [ 502.171629][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.963201][ T3553] Bluetooth: hci0: command 0x040f tx timeout [ 503.090855][T10120] device team0 entered promiscuous mode [ 503.107300][T10120] device team_slave_0 entered promiscuous mode [ 503.120275][T10120] device team_slave_1 entered promiscuous mode [ 503.132250][T10124] loop3: detected capacity change from 0 to 512 [ 503.169612][ T9929] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 503.182646][T10124] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 503.270597][ T9929] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 503.283226][T10124] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 503.333398][T10124] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 503.375937][T10124] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 503.385174][ T9929] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 503.397200][T10124] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 503.406779][ T9929] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 503.422532][T10124] EXT4-fs (loop3): too many log groups per flexible block group [ 503.433521][T10124] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 503.472329][T10124] EXT4-fs (loop3): mount failed [ 503.643922][ T9929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.697323][T10124] mac80211_hwsim hwsim47 wlan1: refused to change device tx_queue_len [ 503.723781][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 503.744702][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 503.762431][ T9929] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.778142][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 503.794277][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 503.809419][ T7993] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.816650][ T7993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.864854][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 503.883864][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 503.899687][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 503.908960][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.916140][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.924372][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 503.933310][ T7] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 503.942811][T10119] device team0 left promiscuous mode [ 503.959175][T10119] device team_slave_0 left promiscuous mode [ 503.978071][T10119] device team_slave_1 left promiscuous mode [ 504.001041][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 504.014611][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 504.017460][T10149] loop4: detected capacity change from 0 to 4096 [ 504.027453][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 504.053483][T10149] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 504.062084][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 504.080131][T10149] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 504.084555][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 504.100839][T10149] ntfs3: loop4: Failed to load $Bitmap. [ 504.110023][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 504.130314][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 504.149545][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 504.171822][ T9929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 504.176506][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 504.202299][ T9929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 504.221578][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 504.234154][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 504.343424][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.370758][ T7] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 504.395410][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 504.426488][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.448816][ T7] usb 1-1: config 0 descriptor?? [ 504.579250][T10164] bridge0: port 4(gretap0) entered blocking state [ 504.586298][T10164] bridge0: port 4(gretap0) entered disabled state [ 504.597959][T10164] device gretap0 entered promiscuous mode [ 504.605053][T10164] bridge0: port 4(gretap0) entered blocking state [ 504.611570][T10164] bridge0: port 4(gretap0) entered forwarding state [ 504.638726][T10164] device gretap0 left promiscuous mode [ 504.646705][T10164] bridge0: port 4(gretap0) entered disabled state [ 504.656998][ T3629] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 504.993284][ T3629] usb 3-1: Using ep0 maxpacket: 8 [ 505.055392][ T3553] Bluetooth: hci0: command 0x040f tx timeout [ 505.163763][ T3629] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 505.233589][ T3629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.465949][ T3629] usb 3-1: config 0 descriptor?? [ 505.608355][ T9929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.637267][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 505.646377][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 505.672470][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 505.674871][ T3555] usb 1-1: USB disconnect, device number 29 [ 505.682400][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 505.730598][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 505.740638][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 505.766482][ T9929] device veth0_vlan entered promiscuous mode [ 505.780862][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 505.790340][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 505.815507][ T9929] device veth1_vlan entered promiscuous mode [ 505.833226][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 505.880867][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 505.901795][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 505.919544][ T9929] device veth0_macvtap entered promiscuous mode [ 505.945581][ T9929] device veth1_macvtap entered promiscuous mode [ 505.984536][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.001473][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.012902][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.024590][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.035513][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.046179][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.058453][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.069224][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.081167][ T9929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.093933][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 506.105931][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 506.114961][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 506.124149][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 506.136228][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.149011][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.159501][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.170626][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.180826][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.191642][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.212726][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.233294][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.245937][ T9929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.261190][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 506.274469][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 506.296908][ T9929] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.323110][ T9929] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.339694][ T9929] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.348766][ T9929] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.466605][T10194] syz.0.1813[10194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.466716][T10194] syz.0.1813[10194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.516066][ T27] audit: type=1326 audit(1720566873.987:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.0.1813" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5624b75bd9 code=0x0 [ 506.557101][ T3579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.579736][ T3579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.623197][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 506.634351][ T5061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.671743][ T5061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.710890][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 506.840931][T10202] bridge0: port 3(gretap0) entered blocking state [ 506.848463][T10202] bridge0: port 3(gretap0) entered disabled state [ 506.859578][T10202] device gretap0 entered promiscuous mode [ 506.867083][T10202] bridge0: port 3(gretap0) entered blocking state [ 506.873658][T10202] bridge0: port 3(gretap0) entered forwarding state [ 506.900731][T10202] device gretap0 left promiscuous mode [ 506.906962][T10202] bridge0: port 3(gretap0) entered disabled state [ 507.749758][T10205] loop1: detected capacity change from 0 to 2048 [ 507.840495][T10213] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 508.072568][T10228] loop4: detected capacity change from 0 to 256 [ 508.112875][T10228] FAT-fs (loop4): Directory bread(block 64) failed [ 508.120532][T10228] FAT-fs (loop4): Directory bread(block 65) failed [ 508.127923][T10228] FAT-fs (loop4): Directory bread(block 66) failed [ 508.134765][T10228] FAT-fs (loop4): Directory bread(block 67) failed [ 508.141479][T10228] FAT-fs (loop4): Directory bread(block 68) failed [ 508.149094][T10228] FAT-fs (loop4): Directory bread(block 69) failed [ 508.156432][T10228] FAT-fs (loop4): Directory bread(block 70) failed [ 508.181397][T10228] FAT-fs (loop4): Directory bread(block 71) failed [ 508.188450][T10228] FAT-fs (loop4): Directory bread(block 72) failed [ 508.195238][T10228] FAT-fs (loop4): Directory bread(block 73) failed [ 508.198843][T10232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1825'. [ 508.217776][T10232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1825'. [ 508.258864][T10232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1825'. [ 508.280089][ T7] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 508.293241][ T3605] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 508.325391][ T3629] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 508.347633][ T3629] asix: probe of 3-1:0.0 failed with error -71 [ 508.358573][ T3629] usb 3-1: USB disconnect, device number 29 [ 508.525618][T10242] bridge0: port 4(gretap0) entered blocking state [ 508.532489][T10242] bridge0: port 4(gretap0) entered disabled state [ 508.544052][T10242] device gretap0 entered promiscuous mode [ 508.551289][T10242] bridge0: port 4(gretap0) entered blocking state [ 508.557864][T10242] bridge0: port 4(gretap0) entered forwarding state [ 508.586787][T10242] device gretap0 left promiscuous mode [ 508.592905][T10242] bridge0: port 4(gretap0) entered disabled state [ 508.600804][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 508.606172][ T3605] usb 2-1: Using ep0 maxpacket: 8 [ 508.723949][ T3605] usb 2-1: config index 0 descriptor too short (expected 62, got 18) [ 508.753296][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.767742][ T3605] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.806734][ T7] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 508.859610][ T3605] usb 2-1: config 0 has no interfaces? [ 508.883894][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 508.920199][ T3605] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 508.976418][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.007737][ T3605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.117635][ T7] usb 4-1: config 0 descriptor?? [ 509.129956][ T3605] usb 2-1: config 0 descriptor?? [ 509.330230][ T3553] Bluetooth: hci3: command 0x0406 tx timeout [ 509.583184][ T3629] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 509.618140][ T7] usb 4-1: USB disconnect, device number 36 [ 509.853135][ T3629] usb 3-1: Using ep0 maxpacket: 16 [ 509.999729][ T3629] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.008128][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1839'. [ 510.010515][ T154] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 510.022262][T10270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1839'. [ 510.044129][ T3629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 510.054344][ T3629] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 510.065718][ T3629] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 510.099695][ T3618] usb 2-1: USB disconnect, device number 32 [ 510.100202][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1839'. [ 510.263440][ T3629] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 510.283295][ T3629] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 510.295759][ T3629] usb 3-1: Product: syz [ 510.299991][ T3629] usb 3-1: Manufacturer: syz [ 510.307573][ T3629] usb 3-1: SerialNumber: syz [ 510.319059][ T3629] usb 3-1: config 0 descriptor?? [ 510.428788][T10282] bridge0: port 3(gretap0) entered blocking state [ 510.435671][T10282] bridge0: port 3(gretap0) entered disabled state [ 510.446540][T10282] device gretap0 entered promiscuous mode [ 510.455853][T10282] bridge0: port 3(gretap0) entered blocking state [ 510.462403][T10282] bridge0: port 3(gretap0) entered forwarding state [ 510.489769][T10282] device gretap0 left promiscuous mode [ 510.496263][T10282] bridge0: port 3(gretap0) entered disabled state [ 511.315001][ T154] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 511.333056][ T3629] usb 3-1: NFC: intf ffff888022119000 id ffffffff8d9cee80 [ 511.350140][ T3629] usb 3-1: USB disconnect, device number 30 [ 511.361916][ T154] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 511.375357][ T154] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 511.388215][ T154] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 511.483435][ T154] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 511.502766][ T154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 511.521166][ T154] usb 5-1: SerialNumber: syz [ 511.563491][T10265] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 511.584115][ T154] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 511.600641][T10300] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1850'. [ 511.734343][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1854'. [ 511.745617][T10305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1854'. [ 511.813507][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1854'. [ 511.865784][ T6650] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 511.873605][ T3787] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 512.113250][ T3787] usb 4-1: Using ep0 maxpacket: 32 [ 512.233205][ T3787] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.243872][ T6650] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.260062][ T3787] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 512.269813][ T6650] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 512.282843][ T3787] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 512.292149][ T6650] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 512.301356][ T3787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.309537][ T6650] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.320711][ T3787] usb 4-1: config 0 descriptor?? [ 512.330571][ T6650] usb 1-1: config 0 descriptor?? [ 512.483239][ T3629] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 512.749998][ T3629] usb 3-1: Using ep0 maxpacket: 8 [ 512.840916][ T6650] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving [ 512.853753][ T6650] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 512.892063][ T3618] usb 4-1: USB disconnect, device number 37 [ 512.898376][ T3629] usb 3-1: config index 0 descriptor too short (expected 62, got 18) [ 512.914618][ T3629] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.930814][ T3629] usb 3-1: config 0 has no interfaces? [ 512.938789][ T3629] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 512.952926][ T3629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.971084][ T3629] usb 3-1: config 0 descriptor?? [ 513.043754][ T3629] usb 1-1: USB disconnect, device number 30 [ 513.517141][T10329] bridge0: port 3(gretap0) entered blocking state [ 513.524142][T10329] bridge0: port 3(gretap0) entered disabled state [ 513.535639][T10329] device gretap0 entered promiscuous mode [ 513.542692][T10329] bridge0: port 3(gretap0) entered blocking state [ 513.549251][T10329] bridge0: port 3(gretap0) entered forwarding state [ 513.576797][T10329] device gretap0 left promiscuous mode [ 513.582930][T10329] bridge0: port 3(gretap0) entered disabled state [ 514.783998][ T3605] usb 3-1: USB disconnect, device number 31 [ 515.424589][ T3555] usb 5-1: USB disconnect, device number 32 [ 516.133154][ T3605] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 516.403221][ T3605] usb 4-1: Using ep0 maxpacket: 32 [ 516.523534][ T3605] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.611781][ T3605] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 516.740678][ T3605] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 516.859380][ T3605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.897076][ T3605] usb 4-1: config 0 descriptor?? [ 517.131733][T10352] loop4: detected capacity change from 0 to 32768 [ 517.159070][T10352] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1867 (10352) [ 517.219805][T10352] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 517.263318][T10352] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 517.272231][T10352] BTRFS info (device loop4): setting nodatacow, compression disabled [ 517.318161][T10352] BTRFS info (device loop4): turning on flush-on-commit [ 517.363376][T10352] BTRFS info (device loop4): enabling auto defrag [ 517.420515][T10352] BTRFS info (device loop4): max_inline at 0 [ 517.442034][T10352] BTRFS info (device loop4): using free space tree [ 517.553158][ T154] usb 4-1: USB disconnect, device number 38 [ 517.631813][T10352] BTRFS info (device loop4): enabling ssd optimizations [ 518.773823][ T8086] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 520.080461][T10434] loop4: detected capacity change from 0 to 4096 [ 520.107815][T10434] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 520.243332][ T27] audit: type=1800 audit(1720566887.717:168): pid=10434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1884" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 520.797814][T10455] loop4: detected capacity change from 0 to 16 [ 520.827697][T10455] erofs: (device loop4): mounted with root inode @ nid 36. [ 521.213239][ T6647] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 521.441992][ T3618] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 521.459323][ T3618] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 521.813344][ T6647] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.842543][ T6647] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.880493][ T6647] usb 1-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 521.909165][ T6647] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.964075][ T6647] usb 1-1: config 0 descriptor?? [ 522.122144][ T3618] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 522.275017][T10488] loop4: detected capacity change from 0 to 512 [ 522.313678][T10484] loop1: detected capacity change from 0 to 4096 [ 522.331549][T10484] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 522.342895][T10488] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz.4.1911: iget: bad extended attribute block 128 [ 522.467085][T10488] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1911: couldn't read orphan inode 16 (err -117) [ 522.499392][T10488] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 522.640076][T10488] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038 (0x7fffffff) [ 522.772670][ T27] audit: type=1800 audit(1720566890.237:169): pid=10484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1909" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 523.083790][ T6647] elecom 0003:056E:00FB.002C: unknown main item tag 0x0 [ 523.092835][ T6647] elecom 0003:056E:00FB.002C: hidraw0: USB HID v0.07 Device [HID 056e:00fb] on usb-dummy_hcd.0-1/input0 [ 523.105689][ T6647] usb 1-1: USB disconnect, device number 31 [ 523.159513][T10488] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 523.187997][T10488] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 523.222627][T10488] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.1911: Failed to acquire dquot type 1 [ 523.326339][ T8086] EXT4-fs (loop4): unmounting filesystem. [ 523.338454][ T3729] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 523.362352][T10501] loop1: detected capacity change from 0 to 256 [ 523.403611][ T3729] EXT4-fs error (device loop4): ext4_release_dquot:6800: comm kworker/u4:13: Failed to release dquot type 1 [ 523.471687][T10506] netlink: 'syz.2.1918': attribute type 21 has an invalid length. [ 523.490154][T10506] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1918'. [ 523.506698][T10506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1918'. [ 523.730704][ T3597] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 523.753163][ T3597] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 523.787206][ T3597] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 523.816137][T10526] loop1: detected capacity change from 0 to 256 [ 524.460044][T10531] overlayfs: failed to resolve './file1': -2 [ 524.764426][T10537] netlink: 'syz.3.1929': attribute type 21 has an invalid length. [ 524.782592][T10537] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1929'. [ 524.802787][T10537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1929'. [ 524.940773][T10550] loop4: detected capacity change from 0 to 512 [ 524.948697][T10550] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 524.996485][T10550] EXT4-fs (loop4): 1 truncate cleaned up [ 525.002291][T10550] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 525.136147][ T8086] EXT4-fs (loop4): unmounting filesystem. [ 525.208154][T10564] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1939'. [ 525.292355][T10568] loop4: detected capacity change from 0 to 256 [ 525.883268][ T154] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 526.032528][ T154] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 526.122632][ T154] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 526.510717][T10590] loop1: detected capacity change from 0 to 512 [ 526.552293][T10590] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 526.602618][T10590] EXT4-fs (loop1): 1 truncate cleaned up [ 526.617517][T10590] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 526.796472][T10596] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1951'. [ 527.622515][ T9929] EXT4-fs (loop1): unmounting filesystem. [ 527.846032][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1953'. [ 527.973284][ T6647] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 528.133190][T10610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.263213][ T6647] usb 5-1: Using ep0 maxpacket: 16 [ 528.284845][T10618] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1957'. [ 528.398519][T10610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.513486][ T6647] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.530032][ T6647] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 528.548067][ T6647] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 528.559932][ T6647] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 528.569767][ T6647] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 528.583193][ T6647] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 528.693847][ T6647] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 528.710289][ T6647] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 528.740387][T10624] loop3: detected capacity change from 0 to 4096 [ 528.747057][ T6647] usb 5-1: SerialNumber: syz [ 528.806411][ T6647] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 528.821493][T10624] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 528.869445][ T6647] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 528.964670][ T27] audit: type=1800 audit(1720566896.437:170): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1959" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 529.014693][ T3597] usb 5-1: USB disconnect, device number 33 [ 529.027439][ T27] audit: type=1804 audit(1720566896.497:171): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1959" name="/newroot/73/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 529.176855][ T9236] EXT4-fs (loop3): unmounting filesystem. [ 529.573090][ T6647] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 529.763298][ T3563] Bluetooth: hci5: command 0x0406 tx timeout [ 529.900457][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1966'. [ 529.943290][ T6647] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 529.952470][ T6647] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.995725][ T6647] usb 4-1: config 0 descriptor?? [ 530.034293][ T6647] cp210x 4-1:0.0: cp210x converter detected [ 530.342675][T10635] loop1: detected capacity change from 0 to 32768 [ 530.362386][T10635] gfs2: fsid=nobarrier: Trying to join cluster "lock_dlm", "nobarrier" [ 530.389412][T10650] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 530.391913][T10635] gfs2: fsid=nobarrier: no fsname found [ 530.452769][T10641] loop4: detected capacity change from 0 to 32768 [ 530.473242][ T6647] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 530.746046][ T6647] usb 4-1: cp210x converter now attached to ttyUSB0 [ 530.846341][T10661] loop4: detected capacity change from 0 to 512 [ 530.888358][T10661] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 530.935448][T10661] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038 (0x7fffffff) [ 530.950191][ T3597] usb 4-1: USB disconnect, device number 39 [ 530.967033][ T3597] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 530.975707][T10670] loop1: detected capacity change from 0 to 2048 [ 530.990611][ T3597] cp210x 4-1:0.0: device disconnected [ 531.007727][ T8086] EXT4-fs (loop4): unmounting filesystem. [ 531.036524][T10670] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 531.045419][T10670] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff) [ 531.106432][T10670] EXT4-fs (loop1): shut down requested (2) [ 531.121299][T10670] fs-verity: sha512 using implementation "sha512-avx2" [ 531.156968][ T9929] EXT4-fs (loop1): unmounting filesystem. [ 531.201171][T10680] loop4: detected capacity change from 0 to 2048 [ 531.269295][T10685] loop1: detected capacity change from 0 to 512 [ 531.286946][T10680] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.1977: bad orphan inode 8192 [ 531.310225][T10685] EXT4-fs warning (device loop1): ext4_multi_mount_protect:324: fsck is running on the filesystem [ 531.350685][T10680] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 531.370224][T10685] EXT4-fs warning (device loop1): ext4_multi_mount_protect:324: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 532.289345][ T8086] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 532.373640][ T8086] EXT4-fs (loop4): unmounting filesystem. [ 532.383209][ T3597] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 532.400005][T10704] loop3: detected capacity change from 0 to 4096 [ 532.452086][T10704] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 532.483498][ T27] audit: type=1800 audit(1720566899.947:172): pid=10704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1986" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 532.573423][ T27] audit: type=1804 audit(1720566899.977:173): pid=10704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1986" name="/newroot/76/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 532.616333][ T9236] EXT4-fs (loop3): unmounting filesystem. [ 532.643104][ T3597] usb 2-1: Using ep0 maxpacket: 16 [ 532.769364][T10714] loop3: detected capacity change from 0 to 64 [ 532.804622][ T3597] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.825970][ T3597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 532.848570][ T3597] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 532.867372][ T3597] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 532.881478][ T3597] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.909883][ T27] audit: type=1804 audit(1720566900.377:174): pid=10714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1989" name="/newroot/77/file0/bus" dev="loop3" ino=1 res=1 errno=0 [ 532.985325][ T3597] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 533.003322][ T3597] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 533.022362][ T3597] usb 2-1: Manufacturer: syz [ 533.052105][ T3597] usb 2-1: config 0 descriptor?? [ 533.151343][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.276227][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.442879][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.533161][ T6650] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 533.561713][ T3563] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 533.575704][ T3563] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 533.585777][ T3563] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 533.604737][ T3565] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 533.616899][ T3565] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 533.691650][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.750132][ T3565] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 534.728502][ T6650] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.741679][ T6650] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.751691][ T6650] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 534.760908][ T6650] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.796365][ T6650] usb 1-1: config 0 descriptor?? [ 534.933180][ T3597] rc_core: IR keymap rc-hauppauge not found [ 534.939364][ T3597] Registered IR keymap rc-empty [ 534.949988][ T3597] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.003096][ T3597] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.050554][ T3597] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 535.108078][ T3597] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input44 [ 535.179871][ T3597] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.243338][ T3597] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.273169][ T3597] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.275962][T10739] chnl_net:caif_netlink_parms(): no params data found [ 535.303113][ T3597] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.353168][ T3597] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.393207][ T3597] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.433189][ T3597] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.463246][ T3597] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.496076][ T3597] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.533182][ T3597] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.556998][T10739] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.564527][T10739] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.573671][T10739] device bridge_slave_0 entered promiscuous mode [ 535.574725][ T3597] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 535.583323][T10739] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.596779][T10739] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.605454][T10739] device bridge_slave_1 entered promiscuous mode [ 535.622898][ T3597] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 535.666538][T10739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.701902][T10739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.785084][T10737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.818332][T10739] team0: Port device team_slave_0 added [ 535.843810][ T3553] Bluetooth: hci2: command tx timeout [ 535.865647][T10739] team0: Port device team_slave_1 added [ 535.904247][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2007'. [ 536.082193][ T3629] usb 2-1: USB disconnect, device number 33 [ 536.205283][T10739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.222557][T10739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.258294][T10739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.273257][T10739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.280719][T10739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.306743][ C0] vkms_vblank_simulate: vblank timer overrun [ 536.335242][T10739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.346055][ T6650] uclogic 0003:256C:006D.002F: failed retrieving Huion firmware version: -71 [ 536.346700][T10786] loop3: detected capacity change from 0 to 2048 [ 536.357499][ T6650] uclogic 0003:256C:006D.002F: failed probing parameters: -71 [ 536.369225][ T6650] uclogic: probe of 0003:256C:006D.002F failed with error -71 [ 536.390676][ T6650] usb 1-1: USB disconnect, device number 32 [ 536.400760][T10786] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.2011: bad orphan inode 8192 [ 536.419655][T10786] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 536.475145][T10791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.523785][T10739] device hsr_slave_0 entered promiscuous mode [ 536.532268][T10739] device hsr_slave_1 entered promiscuous mode [ 536.550736][T10739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.561966][T10739] Cannot create hsr debugfs directory [ 536.710408][ T3629] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 537.009106][T10789] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 7: padding at end of block bitmap is not set [ 537.407664][T10798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.518239][ T9236] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 537.583201][ T3629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.594770][ T3629] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 537.623752][ T3629] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 537.632940][ T3629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.647587][ T3629] usb 2-1: config 0 descriptor?? [ 537.648973][ T9236] EXT4-fs (loop3): unmounting filesystem. [ 537.907724][ T11] device hsr_slave_0 left promiscuous mode [ 537.915328][ T11] device hsr_slave_1 left promiscuous mode [ 537.922013][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.925282][ T3553] Bluetooth: hci2: command tx timeout [ 537.931809][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.947196][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.962025][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.970427][ T11] bridge0: port 3(hsr0) entered disabled state [ 537.989209][ T11] device bridge_slave_1 left promiscuous mode [ 537.995800][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.004647][ T11] device bridge_slave_0 left promiscuous mode [ 538.010941][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.096047][ T11] device veth1_macvtap left promiscuous mode [ 538.102339][ T11] device veth0_macvtap left promiscuous mode [ 538.115548][ T11] device veth1_vlan left promiscuous mode [ 538.121429][ T11] device veth0_vlan left promiscuous mode [ 538.134369][ T3629] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 538.151201][ T3629] plantronics 0003:047F:FFFF.0030: No inputs registered, leaving [ 538.189723][ T3629] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 538.515772][ T6647] usb 2-1: USB disconnect, device number 34 [ 538.623040][ T3555] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 538.650811][ T3565] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 538.670262][ T3565] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 538.680874][ T3565] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 538.691530][ T3563] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 538.711362][ T3563] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 538.719103][ T3563] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 539.003313][ T3555] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.021427][ T3555] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 539.034761][ T3555] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 539.043899][ T3555] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.066593][ T3555] usb 3-1: config 0 descriptor?? [ 539.193174][ T154] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 539.400053][ T11] team0 (unregistering): Port device team_slave_1 removed [ 539.456223][ T11] team0 (unregistering): Port device team_slave_0 removed [ 539.465102][ T154] usb 1-1: Using ep0 maxpacket: 16 [ 539.517623][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.575191][ T3555] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 539.586569][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.587248][ T3555] plantronics 0003:047F:FFFF.0031: No inputs registered, leaving [ 539.605406][ T3555] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 539.633420][ T154] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.652232][ T154] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 539.662207][ T154] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 539.672353][ T154] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 539.682097][ T154] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 539.691831][ T154] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 539.794086][ T154] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 539.808024][ T154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 539.820978][ T154] usb 1-1: SerialNumber: syz [ 539.901619][ T154] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 539.911153][ T154] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 539.913123][ T6647] usb 3-1: USB disconnect, device number 32 [ 539.927502][ T27] audit: type=1326 audit(1720566907.397:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10806 comm="syz.2.2018" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9928975bd9 code=0x0 [ 540.009562][ T3563] Bluetooth: hci2: command tx timeout [ 540.122632][ T154] usb 1-1: USB disconnect, device number 33 [ 540.845201][ T3563] Bluetooth: hci1: command tx timeout [ 541.157695][ T11] bond0 (unregistering): Released all slaves [ 541.354892][T10815] device ipip0 entered promiscuous mode [ 542.083234][ T3563] Bluetooth: hci2: command tx timeout [ 542.567934][T10808] chnl_net:caif_netlink_parms(): no params data found [ 542.883249][ T3563] Bluetooth: hci1: command tx timeout [ 542.972242][T10808] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.992402][T10808] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.040938][T10808] device bridge_slave_0 entered promiscuous mode [ 543.053235][T10859] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2032'. [ 543.465201][T10808] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.511853][T10808] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.579934][T10808] device bridge_slave_1 entered promiscuous mode [ 543.843458][T10808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.852765][T10739] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 543.868848][T10739] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 544.048933][T10865] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 544.097080][T10808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.119296][T10739] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 544.403468][ T8502] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 544.739982][T10865] kvm: pic: non byte read [ 544.789265][T10865] kvm: pic: level sensitive irq not supported [ 544.796284][T10865] kvm: pic: non byte read [ 544.807752][ T8502] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.838984][ T8502] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.863189][T10808] team0: Port device team_slave_0 added [ 544.871045][T10739] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 544.877905][ T8502] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 544.877977][ T8502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.884687][ T8502] usb 2-1: config 0 descriptor?? [ 544.919840][T10808] team0: Port device team_slave_1 added [ 544.963762][ T3563] Bluetooth: hci1: command tx timeout [ 545.047649][T10808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.073164][T10808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.162612][T10808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.202647][T10808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.210308][T10808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.236261][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.245489][T10808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.412524][T10808] device hsr_slave_0 entered promiscuous mode [ 545.416075][T10879] loop1: detected capacity change from 0 to 1024 [ 545.438888][T10808] device hsr_slave_1 entered promiscuous mode [ 545.454023][T10808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 545.482079][T10808] Cannot create hsr debugfs directory [ 545.538461][T10879] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 545.570867][T10739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.648478][T10739] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.668783][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 545.679366][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 545.794056][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 545.824239][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 545.832861][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.840596][ T6650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.876069][ T27] audit: type=1804 audit(1720566913.347:176): pid=10897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2040" name="/newroot/47/bus/file1" dev="loop1" ino=15 res=1 errno=0 [ 545.902780][T10897] EXT4-fs error (device loop1): ext4_xattr_ibody_get:603: inode #15: comm syz.1.2040: corrupted in-inode xattr [ 545.918206][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 545.971008][T10897] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.2040: corrupted in-inode xattr [ 545.992511][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 546.016899][ T6650] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.024165][ T6650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.067239][T10897] syz.1.2040: attempt to access beyond end of device [ 546.067239][T10897] loop1: rw=2049, sector=3606377190, nr_sectors = 2 limit=1024 [ 546.087085][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 546.100579][T10897] EXT4-fs warning (device loop1): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 1803188595) [ 546.128877][T10897] Buffer I/O error on device loop1, logical block 1803188595 [ 546.145548][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 546.161670][T10897] syz.1.2040: attempt to access beyond end of device [ 546.161670][T10897] loop1: rw=2049, sector=3403208898, nr_sectors = 2 limit=1024 [ 546.185656][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 546.192148][T10897] EXT4-fs warning (device loop1): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 1701604449) [ 546.220045][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 546.220385][T10897] Buffer I/O error on device loop1, logical block 1701604449 [ 546.240759][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 546.254657][T10897] syz.1.2040: attempt to access beyond end of device [ 546.254657][T10897] loop1: rw=2049, sector=59108, nr_sectors = 2 limit=1024 [ 546.267864][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 546.292123][T10897] EXT4-fs warning (device loop1): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 29554) [ 546.327571][T10897] Buffer I/O error on device loop1, logical block 29554 [ 546.363652][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 546.383325][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 546.392290][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 546.417659][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 546.443659][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 546.467848][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 546.507774][T10739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 546.539231][ T8502] uclogic 0003:256C:006D.0032: failed retrieving Huion firmware version: -71 [ 546.558132][ T8502] uclogic 0003:256C:006D.0032: failed probing parameters: -71 [ 546.575120][ T8502] uclogic: probe of 0003:256C:006D.0032 failed with error -71 [ 546.600104][ T8502] usb 2-1: USB disconnect, device number 35 [ 546.765231][T10808] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.914235][T10915] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2049'. [ 