last executing test programs: 9.325709348s ago: executing program 2 (id=280): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_triestat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000180)) lseek(r1, 0x3fc04000000000, 0x0) 8.134191726s ago: executing program 2 (id=289): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x701) ioctl$EVIOCGEFFECTS(r0, 0xc0189436, &(0x7f00000039c0)=""/4096) 7.181320278s ago: executing program 2 (id=293): socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, &(0x7f0000000d00)) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0x10) syz_io_uring_setup(0x2ce, &(0x7f0000000480), &(0x7f0000000400)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = syz_io_uring_complete(r0) getpid() r2 = open(&(0x7f0000007f80)='./bus\x00', 0x408080, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcc0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000060000000000000015f50000b7080000000000007b8af8ff00000000b70800000c0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000001482f0ff0000000018400000000000000000000000000000185a000006000000000000000000000095000000000000009500000000000000756fd71902d0805672a75a8502522c212a1077f53e3cb8678be1516d57a2c874b424d4e48faf95c5940a8125cc0cdad1d3543c92250bc52bffdb111c6833c0d5f74bbcdd6146f3f835f347"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x8c, &(0x7f0000000300)=""/140, 0x41100, 0x28, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000e00)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000e40)={0x4, 0xf, 0xfff, 0x1ff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000e80)=[r3, r1, r1], &(0x7f0000000ec0)=[{0x5, 0x1, 0x4, 0x6}, {0x2, 0x2, 0x9, 0x7}, {0x5, 0x4, 0x8}, {0x1, 0x2, 0x6, 0xc}, {0x4, 0x1, 0x7, 0x4}], 0x10, 0x2d1d5e}, 0x90) pipe2(&(0x7f0000000040), 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00222200000006231306653f070c0000000a0000070900be0083000000000b09007a150b5d8c3dda1aed1026c8d949ad0a1cbb51e98af0fc1d50ac834249a68656de1fee758bb637"], 0x0}, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[], 0x0) read$hidraw(r5, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x1, &(0x7f0000000000)='B') 6.565288213s ago: executing program 4 (id=301): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x98}}, 0x0) 6.495226408s ago: executing program 4 (id=303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="53021db78453"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000000700)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 4.219817037s ago: executing program 4 (id=309): socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000d00)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmmsg$inet(r1, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00v'], 0x70}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 4.105324356s ago: executing program 3 (id=311): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) 4.076410188s ago: executing program 0 (id=312): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.9040199s ago: executing program 3 (id=314): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="48020000", @ANYRES16, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78430800050000000000f80108808c000080200004000a00000000000000fe800000000000000000000000000000000000001400040002000000e0000001000000000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff260004000a00000000000000fe880000000000000000000000000001000000000800030000000000060005000000000068010080fc00098070000080060001000200000008000200ac1414bb0500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac141400050003000000000088000080060001000200000008000200e00000020500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000000500038000000000060001000a0000001400020000000000000000000000ffffac1414000500030000000000240002002767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a6200004000a00000000000000fe8000000000000000000000000000aa0000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080007000000000008000100", @ANYRES32=r1], 0x248}}, 0x0) 3.902982011s ago: executing program 2 (id=315): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38020000170001000000000000000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000e0000001000000000000000000000000fc0200000000000000000000000000000000000300000000000000006c0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000ac1414000000000000000000000000000000ab4cd9b63c915131000000000000d92c26dabd4ef5c45a34e75dd68a38ad0a5c718ef07677eadbb85731617ad7af9ec9d958722bc45163213c13c1189d1bc946cb333f3b1aa0c07c21f863062cdb4f0494d3103496b15fb2b2c184146451b83fd5795e4064bfc3c515865cabd7ddd6fcdc7e7c2f2483bdbdab6fc3efbbd8b825358d3a"], 0x238}}, 0x0) 3.837102856s ago: executing program 0 (id=316): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x804422, &(0x7f0000000040)={[{@bsdgroups}, {@grpquota}, {@init_itable}, {@user_xattr}, {@nojournal_checksum}]}, 0x2, 0xbb8, &(0x7f00000017c0)="$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") socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000000c0)='./bus\x00', 0x50, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES8, @ANYRES16, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYBLOB="a60b8f2f94f38c9c515f0a49abc35b272f81737b1b8fb0591ebfcd504abdec6006007f2d3331275784d9e3d3e712d86ca48a7445f18ab74b", @ANYRES64], 0x2, 0x62e, &(0x7f0000000cc0)="$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") mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x2000, 0x103) syz_mount_image$hfsplus(&(0x7f00000006c0), &(0x7f0000000640)='./file1\x00', 0x20f040, &(0x7f0000002600)=ANY=[], 0x1, 0x601, &(0x7f0000002a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000001040), 0x1, 0x505, &(0x7f00000024c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5XNxvbOeHbt+RUFhQtVSP55VjbHB92NroXv9CvWWHRv+sUH7ef3SFOr9Vqxes0YZ5F1Ay6Cw4c+Iv436M4AAAAAAAAAAAAAAABd9eM3lgY9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6vzwMAAP//lOPLVw==") sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioprio_get$pid(0x2, 0x0) 3.685090816s ago: executing program 3 (id=317): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a6, &(0x7f0000000880)="$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") ptrace$getregset(0x21, r0, 0x1, &(0x7f0000000080)={0x0}) 3.63630669s ago: executing program 4 (id=318): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x2010, r1, 0xfffff000) syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da20"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000300)='./file0\x00', 0x800400, &(0x7f0000000340)=ANY=[], 0x0, 0x19d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unshare(0x600) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x231, 0x40000011, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)) chdir(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x20) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000800)=@generic={0x0, 0x7}, 0x18) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 3.589325724s ago: executing program 2 (id=319): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000c80)="08001efbb07d586e", 0x8}], 0x1, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4a6}}], 0x5}, 0x0) 3.414477127s ago: executing program 2 (id=321): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) 2.841059659s ago: executing program 0 (id=325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, 0x0, 0x0, 0xfffffa84, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xbb, &(0x7f0000000180)=""/187, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x267e}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'erspan0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x0, 0x0, 0x408, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10041, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYBLOB="00000000005a2660dbefb1260951ec62bc1eb8dec4000000b7080000000000007b8af8ff00000000bfa2000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', r5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x1, 0x681, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000001000)='GPL\x00'}, 0x90) r7 = syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x1114014, &(0x7f0000000e00)=ANY=[], 0x2, 0xc2f, &(0x7f0000000f40)="$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") chdir(&(0x7f0000000380)='./file0\x00') ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000000e00)={{0x4}, 0x100, './file2\x00'}) chown(0x0, 0xffffffffffffffff, 0xee00) 2.84083563s ago: executing program 3 (id=326): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_triestat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, 0x0) lseek(r1, 0x3fc04000000000, 0x0) 2.227389535s ago: executing program 1 (id=327): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="48020000", @ANYRES16=r0, @ANYBLOB="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", @ANYRES32=r1], 0x248}}, 0x0) 1.89385397s ago: executing program 0 (id=328): socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000d00)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmmsg$inet(r1, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00v'], 0x70}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 1.605231942s ago: executing program 1 (id=329): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000880), 0x12) 704.565548ms ago: executing program 0 (id=330): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0xc) 699.100368ms ago: executing program 3 (id=331): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x1e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5d}, @exit={0x95, 0x0, 0x4c}], {0x95, 0x0, 0x1200}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0xc3, &(0x7f00000000c0)=""/211, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0x70) 645.683182ms ago: executing program 1 (id=332): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000e0ff61114c000000000085000000190000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) 481.252814ms ago: executing program 4 (id=333): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x82}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 448.436537ms ago: executing program 1 (id=334): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 429.315828ms ago: executing program 3 (id=335): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x804422, &(0x7f0000000040)={[{@bsdgroups}, {@grpquota}, {@init_itable}, {@user_xattr}, {@nojournal_checksum}]}, 0x2, 0xbb8, &(0x7f00000017c0)="$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") socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000000c0)='./bus\x00', 0x50, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES8, @ANYRES16, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYBLOB="a60b8f2f94f38c9c515f0a49abc35b272f81737b1b8fb0591ebfcd504abdec6006007f2d3331275784d9e3d3e712d86ca48a7445f18ab74b", @ANYRES64], 0x2, 0x62e, &(0x7f0000000cc0)="$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") mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x2000, 0x103) syz_mount_image$hfsplus(&(0x7f00000006c0), &(0x7f0000000640)='./file1\x00', 0x20f040, &(0x7f0000002600)=ANY=[], 0x1, 0x601, &(0x7f0000002a00)="$eJzs3c1vHGcdB/DvrF+yDlLqumkbUCWsIlUIi8QvEgEulFKQhSpUiQMXLhZxGiubtLK3yO2BGsSh4tQ/oRz8DyCORcqB9ginStyMekTi7purmZ3xbuKta8dOdpt+PtLsPM88M8/+nt+8ZGasaAN8ba0uZPJeiqwuvLZd1vd2Vzp7uyt3mnKSC0laSTtJUS7+e5LPkp30pnyzaRiYH/HpR+03Pvng4/d7tXY9VesXx213MoexzPZireZ18cz9Lff7e0jV6NpNbS7J/Jn6g3Ny0Pjv0OYznpcAwDgrkolhy2eTi/XNa/kc0Lsrfvgb67GxM+oAAAAA4DF4aj/72c6lUccBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXyX17/8X9dRqyvMpmt//n66XpS5/pd0bdQAAAAAAAAAAcA6+vZ/9bOdSUz8oqr/5v1hVLlef38jb2cp6NnM121lLN91sZinJ7EBH09tr3e7m0gm2XB665fLjGS8AAAAAAAAAPKH+lNX+3/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAcFMlEb1ZNl5vybFqTSdpJpsv1dpJ/N+XxMnWqtV9+ZHEAAADA+HhqP/vZzqWmflBUz/zPVc/97bydu+lmI910sp4b1buA3lN/a293pbO3u3KnnI72+9P/nyqMqsf03j0M/+Yr1RozuZmNasnV/C5vppMbaVVblq408QyP649lTMVPaieM7EY9L0f+y3o+HmarjEwdZmSxjq3MxtPHZ+KUe+fBb1pK6/DNz+VHkPOL9bwcz6tjnfPlgaPvueMzkcz95i/Xb3Xu3r51c2thfIb0gOKEkT2YiZWBTDz/RGTipBarTDx7WF/NL/LrLGQ+r2czG/l91tLNeubzalVaq4/n8nN2b3floOe9IZl6+b73q69/WSTT9X7pXUWPj6ldtzQxvVhteykb+VXezI1qjy7meq5nOT/Ij7J4uIeLnV7AR/fwewd1p9VZ3zrdWf+d79aFqSQ/P/WL3EepzOvTA3kdvObOVm2DS/rnwdz5Xxsnv1UXyqPnlbG7NvYzMVX9K9Fk4pkHM3H/zv1rdeBsde7e3ry19tYJv++lel5m4GdHMnEwcfYRPazyeJkrd1ZVu//oKNueGdq2VLVdPmxrHWl79rDty87U6foe7mhPy1Xb80PbettdGWgbdr8FwNi7+L2L0zP/m/nXzIczf565NfNa+5ULP7zwwnSm/jn148nFiZdaLxR/y4f5Q//5HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHhb77x7e63TWd9UUPj6FeaTnE+H8+MwnHMsXBj1lQl41K5177x1beudd7+/cWet+dW+IktL1xev3dzorNefo44SADhP/Zv+UUcCAAAAAAAAAAAAAAB8kcfx34lHPUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODJtrqQyXspsrR4dbGs7+2udMqpKffXbCcpysI/kv98luykN2U2v51oViq+6Hs+/aj9xicffPx+v692s35x3HYnMxBL0qrn59Xf8pn7649wPslcPYeR+zwAAP//yfgHsw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000001040), 