last executing test programs: 23.405907374s ago: executing program 3 (id=806): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)='v', 0x1}], 0x1}}], 0x1, 0x4044c84) 23.288283174s ago: executing program 3 (id=808): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x5) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 23.042181154s ago: executing program 3 (id=811): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000500)="7c5331fc9356b5b10006000081001a", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x1) 22.945836252s ago: executing program 3 (id=812): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003240)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYRES8, @ANYRES64], 0x8, 0x2fd, &(0x7f0000000e40)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@nr_inodes}], [], 0x39}) mkdir(&(0x7f0000004a80)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0\x00', 0x9001) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040), 0x10) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) epoll_create1(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x500, &(0x7f00000000c0)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}]}, 0x7c}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 21.585638972s ago: executing program 3 (id=814): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x54}}, 0x0) 20.957971114s ago: executing program 3 (id=818): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp936,codepage=iso8859-4,dir_umask=00000000000\x00\x00\x00\x0000000005,part=0x000000000000007e,\x00'], 0x1, 0x2fe, &(0x7f0000000240)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) 8.398090186s ago: executing program 1 (id=881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x54}}, 0x0) 8.097594961s ago: executing program 1 (id=883): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/175) 6.562426956s ago: executing program 4 (id=893): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffc, '\x00', 0x0, r0, 0x0, 0x10000, 0x4}, 0x99) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={0x0, r2}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, r0}, 0x48) r3 = syz_open_dev$sndctrl(&(0x7f0000000700), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000780)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000740)=['\x00'], 0x1}) lgetxattr(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) chdir(0x0) link(&(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='./file1/file0\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}]}, 0x84}}, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x81, 0x1) link(0x0, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="2100000037000016e2e900000a00000000000000000000642dbfd14b4389ff6254469ebb50727dc3aa547d7143c0506699e6ec7f6effc50d58c7c6d308181fd8e3829c354fc1a142c2d30d4007d9f1fe8a290604c0c957f2bd983a1c5eb706eec11863161ea63ab5", @ANYRES32=r4, @ANYBLOB="030025"], 0xe6da) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) madvise(&(0x7f000056f000/0x2000)=nil, 0x2000, 0x1) flock(0xffffffffffffffff, 0x12) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 5.834489275s ago: executing program 1 (id=894): r0 = socket(0x2, 0x3, 0x6) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) 5.52905592s ago: executing program 4 (id=895): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file1\x00', 0xa18c14, &(0x7f0000000100)={[{@uni_xlate}, {@fat=@flush}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@shortname_winnt}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffacf}}, {@shortname_mixed}, {@numtail}, {@shortname_lower}, {@shortname_mixed}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@numtail}]}, 0x81, 0x29b, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) 5.52855283s ago: executing program 1 (id=896): r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) 5.326010906s ago: executing program 1 (id=897): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="816f636861727365743d6d6163726f6d616e2c756e686964652c6769643d666f726765742c696f636861727365743d63703836332c756d61736b3d30303030303030303030303030303030303030303430312c6769643d69676e6f72652c7569643d666f726765742c756e64656c6574652c00ae22b9a5f51b537fac27a98a93be8a7460c86af991e718d0f53b50643b760f44dbc5dd3b367059d0afd33fe3769e08c1f27bcc6c61b50ca6f1c62286757d27e1c863440cbea7a101200b6c2d2c08193f7a48a0f810b6b5534b14c4fa53004d5425ed49e1eef9"], 0xfe, 0xc23, &(0x7f0000001540)="$eJzs3UFsHNd9B+D/Gy5FUmkrJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkN22ZXnroIUBR9JATgdYokKKB0RRBj2zrAsnFhyKnnogWNoKiB7YIkFPAYmbfikuJsihTlCj7+2zqNzv73sx7M+MZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+8cuHU8+lRtwIAeJguTX7l1GnPfwD4WLns//8BAAAAAAAAAAAAAOCwS1HEE5Fi8dJmmq4+dwxebM/fuDk1Nr57taFU1eyrypc/g8+fPnP2iy+MnuvmB9d/0J6K1yYvX6i/vHB9cam1vNyarU/Nt2cWZlt73sJ+699upDoA9euv35i9enW5fvq5Mzu+vjn8/sAnjg+fH33m5NPdslNj4+OTPWVq/R9673e42wiPI1HEyUjx7Hd/nJoRUcT+j8U9rp2DNlR1YqTqxNTYeNWRuXZzfqX8cqJ7IIqIek+lRvcYPYRzsS+NiNWy+WWDR8ruTS42l5pX5lr1iebSSnulvTA/kTqtLftTjyLOpYi1iNgYuHNz/VFELVJ8+9hmuhIRfd3j8IVqYPDd21EcYB/3oGxnvT9irXgMztkhNhBFvBopfvJOETPlMcs/8fmIV8v8fsRbZb4UkcoL42zEe7tcRzyealHEn5fn//xmmq3uB937ysWv1r88f3Whp2z3vvLYPx8epkN+bxqMIprVHX8zffjf7AAAAAAAAAAAAAAAAADwoA1FEU9Filf+/Q+qccVRjUs/dn70d4d/vnfM+JP32E5Z9rmIWC32Nib3SB5CPJEmUnrEY4k/zgajiD/K4/+++agbAwAAAAAAAAAAAAAAAAAA8LFWxI8ixYvvnkhr0TuneHv+Wv1y88pcZ1bY7ty/3TnTt7a2tuqpk42c0zlXc67lXM+5kTOKXD9nI+d0ztWcaznXc27kjL5cP2cj53TO1ZxrOddzbuSMWq6fs5FzOudqzrWc6zk3csYhmbsXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCjpIgifhYpvvX1zRQpIhoR09HJ9YFuGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgURpIRXwvUtR/r3FrXS0iUvVvx4nyl7PROFLmp6IxWuZL0biQs1llrfHNR9B+9qc/FfHDSDEw+PatE57Pf3/n063LIN76xvanX6p1sq/75fD7A584fuz86PivPHm35bRbA0Yutudv3KxPjY2PT/asruW9f6pn3XDeb/Fguk5ELL/x5uvNubnWkoWPx0Kts1CLQ9KeA1+odRby/SoeeXvustA4HM3YXnjENyYeivL5/16k+M13/6P7wO8+/3+u8+nWEz5++sfbz/8Xb9/QAT3/n+hZ92L+3Uh/LWJw5fpi//GIweU33jzZvt681rrWmj976tSXRke/dOZU/5GIwavtuVbP0r4PFQAAAAAAAAAAAAAAAMDDlYr47UjR/OFmqkfEzWq81vD50WdOPt0XfdV4qx3jtl6bvHyh/vLC9cWl1vJya7Y+Nd+eWZht7XV3g9Vwr6mx8QPpzD0NHXD7hwZfXlh8Y6l97fdXdv3+6OCFK8srS82Z3b+OoSgiGr1rRqoGT42NV42eazfnq6oTuw6mu3/9qYj/jBQzZ+vpc3ldHv93+wj/HeP/V2/f0AGN//tkz7pynykV8dNI8Rt/8WR8rmrn0bjjmOVyfxMpRs59NpeLI2W5bhs67xXojAwsy/5vpPiHn+0s2x0P+cR22ef3fGAfE+X5PxYpvvdn34lfzet2vv9h9/N/9PYNHdD5/3TPuqM73lew766Tz//JSPHSE2/Hr+V1H/T+jyK2trb+JOJELnzr/RwHdP4/07NuODr7/fUH130AAAAAAAAAAIDHVn8q4m8jxdPjtfRCXreXv/83e/uGDujvf/1iz7rZhzRf0b4PKgAAAAAcEv2piB9Fimsrb98aQ71z/HfP+M/f2p57fSzd9m3153y/UL034EH++V+v4bzf6f13GwAAAAAAAAAAAAAAAAAAAA6VlIp4Ic+nPn2P+dTXI8Ur//1sLpeOl+W688APV78OXlqYP3lhbm5hprnSvDLXqk8uNmdaZd1PR4rNv/5srltU86t355vvzPE+uNWdi30pUoz/XbdsZy727tzknfnAO3Oxl2U/GSn+6+93lu3OY/2Z7bKny7J/FSm+9k+7lz2+XfZMWfY7keIHX6t3yx4ty3bfj9p5J+lgLeZaz80szN3xKlQAAAAAAAAAAAAAAAAAAAC4X/2piD+NFP9zfS1W87D/PP9/dwb+WrfsW9/ome//Njeref6Hq/n/77b8Yeb/H35gPQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMdHiiLejBSLlzbT+kD5uWPwYnv+xs2psfHdqw2lqmZfVb78GXz+9JmzX3xh9Fw3P7j+g/ZUvDZ5+UL95YXri0ut5eXWbH1qvj2zMNva8xb2W3/70HWMVAegfv31G7NXry7XTz93ZsfXN4ffH/jE8eHzo8+cfLpbdmpsfHyyp0yt/z72fl+N23YkivjLSPHsd3+c/nkgooj9H4t7XDsHbajqxEjViamx8aojc+3m/Er55UT3QBQR9Z5Kje4xegjnYl8aEatl88sGj5Tdm1xsLjWvzLXqE82llfZKe2F+InVaW/anHkWcSxFrEbExcOfm+qOI1yPFt49tpn8ZiOjrHocvXJr8yqnTd29HcYB93IOynfX+iLXiMThnh9hAFPGPkeIn75yIfx2IqEXnJz4f8WqZ3494q8yXIlJ5YZyNeG+X64jHUy2K+L/y/J/fTO8MlPeD7n3l4lfrX56/utBTtntfOUzPh637vxaHHsBu9+6Q35sGo4gfVHf8zfRv/rsGAAAAAAAAAAAAAAAAOESK+OVI8eK7J1I1PvjWmOL2/LX65eaVuc6wvu7Yv3rEH5a5tbW1VU+dbOSczrmacy3nes6NnFHk+jkbOadzruZcy7mecyNn9OX6ORs5p3Ou5lzLuZ5zI2fUcv2cjZzTOVdzruVcz7mRMw7J2D0AAAAAAAAAAAAAAAAAAOCjpaj+SfGtr2+mai7VRsR0dHLdfKAfef8fAAD//653/h0=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)) ioctl$TCSETSW(r1, 0x5420, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "c6d8696d52fb198f24d71eaa8a23728f087054"}) 5.054017058s ago: executing program 4 (id=898): mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x5, 0x37, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3) 4.91673216s ago: executing program 1 (id=899): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x0, r1}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000001500)={0x0, r1}) 4.866905864s ago: executing program 4 (id=900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x54}}, 0x0) 4.67051269s ago: executing program 4 (id=903): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000140)={[{@sysvgroups}, {@noload}, {@auto_da_alloc}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {}, {@bsdgroups}]}, 0x6, 0x652, &(0x7f0000002580)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200000000200000020"], 0x0) 3.818327909s ago: executing program 4 (id=908): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="816f636861727365743d6d6163726f6d616e2c756e686964652c6769643d666f726765742c696f636861727365743d63703836332c756d61736b3d30303030303030303030303030303030303030303430312c6769643d69676e6f72652c7569643d666f726765742c756e64656c6574652c00ae22b9a5f51b537fac27a98a93be8a7460c86af991e718d0f53b50643b760f44dbc5dd3b367059d0afd33fe3769e08c1f27bcc6c61b50ca6f1c62286757d27e1c863440cbea7a101200b6c2d2c08193f7a48a0f810b6b5534b14c4fa53004d5425ed49e1eef9"], 0xfe, 0xc23, &(0x7f0000001540)="$eJzs3UFsHNd9B+D/Gy5FUmkrJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkN22ZXnroIUBR9JATgdYokKKB0RRBj2zrAsnFhyKnnogWNoKiB7YIkFPAYmbfikuJsihTlCj7+2zqNzv73sx7M+MZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+8cuHU8+lRtwIAeJguTX7l1GnPfwD4WLns//8BAAAAAAAAAAAAAOCwS1HEE5Fi8dJmmq4+dwxebM/fuDk1Nr57taFU1eyrypc/g8+fPnP2iy+MnuvmB9d/0J6K1yYvX6i/vHB9cam1vNyarU/Nt2cWZlt73sJ+699upDoA9euv35i9enW5fvq5Mzu+vjn8/sAnjg+fH33m5NPdslNj4+OTPWVq/R9673e42wiPI1HEyUjx7Hd/nJoRUcT+j8U9rp2DNlR1YqTqxNTYeNWRuXZzfqX8cqJ7IIqIek+lRvcYPYRzsS+NiNWy+WWDR8ruTS42l5pX5lr1iebSSnulvTA/kTqtLftTjyLOpYi1iNgYuHNz/VFELVJ8+9hmuhIRfd3j8IVqYPDd21EcYB/3oGxnvT9irXgMztkhNhBFvBopfvJOETPlMcs/8fmIV8v8fsRbZb4UkcoL42zEe7tcRzyealHEn5fn//xmmq3uB937ysWv1r88f3Whp2z3vvLYPx8epkN+bxqMIprVHX8zffjf7AAAAAAAAAAAAAAAAADwoA1FEU9Filf+/Q+qccVRjUs/dn70d4d/vnfM+JP32E5Z9rmIWC32Nib3SB5CPJEmUnrEY4k/zgajiD/K4/+++agbAwAAAAAAAAAAAAAAAAAA8LFWxI8ixYvvnkhr0TuneHv+Wv1y88pcZ1bY7ty/3TnTt7a2tuqpk42c0zlXc67lXM+5kTOKXD9nI+d0ztWcaznXc27kjL5cP2cj53TO1ZxrOddzbuSMWq6fs5FzOudqzrWc6zk3csYhmbsXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCjpIgifhYpvvX1zRQpIhoR09HJ9YFuGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgURpIRXwvUtR/r3FrXS0iUvVvx4nyl7PROFLmp6IxWuZL0biQs1llrfHNR9B+9qc/FfHDSDEw+PatE57Pf3/n063LIN76xvanX6p1sq/75fD7A584fuz86PivPHm35bRbA0Yutudv3KxPjY2PT/asruW9f6pn3XDeb/Fguk5ELL/x5uvNubnWkoWPx0Kts1CLQ9KeA1+odRby/SoeeXvustA4HM3YXnjENyYeivL5/16k+M13/6P7wO8+/3+u8+nWEz5++sfbz/8Xb9/QAT3/n+hZ92L+3Uh/LWJw5fpi//GIweU33jzZvt681rrWmj976tSXRke/dOZU/5GIwavtuVbP0r4PFQAAAAAAAAAAAAAAAMDDlYr47UjR/OFmqkfEzWq81vD50WdOPt0XfdV4qx3jtl6bvHyh/vLC9cWl1vJya7Y+Nd+eWZht7XV3g9Vwr6mx8QPpzD0NHXD7hwZfXlh8Y6l97fdXdv3+6OCFK8srS82Z3b+OoSgiGr1rRqoGT42NV42eazfnq6oTuw6mu3/9qYj/jBQzZ+vpc3ldHv93+wj/HeP/V2/f0AGN//tkz7pynykV8dNI8Rt/8WR8rmrn0bjjmOVyfxMpRs59NpeLI2W5bhs67xXojAwsy/5vpPiHn+0s2x0P+cR22ef3fGAfE+X5PxYpvvdn34lfzet2vv9h9/N/9PYNHdD5/3TPuqM73lew766Tz//JSPHSE2/Hr+V1H/T+jyK2trb+JOJELnzr/RwHdP4/07NuODr7/fUH130AAAAAAAAAAIDHVn8q4m8jxdPjtfRCXreXv/83e/uGDujvf/1iz7rZhzRf0b4PKgAAAAAcEv2piB9Fimsrb98aQ71z/HfP+M/f2p57fSzd9m3153y/UL034EH++V+v4bzf6f13GwAAAAAAAAAAAAAAAAAAAA6VlIp4Ic+nPn2P+dTXI8Ur//1sLpeOl+W688APV78OXlqYP3lhbm5hprnSvDLXqk8uNmdaZd1PR4rNv/5srltU86t355vvzPE+uNWdi30pUoz/XbdsZy727tzknfnAO3Oxl2U/GSn+6+93lu3OY/2Z7bKny7J/FSm+9k+7lz2+XfZMWfY7keIHX6t3yx4ty3bfj9p5J+lgLeZaz80szN3xKlQAAAAAAAAAAAAAAAAAAAC4X/2piD+NFP9zfS1W87D/PP9/dwb+WrfsW9/ome//Njeref6Hq/n/77b8Yeb/H35gPQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMdHiiLejBSLlzbT+kD5uWPwYnv+xs2psfHdqw2lqmZfVb78GXz+9JmzX3xh9Fw3P7j+g/ZUvDZ5+UL95YXri0ut5eXWbH1qvj2zMNva8xb2W3/70HWMVAegfv31G7NXry7XTz93ZsfXN4ffH/jE8eHzo8+cfLpbdmpsfHyyp0yt/z72fl+N23YkivjLSPHsd3+c/nkgooj9H4t7XDsHbajqxEjViamx8aojc+3m/Er55UT3QBQR9Z5Kje4xegjnYl8aEatl88sGj5Tdm1xsLjWvzLXqE82llfZKe2F+InVaW/anHkWcSxFrEbExcOfm+qOI1yPFt49tpn8ZiOjrHocvXJr8yqnTd29HcYB93IOynfX+iLXiMThnh9hAFPGPkeIn75yIfx2IqEXnJz4f8WqZ3494q8yXIlJ5YZyNeG+X64jHUy2K+L/y/J/fTO8MlPeD7n3l4lfrX56/utBTtntfOUzPh637vxaHHsBu9+6Q35sGo4gfVHf8zfRv/rsGAAAAAAAAAAAAAAAAOESK+OVI8eK7J1I1PvjWmOL2/LX65eaVuc6wvu7Yv3rEH5a5tbW1VU+dbOSczrmacy3nes6NnFHk+jkbOadzruZcy7mecyNn9OX6ORs5p3Ou5lzLuZ5zI2fUcv2cjZzTOVdzruVcz7mRMw7J2D0AAAAAAAAAAAAAAAAAAOCjpaj+SfGtr2+mai7VRsR0dHLdfKAfef8fAAD//653/h0=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)) ioctl$TCSETSW(r1, 0x5420, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "c6d8696d52fb198f24d71eaa8a23728f087054"}) 2.602279228s ago: executing program 0 (id=917): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file1\x00', 0xa18c14, &(0x7f0000000100)={[{@uni_xlate}, {@fat=@flush}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@shortname_winnt}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffacf}}, {@shortname_mixed}, {@numtail}, {@shortname_lower}, {@shortname_mixed}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@numtail}]}, 0x81, 0x29b, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) 2.45011139s ago: executing program 0 (id=919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 2.432292192s ago: executing program 2 (id=920): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) shmget(0x0, 0xa000, 0x2, &(0x7f0000ff3000/0xa000)=nil) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000340)}, 0x20) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010001fff"], 0x40}}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x4, r7}, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r8, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r9}, 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000500)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f80)={@ifindex, 0xa, 0x1, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000fc0)={@cgroup, 0xffffffffffffffff, 0xd, 0x8, 0x0, @prog_fd, r11}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r10, 0xffffffffffffffff, 0x0, 0x26, @val=@tcx={@prog_fd=r10, r11}}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@ifindex=r7, r3, 0x4, 0x28, r4, @prog_id=r9, r11}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000ac0)) 2.372109727s ago: executing program 0 (id=921): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000507000000000007000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.47140556s ago: executing program 2 (id=922): syz_io_uring_setup(0x0, &(0x7f00000035c0), &(0x7f0000000100), 0x0) syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000002140)={[{@discard}, {@errors_continue}, {@discard}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@umask={'umask', 0x3d, 0x1}}, {@fmask}, {@errors_remount}]}, 0x5, 0x1531, &(0x7f00000044c0)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1.213635131s ago: executing program 2 (id=923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x1909, 0x0, 0x0, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) 1.033901786s ago: executing program 2 (id=924): ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@hyper}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000b63fe4), 0x1c) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000480)={0x18, 0x0, {0x4, @broadcast, 'lo\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}]}}]}, 0x3c}}, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 506.714009ms ago: executing program 0 (id=925): r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) 480.537381ms ago: executing program 2 (id=926): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES8], 0x0, 0x2b2, &(0x7f00000015c0)="$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") syz_mount_image$fuse(&(0x7f0000000700), &(0x7f00000000c0)='./file0\x00', 0x30c407e, &(0x7f0000000780)=ANY=[], 0x1, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 416.529816ms ago: executing program 0 (id=927): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file1\x00', 0xa18c14, &(0x7f0000000100)={[{@uni_xlate}, {@fat=@flush}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@shortname_winnt}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffacf}}, {@shortname_mixed}, {@numtail}, {@shortname_lower}, {@shortname_mixed}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@numtail}]}, 0x81, 0x29b, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) 346.265072ms ago: executing program 0 (id=928): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x20}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}]}}]}, 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'erspan0\x00', r3, 0x80, 0x7, 0x1, 0x9, {{0xc, 0x4, 0x1, 0x3, 0x30, 0x68, 0x0, 0x1, 0x4, 0x0, @empty, @local, {[@end, @ssrr={0x89, 0x1b, 0x66, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3b}, @empty, @empty, @multicast2]}]}}}}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYRES32=r8], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FS_IOC_RESVSP(r13, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x3b, 0x800}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r12, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, 0x0, 0x1, 0x0, 0x0, {0x14}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000001040)='ext4_mballoc_prealloc\x00', r7}, 