546.942353][T10808] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.043295][ T3563] Bluetooth: hci1: command tx timeout [ 547.205188][T10808] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.246413][ T9929] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /47/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 547.434848][ T9929] EXT4-fs (loop1): Inode 15 (ffff888055b7ee58): i_reserved_data_blocks (1) not cleared! [ 547.450075][ T9929] EXT4-fs (loop1): unmounting filesystem. [ 547.853314][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 547.869587][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 547.918520][T10808] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.032058][T10739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.539140][T10808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 548.626238][T10808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 548.651424][T10808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 548.742352][T10808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 548.745876][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 548.788986][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 548.802919][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 548.813195][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 548.820641][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 548.854982][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 548.879093][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 548.906173][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 548.928371][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 548.952392][T10739] device veth0_vlan entered promiscuous mode [ 548.958088][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 548.987720][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 548.998735][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.010267][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.018846][ T3553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 549.032462][ T3553] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 549.042380][ T3553] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 549.050086][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.054389][ T3565] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 549.057828][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.069858][ T3565] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 549.072069][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.079774][ T3565] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 549.086499][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.101618][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.109184][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.148784][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.156322][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.172827][T10739] device veth1_vlan entered promiscuous mode [ 549.179037][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.223798][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.250238][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.281989][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.303092][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.310581][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.345451][T10808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.353105][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.360561][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.361379][T10739] device veth0_macvtap entered promiscuous mode [ 549.375443][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.383575][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.391072][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.398671][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.406259][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.413875][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.421349][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.431007][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.438552][ T3605] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 549.448081][ T3605] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz0] on syz0 [ 549.517569][T10739] device veth1_macvtap entered promiscuous mode [ 549.532754][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 549.549197][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 549.558718][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 549.567379][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 549.576996][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 549.585710][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 549.594707][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 549.603977][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 549.614825][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 549.632316][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 549.649778][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 549.660213][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 549.703119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 549.715102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 549.732869][T10808] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.810765][T10949] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 549.847231][T10739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.860649][T10739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.871380][T10739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.884392][T10739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.896018][T10739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.907182][T10739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.909802][T10949] kvm: pic: non byte read [ 549.917281][T10739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.917308][T10739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.919243][T10739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.943338][T10949] kvm: pic: level sensitive irq not supported [ 549.950623][T10949] kvm: pic: non byte read [ 549.962450][T10739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.975664][T10739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.994720][T10739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.016250][T10739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.031633][T10739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.050938][T10739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.061933][T10739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.085849][T10739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.102598][T10739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.134611][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 550.145444][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 550.169061][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 550.178139][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 550.187502][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 550.196565][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 550.205308][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.212446][ T6650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.220364][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 550.230709][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 550.239570][ T6650] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.246755][ T6650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.290743][T10739] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.316910][T10739] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.325906][T10739] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.337982][T10739] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.353893][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 550.364308][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 550.415727][ T11] device hsr_slave_0 left promiscuous mode [ 550.422210][ T11] device hsr_slave_1 left promiscuous mode [ 550.432830][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.450209][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.484650][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.492133][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.500398][ T11] device bridge_slave_1 left promiscuous mode [ 550.506952][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.516003][ T11] device bridge_slave_0 left promiscuous mode [ 550.522605][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.570631][ T11] device veth1_macvtap left promiscuous mode [ 550.577059][ T11] device veth0_macvtap left promiscuous mode [ 550.583404][ T11] device veth1_vlan left promiscuous mode [ 550.589287][ T11] device veth0_vlan left promiscuous mode [ 551.211728][ T3565] Bluetooth: hci0: command tx timeout [ 551.950861][ T11] team0 (unregistering): Port device team_slave_1 removed [ 552.034160][ T11] team0 (unregistering): Port device team_slave_0 removed [ 552.131195][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.137356][T10981] tipc: Can't bind to reserved service type 0 [ 552.262646][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.334877][T10984] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 552.384576][T10984] kvm: pic: non byte read [ 552.389446][T10984] kvm: pic: level sensitive irq not supported [ 552.389551][T10984] kvm: pic: non byte read [ 553.295218][ T3565] Bluetooth: hci0: command tx timeout [ 553.344857][ T11] bond0 (unregistering): Released all slaves [ 553.472559][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 553.513139][ T3629] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 553.547832][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 553.569473][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 553.587044][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 553.600139][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 553.612132][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 553.639597][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 553.686380][T10944] chnl_net:caif_netlink_parms(): no params data found [ 553.697141][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 553.705306][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 553.714086][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 553.729362][T10808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 553.793136][ T3629] usb 1-1: Using ep0 maxpacket: 16 [ 553.823263][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.831724][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.937934][ T3663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.969403][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 553.990946][ T3663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.071863][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 554.133968][ T3629] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 554.154436][ T3629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.162501][ T3629] usb 1-1: Product: syz [ 554.179239][ T3629] usb 1-1: Manufacturer: syz [ 554.186320][ T3629] usb 1-1: SerialNumber: syz [ 554.200557][ T3629] usb 1-1: config 0 descriptor?? [ 554.207166][T10944] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.223795][T10944] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.242758][T10944] device bridge_slave_0 entered promiscuous mode [ 554.254413][T10944] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.262221][T10944] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.274085][ T3629] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 554.290623][T10944] device bridge_slave_1 entered promiscuous mode [ 554.388788][T10944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.437149][T10944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.473513][ T3605] usb 1-1: USB disconnect, device number 34 [ 554.513121][ T3597] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 554.569088][T10944] team0: Port device team_slave_0 added [ 554.588641][T10944] team0: Port device team_slave_1 added [ 554.648554][T10944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.669558][T10944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.703592][T10944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.739193][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 554.746984][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 554.755264][T10944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.762248][T10944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.795177][ T3597] usb 5-1: Using ep0 maxpacket: 8 [ 554.799133][T10944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.832910][T10808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.923312][ T3597] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=18.dc [ 554.942843][ T3597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.946795][T10944] device hsr_slave_0 entered promiscuous mode [ 554.966545][ T3597] usb 5-1: config 0 descriptor?? [ 554.978621][T10944] device hsr_slave_1 entered promiscuous mode [ 555.003952][T10944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 555.011601][T10944] Cannot create hsr debugfs directory [ 555.032475][ T3597] sierra 5-1:0.0: Sierra USB modem converter detected [ 555.088650][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 555.111207][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 555.246316][ T3597] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 555.284595][ T3597] usb 5-1: USB disconnect, device number 34 [ 555.303993][ T3597] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 555.331661][ T3597] sierra 5-1:0.0: device disconnected [ 555.373265][ T3565] Bluetooth: hci0: command tx timeout [ 555.391948][T10808] device veth0_vlan entered promiscuous mode [ 555.534576][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 555.553675][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 555.592819][T10808] device veth1_vlan entered promiscuous mode [ 555.642649][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 555.662097][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 555.691012][T11043] device ip6tnl0 entered promiscuous mode [ 555.718354][T11042] device ip6tnl0 left promiscuous mode [ 555.782411][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 555.811983][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 555.830675][T10808] device veth0_macvtap entered promiscuous mode [ 555.860380][T10808] device veth1_macvtap entered promiscuous mode [ 556.072587][T10944] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.150854][T10808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.182422][T10808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.213015][T10808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.223774][T10808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.243157][T10808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.263129][T10808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.283075][T10808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.301080][T10808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.325456][T10808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.334173][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 