0x1, 0x505, &(0x7f00000024c0)="$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") sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffffdbf}]}) ioprio_get$pid(0x2, 0x0) 331.051756ms ago: executing program 0 (id=336): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="68000000140001000000000000000000ff02000000000000000000000100000000b91800000000000000000000000400000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x68}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f00007b5000/0x2000)=nil, 0x2000, 0xb635773f04ebbeee, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x9feabf9d76e7e6ce) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={0x0}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x7, 0x10003, '\x00', [{0xffffffff}, {0xffffffff, 0x0, 0xfffffffffffff2b9}]}) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0xa5, 0x6, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x10, 0x80, 0x9, 0xffff}}) r7 = syz_open_procfs(0x0, &(0x7f0000002700)='net/ip_mr_cache\x00') r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r8, 0x8b21, &(0x7f0000000040)) openat$vcsa(0xffffffffffffff9c, 0x0, 0x240000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x14, 0x0, &(0x7f0000000080)='syzkaller\x00', 0xfffffffc, 0x81, &(0x7f00000004c0)=""/129, 0x1f00, 0x28, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000002c0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r5], 0x0, 0x10, 0x5d9}, 0x90) 199.653385ms ago: executing program 1 (id=337): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) 81.234474ms ago: executing program 4 (id=338): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) 0s ago: executing program 1 (id=339): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="48020000", @ANYRES16=r0, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78430800050000000000f80108808c000080200004000a00000000000000fe800000000000000000000000000000000000001400040002000000e0000001000000000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff260004000a00000000000000fe880000000000000000000000000001000000000800030000000000060005000000000068010080fc00098070000080060001000200000008000200ac1414bb0500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac141400050003000000000088000080060001000200000008000200e00000020500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000000500038000000000060001000a0000001400020000000000000000000000ffffac1414000500030000000000240002002767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a6200004000a00000000000000fe8000000000000000000000000000aa0000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080007000000000008000100", @ANYRES32=r1], 0x248}}, 0x0) kernel console output (not intermixed with test programs): ents:1 across:124996k FS [ 68.101921][ T3640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.112251][ T3651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.119931][ T3651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.129131][ T3651] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.137766][ T3651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.145463][ T3651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.153691][ T3651] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.162038][ T3651] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.163244][ T3654] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.169580][ T3651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.184425][ T3655] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.184794][ T3651] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.192810][ T3655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.199456][ T3651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.206567][ T3655] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.213658][ T3651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.221252][ T3656] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.229064][ T3651] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.236459][ T3656] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.241462][ T3651] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.255058][ T3651] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.262744][ T3651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.269966][ T3651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.278279][ T3651] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.281597][ T3654] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.302600][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.302797][ T3656] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.317195][ T3654] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.340171][ T3651] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.358857][ T3656] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.629831][ T3648] chnl_net:caif_netlink_parms(): no params data found [ 68.784069][ T3643] chnl_net:caif_netlink_parms(): no params data found [ 68.847811][ T3648] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.857531][ T3648] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.867713][ T3648] device bridge_slave_0 entered promiscuous mode [ 68.916632][ T3648] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.924037][ T3648] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.931874][ T3648] device bridge_slave_1 entered promiscuous mode [ 68.979760][ T3639] chnl_net:caif_netlink_parms(): no params data found [ 69.030020][ T3642] chnl_net:caif_netlink_parms(): no params data found [ 69.042336][ T3648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.057867][ T3648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.067619][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.074996][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.083059][ T3643] device bridge_slave_0 entered promiscuous mode [ 69.098299][ T3649] chnl_net:caif_netlink_parms(): no params data found [ 69.124851][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.132005][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.140242][ T3643] device bridge_slave_1 entered promiscuous mode [ 69.205114][ T3643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.217410][ T3648] team0: Port device team_slave_0 added [ 69.228600][ T3648] team0: Port device team_slave_1 added [ 69.248809][ T3643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.322474][ T3648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.329675][ T3648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.356267][ T3648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.368163][ T3639] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.375519][ T3639] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.383839][ T3639] device bridge_slave_0 entered promiscuous mode [ 69.405527][ T3643] team0: Port device team_slave_0 added [ 69.411759][ T3648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.418947][ T3648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.444942][ T3648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.459890][ T3639] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.467184][ T3639] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.475502][ T3639] device bridge_slave_1 entered promiscuous mode [ 69.501236][ T3643] team0: Port device team_slave_1 added [ 69.525119][ T3642] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.532285][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.544186][ T3642] device bridge_slave_0 entered promiscuous mode [ 69.569226][ T3643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.576359][ T3643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.602434][ T3643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.623016][ T3642] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.630252][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.638298][ T3642] device bridge_slave_1 entered promiscuous mode [ 69.654968][ T3649] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.662071][ T3649] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.670473][ T3649] device bridge_slave_0 entered promiscuous mode [ 69.693175][ T3643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.707562][ T3643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.734027][ T3643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.747519][ T3639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.768808][ T3642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.778062][ T3649] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.785491][ T3649] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.793521][ T3649] device bridge_slave_1 entered promiscuous mode [ 69.813039][ T3639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.824348][ T3642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.852483][ T3648] device hsr_slave_0 entered promiscuous mode [ 69.860229][ T3648] device hsr_slave_1 entered promiscuous mode [ 69.930971][ T3639] team0: Port device team_slave_0 added [ 69.939029][ T3642] team0: Port device team_slave_0 added [ 69.947216][ T3649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.962623][ T3643] device hsr_slave_0 entered promiscuous mode [ 69.969732][ T3643] device hsr_slave_1 entered promiscuous mode [ 69.976540][ T3643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.984496][ T3643] Cannot create hsr debugfs directory [ 69.991156][ T3639] team0: Port device team_slave_1 added [ 69.998742][ T3642] team0: Port device team_slave_1 added [ 70.014479][ T3649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.091750][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.099409][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.126006][ T3642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.147506][ T3649] team0: Port device team_slave_0 added [ 70.158579][ T3639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.165748][ T3639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.192063][ T3639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.207824][ T3639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.214916][ T3639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.241410][ T3639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.253310][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.260533][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.286548][ T3642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.299799][ T3649] team0: Port device team_slave_1 added [ 70.334557][ T3646] Bluetooth: hci0: command tx timeout [ 70.334572][ T3657] Bluetooth: hci1: command tx timeout [ 70.389710][ T3649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.397006][ T3649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.421866][ T3646] Bluetooth: hci3: command tx timeout [ 70.423414][ T3656] Bluetooth: hci2: command tx timeout [ 70.428541][ T3646] Bluetooth: hci4: command tx timeout [ 70.440230][ T3649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.477867][ T3649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.485086][ T3649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.511627][ T3649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.535288][ T3639] device hsr_slave_0 entered promiscuous mode [ 70.542366][ T3639] device hsr_slave_1 entered promiscuous mode [ 70.549339][ T3639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.557176][ T3639] Cannot create hsr debugfs directory [ 70.603653][ T3642] device hsr_slave_0 entered promiscuous mode [ 70.610609][ T3642] device hsr_slave_1 entered promiscuous mode [ 70.621206][ T3642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.628932][ T3642] Cannot create hsr debugfs directory [ 70.718457][ T3649] device hsr_slave_0 entered promiscuous mode [ 70.725623][ T3649] device hsr_slave_1 entered promiscuous mode [ 70.732151][ T3649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.744951][ T3649] Cannot create hsr debugfs directory [ 70.879399][ T3648] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.910709][ T3648] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.923278][ T3648] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.935814][ T3648] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.038353][ T3643] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.051896][ T3643] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.077268][ T3643] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.095684][ T3639] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.106985][ T3639] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.117653][ T3643] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.137756][ T3639] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.165622][ T3639] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.223184][ T3648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.291025][ T3642] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.303141][ T3642] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.332603][ T3648] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.344956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.356525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.377773][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.384677][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.392759][ T3642] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.417479][ T3642] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.433022][ T3649] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.449554][ T3639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.460279][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.470236][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.480435][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.487797][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.500454][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.509818][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.518911][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.526352][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.534419][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.549900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.559128][ T3649] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.570886][ T3649] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.582708][ T3649] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.608905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.642818][ T3643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.655078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.663502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.677880][ T3639] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.689925][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.702309][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.711892][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.732439][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.742095][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.763494][ T3643] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.773280][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.782253][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.791085][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.800513][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.814822][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.824482][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.833131][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.840385][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.869755][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.878093][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.887515][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.896706][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.903847][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.911740][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.923343][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.932130][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.939285][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.949082][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.958578][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.967462][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.998027][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.010592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.021904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.031728][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.038946][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.047990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.056979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.071140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.081081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.090595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.119356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.129124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.140368][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.151762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.162042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.172760][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.182422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.219029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.232063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.253589][ T3643] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.265680][ T3643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.291013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.300072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.316427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.331481][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.343343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.360149][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.378802][ T3639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.391115][ T3639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.414081][ T3646] Bluetooth: hci0: command tx timeout [ 72.419534][ T3646] Bluetooth: hci1: command tx timeout [ 72.427333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.441076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.452500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.477344][ T3649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.503827][ T3646] Bluetooth: hci2: command tx timeout [ 72.504298][ T3656] Bluetooth: hci3: command tx timeout [ 72.509258][ T3646] Bluetooth: hci4: command tx timeout [ 72.539445][ T3642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.572245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.583622][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.607990][ T3648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.618634][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.634822][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.670144][ T3649] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.692829][ T3642] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.718079][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.730639][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.760397][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.769822][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.780509][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.789519][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.798476][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.805659][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.852025][ T3648] device veth0_vlan entered promiscuous mode [ 72.862872][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.877602][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.893081][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.905564][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.912732][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.928102][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.939933][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.950956][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.958146][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.967590][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.977343][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.985176][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.992636][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.002111][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.011035][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.018211][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.027160][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.036786][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.046708][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.055532][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.064118][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.072231][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.081197][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.110628][ T3643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.136524][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.156439][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.167307][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.177085][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.186517][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.201950][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.211374][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.228836][ T3648] device veth1_vlan entered promiscuous mode [ 73.252730][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.261188][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.272792][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.282762][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.290586][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.299108][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.318232][ T3649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.330912][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.362279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.372137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.390779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.402541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.416280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.426404][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.439469][ T3648] device veth0_macvtap entered promiscuous mode [ 73.450577][ T3639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.463982][ T3648] device veth1_macvtap entered promiscuous mode [ 73.472580][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.485011][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.493481][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.504139][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.552351][ T3642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.575061][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.602951][ T3648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.637436][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.650477][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.660659][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.677454][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.708936][ T3648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.743675][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.753437][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.765502][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.780650][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.819516][ T3648] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.833550][ T3648] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.845754][ T3648] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.863026][ T3648] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.882987][ T3639] device veth0_vlan entered promiscuous mode [ 73.897327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.911027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.923177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.940613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.950899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.959366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.014613][ T3639] device veth1_vlan entered promiscuous mode [ 74.029126][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.038433][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.058123][ T3649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.118344][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.129549][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.155799][ T3643] device veth0_vlan entered promiscuous mode [ 74.190910][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.205202][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.213355][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.223228][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.232398][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.241543][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.257848][ T3643] device veth1_vlan entered promiscuous mode [ 74.287396][ T3639] device veth0_macvtap entered promiscuous mode [ 74.297196][ T3711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.306127][ T3711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.322459][ T3642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.331543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.347499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.357908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.367015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.375274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.382816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.393344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.402348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.413363][ T3639] device veth1_macvtap entered promiscuous mode [ 74.437168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.446138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.454142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.462037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.471250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.486440][ T3643] device veth0_macvtap entered promiscuous mode [ 74.494177][ T3646] Bluetooth: hci0: command tx timeout [ 74.494185][ T3656] Bluetooth: hci1: command tx timeout [ 74.504035][ T3649] device veth0_vlan entered promiscuous mode [ 74.533497][ T3643] device veth1_macvtap entered promiscuous mode [ 74.552082][ T3711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.561888][ T3711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.574325][ T3657] Bluetooth: hci4: command tx timeout [ 74.574598][ T3646] Bluetooth: hci3: command tx timeout [ 74.579753][ T3657] Bluetooth: hci2: command tx timeout [ 74.595755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.606290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.619390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.628241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.637537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.668967][ T3649] device veth1_vlan entered promiscuous mode [ 74.685165][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.697032][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.705769][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.721845][ T3642] device veth0_vlan entered promiscuous mode [ 74.734202][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.745160][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.757069][ T3639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.776928][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.786666][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.795985][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.804575][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.817286][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.833050][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.844724][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.862203][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.874042][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.889006][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.919662][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.930328][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.942908][ T3639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.952625][ T3721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 74.972406][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.982849][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.992377][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.001924][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.018360][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.029950][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.047745][ T3642] device veth1_vlan entered promiscuous mode [ 75.059257][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.083821][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.104069][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.121183][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.143119][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.181468][ T3649] device veth0_macvtap entered promiscuous mode [ 75.201676][ T3639] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.224054][ T3639] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.232818][ T3639] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.262221][ T3639] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.280221][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.291651][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.309242][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.330596][ T3643] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.342679][ T3643] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.360796][ T3643] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.371704][ T3643] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.399983][ T3649] device veth1_macvtap entered promiscuous mode [ 75.540258][ T3649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.552429][ T3649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.564067][ T3649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.577794][ T3649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.589271][ T3649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.600522][ T3649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.613430][ T3649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.631931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.648130][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.660277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.673387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.695029][ T3642] device veth0_macvtap entered promiscuous mode [ 75.725966][ T3649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.743372][ T3649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.755554][ T3649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.766388][ T3649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.776535][ T3649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.787271][ T3649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.799983][ T3649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.824704][ T3642] device veth1_macvtap entered promiscuous mode [ 75.837678][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.850935][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.872276][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.888058][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.900048][ T3649] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.910434][ T3649] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.922821][ T3649] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.933381][ T3649] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.005074][ T3711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.025053][ T3711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.058512][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.059214][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.070408][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.084465][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.088129][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.108043][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.118037][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.129652][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.139677][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.154168][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.166227][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.174544][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.182481][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.190346][ T153] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.191273][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.207646][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.221666][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.238234][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.244350][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.257405][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.267879][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.279695][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.289711][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.300301][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.310410][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.321073][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.332535][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.349944][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.365826][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.374969][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.409660][ T3642] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.427987][ T3642] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.436940][ T3642] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.445841][ T3642] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.524277][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.544280][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.570943][ T3698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.579414][ T3657] Bluetooth: hci0: command tx timeout [ 76.583980][ T3656] Bluetooth: hci1: command tx timeout [ 76.595042][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.604145][ T153] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 76.613478][ T153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.646401][ T3698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.655818][ T3646] Bluetooth: hci3: command tx timeout [ 76.655875][ T3657] Bluetooth: hci4: command tx timeout [ 76.666722][ T3646] Bluetooth: hci2: command tx timeout [ 76.676292][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.698088][ T153] usb 2-1: config 0 descriptor?? [ 76.778479][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.837087][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.849081][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.877443][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.900496][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.913684][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.948518][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.991459][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.015283][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.173885][ T3688] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.194598][ T153] gs_usb 2-1:0.0: Configuring for 2 interfaces [ 77.403958][ T3686] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.424718][ T3688] usb 1-1: Using ep0 maxpacket: 16 [ 77.443977][ T3709] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.544029][ T3688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.555068][ T3688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.565465][ T3688] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 77.574841][ T3688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.585000][ T3688] usb 1-1: config 0 descriptor?? [ 77.634341][ T3630] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.634347][ T153] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 77.650631][ T3686] usb 3-1: Using ep0 maxpacket: 8 [ 77.674038][ T153] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 77.724893][ T153] gs_usb: probe of 2-1:0.0 failed with error -71 [ 77.745143][ T153] usb 2-1: USB disconnect, device number 2 [ 77.779278][ T3686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.799826][ T3686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8192, setting to 1024 [ 77.811639][ T3709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.829191][ T3686] usb 3-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 77.857452][ T3709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.873948][ T3686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.898500][ T3709] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 77.908009][ T3630] usb 4-1: Using ep0 maxpacket: 16 [ 77.928640][ T3686] usb 3-1: config 0 descriptor?? [ 77.938619][ T3709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.971089][ T3709] usb 5-1: config 0 descriptor?? [ 78.023966][ T3630] usb 4-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 78.046613][ T3630] usb 4-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 78.065868][ T3630] usb 4-1: config 0 interface 0 has no altsetting 0 [ 78.070435][ T3688] lua 0003:1E7D:2C2E.0001: unbalanced collection at end of report description [ 78.084393][ T3688] lua 0003:1E7D:2C2E.0001: parse failed [ 78.090985][ T3688] lua: probe of 0003:1E7D:2C2E.0001 failed with error -22 [ 78.200154][ T3762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.222119][ T3762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.234201][ T3630] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 78.243302][ T3630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.267644][ T3630] usb 4-1: Product: syz [ 78.271970][ T3630] usb 4-1: Manufacturer: syz [ 78.296338][ T3630] usb 4-1: SerialNumber: syz [ 78.318037][ T3690] usb 1-1: USB disconnect, device number 2 [ 78.322175][ T3630] usb 4-1: config 0 descriptor?? [ 78.367511][ T3630] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 78.512058][ T3686] pantherlord 0003:0810:0001.0003: hidraw0: USB HID v0.00 Device [HID 0810:0001] on usb-dummy_hcd.2-1/input0 [ 78.524574][ T3686] pantherlord 0003:0810:0001.0003: no output reports found [ 78.621972][ T3688] usb 4-1: USB disconnect, device number 2 [ 78.688628][ T3709] usb 5-1: language id specifier not provided by device, defaulting to English [ 78.720560][ T3690] usb 3-1: USB disconnect, device number 2 [ 78.873650][ T3801] netlink: 'syz.1.12': attribute type 29 has an invalid length. [ 78.891851][ T3801] netlink: 'syz.1.12': attribute type 29 has an invalid length. [ 78.914168][ T3798] netlink: 'syz.1.12': attribute type 29 has an invalid length. [ 79.080362][ T3809] syz.1.14 uses obsolete (PF_INET,SOCK_PACKET) [ 79.324215][ T3690] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 79.335111][ T3709] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71 [ 79.355014][ T3709] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 79.373566][ T3709] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71 [ 79.391913][ T3709] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 79.403159][ T3709] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 79.414198][ T3709] usb 5-1: USB disconnect, device number 2 [ 79.593855][ T3690] usb 4-1: Using ep0 maxpacket: 16 [ 79.692608][ T3823] netlink: 'syz.1.20': attribute type 16 has an invalid length. [ 79.723862][ T3823] netlink: 48 bytes leftover after parsing attributes in process `syz.1.20'. [ 79.740522][ T3690] usb 4-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 79.743321][ T3823] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.760980][ T3690] usb 4-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 79.784188][ T3690] usb 4-1: config 0 interface 0 has no altsetting 0 [ 79.826658][ T3690] usb 4-1: language id specifier not provided by device, defaulting to English [ 80.113288][ T3825] device syzkaller0 entered promiscuous mode [ 80.883999][ T3690] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 80.933847][ T3690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.982698][ T3690] usb 4-1: Product: 門 [ 81.026299][ T3690] usb 4-1: config 0 descriptor?? [ 81.034843][ T3709] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.056427][ T3690] usb 4-1: can't set config #0, error -71 [ 81.095921][ T3690] usb 4-1: USB disconnect, device number 3 [ 81.386829][ T3754] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.394281][ T3709] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.416408][ T3709] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 81.427090][ T3709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.454457][ T3709] usb 5-1: config 0 descriptor?? [ 81.493803][ T3690] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 81.504057][ T3709] pwc: Askey VC010 type 2 USB webcam detected. [ 81.628620][ T7] cfg80211: failed to load regulatory.db [ 81.713899][ T3709] pwc: send_video_command error -71 [ 81.719269][ T3709] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 81.727501][ T3709] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 81.740453][ T3709] usb 5-1: USB disconnect, device number 3 [ 81.801430][ T3754] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.813391][ T3754] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 81.828026][ T3754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.846518][ T3754] usb 2-1: config 0 descriptor?? [ 81.887296][ T3754] pwc: Askey VC010 type 2 USB webcam detected. [ 81.897028][ T3690] usb 4-1: config 1 interface 0 has no altsetting 0 [ 82.071478][ T3690] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 82.088598][ T3690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.108893][ T3690] usb 4-1: Product: syz [ 82.113236][ T3690] usb 4-1: Manufacturer: syz [ 82.118627][ T3754] pwc: send_video_command error -71 [ 82.124226][ T3754] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 82.131802][ T3690] usb 4-1: SerialNumber: syz [ 82.149072][ T3754] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 82.167127][ T3754] usb 2-1: USB disconnect, device number 3 [ 82.303807][ T3709] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.365325][ T3630] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.604054][ T3630] usb 1-1: Using ep0 maxpacket: 32 [ 82.666366][ T3709] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.677621][ T3709] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 82.687195][ T3709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.697996][ T3689] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 82.723334][ T3709] usb 5-1: config 0 descriptor?? [ 82.728686][ T3630] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 82.737752][ T3630] usb 1-1: config 0 has no interface number 0 [ 82.744027][ T3630] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 82.755013][ T3630] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 82.765884][ T3630] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 82.778204][ T3709] pwc: Askey VC010 type 2 USB webcam detected. [ 82.784500][ T3630] usb 1-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.912043][ T3690] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 82.979221][ T3630] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 82.994952][ T3630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.003023][ T3630] usb 1-1: Product: syz [ 83.015038][ T3630] usb 1-1: Manufacturer: syz [ 83.019912][ T3630] usb 1-1: SerialNumber: syz [ 83.030195][ T3630] usb 1-1: config 0 descriptor?? [ 83.054409][ T3847] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 83.072066][ T3847] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 83.108404][ T3689] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.119352][ T3689] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 83.128550][ T3689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.143631][ T3689] usb 2-1: config 0 descriptor?? [ 83.189844][ T3689] pwc: Askey VC010 type 2 USB webcam detected. [ 83.203868][ C1] usblp0: nonzero write bulk status received: -71 [ 83.212388][ T3690] usb 4-1: USB disconnect, device number 4 [ 83.214329][ T3709] pwc: recv_control_msg error -32 req 02 val 2b00 [ 83.273930][ T3709] pwc: recv_control_msg error -32 req 02 val 2700 [ 83.314361][ T3630] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz) [ 83.323660][ T3709] pwc: recv_control_msg error -32 req 02 val 2c00 [ 83.363997][ T3709] pwc: recv_control_msg error -32 req 04 val 1000 [ 83.406591][ T3839] usblp0: removed [ 83.414259][ T3709] pwc: recv_control_msg error -32 req 04 val 1300 [ 83.453918][ T3709] pwc: recv_control_msg error -32 req 04 val 1400 [ 83.493880][ T3709] pwc: recv_control_msg error -32 req 02 val 2000 [ 83.539136][ T3709] pwc: recv_control_msg error -32 req 02 val 2100 [ 83.701356][ T3851] loop2: detected capacity change from 0 to 40427 [ 83.720129][ T3851] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 83.733591][ T3851] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 83.747577][ T3851] F2FS-fs (loop2): invalid crc value [ 83.760558][ T3851] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 83.803915][ T3709] pwc: recv_control_msg error -32 req 02 val 2500 [ 83.829969][ T3689] pwc: recv_control_msg error -32 req 02 val 2700 [ 83.862725][ T3851] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 83.870082][ T3851] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 83.884003][ T3689] pwc: recv_control_msg error -32 req 02 val 2c00 [ 83.921853][ T3851] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.944034][ T3689] pwc: recv_control_msg error -32 req 04 val 1000 [ 83.976732][ T3842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.999974][ T3842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.008205][ T3689] pwc: recv_control_msg error -32 req 04 val 1300 [ 84.053941][ T3709] pwc: recv_control_msg error -71 req 02 val 2600 [ 84.084551][ T3709] pwc: recv_control_msg error -71 req 02 val 2900 [ 84.089524][ T3689] pwc: recv_control_msg error -32 req 04 val 1400 [ 84.127444][ T3709] pwc: recv_control_msg error -71 req 02 val 2800 [ 84.154008][ T3709] pwc: recv_control_msg error -71 req 04 val 1100 [ 84.178776][ T3709] pwc: recv_control_msg error -71 req 04 val 1200 [ 84.211150][ T3709] pwc: Registered as video71. [ 84.222996][ T3709] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 84.304582][ T3689] pwc: recv_control_msg error -32 req 02 val 2000 [ 84.333439][ T3709] usb 5-1: USB disconnect, device number 4 [ 84.580733][ T3689] pwc: recv_control_msg error -32 req 04 val 1500 [ 84.803356][ T3689] pwc: recv_control_msg error -32 req 02 val 2500 [ 84.844299][ T3689] pwc: recv_control_msg error -32 req 02 val 2400 [ 84.960728][ T3689] pwc: recv_control_msg error -32 req 02 val 2600 [ 85.184745][ T3689] pwc: recv_control_msg error -32 req 02 val 2900 [ 85.314276][ T3689] pwc: recv_control_msg error -32 req 02 val 2800 [ 85.501085][ T3876] loop4: detected capacity change from 0 to 128 [ 85.549763][ T3876] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 85.571226][ T3690] usb 1-1: USB disconnect, device number 3 [ 85.656699][ T3689] pwc: Registered as video71. [ 85.662799][ T3689] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 85.910813][ T3689] usb 2-1: USB disconnect, device number 4 [ 86.193135][ T3889] netlink: 108 bytes leftover after parsing attributes in process `syz.4.34'. [ 86.647390][ T3659] udevd[3659]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 86.737085][ T3690] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.981932][ T3896] loop4: detected capacity change from 0 to 1024 [ 87.150433][ T3896] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 87.261511][ T3690] usb 1-1: Using ep0 maxpacket: 16 [ 87.311701][ T3643] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /5/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 87.399190][ T3643] EXT4-fs error (device loop4): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 87.424067][ T3690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.442764][ T3690] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 87.462742][ T3690] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 87.480093][ T3690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.488397][ T3643] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 87.500591][ T3643] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /5/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 87.540758][ T3690] usb 1-1: config 0 descriptor?? [ 87.556465][ T3643] EXT4-fs error (device loop4): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 87.583964][ T3643] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 87.624250][ T3643] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /5/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 87.657933][ T3643] EXT4-fs error (device loop4): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 87.677597][ T7] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 87.685641][ T3643] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 87.704306][ T3643] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /5/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 87.734548][ T3643] EXT4-fs error (device loop4): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 87.784822][ T3643] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 87.820896][ T3643] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /5/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 87.935087][ T3643] EXT4-fs error (device loop4): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 87.964339][ T3643] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 88.008782][ T3643] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 88.021140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.022397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.044850][ T7] usb 3-1: config 1 interface 0 has no altsetting 0 [ 88.049060][ T3690] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 88.077818][ T3690] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 88.110421][ T3690] microsoft 0003:045E:07DA.0004: no inputs found [ 88.121484][ T3643] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 