0x10) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r14, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r14, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 0s ago: executing program 2 (id=929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x7000004, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000006006600c78800001c0033"], 0x4c}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}, @IFLA_BR_MAX_AGE={0x8}]}}}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): 148.996165][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.004226][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.022607][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.031580][ T3696] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.038745][ T3696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.089813][ T4762] device veth1_macvtap entered promiscuous mode [ 149.152451][ T3793] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.162690][ T3793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.172352][ T3793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.356594][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.386772][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.646498][ T3561] Bluetooth: hci3: command tx timeout [ 149.657625][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.845962][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.119255][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.136631][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.183170][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.203472][ T3848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.234752][ T3848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.262307][ T4868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.408870][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.426098][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.435011][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.455521][ T4951] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 150.476388][ T4762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.501092][ T4762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.518354][ T4762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.532608][ T4762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.562275][ T4762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.573356][ T4762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.641137][ T4762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.707703][ T4951] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 150.724713][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.734642][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.759188][ T4762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.805206][ T4762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.840222][ T4762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.865619][ T4762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.881004][ T4762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.905231][ T4762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.924682][ T4762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.934382][ T4951] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 151.002097][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.018505][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.044029][ T4762] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.072238][ T4762] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.085948][ T4762] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.094832][ T4762] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.107403][ T4951] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 151.237631][ T4868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.254821][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.273592][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.590006][ T5060] loop2: detected capacity change from 0 to 32768 [ 151.616342][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.625823][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.658052][ T5060] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 151.674305][ T5060] XFS (loop2): Mounting V5 Filesystem [ 151.713221][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.749339][ T5060] XFS (loop2): Ending clean mount [ 151.757819][ T5060] XFS (loop2): Quotacheck needed: Please wait. [ 151.825621][ T3819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.838089][ T3819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.850072][ T5060] XFS (loop2): Quotacheck: Done. [ 151.914368][ T4796] XFS (loop2): Unmounting Filesystem [ 151.962670][ T4951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.979343][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.998311][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.015608][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.142035][ T4868] device veth0_vlan entered promiscuous mode [ 152.179838][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.206068][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.214089][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.246040][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.290111][ T4951] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.440314][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.463904][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.522955][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.556161][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.564757][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.571956][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.606530][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.625836][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.634439][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.641638][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.703524][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.726794][ T4868] device veth1_vlan entered promiscuous mode [ 152.941125][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.980759][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.002118][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.043269][ T5101] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 153.239420][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.365881][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.494982][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.717268][ T5085] loop1: detected capacity change from 0 to 32768 [ 153.729271][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.747596][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.769715][ T5085] XFS (loop1): Mounting V5 Filesystem [ 153.847859][ T5085] XFS (loop1): Ending clean mount [ 153.860419][ T5085] XFS (loop1): Quotacheck needed: Please wait. [ 153.887721][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.912089][ T4951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.934604][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.973095][ T5085] XFS (loop1): Quotacheck: Done. [ 154.105494][ T4868] device veth0_macvtap entered promiscuous mode [ 154.121983][ T4868] device veth1_macvtap entered promiscuous mode [ 154.155155][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.181080][ T26] audit: type=1804 audit(1720712914.266:13): pid=5119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.262" name="/newroot/0/file0/bus" dev="loop1" ino=9292 res=1 errno=0 [ 154.205480][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.223289][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.233007][ T4762] XFS (loop1): Unmounting Filesystem [ 154.249467][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.263640][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.281997][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.349338][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.385120][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.405141][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.425309][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.439408][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.462945][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.475000][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.475364][ T3793] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 154.498728][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.528551][ T4868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.673110][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.694158][ T5132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'. [ 154.706101][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.711852][ T5132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'. [ 154.725524][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.743146][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.753374][ T5132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'. [ 154.767817][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.788022][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.798938][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.812144][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.822574][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.833570][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.848825][ T4868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.870645][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.891391][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.905566][ T3793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.925947][ T3793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.945306][ T3793] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 154.985317][ T3793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.007137][ T3793] usb 1-1: config 0 descriptor?? [ 155.030222][ T4868] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.051696][ T4868] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.073906][ T4868] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.100403][ T4868] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.130767][ T5137] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 155.201230][ T3853] device hsr_slave_0 left promiscuous mode [ 155.215462][ T3853] device hsr_slave_1 left promiscuous mode [ 155.222169][ T3853] device bridge_slave_1 left promiscuous mode [ 155.237636][ T3853] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.261136][ T3853] device bridge_slave_0 left promiscuous mode [ 155.267954][ T3853] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.322604][ T3853] device hsr_slave_0 left promiscuous mode [ 155.338295][ T3853] device hsr_slave_1 left promiscuous mode [ 155.346840][ T3853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.354329][ T3853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.368330][ T3853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.383472][ T3853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.391980][ T3853] device bridge_slave_1 left promiscuous mode [ 155.407446][ T3853] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.443380][ T3853] device bridge_slave_0 left promiscuous mode [ 155.460065][ T3853] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.569231][ T3793] itetech 0003:258A:6A88.0003: item fetching failed at offset 0/1 [ 155.581203][ T3793] itetech: probe of 0003:258A:6A88.0003 failed with error -22 [ 155.691231][ T5146] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 156.030185][ T3853] device veth1_macvtap left promiscuous mode [ 156.094580][ T3793] usb 1-1: USB disconnect, device number 4 [ 156.349577][ T3853] device veth0_macvtap left promiscuous mode [ 156.398243][ T3853] device veth1_vlan left promiscuous mode [ 156.404138][ T3853] device veth0_vlan left promiscuous mode [ 156.431564][ T3853] device veth1_macvtap left promiscuous mode [ 156.438966][ T3853] device veth0_macvtap left promiscuous mode [ 156.451549][ T3853] device veth1_vlan left promiscuous mode [ 156.460197][ T3853] device veth0_vlan left promiscuous mode [ 156.463823][ T5142] loop1: detected capacity change from 0 to 32768 [ 156.519578][ T5142] XFS (loop1): Mounting V5 Filesystem [ 156.580268][ T5142] XFS (loop1): Ending clean mount [ 156.654210][ T4762] XFS (loop1): Unmounting Filesystem [ 157.496603][ T3853] team0 (unregistering): Port device team_slave_1 removed [ 157.590729][ T3853] team0 (unregistering): Port device team_slave_0 removed [ 157.599989][ T5160] loop1: detected capacity change from 0 to 32768 [ 157.631134][ T5160] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 157.653114][ T3853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.662615][ T5160] XFS (loop1): Mounting V5 Filesystem [ 157.702376][ T3853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.730375][ T5160] XFS (loop1): Ending clean mount [ 157.760033][ T5160] XFS (loop1): Quotacheck needed: Please wait. [ 157.821278][ T5160] XFS (loop1): Quotacheck: Done. [ 157.855303][ T4279] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 157.922093][ T4762] XFS (loop1): Unmounting Filesystem [ 158.095534][ T4279] usb 1-1: Using ep0 maxpacket: 32 [ 158.218871][ T4279] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 158.228244][ T4279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.245417][ T4279] usb 1-1: config 0 descriptor?? [ 158.287439][ T4279] gspca_main: sunplus-2.14.0 probing 041e:400b [ 158.326815][ T3853] bond0 (unregistering): Released all slaves [ 158.732724][ T3853] team0 (unregistering): Port device team_slave_1 removed [ 158.773401][ T3853] team0 (unregistering): Port device team_slave_0 removed [ 158.808506][ T3853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.846150][ T3853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.059459][ T26] audit: type=1326 audit(1720712919.146:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5171 comm="syz.0.366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f185fd75bd9 code=0x0 [ 159.266573][ T4279] gspca_sunplus: reg_r err -110 [ 159.271562][ T4279] sunplus: probe of 1-1:0.0 failed with error -110 [ 159.296551][ T3853] bond0 (unregistering): Released all slaves [ 159.660578][ T5192] loop1: detected capacity change from 0 to 164 [ 159.673865][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.693549][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.740162][ T4951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.763882][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.778275][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.899519][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.928184][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.928949][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.948094][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.964378][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.987030][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.001979][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.026585][ T4951] device veth0_vlan entered promiscuous mode [ 160.063239][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 160.073278][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.094859][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.137812][ T4951] device veth1_vlan entered promiscuous mode [ 160.199821][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 160.219726][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 160.242677][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.267787][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.295987][ T4951] device veth0_macvtap entered promiscuous mode [ 160.318424][ T5206] vivid-002: disconnect [ 160.344002][ T4951] device veth1_macvtap entered promiscuous mode [ 160.360745][ T5203] vivid-002: reconnect [ 160.388012][ T4951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.417791][ T4951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.419701][ T5208] capability: warning: `syz.4.377' uses deprecated v2 capabilities in a way that may be insecure [ 160.428129][ T4951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.454284][ T4951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.478286][ T4951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.496866][ T4951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.517090][ T4951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.530539][ T4951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.548076][ T5210] loop1: detected capacity change from 0 to 2048 [ 160.551072][ T4951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.652077][ T5210] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.761890][ T4951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.776920][ T4951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.787042][ T4951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.798900][ T4951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.809284][ T4951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.820300][ T4951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.830203][ T4951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.842650][ T4951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.913911][ T5215] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 160.970862][ T4951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.091158][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.131783][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.230213][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.312168][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.398865][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.626909][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.674314][ T22] usb 1-1: USB disconnect, device number 5 [ 161.703562][ T4951] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.754115][ T4951] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.786078][ T4951] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.790020][ T5221] loop1: detected capacity change from 0 to 164 [ 161.794942][ T4951] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.151049][ T5232] loop1: detected capacity change from 0 to 64 [ 162.181359][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.235272][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.279246][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.305671][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.422595][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.510016][ T5232] hfs: request for non-existent node 1291 in B*Tree [ 162.518067][ T5232] hfs: request for non-existent node 1291 in B*Tree [ 162.544624][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 163.031576][ T5233] sctp: failed to load transform for md5: -2 [ 163.092652][ T3851] hfs: request for non-existent node 1291 in B*Tree [ 163.145711][ T3851] hfs: request for non-existent node 1291 in B*Tree [ 163.224685][ T3851] hfs: request for non-existent node 1291 in B*Tree [ 163.318215][ T3851] hfs: request for non-existent node 1291 in B*Tree [ 163.748809][ T22] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 163.878505][ T5271] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 164.057300][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 164.216749][ T22] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 164.258825][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.543434][ T5275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.398'. [ 164.572344][ T22] usb 5-1: config 0 descriptor?? [ 164.628982][ T22] gspca_main: sunplus-2.14.0 probing 041e:400b [ 165.490876][ T26] audit: type=1326 audit(1720712925.576:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5251 comm="syz.4.391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2d5375bd9 code=0x0 [ 165.625364][ T22] gspca_sunplus: reg_r err -110 [ 165.630381][ T22] sunplus: probe of 5-1:0.0 failed with error -110 [ 165.974693][ T5282] loop2: detected capacity change from 0 to 32768 [ 166.097696][ T5282] XFS (loop2): Mounting V5 Filesystem [ 166.234207][ T5292] loop1: detected capacity change from 0 to 40427 [ 166.252190][ T5282] XFS (loop2): Ending clean mount [ 166.309520][ T5292] F2FS-fs (loop1): Found nat_bits in checkpoint [ 166.442380][ T4796] XFS (loop2): Unmounting Filesystem [ 166.615974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 166.654433][ T5292] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 166.775706][ T26] audit: type=1800 audit(1720712926.866:16): pid=5292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.404" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 166.799431][ T5324] loop3: detected capacity change from 0 to 164 [ 166.853446][ T26] audit: type=1800 audit(1720712926.886:17): pid=5292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.404" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 166.949373][ T4762] syz-executor: attempt to access beyond end of device [ 166.949373][ T4762] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 167.604301][ T3795] usb 5-1: USB disconnect, device number 4 [ 167.761605][ T5340] loop4: detected capacity change from 0 to 2048 [ 167.812074][ T5340] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.378578][ T5356] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 169.081225][ T26] audit: type=1326 audit(1720712929.166:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5359 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d5375bd9 code=0x7ffc0000 [ 169.281612][ T26] audit: type=1326 audit(1720712929.166:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5359 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d5375bd9 code=0x7ffc0000 [ 169.412339][ T26] audit: type=1326 audit(1720712929.166:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5359 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fa2d5375bd9 code=0x7ffc0000 [ 169.546926][ T26] audit: type=1326 audit(1720712929.166:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5359 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d5375bd9 code=0x7ffc0000 [ 169.673028][ T26] audit: type=1326 audit(1720712929.166:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5359 comm="syz.4.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d5375bd9 code=0x7ffc0000 [ 170.338177][ T5342] loop3: detected capacity change from 0 to 32768 [ 170.464992][ T5342] XFS (loop3): Mounting V5 Filesystem [ 170.686675][ T5342] XFS (loop3): Ending clean mount [ 170.713097][ T5348] loop2: detected capacity change from 0 to 40427 [ 170.792937][ T4951] XFS (loop3): Unmounting Filesystem [ 170.873139][ T5348] F2FS-fs (loop2): Found nat_bits in checkpoint [ 171.665320][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 171.988983][ T5431] loop2: detected capacity change from 0 to 1024 [ 172.027985][ T5431] hfsplus: unable to find HFS+ superblock [ 172.035438][ T7] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 172.064972][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.101414][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.128702][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 172.223672][ T7] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 172.272976][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.360181][ T7] usb 4-1: config 0 descriptor?? [ 172.412656][ T5436] loop1: detected capacity change from 0 to 1024 [ 172.527351][ T5436] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 172.704781][ T4762] EXT4-fs (loop1): unmounting filesystem. [ 172.867684][ T7] thrustmaster 0003:044F:B653.0004: unbalanced delimiter at end of report description [ 172.895007][ T7] thrustmaster 0003:044F:B653.0004: parse failed [ 172.908013][ T7] thrustmaster: probe of 0003:044F:B653.0004 failed with error -22 [ 173.073282][ T7] usb 4-1: USB disconnect, device number 4 [ 173.239781][ T5457] overlayfs: missing 'lowerdir' [ 173.558123][ T5464] loop1: detected capacity change from 0 to 4096 [ 173.699616][ T5472] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.386171][ T5474] loop4: detected capacity change from 0 to 1024 [ 174.438220][ T26] audit: type=1804 audit(1720712934.526:23): pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.463" name="/newroot/32/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 174.513580][ T5474] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 174.876778][ T5493] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 175.946496][ T4868] EXT4-fs (loop4): unmounting filesystem. [ 176.344919][ T5514] loop2: detected capacity change from 0 to 1024 [ 176.421395][ T5514] hfsplus: unable to find HFS+ superblock [ 176.515200][ T3788] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 176.523139][ T3795] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 176.775635][ T3795] usb 4-1: Using ep0 maxpacket: 8 [ 176.930291][ T3788] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 176.941485][ T3795] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 176.968982][ T3795] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.981591][ T3788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.993128][ T3795] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.004293][ T3788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.014571][ T3795] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.030881][ T3788] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 177.059566][ T3795] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.073813][ T3788] usb 2-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 177.084370][ T3795] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 177.094375][ T3788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.104110][ T3795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.129105][ T5536] loop2: detected capacity change from 0 to 256 [ 177.132849][ T3788] usb 2-1: config 0 descriptor?? [ 177.234027][ T5536] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 324) [ 177.234256][ T5538] loop4: detected capacity change from 0 to 16 [ 177.249524][ T5536] FAT-fs (loop2): Filesystem has been set read-only [ 177.261762][ T5536] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 324) [ 177.280634][ T5538] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 177.315797][ T5539] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 177.366467][ T5538] fuse: Bad value for 'fd' [ 177.425453][ T3795] usb 4-1: usb_control_msg returned -32 [ 177.431096][ T3795] usbtmc 4-1:16.0: can't read capabilities [ 177.611906][ T5548] loop4: detected capacity change from 0 to 512 [ 177.627357][ T3788] thrustmaster 0003:044F:B653.0005: unbalanced delimiter at end of report description [ 177.643398][ T3788] thrustmaster 0003:044F:B653.0005: parse failed [ 177.650486][ T3788] thrustmaster: probe of 0003:044F:B653.0005 failed with error -22 [ 177.680688][ T5548] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 177.694616][ T5548] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 177.706793][ T5548] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.494: Corrupt directory, running e2fsck is recommended [ 177.729424][ T5548] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 177.742009][ T5548] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.494: corrupted in-inode xattr [ 177.913724][ T3795] usb 2-1: USB disconnect, device number 2 [ 177.971054][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 177.972987][ T5548] EXT4-fs (loop4): Remounting filesystem read-only [ 178.018408][ T5548] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.494: couldn't read orphan inode 15 (err -117) [ 178.034672][ T5548] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 178.721459][ T5548] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 178.836732][ T5548] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 178.853217][ T5548] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.494: Corrupt directory, running e2fsck is recommended [ 178.866135][ T5549] loop2: detected capacity change from 0 to 32768 [ 178.938657][ T5549] XFS (loop2): Mounting V5 Filesystem [ 178.965655][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 179.010945][ T5549] XFS (loop2): Ending clean mount [ 179.095653][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 179.105964][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 179.116889][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 179.129378][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 179.130619][ T4796] XFS (loop2): Unmounting Filesystem [ 179.139628][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.139682][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 179.139707][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.230267][ T5564] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 179.242112][ T5564] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 179.252368][ T5564] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.494: Corrupt directory, running e2fsck is recommended [ 179.271993][ T5564] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 179.283700][ T5564] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 179.294091][ T5564] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.494: Corrupt directory, running e2fsck is recommended [ 179.311639][ T5564] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 179.334667][ T5564] EXT4-fs error (device loop4): ext4_find_dest_de:2112: inode #2: block 3: comm syz.4.494: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 179.416112][ T5564] EXT4-fs (loop4): Remounting filesystem read-only [ 179.716893][ T4868] EXT4-fs (loop4): unmounting filesystem. [ 179.757537][ T7] usb 1-1: GET_CAPABILITIES returned 0 [ 179.763091][ T7] usbtmc 1-1:16.0: can't read capabilities [ 179.774840][ T5568] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 179.964364][ T3788] usb 1-1: USB disconnect, device number 6 [ 180.015505][ T3793] usb 4-1: USB disconnect, device number 5 [ 180.100678][ T5575] loop1: detected capacity change from 0 to 1024 [ 180.311662][ T5581] loop3: detected capacity change from 0 to 256 [ 180.394750][ T5581] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 324) [ 180.419925][ T5581] FAT-fs (loop3): Filesystem has been set read-only [ 180.446710][ T5581] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 324) [ 180.472046][ T5583] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 180.685701][ T5591] overlayfs: failed to clone upperpath [ 180.845552][ T5596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.507'. [ 180.873156][ T5596] netlink: 11 bytes leftover after parsing attributes in process `syz.3.507'. [ 180.910205][ T5599] loop4: detected capacity change from 0 to 512 [ 181.039041][ T5599] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 181.111078][ T5599] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 181.180619][ T5599] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.508: Corrupt directory, running e2fsck is recommended [ 181.203865][ T5599] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 181.212953][ T5599] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.508: corrupted in-inode xattr [ 181.237498][ T5599] EXT4-fs (loop4): Remounting filesystem read-only [ 181.244280][ T5599] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.508: couldn't read orphan inode 15 (err -117) [ 181.290895][ T5579] loop2: detected capacity change from 0 to 40427 [ 181.301961][ T5599] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 181.344431][ T5579] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 181.364836][ T5579] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 181.373391][ T5599] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 181.377947][ T4282] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 181.394791][ T5599] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 181.416816][ T5579] F2FS-fs (loop2): invalid crc value [ 181.423681][ T5599] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.508: Corrupt directory, running e2fsck is recommended [ 181.808440][ T5619] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 181.820298][ T5619] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 181.830617][ T5619] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.508: Corrupt directory, running e2fsck is recommended [ 181.935825][ T5621] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 181.947434][ T5621] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 181.957618][ T5621] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.508: Corrupt directory, running e2fsck is recommended [ 181.972621][ T5621] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 181.986576][ T5621] EXT4-fs error (device loop4): ext4_find_dest_de:2112: inode #2: block 3: comm syz.4.508: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 182.007632][ T3793] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 182.074531][ T5621] EXT4-fs (loop4): Remounting filesystem read-only [ 182.257213][ T4868] EXT4-fs (loop4): unmounting filesystem. [ 182.282535][ T5579] F2FS-fs (loop2): Found nat_bits in checkpoint [ 182.325251][ T4282] usb 2-1: Using ep0 maxpacket: 8 [ 182.385192][ T3793] usb 1-1: Using ep0 maxpacket: 8 [ 182.406474][ T5579] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 182.413672][ T5579] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 182.445296][ T4282] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 182.463791][ T4282] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.484209][ T4282] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.496295][ T4282] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.508805][ T4282] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.522938][ T4282] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 182.525608][ T3793] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.537394][ T4282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.565484][ T3793] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.577214][ T5579] bridge: RTM_NEWNEIGH with invalid ether address [ 182.588571][ T5634] overlayfs: failed to clone upperpath [ 182.594511][ T3793] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 182.615198][ T3793] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 182.626546][ T3793] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.641558][ T3793] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.652055][ T3793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.835458][ T4282] usb 2-1: usb_control_msg returned -32 [ 182.844504][ T4282] usbtmc 2-1:16.0: can't read capabilities [ 182.915602][ T3793] usb 1-1: GET_CAPABILITIES returned 0 [ 182.921528][ T3793] usbtmc 1-1:16.0: can't read capabilities [ 183.054884][ T3849] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.196841][ T3849] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.208984][ T5612] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 183.310805][ T3793] usb 1-1: USB disconnect, device number 7 [ 183.384719][ T3849] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.993811][ T3849] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.522845][ T5646] loop3: detected capacity change from 0 to 4096 [ 184.553078][ T5646] ntfs: (device loop3): parse_ntfs_boot_sector(): Mft record size (131072) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 184.605211][ T5646] ntfs: (device loop3): ntfs_fill_super(): Unsupported NTFS filesystem. [ 184.903955][ T5656] hpfs: Bad magic ... probably not HPFS [ 184.940597][ T5641] loop4: detected capacity change from 0 to 32768 [ 184.976716][ T5641] XFS: noikeep mount option is deprecated. [ 185.082116][ T5641] XFS (loop4): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 185.121361][ T5641] XFS (loop4): Quotacheck needed: Please wait. [ 185.238997][ T5641] XFS (loop4): Quotacheck: Done. [ 185.259182][ T3568] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.280460][ T3568] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.289383][ T3568] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.300763][ T3568] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.308678][ T3568] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 185.316279][ T3568] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.467296][ T4868] XFS (loop4): Unmounting Filesystem [ 185.612758][ T41] usb 2-1: USB disconnect, device number 3 [ 186.255335][ T41] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 186.390758][ T5677] chnl_net:caif_netlink_parms(): no params data found [ 186.505389][ T41] usb 2-1: Using ep0 maxpacket: 8 [ 186.558793][ T5714] netlink: 56 bytes leftover after parsing attributes in process `syz.4.542'. [ 186.626869][ T41] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.645806][ T41] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.665128][ T41] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 186.677151][ T41] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 186.693131][ T41] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.707306][ T41] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 186.717283][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.990235][ T41] usb 2-1: GET_CAPABILITIES returned 0 [ 187.005216][ T41] usbtmc 2-1:16.0: can't read capabilities [ 187.015399][ T5737] Illegal XDP return value 4294967294 on prog (id 83) dev N/A, expect packet loss! [ 187.110580][ T5677] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.144706][ T5677] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.167879][ T5677] device bridge_slave_0 entered promiscuous mode [ 187.240313][ T5700] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 187.290058][ T3791] usb 2-1: USB disconnect, device number 4 [ 187.376584][ T5677] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.386897][ T5677] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.410421][ T5677] device bridge_slave_1 entered promiscuous mode [ 187.417818][ T3561] Bluetooth: hci2: command tx timeout [ 187.564103][ T3849] device hsr_slave_0 left promiscuous mode [ 187.573724][ T5718] loop3: detected capacity change from 0 to 32768 [ 187.581140][ T3849] device hsr_slave_1 left promiscuous mode [ 187.596830][ T3849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.609680][ T5718] XFS: noikeep mount option is deprecated. [ 187.618865][ T3849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.665168][ T41] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 187.703073][ T3849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.712098][ T5718] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 187.727147][ T3849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.736891][ T3849] device bridge_slave_1 left promiscuous mode [ 187.743380][ T3849] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.765673][ T5718] XFS (loop3): Quotacheck needed: Please wait. [ 187.781212][ T3849] device bridge_slave_0 left promiscuous mode [ 187.792359][ T3849] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.823997][ T5718] XFS (loop3): Quotacheck: Done. [ 187.883159][ T3849] device veth1_macvtap left promiscuous mode [ 187.890630][ T3849] device veth0_macvtap left promiscuous mode [ 187.893389][ T4951] XFS (loop3): Unmounting Filesystem [ 187.897745][ T3849] device veth1_vlan left promiscuous mode [ 187.910326][ T3849] device veth0_vlan left promiscuous mode [ 188.045734][ T41] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 188.075384][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.100196][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.111671][ T41] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 188.126630][ T41] usb 5-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 188.136950][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.154126][ T41] usb 5-1: config 0 descriptor?? [ 188.380894][ C0] vxcan0: j1939_tp_txtimer: 0xffff8880283ee400: tx aborted with unknown reason: -2 [ 188.405667][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880283ecc00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 188.427451][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880283ee400: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 188.648673][ T41] thrustmaster 0003:044F:B653.0006: unbalanced delimiter at end of report description [ 188.689240][ T41] thrustmaster 0003:044F:B653.0006: parse failed [ 188.696219][ T41] thrustmaster: probe of 0003:044F:B653.0006 failed with error -22 [ 188.933958][ T14] usb 5-1: USB disconnect, device number 5 [ 189.211362][ T3849] team0 (unregistering): Port device team_slave_1 removed [ 189.313475][ T3849] team0 (unregistering): Port device team_slave_0 removed [ 189.316828][ T5794] loop3: detected capacity change from 0 to 2048 [ 189.530732][ T3849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.869280][ T3849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.979258][ T3561] Bluetooth: hci2: command tx timeout [ 190.067557][ T5794] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 190.123323][ T5794] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm syz.3.566: Invalid inode table block 0 in block_group 0 [ 190.146784][ T5794] EXT4-fs error (device loop3): empty_inline_dir:1832: inode #12: comm syz.3.566: error -117 getting inode 12 block [ 190.215516][ T4951] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 190.226674][ T5802] loop4: detected capacity change from 0 to 4096 [ 190.252859][ T5802] ntfs: (device loop4): parse_ntfs_boot_sector(): Mft record size (131072) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 190.252908][ T4951] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 190.275572][ T5802] ntfs: (device loop4): ntfs_fill_super(): Unsupported NTFS filesystem. [ 190.301077][ T4951] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #2: comm syz-executor: mark_inode_dirty error [ 190.336929][ T4951] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 190.375935][ T4951] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 190.803466][ T3849] bond0 (unregistering): Released all slaves [ 190.915363][ T5758] netlink: 56 bytes leftover after parsing attributes in process `syz.0.554'. [ 190.959203][ T5806] loop4: detected capacity change from 0 to 40427 [ 191.066254][ T5677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.113528][ T5677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.132918][ T5806] F2FS-fs (loop4): invalid crc value [ 191.176405][ T5806] F2FS-fs (loop4): Found nat_bits in checkpoint [ 191.221212][ T5677] team0: Port device team_slave_0 added [ 191.237910][ T5677] team0: Port device team_slave_1 added [ 191.243639][ T3848] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm kworker/u4:8: Invalid inode table block 0 in block_group 0 [ 191.277886][ T5816] loop1: detected capacity change from 0 to 8 [ 191.320837][ T4951] EXT4-fs (loop3): unmounting filesystem. [ 191.350772][ T5677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.393666][ T5677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.435331][ T5816] SQUASHFS error: Unable to read inode 0x11f [ 191.452099][ T5806] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 191.483974][ T5806] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 191.568369][ T5677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.662864][ T5677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.722682][ T5677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.751260][ T5677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.948691][ T5677] device hsr_slave_0 entered promiscuous mode [ 192.002566][ T5677] device hsr_slave_1 entered promiscuous mode [ 192.032455][ T5677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.055177][ T3561] Bluetooth: hci2: command tx timeout [ 192.067962][ T5828] loop1: detected capacity change from 0 to 2048 [ 192.095357][ T5677] Cannot create hsr debugfs directory [ 192.339713][ T5828] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 192.423458][ T3568] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.275275][ T3568] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.367429][ T3568] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.375907][ T3568] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.383597][ T3568] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 193.391566][ T3568] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.555020][ T4762] EXT4-fs (loop1): unmounting filesystem. [ 193.882388][ T5853] loop1: detected capacity change from 0 to 512 [ 194.136892][ T1257] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.143797][ T1257] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.152232][ T3568] Bluetooth: hci2: command tx timeout [ 194.361599][ T5853] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 194.700194][ T5853] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 194.760595][ T5853] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.580: Corrupt directory, running e2fsck is recommended [ 194.856211][ T5853] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 194.867877][ T5853] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.580: corrupted in-inode xattr [ 194.880414][ T5853] EXT4-fs (loop1): Remounting filesystem read-only [ 194.895339][ T5853] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.580: couldn't read orphan inode 15 (err -117) [ 194.928658][ T5853] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 195.000126][ T5853] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 195.030448][ T5853] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 195.065631][ T5853] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.580: Corrupt directory, running e2fsck is recommended [ 195.360185][ T5853] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 195.371817][ T5853] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 195.381987][ T5853] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.580: Corrupt directory, running e2fsck is recommended [ 195.397541][ T5853] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 195.409604][ T5853] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 195.421120][ T5853] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.580: Corrupt directory, running e2fsck is recommended [ 195.436199][ T5853] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 195.449082][ T5853] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #2: block 3: comm syz.1.580: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 195.495350][ T3561] Bluetooth: hci3: command tx timeout [ 195.522376][ T5853] EXT4-fs (loop1): Remounting filesystem read-only [ 195.774256][ T4762] EXT4-fs (loop1): unmounting filesystem. [ 196.059233][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 196.202432][ T5893] netlink: 76 bytes leftover after parsing attributes in process `syz.1.591'. [ 197.261240][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.285292][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.307683][ T5838] device bridge_slave_0 entered promiscuous mode [ 197.347451][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.367353][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.395950][ T5838] device bridge_slave_1 entered promiscuous mode [ 197.516070][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.575325][ T3561] Bluetooth: hci3: command tx timeout [ 197.597431][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.140269][ T5838] team0: Port device team_slave_0 added [ 198.162058][ T5677] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 198.197490][ T5838] team0: Port device team_slave_1 added [ 198.223828][ T5677] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 198.342582][ T5677] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 198.450109][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.465007][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.535174][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.564537][ T5677] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 198.641516][ T5937] netlink: 76 bytes leftover after parsing attributes in process `syz.4.602'. [ 198.716123][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.731151][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.516184][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.657030][ T3561] Bluetooth: hci3: command tx timeout [ 199.685471][ T4279] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 199.818911][ T5838] device hsr_slave_0 entered promiscuous mode [ 199.873587][ T5838] device hsr_slave_1 entered promiscuous mode [ 199.905365][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.925215][ T5838] Cannot create hsr debugfs directory [ 199.930786][ T5955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.608'. [ 200.095971][ T4279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.147680][ T4279] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.178320][ T4279] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.195759][ T4279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.233991][ T4279] usb 1-1: config 0 descriptor?? [ 200.454344][ T5677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.461258][ T41] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 200.613467][ T3849] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.658558][ T3793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.674484][ T3793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.685919][ T5677] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.728051][ T4279] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 200.745518][ T3849] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.788656][ T4279] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 200.825500][ T41] usb 2-1: config 1 has an invalid interface number: 3 but max is 2 [ 200.843678][ T41] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 200.876266][ T41] usb 2-1: config 1 has no interface number 1 [ 200.883115][ T41] usb 2-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 200.901572][ T41] usb 2-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 200.915022][ T41] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.993751][ T3849] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.039262][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.049508][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.058859][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.066044][ T4281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.074154][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.100166][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.105416][ T41] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.109265][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.124387][ T4281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.134542][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.153361][ T41] usb 2-1: Product: syz [ 201.165302][ T41] usb 2-1: Manufacturer: syz [ 201.171689][ T41] usb 2-1: SerialNumber: syz [ 201.223814][ T3849] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.283230][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.301968][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.323621][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.343765][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.354989][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.512506][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.540889][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.600686][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.620891][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.643115][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.745362][ T3561] Bluetooth: hci3: command tx timeout [ 202.140960][ T3793] usb 1-1: USB disconnect, device number 8 [ 202.412055][ T5677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.449090][ T5677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.472066][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.481722][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.050555][ T6022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.618'. [ 203.678470][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 206.074803][ T5677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.106093][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.113642][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.403810][ T41] hub 2-1:1.3: bad descriptor, ignoring hub [ 206.416665][ T41] hub: probe of 2-1:1.3 failed with error -5 [ 206.466209][ T41] usb 2-1: USB disconnect, device number 5 [ 206.469561][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.491463][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.985929][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.057708][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.256324][ T5677] device veth0_vlan entered promiscuous mode [ 207.375199][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.506021][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.557048][ T5677] device veth1_vlan entered promiscuous mode [ 207.710717][ T3626] udevd[3626]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.726730][ T6089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.635'. [ 208.636872][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.646250][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.656957][ T5677] device veth0_macvtap entered promiscuous mode [ 208.878283][ T5677] device veth1_macvtap entered promiscuous mode [ 208.952790][ T3793] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 209.011320][ T5677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.056426][ T5677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.374502][ T5677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.455631][ T3793] usb 1-1: config 1 has an invalid interface number: 3 but max is 2 [ 209.487760][ T3793] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 209.695245][ T5677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.725272][ T3793] usb 1-1: config 1 has no interface number 1 [ 209.741802][ T5677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.755217][ T3793] usb 1-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 209.785384][ T3793] usb 1-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 209.799163][ T5677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.817342][ T3793] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.819346][ T5677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.839051][ T5677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.851922][ T5677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.974452][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.003392][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.040977][ T6119] loop4: detected capacity change from 0 to 256 [ 210.043610][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.074193][ T6119] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 210.086409][ T3793] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 210.096142][ T5677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.100238][ T3793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.109420][ T5677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.131348][ T6119] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 210.141905][ T3793] usb 1-1: Product: syz [ 210.146534][ T3793] usb 1-1: Manufacturer: syz [ 210.151978][ T3793] usb 1-1: SerialNumber: syz [ 210.153204][ T5677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.159646][ T6119] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 210.183313][ T26] audit: type=1800 audit(1720712970.266:24): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.638" name="file1" dev="loop4" ino=1048637 res=0 errno=0 [ 210.195141][ T5677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.222163][ T5677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.236323][ T5677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.246667][ T5677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.261750][ T5677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.283635][ T5677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.299248][ T5677] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.328770][ T5677] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.343423][ T26] audit: type=1326 audit(1720712970.426:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.4.638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2d5375bd9 code=0x0 [ 210.375103][ T5677] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.394089][ T5677] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.483277][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.498852][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.511303][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.593812][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.619342][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.849398][ T26] audit: type=1326 audit(1720712972.936:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.4.654" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2d5375bd9 code=0x0 [ 213.414994][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.523905][ T6182] netlink: 67 bytes leftover after parsing attributes in process `syz.4.654'. [ 213.543352][ T6182] IPv6: NLM_F_CREATE should be specified when creating new route [ 213.570900][ T6182] IPv6: Can't replace route, no match found [ 213.644220][ T3793] hub 1-1:1.3: bad descriptor, ignoring hub [ 213.660565][ T3793] hub: probe of 1-1:1.3 failed with error -5 [ 213.774601][ T3793] usb 1-1: USB disconnect, device number 9 [ 213.809469][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.049590][ T3848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.095637][ T3849] device hsr_slave_0 left promiscuous mode [ 214.102301][ T3848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.112200][ T3849] device hsr_slave_1 left promiscuous mode [ 214.127033][ T3849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.156790][ T3849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.168354][ T3849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.184380][ T3849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.223146][ T3849] device bridge_slave_1 left promiscuous mode [ 214.231699][ T3849] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.252045][ T3849] device bridge_slave_0 left promiscuous mode [ 214.260031][ T3849] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.295378][ T3561] Bluetooth: hci3: command tx timeout [ 215.292602][ T3849] device veth1_macvtap left promiscuous mode [ 215.299618][ T3849] device veth0_macvtap left promiscuous mode [ 215.306960][ T3849] device veth1_vlan left promiscuous mode [ 215.328595][ T3849] device veth0_vlan left promiscuous mode [ 215.833517][ T3849] team0 (unregistering): Port device team_slave_1 removed [ 215.871335][ T3849] team0 (unregistering): Port device team_slave_0 removed [ 215.914029][ T3849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.952576][ T3849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.332261][ T3849] bond0 (unregistering): Released all slaves [ 216.415335][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.425552][ T6205] netlink: 112 bytes leftover after parsing attributes in process `syz.0.662'. [ 216.573789][ T6217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.664'. [ 216.577184][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.611553][ T6219] loop4: detected capacity change from 0 to 256 [ 216.620780][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.657373][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.677600][ T6219] FAT-fs (loop4): bogus number of FAT sectors [ 216.678683][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 216.683708][ T6219] FAT-fs (loop4): Can't find a valid FAT filesystem [ 216.750243][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.759135][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.781292][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.861691][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.875938][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.903538][ T3788] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.910839][ T3788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.944615][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.099696][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.176418][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 217.830486][ T41] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 217.840745][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.849479][ T3791] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.856681][ T3791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.864580][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.901802][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.936346][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.976156][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.025489][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.033737][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.085426][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.094187][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.136292][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.171083][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.205960][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.215722][ T41] usb 2-1: config 1 has an invalid interface number: 3 but max is 2 [ 218.223849][ T41] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 218.255643][ T41] usb 2-1: config 1 has no interface number 1 [ 218.265469][ T41] usb 2-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 218.285449][ T5838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.306085][ T41] usb 2-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 218.335152][ T41] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.497625][ T4279] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 218.545372][ T41] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.585210][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.603463][ T41] usb 2-1: Product: syz [ 218.607901][ T41] usb 2-1: Manufacturer: syz [ 218.623708][ T41] usb 2-1: SerialNumber: syz [ 218.881012][ T4279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.892371][ T4279] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.906044][ T4279] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.917759][ T4279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.957801][ T4279] usb 5-1: config 0 descriptor?? [ 219.158010][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.182858][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.211746][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.307178][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.340736][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.424357][ T26] audit: type=1326 audit(1720712979.506:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.2.686" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1e2d75bd9 code=0x0 [ 219.476145][ T4279] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 219.488127][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.498901][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.513673][ T4279] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 221.437359][ T3696] usb 5-1: USB disconnect, device number 6 [ 221.719264][ T6301] netlink: 60 bytes leftover after parsing attributes in process `syz.0.691'. [ 221.745229][ T6301] netlink: 172 bytes leftover after parsing attributes in process `syz.0.691'. [ 222.834098][ T5838] device veth0_vlan entered promiscuous mode [ 222.841984][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.851024][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.859691][ T6284] netlink: 67 bytes leftover after parsing attributes in process `syz.2.686'. [ 222.868688][ T6284] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.890226][ T6284] IPv6: Can't replace route, no match found [ 222.951159][ T5838] device veth1_vlan entered promiscuous mode [ 223.048680][ T41] hub 2-1:1.3: bad descriptor, ignoring hub [ 223.085161][ T41] hub: probe of 2-1:1.3 failed with error -5 [ 223.087517][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.127779][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.176234][ T41] usb 2-1: USB disconnect, device number 6 [ 223.188974][ T5838] device veth0_macvtap entered promiscuous mode [ 223.242452][ T5838] device veth1_macvtap entered promiscuous mode [ 223.269330][ T6315] loop4: detected capacity change from 0 to 512 [ 223.338889][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.369561][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.400950][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.436319][ T6315] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 223.465198][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.495367][ T6315] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038 (0x7fffffff) [ 223.571943][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.603070][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.633622][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.659327][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.674647][ T4868] EXT4-fs (loop4): unmounting filesystem. [ 223.683809][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.704043][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 223.726652][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.746153][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.761169][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.790774][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.810970][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.832421][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.868225][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.894432][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.918301][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.960602][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.991513][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.032463][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.076280][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 224.085025][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.150028][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.184732][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.197875][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.209182][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.397447][ T6345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.706'. [ 224.449509][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.497228][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.514316][ T6311] loop1: detected capacity change from 0 to 32768 [ 224.576722][ T6311] XFS: noikeep mount option is deprecated. [ 224.603785][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 224.642386][ T6311] XFS (loop1): Mounting V5 Filesystem [ 224.686785][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.700058][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.721930][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 224.821512][ T6311] XFS (loop1): Ending clean mount [ 224.825401][ T4279] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 224.852656][ T6311] XFS (loop1): Quotacheck needed: Please wait. [ 224.858640][ T6363] loop2: detected capacity change from 0 to 512 [ 224.909241][ T6311] XFS (loop1): Quotacheck: Done. [ 225.206010][ T4279] usb 1-1: config 1 has an invalid interface number: 3 but max is 2 [ 225.227202][ T6363] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 225.255892][ T4279] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 225.299430][ T6363] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 225.372552][ T4279] usb 1-1: config 1 has no interface number 1 [ 225.482947][ T4279] usb 1-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 225.680629][ T4279] usb 1-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 225.796885][ T4279] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.844163][ T4762] XFS (loop1): Unmounting Filesystem [ 225.910249][ T5677] EXT4-fs (loop2): unmounting filesystem. [ 225.975275][ T4279] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.994509][ T4279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.055254][ T4279] usb 