556.342644][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 556.384095][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 556.400868][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 556.475651][T10944] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.510220][T10808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.532667][T10808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.577304][T10808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.599449][T11056] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 556.608315][T10808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.641695][T10808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.664763][T10808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.695311][T10808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.719790][T10808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.748613][T10808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.782648][ T6647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 556.801639][ T6647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 556.865486][T10944] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.903941][T10808] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.913560][T10808] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.923377][T10808] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.932291][T10808] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.012490][T10944] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.143886][ T6647] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 557.180937][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.205230][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.246061][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 557.295102][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.309552][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.370961][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 557.443526][ T3565] Bluetooth: hci0: command tx timeout [ 557.522764][ T6647] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.560308][ T6647] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 557.569075][T10944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 557.646247][T10944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 557.663315][ T6647] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 557.686345][ T6647] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 557.705065][ T6647] usb 3-1: SerialNumber: syz [ 557.807423][T10944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 557.818761][T10944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 557.875595][ T3618] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 558.025244][T10944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.029751][ T6647] usb 3-1: USB disconnect, device number 33 [ 558.050385][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 558.059554][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 558.074284][T10944] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.112620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 558.122547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 558.132144][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.139324][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.203215][ T6650] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 558.345045][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 558.354572][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 558.363818][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 558.376109][ T7993] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.383314][ T7993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.463963][ T3618] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.481019][ T3618] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.587386][ T3618] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 558.672612][ T3618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.820965][ T3618] usb 1-1: config 0 descriptor?? [ 559.178549][ T6650] usb 4-1: Using ep0 maxpacket: 16 [ 559.290468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 559.310025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 559.330995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 559.342017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 559.356638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 559.394182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 559.409984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 559.443213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 559.463337][ T6650] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 559.496466][ T6650] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.504777][ T3594] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 559.521791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 559.534060][ T6650] usb 4-1: Product: syz [ 559.534602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 559.543146][ T6650] usb 4-1: Manufacturer: syz [ 559.557534][ T6650] usb 4-1: SerialNumber: syz [ 559.567580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 559.579805][ T6650] usb 4-1: config 0 descriptor?? [ 559.624244][ T6650] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 559.634728][T10944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 559.763633][ T3594] usb 5-1: Using ep0 maxpacket: 8 [ 559.872040][ T6647] usb 4-1: USB disconnect, device number 40 [ 559.883413][ T3594] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=18.dc [ 559.898694][ T3594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.911546][ T3594] usb 5-1: config 0 descriptor?? [ 559.954458][ T3594] sierra 5-1:0.0: Sierra USB modem converter detected [ 560.184699][ T3594] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 560.233378][ T3594] usb 5-1: USB disconnect, device number 35 [ 560.306023][ T3594] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 560.329458][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 560.353320][ T3594] sierra 5-1:0.0: device disconnected [ 560.355537][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 560.434122][ T11] device hsr_slave_0 left promiscuous mode [ 560.445708][ T11] device hsr_slave_1 left promiscuous mode [ 560.466659][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.491165][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.512640][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.522015][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.538652][ T11] device bridge_slave_1 left promiscuous mode [ 560.562118][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.594611][ T11] device bridge_slave_0 left promiscuous mode [ 560.611513][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.692547][ T11] device veth1_macvtap left promiscuous mode [ 560.700100][ T11] device veth0_macvtap left promiscuous mode [ 560.715712][ T11] device veth1_vlan left promiscuous mode [ 560.721858][ T11] device veth0_vlan left promiscuous mode [ 563.434399][ T11] team0 (unregistering): Port device team_slave_1 removed [ 563.525492][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.614221][ T11] team0 (unregistering): Port device team_slave_0 removed [ 563.838354][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.905630][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.413152][ T3605] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 564.653201][ T3605] usb 5-1: Using ep0 maxpacket: 16 [ 564.789036][ T11] bond0 (unregistering): Released all slaves [ 564.916040][T10944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.923326][ T3618] uclogic 0003:256C:006D.0034: failed retrieving Huion firmware version: -71 [ 564.934810][ T3605] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 564.936779][ T3618] uclogic 0003:256C:006D.0034: failed probing parameters: -71 [ 564.953126][ T3605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.973523][ T3618] uclogic: probe of 0003:256C:006D.0034 failed with error -71 [ 564.991682][ T3618] usb 1-1: USB disconnect, device number 35 [ 565.005188][ T3605] usb 5-1: Product: syz [ 565.022241][ T3605] usb 5-1: Manufacturer: syz [ 565.042526][ T3605] usb 5-1: SerialNumber: syz [ 565.044818][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 565.056499][ T3605] usb 5-1: config 0 descriptor?? [ 565.057005][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 565.094939][ T3605] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 565.155862][T10944] device veth0_vlan entered promiscuous mode [ 565.163440][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 565.172207][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 565.220119][T10944] device veth1_vlan entered promiscuous mode [ 565.267452][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 565.280684][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 565.292824][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 565.317470][ T7] usb 5-1: USB disconnect, device number 36 [ 565.344405][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 565.352773][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 565.370497][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 565.383054][T10944] device veth0_macvtap entered promiscuous mode [ 565.408158][T10944] device veth1_macvtap entered promiscuous mode [ 565.495823][T10944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.524738][ T3594] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 565.538519][T10944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.549395][T10944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.560335][T10944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.570372][T10944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.581477][T10944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.591707][T10944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.602599][T10944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.618305][T10944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.641188][T10944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.720820][T10944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.803143][ T3594] usb 4-1: Using ep0 maxpacket: 8 [ 565.911353][T10944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.924168][ T3594] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=18.dc [ 565.966521][ T3594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.061369][T10944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.272911][T10944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.303077][T10944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.337419][T10944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.349277][ T3594] usb 4-1: config 0 descriptor?? [ 566.372890][T10944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.411351][ T3594] sierra 4-1:0.0: Sierra USB modem converter detected [ 566.534063][T10944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.631096][T11146] loop4: detected capacity change from 0 to 512 [ 566.639452][ T3594] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 566.663321][ T3594] usb 4-1: USB disconnect, device number 41 [ 566.698933][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 566.733393][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 566.745375][ T3594] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 567.618245][T11146] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.2124: casefold flag without casefold feature [ 567.632708][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 567.649245][ T3594] sierra 4-1:0.0: device disconnected [ 567.655871][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 567.659801][T11146] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.2124: missing EA_INODE flag [ 567.667251][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 567.697206][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 567.709437][T10944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.732808][T11146] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2124: error while reading EA inode 2 err=-117 [ 567.762583][T10944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.778022][T11146] EXT4-fs (loop4): 1 orphan inode deleted [ 567.794469][T10944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.803658][T11146] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 567.812841][T10944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.892758][T11146] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #19: comm syz.4.2124: Siphash requires key [ 567.965976][T11146] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #19: comm syz.4.2124: Siphash requires key [ 568.008798][ T5061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.023851][T11146] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #19: comm syz.4.2124: Siphash requires key [ 568.032145][ T5061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.099204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 568.138682][ T5061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.164863][ T5061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.177162][T11146] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #22: comm syz.4.2124: Siphash requires key [ 568.223913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 568.320807][T11146] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #22: comm syz.4.2124: Siphash requires key [ 568.411119][T11146] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #22: comm syz.4.2124: Siphash requires key [ 568.441729][T11161] loop1: detected capacity change from 0 to 64 [ 568.563376][ T154] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 568.963465][ T154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.993038][ T154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.029241][ T154] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 569.069771][ T154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.092159][ T154] usb 1-1: config 0 descriptor?? [ 570.409481][T10739] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #2: comm syz-executor: Siphash requires key [ 570.713638][ T27] audit: type=1326 audit(1720566938.147:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11178 comm="syz.3.2134" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5455775bd9 code=0x0 [ 571.453826][T11186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2134'. [ 571.632344][T10739] EXT4-fs (loop4): unmounting filesystem. [ 571.823837][T11195] loop3: detected capacity change from 0 to 64 [ 572.013429][ T154] uclogic 0003:256C:006D.0035: failed retrieving Huion firmware version: -71 [ 572.022637][ T154] uclogic 0003:256C:006D.0035: failed probing parameters: -71 [ 572.064671][ T154] uclogic: probe of 0003:256C:006D.0035 failed with error -71 [ 572.091495][ T154] usb 1-1: USB disconnect, device number 36 [ 572.427060][T11207] loop1: detected capacity change from 0 to 512 [ 572.478836][T11207] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.2145: casefold flag without casefold feature [ 573.374493][T11207] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.2145: missing EA_INODE flag [ 573.396775][T11207] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2145: error while reading EA inode 2 err=-117 [ 573.438857][T11207] EXT4-fs (loop1): 1 orphan inode deleted [ 573.615528][T11207] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 573.714485][T11207] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #20: comm syz.1.2145: Siphash requires key [ 573.953973][T11207] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #20: comm syz.1.2145: Siphash requires key [ 574.526751][ T3563] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 574.539796][ T3563] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 574.573307][ T3563] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 574.587657][ T3563] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 574.596587][ T3563] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 574.604727][ T3563] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 574.624015][T11207] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #20: comm syz.1.2145: Siphash requires key [ 574.782384][T11207] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #23: comm syz.1.2145: Siphash requires key [ 574.793752][T11207] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #23: comm syz.1.2145: Siphash requires key [ 574.805285][T11207] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #23: comm syz.1.2145: Siphash requires key [ 574.907808][T11215] chnl_net:caif_netlink_parms(): no params data found [ 575.110573][ T27] audit: type=1326 audit(1720566942.577:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11226 comm="syz.2.2149" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9928975bd9 code=0x0 [ 575.532561][T10944] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #2: comm syz-executor: Siphash requires key [ 575.686423][T11232] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2149'. [ 575.738379][T11215] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.746017][T11215] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.755504][T11215] device bridge_slave_0 entered promiscuous mode [ 575.768457][T11215] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.776075][T11215] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.786690][T11215] device bridge_slave_1 entered promiscuous mode [ 576.723384][ T3565] Bluetooth: hci2: command tx timeout [ 576.772103][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.831969][T11249] loop3: detected capacity change from 0 to 64 [ 576.926655][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.952335][T11215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.985138][T11215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.096370][T10944] EXT4-fs (loop1): unmounting filesystem. [ 577.193383][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.217662][T11215] team0: Port device team_slave_0 added [ 577.233077][ T3618] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 577.630437][ T3618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.721149][ T3618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.005932][ T3618] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 578.015857][ T3618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.052757][ T3618] usb 3-1: config 0 descriptor?? [ 578.067756][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.101625][T11215] team0: Port device team_slave_1 added [ 578.166674][T11215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.180523][T11260] loop3: detected capacity change from 0 to 512 [ 578.193002][T11215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.248372][T11215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.277200][T11260] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.2160: casefold flag without casefold feature [ 578.314700][T11260] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.2160: missing EA_INODE flag [ 578.343815][T11215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.354455][T11260] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2160: error while reading EA inode 2 err=-117 [ 578.367698][T11215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.376291][T11260] EXT4-fs (loop3): 1 orphan inode deleted [ 578.399491][T11260] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 578.468664][T11215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.501209][T11260] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #19: comm syz.3.2160: Siphash requires key [ 578.508772][ T3563] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 578.538744][ T3563] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 578.549176][T11260] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #19: comm syz.3.2160: Siphash requires key [ 578.560844][ T3563] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 578.568273][T11260] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #19: comm syz.3.2160: Siphash requires key [ 578.583068][ T3563] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 578.592223][T11260] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #22: comm syz.3.2160: Siphash requires key [ 578.603700][T11260] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #22: comm syz.3.2160: Siphash requires key [ 578.615242][ T3563] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 578.623405][T11260] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #22: comm syz.3.2160: Siphash requires key [ 578.637784][ T3563] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 578.813151][ T3563] Bluetooth: hci2: command tx timeout [ 578.855324][T11215] device hsr_slave_0 entered promiscuous mode [ 578.910690][T11215] device hsr_slave_1 entered promiscuous mode [ 578.933280][T11215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 578.969301][T11215] Cannot create hsr debugfs directory [ 579.913215][ T3618] uclogic 0003:256C:006D.0036: failed retrieving Huion firmware version: -71 [ 579.923117][ T3618] uclogic 0003:256C:006D.0036: failed probing parameters: -71 [ 579.930762][ T3618] uclogic: probe of 0003:256C:006D.0036 failed with error -71 [ 579.965374][ T3618] usb 3-1: USB disconnect, device number 34 [ 580.651365][T11260] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #15: comm syz.3.2160: Siphash requires key [ 580.670699][T11260] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #15: comm syz.3.2160: Siphash requires key [ 580.684021][T11260] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #15: comm syz.3.2160: Siphash requires key [ 580.696037][T11260] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #18: comm syz.3.2160: Siphash requires key [ 580.723223][ T3563] Bluetooth: hci0: command tx timeout [ 580.883312][ T3563] Bluetooth: hci2: command tx timeout [ 581.258034][T10808] EXT4-fs (loop3): unmounting filesystem. [ 581.310312][T11263] chnl_net:caif_netlink_parms(): no params data found [ 581.662722][T11263] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.701835][T11263] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.720037][T11263] device bridge_slave_0 entered promiscuous mode [ 581.780712][ T11] device hsr_slave_0 left promiscuous mode [ 581.796608][ T11] device hsr_slave_1 left promiscuous mode [ 581.822098][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.839861][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.847899][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.873211][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.892181][ T11] device bridge_slave_1 left promiscuous mode [ 581.902766][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.926298][ T11] device bridge_slave_0 left promiscuous mode [ 581.942560][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.959056][ T3565] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 581.975581][ T3565] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 581.985075][ T3565] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 581.995899][ T3565] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 582.004318][ T3565] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 582.011768][ T3565] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 582.057568][ T11] device veth1_macvtap left promiscuous mode [ 582.063729][ T11] device veth0_macvtap left promiscuous mode [ 582.069993][ T11] device veth1_vlan left promiscuous mode [ 582.078150][ T11] device veth0_vlan left promiscuous mode [ 582.803088][ T3565] Bluetooth: hci0: command tx timeout [ 582.982533][ T3565] Bluetooth: hci2: command tx timeout [ 583.049512][ T11] team0 (unregistering): Port device team_slave_1 removed [ 583.160938][ T11] team0 (unregistering): Port device team_slave_0 removed [ 583.276919][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.995106][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.090509][ T3565] Bluetooth: hci1: command tx timeout [ 584.690471][ T11] bond0 (unregistering): Released all slaves [ 584.800737][T11263] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.808424][T11263] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.816547][T11263] device bridge_slave_1 entered promiscuous mode [ 584.883221][ T3565] Bluetooth: hci0: command tx timeout [ 585.017788][T11263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.051773][T11215] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 585.078406][T11215] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 585.102628][T11263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.127567][T11215] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 585.163220][T11215] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 585.249049][T11263] team0: Port device team_slave_0 added [ 585.266354][T11263] team0: Port device team_slave_1 added [ 585.373145][ T3594] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 585.388543][T11263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.398148][T11263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.432789][T11263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.496239][T11263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.512272][T11263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.541104][T11263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.680508][T11263] device hsr_slave_0 entered promiscuous mode [ 585.697907][T11263] device hsr_slave_1 entered promiscuous mode [ 585.709138][T11263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 585.721826][T11263] Cannot create hsr debugfs directory [ 585.753207][ T3594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.781604][ T3594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.854334][ T3594] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 585.893151][ T3594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.932533][ T3594] usb 3-1: config 0 descriptor?? [ 586.037847][T11215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.104408][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 586.113574][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 586.128215][T11298] chnl_net:caif_netlink_parms(): no params data found [ 586.144710][ T27] audit: type=1326 audit(1720566953.617:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11316 comm="syz.0.2178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5624b75bd9 code=0x0 [ 586.163199][ T3565] Bluetooth: hci1: command tx timeout [ 586.180494][T11215] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.216884][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 586.233825][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 586.252697][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.259945][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.321136][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 586.340322][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 586.356441][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 586.365203][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.372323][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.380436][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 586.459251][T11263] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.545103][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 586.562548][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 586.585629][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 586.718848][T11263] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.724988][T11319] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2178'. [ 586.752787][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 586.763665][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 586.772911][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 586.794558][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 586.803431][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 586.812059][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 586.829039][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 586.867582][T11298] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.883627][T11298] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.893182][T11298] device bridge_slave_0 entered promiscuous mode [ 586.963534][ T3565] Bluetooth: hci0: command tx timeout [ 587.031830][T11263] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.084112][T11215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 587.106282][T11298] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.133444][T11298] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.160991][T11298] device bridge_slave_1 entered promiscuous mode [ 587.266459][T11263] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.359260][T11298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.391085][T11298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.545588][T11298] team0: Port device team_slave_0 added [ 587.553363][ T3594] uclogic 0003:256C:006D.0037: failed retrieving Huion firmware version: -71 [ 587.564653][T11298] team0: Port device team_slave_1 added [ 587.572606][ T3594] uclogic 0003:256C:006D.0037: failed probing parameters: -71 [ 587.603068][ T3594] uclogic: probe of 0003:256C:006D.0037 failed with error -71 [ 587.623059][ T3594] usb 3-1: USB disconnect, device number 35 [ 587.656834][T11298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.670534][T11298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.697335][T11298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.713310][T11298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.720430][T11298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.761599][T11298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.826616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 