1-1: Product: syz [ 226.059581][ T4279] usb 1-1: Manufacturer: syz [ 226.064246][ T4279] usb 1-1: SerialNumber: syz [ 227.076171][ T6393] program syz.3.717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.359863][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 227.615206][ T3793] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 228.721594][ T3793] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 228.730658][ T3793] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.742526][ T3793] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 228.751990][ T3793] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.836329][ T6411] loop3: detected capacity change from 0 to 32768 [ 228.843509][ T6411] XFS: noikeep mount option is deprecated. [ 228.918501][ T3793] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 228.929111][ T3793] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 228.943752][ T3793] usb 3-1: Product: syz [ 228.948500][ T3793] usb 3-1: Manufacturer: syz [ 228.962085][ T6411] XFS (loop3): Mounting V5 Filesystem [ 229.075995][ T6411] XFS (loop3): Ending clean mount [ 229.105256][ T6411] XFS (loop3): Quotacheck needed: Please wait. [ 229.160567][ T3793] cdc_wdm 3-1:1.0: skipping garbage [ 229.168001][ T3793] cdc_wdm 3-1:1.0: skipping garbage [ 229.179766][ T3793] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 229.185872][ T3793] cdc_wdm 3-1:1.0: Unknown control protocol [ 229.187873][ T6411] XFS (loop3): Quotacheck: Done. [ 229.336777][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 229.932861][ T3793] usb 3-1: USB disconnect, device number 3 [ 229.939186][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 229.939387][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 229.939400][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 230.019431][ T5838] XFS (loop3): Unmounting Filesystem [ 230.540177][ T26] audit: type=1326 audit(1720712990.626:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.3.730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe04b175bd9 code=0x0 [ 232.459548][ T4279] hub 1-1:1.3: bad descriptor, ignoring hub [ 232.465621][ T4279] hub: probe of 1-1:1.3 failed with error -5 [ 232.632487][ T6451] netlink: 67 bytes leftover after parsing attributes in process `syz.3.730'. [ 232.653494][ T6451] IPv6: NLM_F_CREATE should be specified when creating new route [ 232.685669][ T6451] IPv6: Can't replace route, no match found [ 232.792400][ T4279] usb 1-1: USB disconnect, device number 10 [ 233.139980][ T6486] loop2: detected capacity change from 0 to 1764 [ 233.182501][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.745'. [ 233.205902][ T4279] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 233.237603][ T3699] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 233.330074][ T6486] loop2: detected capacity change from 0 to 256 [ 233.418985][ T6486] FAT-fs (loop2): bogus number of FAT sectors [ 233.435880][ T6486] FAT-fs (loop2): Can't find a valid FAT filesystem [ 233.460450][ T6504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.748'. [ 233.482435][ T6503] loop1: detected capacity change from 0 to 128 [ 233.530082][ T6503] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 233.579032][ T4279] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 233.593276][ T6503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.604567][ T4279] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.637275][ T4279] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 233.646697][ T4279] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.775531][ T4279] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 233.789973][ T4279] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 233.808663][ T4279] usb 4-1: Product: syz [ 233.812883][ T4279] usb 4-1: Manufacturer: syz [ 233.818288][ T3696] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 234.686668][ T4279] cdc_wdm 4-1:1.0: skipping garbage [ 234.691946][ T4279] cdc_wdm 4-1:1.0: skipping garbage [ 234.703718][ T4279] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 234.710025][ T4279] cdc_wdm 4-1:1.0: Unknown control protocol [ 234.739333][ T4279] usb 4-1: USB disconnect, device number 6 [ 234.922809][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'. [ 234.932854][ T3696] usb 5-1: config 1 has an invalid interface number: 3 but max is 2 [ 234.950394][ T3696] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 234.966155][ T3696] usb 5-1: config 1 has no interface number 1 [ 234.975559][ T3696] usb 5-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 234.992664][ T3696] usb 5-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 235.014730][ T3696] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.195595][ T3696] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.211882][ T3696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.254923][ T3696] usb 5-1: Product: syz [ 235.269542][ T3696] usb 5-1: Manufacturer: syz [ 235.283150][ T3696] usb 5-1: SerialNumber: syz [ 235.305923][ T4279] kernel read not supported for file /dsp (pid: 4279 comm: kworker/0:11) [ 235.443699][ T3568] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.454472][ T3568] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.495290][ T3566] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.508429][ T3568] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.518080][ T3566] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 235.526845][ T3568] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.744430][ T5475] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.066261][ T3795] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 237.476343][ T3795] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 237.485018][ T3795] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.496392][ T3795] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 237.506025][ T3795] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.583079][ T3561] Bluetooth: hci4: command tx timeout [ 237.635369][ T3795] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 237.649190][ T3795] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 237.660758][ T3795] usb 3-1: Product: syz [ 237.665238][ T3795] usb 3-1: Manufacturer: syz [ 237.766292][ T3795] cdc_wdm 3-1:1.0: skipping garbage [ 237.771857][ T3795] cdc_wdm 3-1:1.0: skipping garbage [ 237.789675][ T3795] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 237.795873][ T3795] cdc_wdm 3-1:1.0: Unknown control protocol [ 237.985090][ T3795] usb 3-1: USB disconnect, device number 4 [ 238.277671][ T3795] kernel read not supported for file /dsp (pid: 3795 comm: kworker/1:17) [ 238.432520][ T6586] loop3: detected capacity change from 0 to 1764 [ 238.539342][ T6586] loop3: detected capacity change from 0 to 256 [ 238.562014][ T6586] FAT-fs (loop3): bogus number of FAT sectors [ 238.593707][ T6586] FAT-fs (loop3): Can't find a valid FAT filesystem [ 238.733979][ T6588] loop3: detected capacity change from 0 to 512 [ 238.786069][ T6588] EXT4-fs (loop3): 1 truncate cleaned up [ 238.791874][ T6588] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 238.991093][ T5838] EXT4-fs (loop3): unmounting filesystem. [ 239.665358][ T3561] Bluetooth: hci4: command tx timeout [ 241.055107][ T6609] loop2: detected capacity change from 0 to 2048 [ 241.094890][ T3696] hub 5-1:1.3: bad descriptor, ignoring hub [ 241.101744][ T3696] hub: probe of 5-1:1.3 failed with error -5 [ 241.257993][ T6609] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 241.267562][ T6609] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff) [ 241.337311][ T6609] fs-verity: sha512 using implementation "sha512-avx2" [ 241.427583][ T5677] EXT4-fs (loop2): unmounting filesystem. [ 241.600273][ T5475] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.615285][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.774'. [ 241.701147][ T5475] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.726738][ T3696] usb 5-1: USB disconnect, device number 7 [ 241.735356][ T3561] Bluetooth: hci4: command tx timeout [ 241.740943][ T3787] kernel read not supported for file /dsp (pid: 3787 comm: kworker/1:11) [ 241.849616][ T5475] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.253531][ T6635] block nbd1: shutting down sockets [ 242.318363][ T6541] chnl_net:caif_netlink_parms(): no params data found [ 242.442538][ T6643] loop3: detected capacity change from 0 to 2048 [ 242.481293][ T6646] loop2: detected capacity change from 0 to 512 [ 242.502419][ T6643] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.558880][ T6646] EXT4-fs (loop2): 1 truncate cleaned up [ 242.564596][ T6646] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 242.668942][ T5677] EXT4-fs (loop2): unmounting filesystem. [ 242.694590][ T6650] loop1: detected capacity change from 0 to 4096 [ 243.177281][ T6541] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.198881][ T6541] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.224428][ T6541] device bridge_slave_0 entered promiscuous mode [ 243.325483][ T6541] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.333392][ T6541] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.366802][ T6541] device bridge_slave_1 entered promiscuous mode [ 243.405183][ T3667] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 243.450115][ T7] kernel read not supported for file /dsp (pid: 7 comm: kworker/0:0) [ 243.518861][ T6541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.581593][ T6541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.603754][ T6687] block nbd3: shutting down sockets [ 243.760788][ T6695] loop3: detected capacity change from 0 to 128 [ 243.809069][ T3667] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 243.814857][ T6695] tmpfs: Bad value for 'nr_inodes' [ 243.820485][ T3561] Bluetooth: hci4: command tx timeout [ 243.837195][ T3667] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.860244][ T3667] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 243.869777][ T3667] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.872803][ T6691] IPVS: Scheduler module ip_vs_sip not found [ 244.019859][ T3667] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 244.071037][ T3667] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 244.107578][ T3667] usb 3-1: Product: syz [ 244.112083][ T3667] usb 3-1: Manufacturer: syz [ 244.331266][ T6541] team0: Port device team_slave_0 added [ 244.473966][ T6700] loop1: detected capacity change from 0 to 4096 [ 245.014645][ T3699] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 245.094185][ T3667] cdc_wdm 3-1:1.0: skipping garbage [ 245.102360][ T3667] cdc_wdm 3-1:1.0: skipping garbage [ 245.110268][ T3667] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 245.116260][ T3667] cdc_wdm 3-1:1.0: Unknown control protocol [ 245.293152][ T14] usb 3-1: USB disconnect, device number 5 [ 245.299254][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 245.299287][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 245.299313][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 245.370673][ T6541] team0: Port device team_slave_1 added [ 245.602322][ T6541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.621552][ T6541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.658009][ T6541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.777796][ T6541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.795872][ T6541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.912134][ T6541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.093281][ T6731] loop2: detected capacity change from 0 to 2048 [ 247.171668][ T6541] device hsr_slave_0 entered promiscuous mode [ 247.223029][ T6541] device hsr_slave_1 entered promiscuous mode [ 247.285301][ T6731] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.523544][ T3568] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 247.534994][ T3568] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 247.543767][ T3568] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 247.551928][ T3568] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 247.561425][ T3568] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 247.569024][ T3568] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 248.003222][ T6752] loop1: detected capacity change from 0 to 1024 [ 248.040231][ T6752] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 248.194159][ T6752] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 248.373539][ T6759] EXT4-fs error (device loop1): ext4_lookup:1855: inode #12: comm syz.1.827: iget: bad extended attribute block 768799145984 [ 248.624684][ T5475] device hsr_slave_0 left promiscuous mode [ 248.633397][ T4762] EXT4-fs (loop1): unmounting filesystem. [ 248.669992][ T5475] device hsr_slave_1 left promiscuous mode [ 248.696041][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.703527][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.726180][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.757124][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.770581][ T5475] device bridge_slave_1 left promiscuous mode [ 248.787852][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.824830][ T5475] device bridge_slave_0 left promiscuous mode [ 248.834875][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.948627][ T5475] device veth1_macvtap left promiscuous mode [ 248.954936][ T5475] device veth0_macvtap left promiscuous mode [ 248.972362][ T5475] device veth1_vlan left promiscuous mode [ 248.982822][ T5475] device veth0_vlan left promiscuous mode [ 249.952482][ T3561] Bluetooth: hci3: command tx timeout [ 250.174879][ T6787] Zero length message leads to an empty skb [ 250.239666][ T3561] Bluetooth: hci2: ISO packet too small [ 250.591069][ T5475] team0 (unregistering): Port device team_slave_1 removed [ 250.632426][ T5475] team0 (unregistering): Port device team_slave_0 removed [ 250.671829][ T5475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.728159][ T5475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.134608][ T5475] bond0 (unregistering): Released all slaves [ 251.225802][ T6787] netlink: 'syz.2.838': attribute type 7 has an invalid length. [ 251.233470][ T6787] netlink: 'syz.2.838': attribute type 39 has an invalid length. [ 251.465172][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.839'. [ 251.617962][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.843'. [ 251.982236][ T3561] Bluetooth: hci3: command tx timeout [ 252.007113][ T6811] loop4: detected capacity change from 0 to 4096 [ 252.033259][ T6811] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 252.571836][ T6832] Dead loop on virtual device ipvlan1, fix it urgently! [ 252.623178][ T6737] chnl_net:caif_netlink_parms(): no params data found [ 252.895260][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.853'. [ 252.961663][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.980661][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.989190][ T6737] device bridge_slave_0 entered promiscuous mode [ 253.006386][ T6737] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.013589][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.042560][ T6737] device bridge_slave_1 entered promiscuous mode [ 253.064087][ T6541] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 253.106300][ T6541] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 253.154960][ T6541] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 253.188195][ T6737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.218136][ T6541] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 253.262253][ T6737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.287901][ T6832] syz.1.850 (6832) used greatest stack depth: 9504 bytes left [ 253.323947][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.856'. [ 253.360426][ T6737] team0: Port device team_slave_0 added [ 253.371863][ T6737] team0: Port device team_slave_1 added [ 253.491194][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.531842][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.619089][ T6737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.663326][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.680989][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.769532][ T6737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.824026][ T6858] kvm [6857]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x4500004b00 [ 253.957384][ T6737] device hsr_slave_0 entered promiscuous mode [ 253.979429][ T6737] device hsr_slave_1 entered promiscuous mode [ 254.004656][ T6737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.015165][ T6737] Cannot create hsr debugfs directory [ 254.055459][ T3568] Bluetooth: hci3: command tx timeout [ 254.090757][ T6865] loop4: detected capacity change from 0 to 4096 [ 254.107632][ T6865] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 254.175605][ T6541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.327911][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.347806][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.379825][ T6541] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.422873][ T6865] ntfs3: loop4: ino=1d, "file0" attr_set_size [ 254.439321][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.457353][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.485642][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.492853][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.655995][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.664211][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.709070][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.744988][ T3696] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.752223][ T3696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.802513][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.832900][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.862617][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 255.013230][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 255.670198][ T1257] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.676610][ T1257] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.708058][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.802988][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.844000][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.863519][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 255.883461][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.904757][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 255.923222][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.943145][ T6541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 256.135205][ T3566] Bluetooth: hci3: command tx timeout [ 256.205495][ T3696] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 256.489851][ T6737] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.565663][ T3696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.615145][ T3696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.635162][ T3696] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 257.497376][ T3696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.524071][ T3696] usb 2-1: config 0 descriptor?? [ 257.609809][ T6737] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.815615][ T3568] Bluetooth: hci1: command 0x0406 tx timeout [ 257.916735][ T6737] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.955302][ T3696] usbhid 2-1:0.0: can't add hid device: -71 [ 257.961500][ T3696] usbhid: probe of 2-1:0.0 failed with error -71 [ 258.015794][ T6935] loop2: detected capacity change from 0 to 1024 [ 258.023065][ T3696] usb 2-1: USB disconnect, device number 7 [ 258.040940][ T6934] netlink: 'syz.1.877': attribute type 11 has an invalid length. [ 258.075687][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.083255][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.094345][ T6541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.119266][ T6935] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.879: Invalid block bitmap block 0 in block_group 0 [ 258.119714][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.143391][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.241501][ T6737] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.263297][ T6935] Quota error (device loop2): write_blk: dquota write failed [ 258.325304][ T6935] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 258.336489][ T6935] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.879: Failed to acquire dquot type 0 [ 258.364059][ T6935] EXT4-fs error (device loop2): ext4_free_blocks:6213: comm syz.2.879: Freeing blocks not in datazone - block = 0, count = 4096 [ 258.370374][ T6541] device veth0_vlan entered promiscuous mode [ 258.418280][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.430512][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.460301][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.475976][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.540912][ T6541] device veth1_vlan entered promiscuous mode [ 258.567921][ T6935] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.879: Invalid inode bitmap blk 0 in block_group 0 [ 258.607684][ T3849] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 258.630778][ T6935] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 258.653407][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 258.703475][ T3849] EXT4-fs error (device loop2): ext4_release_dquot:6800: comm kworker/u4:9: Failed to release dquot type 0 [ 258.736194][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 258.738572][ T6935] EXT4-fs (loop2): 1 orphan inode deleted [ 258.750950][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.759380][ T6935] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 258.781250][ T6541] device veth0_macvtap entered promiscuous mode [ 258.815707][ T6541] device veth1_macvtap entered promiscuous mode [ 258.895450][ T6541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.925091][ T6541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.955206][ T3667] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 258.958950][ T6541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.983540][ T6541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.995449][ T6541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.006302][ T6541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.017789][ T6541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.028506][ T6541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.042870][ T6541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.042999][ T5677] EXT4-fs (loop2): unmounting filesystem. [ 259.074826][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.120012][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 259.138650][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.158926][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.192278][ T6541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.208828][ T3667] usb 2-1: Using ep0 maxpacket: 16 [ 259.217874][ T6541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.229454][ T6541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.251561][ T6541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.269189][ T6541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.322943][ T6541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.381790][ T6963] loop4: detected capacity change from 0 to 2048 [ 259.388490][ T6541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.399185][ T3667] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 259.409495][ T6963] UDF-fs: bad mount option "ocharset=macroman" or missing value [ 259.417922][ T6541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.427937][ T3667] usb 2-1: config 0 has no interface number 0 [ 259.434276][ T3667] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 259.451324][ T6541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.459180][ T3667] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 259.505231][ T3699] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 259.543408][ T6541] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.575144][ T6541] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.583908][ T6541] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.605311][ T3667] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 259.620554][ T3667] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 259.635130][ T3667] usb 2-1: Product: syz [ 259.639590][ T6541] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.648786][ T3667] usb 2-1: SerialNumber: syz [ 259.669460][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.680306][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.697107][ T3667] usb 2-1: config 0 descriptor?? [ 259.747681][ T3667] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 259.773508][ T3667] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input8 [ 260.029402][ T6977] netlink: 'syz.4.890': attribute type 11 has an invalid length. [ 260.094557][ T4282] usb 2-1: USB disconnect, device number 8 [ 260.105654][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 260.113627][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 260.125852][ T6737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.183836][ T4282] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 260.242175][ T6737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 260.266903][ T6737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 260.275292][ T14] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 260.351753][ T6737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 260.479939][ T3851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.522938][ T3851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.608299][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 260.746833][ T3851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.801212][ T3851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.815368][ T14] usb 3-1: New USB device found, idVendor=0586, idProduct=330b, bcdDevice=ad.1a [ 260.859708][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.892671][ T14] usb 3-1: Product: syz [ 260.909567][ T14] usb 3-1: Manufacturer: syz [ 260.922916][ T14] usb 3-1: SerialNumber: syz [ 260.969170][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 260.984941][ T14] usb 3-1: config 0 descriptor?? [ 261.202360][ T6737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.249952][ T7004] loop4: detected capacity change from 0 to 256 [ 261.275443][ T14] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 261.381619][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.396410][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.483628][ T14] usb 3-1: USB disconnect, device number 6 [ 261.528807][ T7010] loop1: detected capacity change from 0 to 2048 [ 261.566559][ T7010] UDF-fs: bad mount option "ocharset=macroman" or missing value [ 261.599354][ T6737] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.664233][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.689717][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.734446][ T3696] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.741738][ T3696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.077019][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.103426][ T7024] loop4: detected capacity change from 0 to 1024 [ 262.112097][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.156007][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.179103][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.186342][ T4280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.214446][ T7024] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.903: Invalid block bitmap block 0 in block_group 0 [ 262.329812][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.366942][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.380880][ T3566] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 262.380990][ T7024] Quota error (device loop4): write_blk: dquota write failed [ 262.397301][ T7024] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 262.407869][ T3566] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 262.419332][ T3566] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 262.429221][ T3566] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.437159][ T3566] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 262.444557][ T3566] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.453861][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.468135][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.513924][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.522573][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.544285][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.574469][ T7024] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.903: Failed to acquire dquot type 0 [ 262.594941][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.631425][ T7024] EXT4-fs error (device loop4): ext4_free_blocks:6213: comm syz.4.903: Freeing blocks not in datazone - block = 0, count = 4096 [ 262.653801][ T7024] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.903: Invalid inode bitmap blk 0 in block_group 0 [ 262.679034][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.679223][ T7024] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 262.706030][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.706883][ T7024] EXT4-fs (loop4): 1 orphan inode deleted [ 262.714824][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.728250][ T7024] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 262.785380][ T3568] Bluetooth: hci0: command 0x0406 tx timeout [ 262.819611][ T6737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 262.831937][ T1174] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 262.847556][ T1174] EXT4-fs error (device loop4): ext4_release_dquot:6800: comm kworker/u4:6: Failed to release dquot type 0 [ 262.900263][ T4868] EXT4-fs (loop4): unmounting filesystem. [ 263.120538][ T7049] loop4: detected capacity change from 0 to 2048 [ 263.145616][ T7049] UDF-fs: bad mount option "ocharset=macroman" or missing value [ 263.423658][ T5475] device hsr_slave_0 left promiscuous mode [ 263.451013][ T5475] device hsr_slave_1 left promiscuous mode [ 263.462351][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.495818][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.537114][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.544624][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.578228][ T5475] device bridge_slave_1 left promiscuous mode [ 263.584535][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.634259][ T5475] device bridge_slave_0 left promiscuous mode [ 263.664002][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.808462][ T5475] device veth1_macvtap left promiscuous mode [ 263.814574][ T5475] device veth0_macvtap left promiscuous mode [ 263.845436][ T5475] device veth1_vlan left promiscuous mode [ 263.851342][ T5475] device veth0_vlan left promiscuous mode [ 264.104445][ T3561] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.126493][ T3561] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.138485][ T3561] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.148041][ T3561] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.156269][ T3561] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 264.163851][ T3561] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.384878][ T26] audit: type=1326 audit(1720713024.466:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e2d75bd9 code=0x7fc00000 [ 264.462783][ T3561] Bluetooth: hci5: command tx timeout [ 264.490431][ T26] audit: type=1326 audit(1720713024.576:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff1e2d6cc27 code=0x7fc00000 [ 264.555291][ T26] audit: type=1326 audit(1720713024.576:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff1e2d115f9 code=0x7fc00000 [ 264.605148][ T26] audit: type=1326 audit(1720713024.576:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff1e2d116bf code=0x7fc00000 [ 264.660937][ T26] audit: type=1326 audit(1720713024.576:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff1e2d75bd9 code=0x7fc00000 [ 264.993648][ T5475] team0 (unregistering): Port device team_slave_1 removed [ 265.053528][ T5475] team0 (unregistering): Port device team_slave_0 removed [ 265.149364][ T5475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.200515][ T5475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.272275][ T7090] loop2: detected capacity change from 0 to 256 [ 265.297306][ T7090] exfat: Deprecated parameter 'namecase' [ 265.347771][ T7090] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 265.864789][ T5475] bond0 (unregistering): Released all slaves [ 266.060792][ T7086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.921'. [ 266.166865][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.189010][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.206940][ T6737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.215400][ T3561] Bluetooth: hci0: command tx timeout [ 266.331489][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.352218][ T7104] loop2: detected capacity change from 0 to 256 [ 266.360009][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.457730][ T7106] sch_fq: defrate 32 ignored. [ 266.474032][ T7104] loop2: detected capacity change from 256 to 0 [ 266.485599][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.497714][ T3787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.512116][ T3849] loop: Write error at byte offset 9223372036854781951, length 2048. [ 266.529532][ C1] I/O error, dev loop2, sector 12 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 266.535258][ T3561] Bluetooth: hci5: command tx timeout [ 266.539426][ C1] Buffer I/O error on dev loop2, logical block 3, lost sync page write [ 266.573676][ T6737] device veth0_vlan entered promiscuous mode [ 266.598748][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.607169][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.616168][ C1] I/O error, dev loop2, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.626491][ T7110] FAT-fs (loop2): Directory