587.844334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 587.892518][T11215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.962013][T11298] device hsr_slave_0 entered promiscuous mode [ 588.001810][T11298] device hsr_slave_1 entered promiscuous mode [ 588.042055][T11298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 588.060702][T11298] Cannot create hsr debugfs directory [ 588.215499][T11263] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 588.243513][ T3565] Bluetooth: hci1: command tx timeout [ 588.320785][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.350297][T11263] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 588.369762][T11263] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 588.402831][T11263] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 588.471598][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.588409][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.634157][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 588.643783][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 588.713755][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.741924][T11215] device veth0_vlan entered promiscuous mode [ 588.753461][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 588.762689][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 588.787608][T11215] device veth1_vlan entered promiscuous mode [ 588.799492][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 588.814997][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 588.824386][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 588.863232][ T6647] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 588.885709][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 588.894307][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 588.903803][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 588.928241][T11263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.944986][T11215] device veth0_macvtap entered promiscuous mode [ 588.979009][T11215] device veth1_macvtap entered promiscuous mode [ 589.028670][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 589.043447][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 589.051810][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 589.060295][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 589.071496][T11263] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.100507][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.111993][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.122460][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.135011][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.146139][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.157490][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.167931][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.179513][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.192266][T11215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.223597][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 589.233863][ T6647] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 589.234126][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 589.243163][ T6647] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.254803][ T6647] usb 1-1: config 0 descriptor?? [ 589.267534][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 589.277851][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 589.287242][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.294456][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.314512][ T6647] cp210x 1-1:0.0: cp210x converter detected [ 589.324421][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 589.333940][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 589.344259][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 589.352908][ T7993] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.360174][ T7993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.380288][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 589.401895][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.422567][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.442290][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.453473][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.464404][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.475204][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.485701][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.497553][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.538826][T11215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.564926][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 589.578051][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 589.587710][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 589.599790][T11215] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.609902][T11215] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.621146][T11215] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.636498][T11215] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.652154][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 589.663610][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 589.776539][ T6647] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 589.862762][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 589.871005][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 589.882258][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 589.985565][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 589.998054][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 590.032185][T11263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 590.045605][ T6647] usb 1-1: cp210x converter now attached to ttyUSB0 [ 590.046752][T11263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 590.062641][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 590.072337][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 590.262483][ T3629] usb 1-1: USB disconnect, device number 37 [ 590.280327][ T3629] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 590.310413][ T3629] cp210x 1-1:0.0: device disconnected [ 590.323486][ T3565] Bluetooth: hci1: command tx timeout [ 590.335392][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.344593][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.429502][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 590.447210][ T3722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.463084][ T3722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.588695][ T6647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 590.770711][T11298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 590.797530][T11298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 590.815300][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 590.833548][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 590.851730][T11378] loop4: detected capacity change from 0 to 256 [ 590.858178][T11263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.941618][T11298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 590.951438][T11378] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 590.977067][T11298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 591.099930][ T27] audit: type=1326 audit(1720566958.567:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11385 comm="syz.2.2197" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9928975bd9 code=0x0 [ 591.168038][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 591.178082][ T7993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 591.399437][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 591.419868][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 591.434561][T11263] device veth0_vlan entered promiscuous mode [ 591.542902][T11395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2197'. [ 591.607843][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 591.620025][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 591.637833][T11263] device veth1_vlan entered promiscuous mode [ 591.699843][T11298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.825487][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 591.838036][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 591.854018][T11263] device veth0_macvtap entered promiscuous mode [ 591.879360][T11298] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.905498][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 591.915158][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 591.924219][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 591.935437][T11263] device veth1_macvtap entered promiscuous mode [ 592.057796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 592.092276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 592.138902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 592.158960][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.166159][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.219225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 592.273691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 592.378608][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.385916][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.802175][T11298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 592.822733][T11298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 592.872802][T11263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.911060][T11263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.922418][T11263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.968458][T11263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.987935][T11263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.998668][T11263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.008559][T11263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.018747][T11413] loop4: detected capacity change from 0 to 1024 [ 593.019505][T11263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.035473][T11263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.053012][T11263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.062056][T11413] [ 593.065207][T11413] ====================================================== [ 593.067314][T11263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.072226][T11413] WARNING: possible circular locking dependency detected [ 593.072239][T11413] 6.1.97-syzkaller #0 Not tainted [ 593.087736][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 593.091457][T11413] ------------------------------------------------------ [ 593.091468][T11413] syz.4.2204/11413 is trying to acquire lock: [ 593.091481][T11413] ffff888055dd3708 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3} [ 593.100656][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 593.106313][T11413] , at: hfsplus_get_block+0x37f/0x14e0 [ 593.106356][T11413] [ 593.106356][T11413] but task is already holding lock: [ 593.106363][T11413] ffff88807b9d00b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0 [ 593.150407][T11413] [ 593.150407][T11413] which lock already depends on the new lock. [ 593.150407][T11413] [ 593.160809][T11413] [ 593.160809][T11413] the existing dependency chain (in reverse order) is: [ 593.169818][T11413] [ 593.169818][T11413] -> #1 (&tree->tree_lock){+.+.}-{3:3}: [ 593.177580][T11413] lock_acquire+0x1f8/0x5a0 [ 593.182619][T11413] __mutex_lock+0x132/0xd80 [ 593.187644][T11413] hfsplus_file_truncate+0x80d/0xb40 [ 593.193547][T11413] hfsplus_setattr+0x1b9/0x280 [ 593.198840][T11413] notify_change+0xce3/0xfc0 [ 593.203962][T11413] do_truncate+0x21c/0x300 [ 593.208905][T11413] vfs_truncate+0x2dd/0x3a0 [ 593.213938][T11413] do_sys_truncate+0xda/0x190 [ 593.219146][T11413] do_syscall_64+0x3b/0xb0 [ 593.224097][T11413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 593.230522][T11413] [ 593.230522][T11413] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}: [ 593.239566][T11413] validate_chain+0x1661/0x5950 [ 593.244950][T11413] __lock_acquire+0x125b/0x1f80 [ 593.250329][T11413] lock_acquire+0x1f8/0x5a0 [ 593.255363][T11413] __mutex_lock+0x132/0xd80 [ 593.260395][T11413] hfsplus_get_block+0x37f/0x14e0 [ 593.265980][T11413] block_read_full_folio+0x403/0xf60 [ 593.271815][T11413] filemap_read_folio+0x199/0x780 [ 593.277363][T11413] do_read_cache_folio+0x2ee/0x810 [ 593.282998][T11413] do_read_cache_page+0x32/0x220 [ 593.288458][T11413] __hfs_bnode_create+0x483/0x770 [ 593.294105][T11413] hfsplus_bnode_create+0x120/0x440 [ 593.299868][T11413] hfsplus_bmap_alloc+0x596/0x630 [ 593.305427][T11413] hfs_btree_inc_height+0x11a/0xdb0 [ 593.311161][T11413] hfsplus_brec_insert+0x776/0xdd0 [ 593.316803][T11413] hfsplus_create_cat+0x498/0x1ba0 [ 593.322446][T11413] hfsplus_fill_super+0x13e6/0x1c90 [ 593.328258][T11413] mount_bdev+0x2c9/0x3f0 [ 593.333122][T11413] legacy_get_tree+0xeb/0x180 [ 593.338327][T11413] vfs_get_tree+0x88/0x270 [ 593.343269][T11413] do_new_mount+0x2ba/0xb40 [ 593.348298][T11413] __se_sys_mount+0x2d5/0x3c0 [ 593.353504][T11413] do_syscall_64+0x3b/0xb0 [ 593.358456][T11413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 593.364881][T11413] [ 593.364881][T11413] other info that might help us debug this: [ 593.364881][T11413] [ 593.375108][T11413] Possible unsafe locking scenario: [ 593.375108][T11413] [ 593.382556][T11413] CPU0 CPU1 [ 593.387922][T11413] ---- ---- [ 593.393283][T11413] lock(&tree->tree_lock); [ 593.397794][T11413] lock(&HFSPLUS_I(inode)->extents_lock); [ 593.406125][T11413] lock(&tree->tree_lock); [ 593.413151][T11413] lock(&HFSPLUS_I(inode)->extents_lock); [ 593.418963][T11413] [ 593.418963][T11413] *** DEADLOCK *** [ 593.418963][T11413] [ 593.427102][T11413] 3 locks held by syz.4.2204/11413: [ 593.432296][T11413] #0: ffff88807b6380e0 (&type->s_umount_key#47/1){+.+.}-{3:3}, at: alloc_super+0x217/0x930 [ 593.442954][T11413] #1: ffff88805c9e6998 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_fill_super+0x1378/0x1c90 [ 593.452977][T11413] #2: ffff88807b9d00b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0 [ 593.462916][T11413] [ 593.462916][T11413] stack backtrace: [ 593.468896][T11413] CPU: 0 PID: 11413 Comm: syz.4.2204 Not tainted 6.1.97-syzkaller #0 [ 593.476977][T11413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 593.487052][T11413] Call Trace: [ 593.490332][T11413] [ 593.493263][T11413] dump_stack_lvl+0x1e3/0x2cb [ 593.497958][T11413] ? nf_tcp_handle_invalid+0x642/0x642 [ 593.503457][T11413] ? print_circular_bug+0x12b/0x1a0 [ 593.508689][T11413] check_noncircular+0x2fa/0x3b0 [ 593.513648][T11413] ? add_chain_block+0x850/0x850 [ 593.518691][T11413] ? lockdep_lock+0x11f/0x2a0 [ 593.523383][T11413] ? validate_chain+0x112/0x5950 [ 593.528337][T11413] ? _find_first_zero_bit+0xd0/0x100 [ 593.533644][T11413] validate_chain+0x1661/0x5950 [ 593.539072][T11413] ? preempt_count_add+0x8f/0x180 [ 593.544108][T11413] ? reacquire_held_locks+0x660/0x660 [ 593.549501][T11413] ? 0xffffffffa00038c0 [ 593.553655][T11413] ? is_bpf_text_address+0x289/0x2a0 [ 593.558959][T11413] ? is_bpf_text_address+0x22/0x2a0 [ 593.564184][T11413] ? kernel_text_address+0x9f/0xd0 [ 593.569323][T11413] ? look_up_lock_class+0x77/0x140 [ 593.574485][T11413] ? register_lock_class+0x100/0x990 [ 593.579807][T11413] ? reacquire_held_locks+0x660/0x660 [ 593.585205][T11413] ? is_dynamic_key+0x260/0x260 [ 593.590074][T11413] ? mark_lock+0x9a/0x340 [ 593.594423][T11413] __lock_acquire+0x125b/0x1f80 [ 593.599342][T11413] lock_acquire+0x1f8/0x5a0 [ 593.603972][T11413] ? hfsplus_get_block+0x37f/0x14e0 [ 593.609227][T11413] ? read_lock_is_recursive+0x10/0x10 [ 593.614653][T11413] ? __might_sleep+0xb0/0xb0 [ 593.619260][T11413] ? mark_lock+0x9a/0x340 [ 593.623607][T11413] ? __lock_acquire+0x125b/0x1f80 [ 593.628677][T11413] __mutex_lock+0x132/0xd80 [ 593.633193][T11413] ? hfsplus_get_block+0x37f/0x14e0 [ 593.638413][T11413] ? hfsplus_get_block+0x37f/0x14e0 [ 593.643626][T11413] ? mutex_lock_nested+0x10/0x10 [ 593.648579][T11413] hfsplus_get_block+0x37f/0x14e0 [ 593.653616][T11413] ? create_page_buffers+0x1d2/0x4b0 [ 593.658913][T11413] ? hfsplus_ext_write_extent+0x1f0/0x1f0 [ 593.664670][T11413] ? do_raw_spin_unlock+0x137/0x8a0 [ 593.669884][T11413] ? create_page_buffers+0x24e/0x4b0 [ 593.675174][T11413] block_read_full_folio+0x403/0xf60 [ 593.680478][T11413] ? hfsplus_ext_write_extent+0x1f0/0x1f0 [ 593.686210][T11413] ? block_is_partially_uptodate+0x590/0x590 [ 593.692230][T11413] ? folio_add_lru+0xd70/0xd70 [ 593.697014][T11413] ? folio_add_lru+0x34d/0xd70 [ 593.701783][T11413] ? folio_add_lru+0x584/0xd70 [ 593.706556][T11413] filemap_read_folio+0x199/0x780 [ 593.711589][T11413] ? filemap_add_folio+0x570/0x570 [ 593.716716][T11413] ? hfsplus_writepage+0x30/0x30 [ 593.721674][T11413] ? maybe_unlock_mmap_for_io+0x130/0x130 [ 593.727399][T11413] ? __hfs_bnode_create+0x38d/0x770 [ 593.732635][T11413] ? __lock_acquire+0x1f80/0x1f80 [ 593.737680][T11413] ? do_raw_spin_lock+0x14a/0x370 [ 593.742710][T11413] do_read_cache_folio+0x2ee/0x810 [ 593.747843][T11413] ? hfsplus_writepage+0x30/0x30 [ 593.752809][T11413] do_read_cache_page+0x32/0x220 [ 593.757774][T11413] __hfs_bnode_create+0x483/0x770 [ 593.762836][T11413] ? hfsplus_bnode_get+0x40/0x40 [ 593.767793][T11413] ? do_raw_spin_unlock+0x137/0x8a0 [ 593.773174][T11413] hfsplus_bnode_create+0x120/0x440 [ 593.778390][T11413] hfsplus_bmap_alloc+0x596/0x630 [ 593.783428][T11413] ? hfsplus_bmap_reserve+0x4e0/0x4e0 [ 593.788835][T11413] hfs_btree_inc_height+0x11a/0xdb0 [ 593.794061][T11413] ? hfsplus_brec_insert+0x72c/0xdd0 [ 593.799367][T11413] ? __rwlock_init+0x140/0x140 [ 593.804145][T11413] ? __lock_acquire+0x1f80/0x1f80 [ 593.809270][T11413] ? hfsplus_brec_insert+0xdd0/0xdd0 [ 593.814567][T11413] ? do_raw_spin_unlock+0x137/0x8a0 [ 593.819788][T11413] ? hfsplus_bnode_put+0x1bf/0x6d0 [ 593.824929][T11413] hfsplus_brec_insert+0x776/0xdd0 [ 593.830094][T11413] ? hfsplus_brec_keylen+0x310/0x310 [ 593.835423][T11413] ? __kmalloc+0xe2/0x230 [ 593.839855][T11413] hfsplus_create_cat+0x498/0x1ba0 [ 593.844979][T11413] ? look_up_lock_class+0x77/0x140 [ 593.850110][T11413] ? hfsplus_find_cat+0x5c0/0x5c0 [ 593.855145][T11413] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 593.861076][T11413] ? do_raw_spin_unlock+0x137/0x8a0 [ 593.866387][T11413] ? _raw_spin_unlock+0x24/0x40 [ 593.871275][T11413] ? hfsplus_new_inode+0x5c9/0x740 [ 593.876396][T11413] hfsplus_fill_super+0x13e6/0x1c90 [ 593.881610][T11413] ? hfsplus_mount+0x40/0x40 [ 593.886230][T11413] ? snprintf+0xd6/0x120 [ 593.890485][T11413] ? vscnprintf+0x80/0x80 [ 593.894826][T11413] ? set_blocksize+0x1c6/0x350 [ 593.899598][T11413] mount_bdev+0x2c9/0x3f0 [ 593.903944][T11413] ? hfsplus_mount+0x40/0x40 [ 593.908727][T11413] legacy_get_tree+0xeb/0x180 [ 593.913416][T11413] ? hfsplus_mark_mdb_dirty+0x1b0/0x1b0 [ 593.918974][T11413] vfs_get_tree+0x88/0x270 [ 593.923405][T11413] do_new_mount+0x2ba/0xb40 [ 593.927918][T11413] ? ns_capable+0x85/0xe0 [ 593.932258][T11413] ? do_move_mount_old+0x160/0x160 [ 593.937384][T11413] __se_sys_mount+0x2d5/0x3c0 [ 593.942078][T11413] ? __x64_sys_mount+0xc0/0xc0 [ 593.946853][T11413] ? syscall_enter_from_user_mode+0x2e/0x230 [ 593.952841][T11413] ? lockdep_hardirqs_on+0x94/0x130 [ 593.958309][T11413] ? __x64_sys_mount+0x1c/0xc0 [ 593.963086][T11413] do_syscall_64+0x3b/0xb0 [ 593.967526][T11413] ? clear_bhb_loop+0x45/0xa0 [ 593.972227][T11413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 593.978149][T11413] RIP: 0033:0x7f6457b772da [ 593.982571][T11413] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.002186][T11413] RSP: 002b:00007f64588aee78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 594.010623][T11413] RAX: ffffffffffffffda RBX: 00007f64588aef00 RCX: 00007f6457b772da SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 594.018793][T11413] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007f64588aeec0 [ 594.026775][T11413] RBP: 0000000020000000 R08: 00007f64588aef00 R09: 0000000002000010 [ 594.034752][T11413] R10: 0000000002000010 R11: 0000000000000206 R12: 0000000020000080 [ 594.042734][T11413] R13: 00007f64588aeec0 R14: 00000000000006a2 R15: 00000000200013c0 [ 594.050809][T11413] [ 594.058387][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 594.067344][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 594.076879][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 594.085964][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 594.096929][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 594.164173][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 594.172711][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 594.187854][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 594.197250][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 594.206024][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 594.214821][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 594.233714][ T7] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 594.548281][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 594.558570][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 594.696017][ T11] device hsr_slave_0 left promiscuous mode [ 594.702410][ T11] device hsr_slave_1 left promiscuous mode [ 594.708794][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.716319][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.725308][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.732768][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.740551][ T11] device bridge_slave_1 left promiscuous mode [ 594.746814][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.755493][ T11] device bridge_slave_0 left promiscuous mode [ 594.761738][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.772159][ T11] device hsr_slave_0 left promiscuous mode [ 594.779008][ T11] device hsr_slave_1 left promiscuous mode [ 594.785572][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.793038][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.800648][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.811544][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.820786][ T11] device bridge_slave_1 left promiscuous mode [ 594.827122][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.844502][ T11] device bridge_slave_0 left promiscuous mode [ 594.850831][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.867252][ T11] device veth1_macvtap left promiscuous mode [ 594.876573][ T11] device veth0_macvtap left promiscuous mode [ 594.882774][ T11] device veth1_vlan left promiscuous mode [ 594.889460][ T11] device veth0_vlan left promiscuous mode [ 594.898072][ T11] device veth1_macvtap left promiscuous mode [ 594.904210][ T11] device veth0_macvtap left promiscuous mode [ 594.910562][ T11] device veth1_vlan left promiscuous mode [ 594.916577][ T11] device veth0_vlan left promiscuous mode [ 595.140290][ T11] team0 (unregistering): Port device team_slave_1 removed [ 595.173822][ T11] team0 (unregistering): Port device team_slave_0 removed [ 595.186273][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.199018][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.286919][ T11] bond0 (unregistering): Released all slaves [ 595.435744][ T11] team0 (unregistering): Port device team_slave_1 removed [ 595.447652][ T11] team0 (unregistering): Port device team_slave_0 removed [ 595.480112][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.515829][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.609943][ T11] bond0 (unregistering): Released all slaves [ 597.684472][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.757194][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.806334][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.866520][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.943653][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.986977][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.046925][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.088049][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.143641][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.187637][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.227447][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.268254][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.370831][ T11] device hsr_slave_0 left promiscuous mode [ 599.377143][ T11] device hsr_slave_1 left promiscuous mode [ 599.383615][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.391048][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.399091][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.406939][ T11] device bridge_slave_1 left promiscuous mode [ 599.413256][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.421398][ T11] device bridge_slave_0 left promiscuous mode [ 599.427714][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.438039][ T11] device hsr_slave_0 left promiscuous mode [ 599.444504][ T11] device hsr_slave_1 left promiscuous mode [ 599.450745][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.458273][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.465974][ T11] device bridge_slave_1 left promiscuous mode [ 599.472135][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.480629][ T11] device bridge_slave_0 left promiscuous mode [ 599.486984][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.497232][ T11] device hsr_slave_0 left promiscuous mode [ 599.503690][ T11] device hsr_slave_1 left promiscuous mode [ 599.510068][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.517531][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.525340][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.532764][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.540373][ T11] device bridge_slave_1 left promiscuous mode [ 599.546599][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.554532][ T11] device bridge_slave_0 left promiscuous mode [ 599.560811][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.571090][ T11] device hsr_slave_0 left promiscuous mode [ 599.577336][ T11] device hsr_slave_1 left promiscuous mode [ 599.583781][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.591202][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.598947][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.606529][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.614913][ T11] bridge0: port 3(hsr0) entered disabled state [ 599.621909][ T11] device bridge_slave_1 left promiscuous mode [ 599.628210][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.636330][ T11] device bridge_slave_0 left promiscuous mode [ 599.642523][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.653318][ T11] device hsr_slave_0 left promiscuous mode [ 599.659627][ T11] device hsr_slave_1 left promiscuous mode [ 599.665996][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.673463][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.681051][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.688808][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.696769][ T11] device bridge_slave_1 left promiscuous mode [ 599.702986][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.710990][ T11] device bridge_slave_0 left promiscuous mode [ 599.717322][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.730560][ T11] device veth1_macvtap left promiscuous mode [ 599.736719][ T11] device veth0_macvtap left promiscuous mode [ 599.742771][ T11] device veth1_vlan left promiscuous mode [ 599.748681][ T11] device veth0_vlan left promiscuous mode [ 599.756058][ T11] device veth1_macvtap left promiscuous mode [ 599.762107][ T11] device veth0_macvtap left promiscuous mode [ 599.768516][ T11] device veth1_vlan left promiscuous mode [ 599.774545][ T11] device veth0_vlan left promiscuous mode [ 599.781207][ T11] device veth1_macvtap left promiscuous mode [ 599.787444][ T11] device veth0_macvtap left promiscuous mode [ 599.793689][ T11] device veth1_vlan left promiscuous mode [ 599.799506][ T11] device veth0_vlan left promiscuous mode [ 599.806066][ T11] device veth1_macvtap left promiscuous mode [ 599.812069][ T11] device veth0_macvtap left promiscuous mode [ 599.818289][ T11] device veth1_vlan left promiscuous mode [ 599.824115][ T11] device veth0_vlan left promiscuous mode [ 600.166400][ T11] team0 (unregistering): Port device team_slave_1 removed [ 600.197246][ T11] team0 (unregistering): Port device team_slave_0 removed [ 600.229161][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.261371][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.313047][ T11] bond0 (unregistering): Released all slaves [ 600.479491][ T11] team0 (unregistering): Port device team_slave_1 removed [ 600.511719][ T11] team0 (unregistering): Port device team_slave_0 removed [ 600.541986][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.573822][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.627082][ T11] bond0 (unregistering): Released all slaves [ 600.788736][ T11] team0 (unregistering): Port device team_slave_1 removed [ 600.820134][ T11] team0 (unregistering): Port device team_slave_0 removed [ 600.850511][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.864353][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.922328][ T11] bond0 (unregistering): Released all slaves [ 601.027746][ T11] team0 (unregistering): Port device team_slave_1 removed [ 601.060218][ T11] team0 (unregistering): Port device team_slave_0 removed [ 601.071131][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.105887][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.158802][ T11] bond0 (unregistering): Released all slaves [ 601.296265][ T11] team0 (unregistering): Port device team_slave_1 removed [ 601.329848][ T11] team0 (unregistering): Port device team_slave_0 removed [ 601.341452][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.354496][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.419556][ T11] bond0 (unregistering): Released all slaves