bread(block 3) failed [ 266.661552][ T6737] device veth1_vlan entered promiscuous mode [ 266.673910][ C0] I/O error, dev loop2, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.692337][ T5677] FAT-fs (loop2): Directory bread(block 3) failed [ 266.720808][ T7032] chnl_net:caif_netlink_parms(): no params data found [ 266.795859][ T7115] [ 266.798242][ T7115] ====================================================== [ 266.805284][ T7115] WARNING: possible circular locking dependency detected [ 266.812320][ T7115] 6.1.98-syzkaller #0 Not tainted [ 266.817346][ T7115] ------------------------------------------------------ [ 266.824361][ T7115] syz.0.930/7115 is trying to acquire lock: [ 266.830251][ T7115] ffffffff8e4153a8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_exists+0xa2/0x370 [ 266.839319][ T7115] [ 266.839319][ T7115] but task is already holding lock: [ 266.846721][ T7115] ffffffff8e418da8 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x233/0x2180 [ 266.856446][ T7115] [ 266.856446][ T7115] which lock already depends on the new lock. [ 266.856446][ T7115] [ 266.866855][ T7115] [ 266.866855][ T7115] the existing dependency chain (in reverse order) is: [ 266.875876][ T7115] [ 266.875876][ T7115] -> #3 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 266.883792][ T7115] lock_acquire+0x1f8/0x5a0 [ 266.888835][ T7115] __mutex_lock+0x132/0xd80 [ 266.893870][ T7115] rfcomm_dev_ioctl+0x233/0x2180 [ 266.899340][ T7115] rfcomm_sock_ioctl+0x82/0xc0 [ 266.904632][ T7115] sock_do_ioctl+0x152/0x450 [ 266.909749][ T7115] sock_ioctl+0x47f/0x770 [ 266.914600][ T7115] __se_sys_ioctl+0xf1/0x160 [ 266.919722][ T7115] do_syscall_64+0x3b/0xb0 [ 266.924691][ T7115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.931134][ T7115] [ 266.931134][ T7115] -> #2 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 266.940524][ T7115] lock_acquire+0x1f8/0x5a0 [ 266.945559][ T7115] lock_sock_nested+0x44/0x100 [ 266.950860][ T7115] rfcomm_sk_state_change+0x57/0x300 [ 266.956673][ T7115] __rfcomm_dlc_close+0x2b2/0x6d0 [ 266.962253][ T7115] rfcomm_dlc_close+0xed/0x180 [ 266.967544][ T7115] __rfcomm_sock_close+0x104/0x220 [ 266.973185][ T7115] rfcomm_sock_shutdown+0xb4/0x230 [ 266.978825][ T7115] rfcomm_sock_release+0x55/0x110 [ 266.984379][ T7115] sock_close+0xcd/0x230 [ 266.989147][ T7115] __fput+0x3f6/0x8d0 [ 266.993652][ T7115] task_work_run+0x246/0x300 [ 266.998775][ T7115] do_exit+0xa73/0x26a0 [ 267.003463][ T7115] do_group_exit+0x202/0x2b0 [ 267.008607][ T7115] get_signal+0x16f7/0x17d0 [ 267.013663][ T7115] arch_do_signal_or_restart+0xb0/0x1a10 [ 267.019856][ T7115] exit_to_user_mode_loop+0x6a/0x100 [ 267.025669][ T7115] exit_to_user_mode_prepare+0xb1/0x140 [ 267.031760][ T7115] syscall_exit_to_user_mode+0x60/0x270 [ 267.037855][ T7115] do_syscall_64+0x47/0xb0 [ 267.042802][ T7115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.049251][ T7115] [ 267.049251][ T7115] -> #1 (&d->lock){+.+.}-{3:3}: [ 267.056296][ T7115] lock_acquire+0x1f8/0x5a0 [ 267.061341][ T7115] __mutex_lock+0x132/0xd80 [ 267.066381][ T7115] __rfcomm_dlc_close+0x259/0x6d0 [ 267.071960][ T7115] rfcomm_dlc_close+0xed/0x180 [ 267.077268][ T7115] __rfcomm_sock_close+0x104/0x220 [ 267.083001][ T7115] rfcomm_sock_shutdown+0xb4/0x230 [ 267.088644][ T7115] rfcomm_sock_release+0x55/0x110 [ 267.094250][ T7115] sock_close+0xcd/0x230 [ 267.099039][ T7115] __fput+0x3f6/0x8d0 [ 267.103556][ T7115] task_work_run+0x246/0x300 [ 267.108707][ T7115] do_exit+0xa73/0x26a0 [ 267.113414][ T7115] do_group_exit+0x202/0x2b0 [ 267.118553][ T7115] get_signal+0x16f7/0x17d0 [ 267.123592][ T7115] arch_do_signal_or_restart+0xb0/0x1a10 [ 267.129759][ T7115] exit_to_user_mode_loop+0x6a/0x100 [ 267.135592][ T7115] exit_to_user_mode_prepare+0xb1/0x140 [ 267.141678][ T7115] syscall_exit_to_user_mode+0x60/0x270 [ 267.147780][ T7115] do_syscall_64+0x47/0xb0 [ 267.152767][ T7115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.159213][ T7115] [ 267.159213][ T7115] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 267.166625][ T7115] validate_chain+0x1661/0x5950 [ 267.172011][ T7115] __lock_acquire+0x125b/0x1f80 [ 267.177396][ T7115] lock_acquire+0x1f8/0x5a0 [ 267.182456][ T7115] __mutex_lock+0x132/0xd80 [ 267.187486][ T7115] rfcomm_dlc_exists+0xa2/0x370 [ 267.192890][ T7115] rfcomm_dev_ioctl+0xb2d/0x2180 [ 267.198356][ T7115] rfcomm_sock_ioctl+0x82/0xc0 [ 267.203654][ T7115] sock_do_ioctl+0x152/0x450 [ 267.208789][ T7115] sock_ioctl+0x47f/0x770 [ 267.213645][ T7115] __se_sys_ioctl+0xf1/0x160 [ 267.218799][ T7115] do_syscall_64+0x3b/0xb0 [ 267.223748][ T7115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.230174][ T7115] [ 267.230174][ T7115] other info that might help us debug this: [ 267.230174][ T7115] [ 267.240419][ T7115] Chain exists of: [ 267.240419][ T7115] rfcomm_mutex --> sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_ioctl_mutex [ 267.240419][ T7115] [ 267.255287][ T7115] Possible unsafe locking scenario: [ 267.255287][ T7115] [ 267.262730][ T7115] CPU0 CPU1 [ 267.268091][ T7115] ---- ---- [ 267.273452][ T7115] lock(rfcomm_ioctl_mutex); [ 267.278133][ T7115] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 267.286829][ T7115] lock(rfcomm_ioctl_mutex); [ 267.294026][ T7115] lock(rfcomm_mutex); [ 267.298186][ T7115] [ 267.298186][ T7115] *** DEADLOCK *** [ 267.298186][ T7115] [ 267.306325][ T7115] 2 locks held by syz.0.930/7115: [ 267.311343][ T7115] #0: ffff88805ea94130 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sock_ioctl+0x74/0xc0 [ 267.322760][ T7115] #1: ffffffff8e418da8 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x233/0x2180 [ 267.332871][ T7115] [ 267.332871][ T7115] stack backtrace: [ 267.338766][ T7115] CPU: 1 PID: 7115 Comm: syz.0.930 Not tainted 6.1.98-syzkaller #0 [ 267.346657][ T7115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 267.356716][ T7115] Call Trace: [ 267.359999][ T7115] [ 267.362935][ T7115] dump_stack_lvl+0x1e3/0x2cb [ 267.367630][ T7115] ? nf_tcp_handle_invalid+0x642/0x642 [ 267.373104][ T7115] ? print_circular_bug+0x12b/0x1a0 [ 267.378306][ T7115] check_noncircular+0x2fa/0x3b0 [ 267.383247][ T7115] ? 0xffffffffa0003b40 [ 267.387409][ T7115] ? add_chain_block+0x850/0x850 [ 267.392358][ T7115] ? lockdep_lock+0x11f/0x2a0 [ 267.397044][ T7115] ? unwind_get_return_address+0x49/0x80 [ 267.402678][ T7115] ? arch_stack_walk+0xf3/0x140 [ 267.407533][ T7115] ? _find_first_zero_bit+0xd0/0x100 [ 267.412830][ T7115] validate_chain+0x1661/0x5950 [ 267.417706][ T7115] ? reacquire_held_locks+0x660/0x660 [ 267.423091][ T7115] ? lockdep_unlock+0x165/0x300 [ 267.427953][ T7115] ? lockdep_lock+0x2a0/0x2a0 [ 267.432644][ T7115] ? add_lock_to_list+0x1de/0x2e0 [ 267.437670][ T7115] ? validate_chain+0x13ce/0x5950 [ 267.442713][ T7115] ? mark_lock+0x9a/0x340 [ 267.447059][ T7115] __lock_acquire+0x125b/0x1f80 [ 267.451926][ T7115] lock_acquire+0x1f8/0x5a0 [ 267.456441][ T7115] ? rfcomm_dlc_exists+0xa2/0x370 [ 267.461481][ T7115] ? read_lock_is_recursive+0x10/0x10 [ 267.466867][ T7115] ? __might_sleep+0xb0/0xb0 [ 267.471459][ T7115] ? __lock_acquire+0x125b/0x1f80 [ 267.476498][ T7115] __mutex_lock+0x132/0xd80 [ 267.481007][ T7115] ? rfcomm_dlc_exists+0xa2/0x370 [ 267.486043][ T7115] ? rfcomm_dlc_exists+0xa2/0x370 [ 267.491073][ T7115] ? mutex_lock_nested+0x10/0x10 [ 267.496015][ T7115] ? aa_get_newest_label+0xfb/0x6e0 [ 267.501249][ T7115] ? end_current_label_crit_section+0x170/0x170 [ 267.507502][ T7115] ? __might_fault+0xa1/0x110 [ 267.512191][ T7115] rfcomm_dlc_exists+0xa2/0x370 [ 267.517055][ T7115] ? __rfcomm_dlc_close+0x6d0/0x6d0 [ 267.522260][ T7115] ? bpf_lsm_capable+0x5/0x10 [ 267.526957][ T7115] ? security_capable+0x86/0xb0 [ 267.531824][ T7115] rfcomm_dev_ioctl+0xb2d/0x2180 [ 267.536782][ T7115] ? rfcomm_sock_debugfs_show+0x120/0x120 [ 267.542514][ T7115] ? __local_bh_enable_ip+0x164/0x1f0 [ 267.547899][ T7115] ? lockdep_hardirqs_on+0x94/0x130 [ 267.553102][ T7115] ? __local_bh_enable_ip+0x164/0x1f0 [ 267.558487][ T7115] ? _local_bh_enable+0xa0/0xa0 [ 267.563351][ T7115] ? do_raw_spin_unlock+0x137/0x8a0 [ 267.568556][ T7115] rfcomm_sock_ioctl+0x82/0xc0 [ 267.573368][ T7115] sock_do_ioctl+0x152/0x450 [ 267.577992][ T7115] ? sock_show_fdinfo+0xb0/0xb0 [ 267.582866][ T7115] ? __fget_files+0x28/0x4a0 [ 267.587472][ T7115] sock_ioctl+0x47f/0x770 [ 267.591842][ T7115] ? sock_poll+0x410/0x410 [ 267.596288][ T7115] ? __fget_files+0x28/0x4a0 [ 267.600881][ T7115] ? __fget_files+0x435/0x4a0 [ 267.605563][ T7115] ? __fget_files+0x28/0x4a0 [ 267.610158][ T7115] ? bpf_lsm_file_ioctl+0x5/0x10 [ 267.615098][ T7115] ? security_file_ioctl+0x7d/0xa0 [ 267.620234][ T7115] ? sock_poll+0x410/0x410 [ 267.624672][ T7115] __se_sys_ioctl+0xf1/0x160 [ 267.629286][ T7115] do_syscall_64+0x3b/0xb0 [ 267.633714][ T7115] ? clear_bhb_loop+0x45/0xa0 [ 267.638408][ T7115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.644317][ T7115] RIP: 0033:0x7f6532575bd9 [ 267.648739][ T7115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.668375][ T7115] RSP: 002b:00007f653331e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.676798][ T7115] RAX: ffffffffffffffda RBX: 00007f6532703f60 RCX: 00007f6532575bd9 [ 267.684774][ T7115] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 000000000000000b SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 267.692748][ T7115] RBP: 00007f65325e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 267.700809][ T7115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.708780][ T7115] R13: 000000000000000b R14: 00007f6532703f60 R15: 00007fffbcb8d7d8 [ 267.716766][ T7115] [ 267.777347][ T3849] loop: Write error at byte offset 9223372036854775807, length 2048. [ 267.790718][ C1] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 267.800207][ C1] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 267.859391][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 267.885814][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 268.460472][ T5475] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.521805][ T5475] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.559426][ T5475] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.608242][ T5475] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.709561][ T5475] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.763838][ T5475] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.849444][ T5475] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.900379][ T5475] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.987683][ T5475] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.029987][ T5475] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.072571][ T5475] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.120482][ T5475] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.403788][ T5475] device hsr_slave_0 left promiscuous mode [ 270.413292][ T5475] device hsr_slave_1 left promiscuous mode [ 270.420741][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.431319][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.439301][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.449237][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.457319][ T5475] device bridge_slave_1 left promiscuous mode [ 270.464047][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.475214][ T5475] device bridge_slave_0 left promiscuous mode [ 270.481452][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.495704][ T5475] device hsr_slave_0 left promiscuous mode [ 270.502059][ T5475] device hsr_slave_1 left promiscuous mode [ 270.511657][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.519516][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.529911][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.538059][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.548229][ T5475] device bridge_slave_1 left promiscuous mode [ 270.554443][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.563116][ T5475] device bridge_slave_0 left promiscuous mode [ 270.572208][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.584877][ T5475] device hsr_slave_0 left promiscuous mode [ 270.593588][ T5475] device hsr_slave_1 left promiscuous mode [ 270.600260][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.610360][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.618396][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.628813][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.636596][ T5475] device bridge_slave_1 left promiscuous mode [ 270.642748][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.651018][ T5475] device bridge_slave_0 left promiscuous mode [ 270.657875][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.671471][ T5475] device veth1_macvtap left promiscuous mode [ 270.677535][ T5475] device veth0_macvtap left promiscuous mode [ 270.683567][ T5475] device veth1_vlan left promiscuous mode [ 270.689403][ T5475] device veth0_vlan left promiscuous mode [ 270.696501][ T5475] device veth1_macvtap left promiscuous mode [ 270.702532][ T5475] device veth0_macvtap left promiscuous mode [ 270.708958][ T5475] device veth1_vlan left promiscuous mode [ 270.714745][ T5475] device veth0_vlan left promiscuous mode [ 270.722169][ T5475] device veth1_macvtap left promiscuous mode [ 270.728712][ T5475] device veth0_macvtap left promiscuous mode [ 270.734771][ T5475] device veth1_vlan left promiscuous mode [ 270.740744][ T5475] device veth0_vlan left promiscuous mode [ 270.918585][ T5475] bond0 (unregistering): Released all slaves [ 270.980568][ T5475] bond0 (unregistering): Released all slaves [ 271.123577][ T5475] team0 (unregistering): Port device team_slave_1 removed [ 271.149151][ T5475] team0 (unregistering): Port device team_slave_0 removed [ 271.159960][ T5475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.174788][ T5475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.231999][ T5475] bond0 (unregistering): Released all slaves [ 271.367417][ T5475] team0 (unregistering): Port device team_slave_1 removed [ 271.391473][ T5475] team0 (unregistering): Port device team_slave_0 removed [ 271.414519][ T5475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.439421][ T5475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.492407][ T5475] bond0 (unregistering): Released all slaves [ 271.674393][ T5475] team0 (unregistering): Port device team_slave_1 removed [ 271.699445][ T5475] team0 (unregistering): Port device team_slave_0 removed [ 271.710324][ T5475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.735477][ T5475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.787046][ T5475] bond0 (unregistering): Released all slaves [ 273.308059][ T5475] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.349609][ T5475] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.389786][ T5475] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.441781][ T5475] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.270869][ T5475] device hsr_slave_0 left promiscuous mode [ 274.277770][ T5475] device hsr_slave_1 left promiscuous mode [ 274.284184][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.292277][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.300298][ T5475] device bridge_slave_1 left promiscuous mode [ 274.310818][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.319454][ T5475] device bridge_slave_0 left promiscuous mode [ 274.325869][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.336748][ T5475] device hsr_slave_0 left promiscuous mode [ 274.342919][ T5475] device hsr_slave_1 left promiscuous mode [ 274.349590][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.357089][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.364938][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.372695][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.380401][ T5475] device bridge_slave_1 left promiscuous mode [ 274.387120][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.395179][ T5475] device bridge_slave_0 left promiscuous mode [ 274.401357][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.412434][ T5475] device veth1_vlan left promiscuous mode [ 274.418340][ T5475] device veth0_vlan left promiscuous mode [ 274.424594][ T5475] device veth1_macvtap left promiscuous mode [ 274.430698][ T5475] device veth0_macvtap left promiscuous mode [ 274.436801][ T5475] device veth1_vlan left promiscuous mode [ 274.443131][ T5475] device veth0_vlan left promiscuous mode [ 274.621042][ T5475] team0 (unregistering): Port device team_slave_1 removed [ 274.643689][ T5475] team0 (unregistering): Port device team_slave_0 removed [ 274.666763][ T5475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.690053][ T5475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.740890][ T5475] bond0 (unregistering): Released all slaves [ 274.868182][ T5475] team0 (unregistering): Port device team_slave_1 removed [ 274.891646][ T5475] team0 (unregistering): Port device team_slave_0 removed [ 274.914049][ T5475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.938039][ T5475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.986311][ T5475] bond0 (unregistering): Released all slaves