88.126488][ T3690] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 88.147016][ T3907] loop1: detected capacity change from 0 to 40427 [ 88.157917][ T3907] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 88.168051][ T3907] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 88.179494][ T3643] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 88.194809][ T3907] F2FS-fs (loop1): invalid crc value [ 88.213993][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 88.235808][ T3643] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 88.248212][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.260194][ T3907] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 88.280650][ T3643] EXT4-fs warning (device loop4): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 88.287375][ T7] usb 3-1: Product: syz [ 88.304947][ T3882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.316555][ T7] usb 3-1: Manufacturer: syz [ 88.334610][ T7] usb 3-1: SerialNumber: syz [ 88.360405][ T3882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.430287][ T3907] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 88.442429][ T3907] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 89.074207][ T7] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 89.180261][ T3643] EXT4-fs (loop4): unmounting filesystem. [ 89.232051][ T3838] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.356188][ T3838] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.391394][ T3689] usb 3-1: USB disconnect, device number 3 [ 89.397418][ C1] usblp0: nonzero write bulk status received: -71 [ 89.497652][ T3838] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.589443][ T3838] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.609289][ T3908] usblp0: removed [ 89.635563][ T3921] syz.3.46 (3921) used greatest stack depth: 20056 bytes left [ 89.886540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.897646][ T3709] usb 1-1: USB disconnect, device number 4 [ 89.935502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.943946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 89.953863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 89.963622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 89.971974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 89.980387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 89.989369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 90.020957][ T3928] vxfs: WRONG superblock magic 00000000 at 1 [ 90.028921][ T3928] vxfs: WRONG superblock magic 00000000 at 8 [ 90.035175][ T3928] vxfs: can't find superblock. [ 90.791313][ T26] audit: type=1326 audit(1725413583.965:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c6b7ceb9 code=0x7ffc0000 [ 90.914171][ T26] audit: type=1326 audit(1725413584.035:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c6b7ceb9 code=0x7ffc0000 [ 91.004193][ T26] audit: type=1326 audit(1725413584.075:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12c6b7ceb9 code=0x7ffc0000 [ 91.106769][ T26] audit: type=1326 audit(1725413584.075:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c6b7ceb9 code=0x7ffc0000 [ 91.152956][ T3939] loop2: detected capacity change from 0 to 512 [ 91.192445][ T26] audit: type=1326 audit(1725413584.075:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c6b7ceb9 code=0x7ffc0000 [ 91.263634][ T3939] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 91.266538][ T3657] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.284334][ T3939] ext4 filesystem being mounted at /7/bus supports timestamps until 2038 (0x7fffffff) [ 91.295238][ T3657] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.306747][ T3657] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.315455][ T3657] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.323158][ T3657] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.333041][ T3657] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.404571][ T26] audit: type=1326 audit(1725413584.075:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12c6b7ceb9 code=0x7ffc0000 [ 92.086927][ T26] audit: type=1326 audit(1725413584.095:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c6b7ceb9 code=0x7ffc0000 [ 92.261597][ T3642] EXT4-fs (loop2): unmounting filesystem. [ 92.313801][ T26] audit: type=1326 audit(1725413584.095:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c6b7ceb9 code=0x7ffc0000 [ 92.466988][ T26] audit: type=1326 audit(1725413584.095:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12c6b7ceb9 code=0x7ffc0000 [ 92.574255][ T26] audit: type=1326 audit(1725413584.095:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c6b7ceb9 code=0x7ffc0000 [ 93.444047][ T3690] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 93.454224][ T3656] Bluetooth: hci2: command tx timeout [ 93.683659][ T3940] chnl_net:caif_netlink_parms(): no params data found [ 93.874953][ T3957] capability: warning: `syz.3.56' uses deprecated v2 capabilities in a way that may be insecure [ 93.982877][ T3690] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 94.014232][ T3690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.037622][ T3690] usb 3-1: config 0 descriptor?? [ 94.211777][ T3960] loop0: detected capacity change from 0 to 40427 [ 94.240583][ T3960] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 94.248798][ T3960] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 94.252371][ T3940] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.266950][ T3940] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.278973][ T3960] F2FS-fs (loop0): invalid crc value [ 94.289023][ T3940] device bridge_slave_0 entered promiscuous mode [ 94.305784][ T3960] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 94.316685][ T3690] [drm] vendor descriptor length:6 data:06 5f f2 51 72 8a 00 00 00 00 00 [ 94.329398][ T3690] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 94.360724][ T3940] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.389810][ T3940] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.400574][ T3940] device bridge_slave_1 entered promiscuous mode [ 94.401540][ T3960] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 94.420176][ T3960] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 94.433791][ T7] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 94.477797][ T3940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.491747][ T3940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.519629][ T3969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.544789][ T3969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.613931][ T3690] [drm:udl_init] *ERROR* Selecting channel failed [ 95.385654][ T3996] overlayfs: failed to resolve './file1': -2 [ 95.734571][ T3656] Bluetooth: hci2: command tx timeout [ 95.814296][ T7] usb 4-1: config 1 interface 0 has no altsetting 0 [ 96.016048][ T3940] team0: Port device team_slave_0 added [ 96.081715][ T3690] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 96.089355][ T3690] [drm] Initialized udl on minor 2 [ 96.103995][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 96.113879][ T3690] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 96.123102][ T3690] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 96.132618][ T3690] usb 3-1: USB disconnect, device number 4 [ 96.143173][ T3689] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 96.149489][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.218226][ T3689] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 96.220526][ T7] usb 4-1: Product: syz [ 96.227754][ T3689] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 96.291369][ T7] usb 4-1: Manufacturer: syz [ 96.323980][ T7] usb 4-1: SerialNumber: syz [ 96.326341][ T4007] loop1: detected capacity change from 0 to 512 [ 96.403627][ T3838] device hsr_slave_0 left promiscuous mode [ 96.413625][ T3838] device hsr_slave_1 left promiscuous mode [ 96.438864][ T4007] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 96.469590][ T3838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.470220][ T4007] ext4 filesystem being mounted at /20/bus supports timestamps until 2038 (0x7fffffff) [ 96.538088][ T3838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.590065][ T3838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.663868][ T3838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.704505][ T3838] device bridge_slave_1 left promiscuous mode [ 96.712006][ T3838] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.748464][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 96.748500][ T26] audit: type=1326 audit(1725413589.925:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4016 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43afd7ceb9 code=0x7ffc0000 [ 97.055027][ T3838] device bridge_slave_0 left promiscuous mode [ 97.221683][ T3838] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.263829][ T26] audit: type=1326 audit(1725413590.185:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4016 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43afd7ceb9 code=0x7ffc0000 [ 97.396027][ T26] audit: type=1326 audit(1725413590.375:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4016 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43afd7ceb9 code=0x7ffc0000 [ 97.428159][ T3648] EXT4-fs (loop1): unmounting filesystem. [ 97.439094][ T3838] device veth1_macvtap left promiscuous mode [ 97.460767][ T7] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 97.487966][ T3838] device veth0_macvtap left promiscuous mode [ 97.513879][ T26] audit: type=1326 audit(1725413590.375:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4016 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43afd7ceb9 code=0x7ffc0000 [ 97.527285][ T3838] device veth1_vlan left promiscuous mode [ 97.592005][ T3838] device veth0_vlan left promiscuous mode [ 97.624502][ T26] audit: type=1326 audit(1725413590.375:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4016 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43afd7ceb9 code=0x7ffc0000 [ 97.664636][ T3754] usb 4-1: USB disconnect, device number 5 [ 97.672583][ T3754] usblp0: removed [ 97.688554][ T26] audit: type=1326 audit(1725413590.375:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4016 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43afd7ceb9 code=0x7ffc0000 [ 97.711316][ T26] audit: type=1326 audit(1725413590.375:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4016 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43afd7ceb9 code=0x7ffc0000 [ 97.735641][ T26] audit: type=1326 audit(1725413590.375:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4016 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43afd7ceb9 code=0x7ffc0000 [ 97.768695][ T26] audit: type=1326 audit(1725413590.375:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4016 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43afd7ceb9 code=0x7ffc0000 [ 97.793917][ T3656] Bluetooth: hci2: command tx timeout [ 97.812676][ T26] audit: type=1326 audit(1725413590.375:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4016 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43afd7ceb9 code=0x7ffc0000 [ 98.822760][ T4042] kvm: emulating exchange as write [ 99.217105][ T3838] team0 (unregistering): Port device team_slave_1 removed [ 99.255288][ T3838] team0 (unregistering): Port device team_slave_0 removed [ 99.297693][ T3838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.333965][ T3686] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 99.353284][ T3838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.653870][ T3686] usb 4-1: not running at top speed; connect to a high speed hub [ 99.734954][ T3686] usb 4-1: config 11 has an invalid interface number: 95 but max is 0 [ 99.743370][ T3686] usb 4-1: config 11 has no interface number 0 [ 99.750153][ T3686] usb 4-1: config 11 interface 95 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 99.761648][ T3686] usb 4-1: config 11 interface 95 has no altsetting 0 [ 99.779734][ T3838] bond0 (unregistering): Released all slaves [ 99.854123][ T3656] Bluetooth: hci2: command tx timeout [ 99.862116][ T3940] team0: Port device team_slave_1 added [ 100.004237][ T3686] usb 4-1: string descriptor 0 read error: -22 [ 100.020776][ T3686] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 100.086046][ T3686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.125202][ T3940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.132251][ T3940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.184194][ T4049] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.233015][ T3686] usbtouchscreen: probe of 4-1:11.95 failed with error -8 [ 100.246961][ T4056] loop2: detected capacity change from 0 to 512 [ 100.282383][ T3940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.310887][ T4056] journal_path: Lookup failure for './file0' [ 100.333998][ T4056] EXT4-fs: error: could not find journal device path [ 100.348037][ T3940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.364867][ T3940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.397514][ T3659] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.452486][ T3686] usb 4-1: USB disconnect, device number 6 [ 100.548298][ T4056] loop2: detected capacity change from 0 to 2048 [ 100.598148][ T3940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.661984][ T4056] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 101.319114][ T3940] device hsr_slave_0 entered promiscuous mode [ 101.357103][ T4056] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.406296][ T3940] device hsr_slave_1 entered promiscuous mode [ 101.561814][ T3940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.605315][ T3940] Cannot create hsr debugfs directory [ 101.613650][ T4071] loop0: detected capacity change from 0 to 512 [ 101.645638][ T4075] loop1: detected capacity change from 0 to 1024 [ 101.656513][ T4075] EXT4-fs: Mount option(s) incompatible with ext2 [ 101.747283][ T4079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.74'. [ 102.076379][ T4071] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 102.118905][ T4071] ext4 filesystem being mounted at /13/bus supports timestamps until 2038 (0x7fffffff) [ 104.504627][ T3639] EXT4-fs (loop0): unmounting filesystem. [ 104.681915][ T4095] loop0: detected capacity change from 0 to 128 [ 104.724237][ T4095] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 105.307155][ T3690] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 106.709323][ T4112] loop2: detected capacity change from 0 to 512 [ 106.729621][ T4112] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.836802][ T3690] usb 4-1: config 1 interface 0 has no altsetting 0 [ 106.849182][ T4112] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 106.870215][ T4112] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff) [ 107.350843][ T3642] EXT4-fs (loop2): unmounting filesystem. [ 107.466567][ T22] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.821659][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 107.898394][ T3690] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 107.919355][ T3690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.955204][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.017324][ T22] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 108.031098][ T3690] usb 4-1: Product: syz [ 108.042473][ T3690] usb 4-1: Manufacturer: syz [ 108.244721][ T22] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 108.255763][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.275112][ T3690] usb 4-1: can't set config #1, error -71 [ 108.283080][ T3690] usb 4-1: USB disconnect, device number 7 [ 108.290150][ T22] usb 2-1: config 0 descriptor?? [ 108.960856][ T3940] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.971197][ T3940] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.994596][ T3940] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.192693][ T22] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 109.203004][ T22] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 109.214801][ T22] microsoft 0003:045E:07DA.0005: no inputs found [ 109.223977][ T22] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 109.232799][ T3940] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.382014][ T4168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.410069][ T4168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.507463][ T3940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.545660][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.554449][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.581509][ T3940] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.597297][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.625273][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.645370][ T4085] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.652520][ T4085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.676336][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.716135][ T3940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 109.737620][ T3940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.781138][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.809252][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.832180][ T4085] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.839476][ T4085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.850441][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.860251][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.869891][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.881797][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.893048][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.905270][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.914922][ T4178] loop2: detected capacity change from 0 to 1024 [ 109.925308][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.947595][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.972623][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.011514][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.011970][ T4178] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 110.027353][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.047371][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.102963][ T4185] netlink: 'syz.0.100': attribute type 3 has an invalid length. [ 110.182469][ T3642] EXT4-fs (loop2): unmounting filesystem. [ 111.437570][ T3686] usb 2-1: USB disconnect, device number 5 [ 111.583432][ T4211] loop1: detected capacity change from 0 to 512 [ 111.710075][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.718596][ T4217] loop3: detected capacity change from 0 to 1024 [ 111.723278][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.746447][ T4211] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 111.767670][ T3940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.775802][ T4211] ext4 filesystem being mounted at /28/bus supports timestamps until 2038 (0x7fffffff) [ 111.799692][ T4217] EXT4-fs: Mount option(s) incompatible with ext2 [ 114.170347][ T3648] EXT4-fs (loop1): unmounting filesystem. [ 114.745758][ T4258] loop2: detected capacity change from 0 to 1024 [ 114.805799][ T4258] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 114.992549][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.058573][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 115.058590][ T26] audit: type=1800 audit(1725413608.235:140): pid=4258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.113" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 115.093542][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.205205][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.205254][ T4273] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm syz.2.113: Invalid inode table block 14224531095162842338 in block_group 0 [ 115.230129][ T4273] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5879: Corrupt filesystem [ 115.244240][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.458722][ T4273] EXT4-fs error (device loop2): ext4_dirty_inode:6083: inode #15: comm syz.2.113: mark_inode_dirty error [ 115.504758][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.731459][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.934668][ T4256] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm syz.2.113: Invalid inode table block 14224531095162842338 in block_group 0 [ 116.042887][ T3940] device veth0_vlan entered promiscuous mode [ 116.072685][ T4273] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm syz.2.113: Invalid inode table block 14224531095162842338 in block_group 0 [ 116.083234][ T3940] device veth1_vlan entered promiscuous mode [ 117.817635][ T3940] device veth0_macvtap entered promiscuous mode [ 117.898071][ T3940] device veth1_macvtap entered promiscuous mode [ 117.987142][ T4218] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 4114310728399543779 [ 118.006420][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.093145][ T4295] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 118.129610][ T3642] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 118.164339][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.185789][ T4295] EXT4-fs warning (device sda1): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 118.210050][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.227868][ T4296] loop0: detected capacity change from 0 to 512 [ 118.247606][ T3642] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 118.283880][ T3642] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 14224531095162842338 in block_group 0 [ 118.301819][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.315365][ T3642] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5879: Corrupt filesystem [ 118.326539][ T3642] EXT4-fs error (device loop2): ext4_dirty_inode:6083: inode #2: comm syz-executor: mark_inode_dirty error [ 118.362486][ T4231] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm kworker/u4:12: Invalid inode table block 14224531095162842338 in block_group 0 [ 118.398545][ T3642] EXT4-fs (loop2): unmounting filesystem. [ 118.592281][ T4296] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 118.602255][ T4296] ext4 filesystem being mounted at /24/bus supports timestamps until 2038 (0x7fffffff) [ 119.308740][ T3940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.441509][ T3940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.572229][ T3940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.647103][ T3940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.678209][ T3940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.690438][ T3940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.712091][ T3940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.722672][ T3940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.839693][ T3940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.892409][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.902520][ T4319] loop3: detected capacity change from 0 to 8 [ 119.904048][ T3639] EXT4-fs (loop0): unmounting filesystem. [ 119.936774][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.135204][ T3940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.171839][ T3940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.212823][ T3940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.235107][ T3940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.250293][ T3940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.261184][ T3940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.271549][ T3940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.283391][ T3940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.350094][ T3940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.428039][ T33] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.485601][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.496512][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.512818][ T3940] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.530702][ T3940] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.548067][ T3940] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.564489][ T3940] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.052769][ T33] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.691652][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.707070][ T3646] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 121.716572][ T3646] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 121.725322][ T3646] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 121.752353][ T3646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 121.761553][ T3646] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 121.763869][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.776855][ T3646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 121.808561][ T4345] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 121.817054][ T4345] EXT4-fs warning (device sda1): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 121.898716][ T33] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.948956][ T4343] loop3: detected capacity change from 0 to 4096 [ 122.052940][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.109555][ T3659] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.951581][ T33] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.060923][ T4343] loop3: detected capacity change from 0 to 1024 [ 123.068075][ T4343] ======================================================= [ 123.068075][ T4343] WARNING: The mand mount option has been deprecated and [ 123.068075][ T4343] and is ignored by this kernel. Remove the mand [ 123.068075][ T4343] option from the mount to silence this warning. [ 123.068075][ T4343] ======================================================= [ 123.467807][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.503638][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.624516][ T4361] xt_socket: unknown flags 0xc [ 123.721814][ T4362] hfsplus: can't free extent [ 124.191017][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.225224][ T4361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.132'. [ 124.366773][ T3656] Bluetooth: hci1: command tx timeout [ 124.698611][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 124.905270][ T4376] loop1: detected capacity change from 0 to 128 [ 125.863315][ T4392] loop0: detected capacity change from 0 to 1024 [ 125.994252][ T4392] EXT4-fs: Ignoring removed orlov option [ 126.332715][ T4392] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 126.414586][ T3656] Bluetooth: hci1: command tx timeout [ 126.568818][ T3639] EXT4-fs (loop0): unmounting filesystem. [ 126.715880][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.747277][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.779793][ T4339] device bridge_slave_0 entered promiscuous mode [ 126.869117][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.894150][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.902563][ T4339] device bridge_slave_1 entered promiscuous mode [ 127.119263][ T4430] loop3: detected capacity change from 0 to 512 [ 127.141707][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.203598][ T4430] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 127.215456][ T4430] ext4 filesystem being mounted at /36/bus supports timestamps until 2038 (0x7fffffff) [ 127.321361][ T4435] loop0: detected capacity change from 0 to 8 [ 127.334865][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.969474][ T4437] netlink: 20 bytes leftover after parsing attributes in process `syz.0.153'. [ 128.163416][ T4339] team0: Port device team_slave_0 added [ 128.196240][ T3649] EXT4-fs (loop3): unmounting filesystem. [ 128.248046][ T4339] team0: Port device team_slave_1 added [ 128.389240][ T3690] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 128.573962][ T3656] Bluetooth: hci1: command tx timeout [ 129.182506][ T3690] usb 2-1: config 1 interface 0 has no altsetting 0 [ 129.236867][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.266150][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.474934][ T3690] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 129.634802][ T3690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.781973][ T3690] usb 2-1: Product: syz [ 129.893907][ T3690] usb 2-1: Manufacturer: syz [ 129.904315][ T3690] usb 2-1: SerialNumber: syz [ 129.909138][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.983930][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.990930][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.103891][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.203261][ T3690] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 131.219719][ T3656] Bluetooth: hci1: command tx timeout [ 131.436635][ T4495] loop3: detected capacity change from 0 to 2048 [ 131.471554][ T4339] device hsr_slave_0 entered promiscuous mode [ 131.517154][ T3769] usb 2-1: USB disconnect, device number 6 [ 131.523756][ C1] usblp0: nonzero write bulk status received: -71 [ 131.531373][ T4339] device hsr_slave_1 entered promiscuous mode [ 131.611997][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.619934][ T4339] Cannot create hsr debugfs directory [ 131.644783][ T4502] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 131.648897][ T4495] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 131.652298][ T4502] EXT4-fs warning (device sda1): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 131.731613][ T4446] usblp0: removed [ 131.747838][ T33] device hsr_slave_0 left promiscuous mode [ 131.756957][ T33] device hsr_slave_1 left promiscuous mode [ 131.766660][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.776762][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.793092][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.802801][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.825807][ T33] device bridge_slave_1 left promiscuous mode [ 131.839317][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.850458][ T4505] loop4: detected capacity change from 0 to 512 [ 131.860525][ T33] device bridge_slave_0 left promiscuous mode [ 131.869748][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.901171][ T4505] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 131.915319][ T33] device veth1_macvtap left promiscuous mode [ 131.921461][ T33] device veth0_macvtap left promiscuous mode [ 131.928419][ T4505] ext4 filesystem being mounted at /10/bus supports timestamps until 2038 (0x7fffffff) [ 131.938467][ T33] device veth1_vlan left promiscuous mode [ 131.944514][ T33] device veth0_vlan left promiscuous mode [ 132.133366][ T3690] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 132.393994][ T3690] usb 4-1: Using ep0 maxpacket: 16 [ 132.909680][ T3690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.932810][ T3690] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 132.949731][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.956113][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.974562][ T3940] EXT4-fs (loop4): unmounting filesystem. [ 133.006850][ T3690] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 133.028890][ T3690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.047860][ T3690] usb 4-1: config 0 descriptor?? [ 133.501821][ T3690] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 133.510869][ T3690] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 133.522936][ T3690] microsoft 0003:045E:07DA.0006: no inputs found [ 133.529648][ T3690] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 133.612231][ T33] team0 (unregistering): Port device team_slave_1 removed [ 133.656523][ T33] team0 (unregistering): Port device team_slave_0 removed [ 133.760817][ T4495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.785361][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.794696][ T4495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.865981][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.162991][ T3709] usb 4-1: USB disconnect, device number 8 [ 134.941520][ T3649] EXT4-fs (loop3): unmounting filesystem. [ 137.297589][ T3686] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 137.600956][ T33] bond0 (unregistering): Released all slaves [ 137.683907][ T3686] usb 1-1: config 1 interface 0 has no altsetting 0 [ 137.864009][ T3686] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 137.891630][ T3686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.909972][ T3686] usb 1-1: Product: syz [ 137.915825][ T3686] usb 1-1: Manufacturer: syz [ 137.920566][ T3686] usb 1-1: SerialNumber: syz [ 138.732663][ T3686] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 139.119702][ T3754] usb 1-1: USB disconnect, device number 5 [ 139.133746][ C0] usblp0: nonzero write bulk status received: -71 [ 139.290839][ T4339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 139.331290][ T4339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 139.362452][ T4540] usblp0: removed [ 139.383960][ T4339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 139.402739][ T4339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 139.679805][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.079441][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.384522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.404758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.479115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.658144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.847725][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.855148][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.871392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.881184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.335204][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.342402][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.374456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.384860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.396466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.664656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.683855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.725945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.784150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.837619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.864179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.897351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.928932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.964675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.998187][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.699083][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.722883][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.750077][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.818424][ T153] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 142.833800][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.850572][ T3875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.922261][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.931875][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.964345][ T4339] device veth0_vlan entered promiscuous mode [ 142.989421][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.011659][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.034856][ T4339] device veth1_vlan entered promiscuous mode [ 143.197631][ T4339] device veth0_macvtap entered promiscuous mode [ 143.252826][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 143.275406][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 143.305364][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.314430][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.335050][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.421747][ T153] usb 5-1: config 1 interface 0 has no altsetting 0 [ 143.635145][ T153] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 143.699577][ T153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.870661][ T153] usb 5-1: Product: syz [ 143.986724][ T153] usb 5-1: Manufacturer: syz [ 143.991386][ T153] usb 5-1: SerialNumber: syz [ 144.042485][ T4631] IPv6: sit1: Disabled Multicast RS [ 144.095684][ T4339] device veth1_macvtap entered promiscuous mode [ 144.218217][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.321198][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.355403][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.802324][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.938089][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.997440][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.053049][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.089654][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.101571][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.117179][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.144669][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.163208][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.223778][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.265216][ T153] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 145.293777][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.343786][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.364006][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.403922][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.432553][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.459350][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.496775][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.532924][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.567958][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.579984][ T22] usb 5-1: USB disconnect, device number 5 [ 145.583820][ C0] usblp0: nonzero write bulk status received: -71 [ 145.636733][ T4339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.660586][ T4339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.687733][ T4339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.712809][ T4339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.806368][ T4613] usblp0: removed [ 146.005891][ T3838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.032268][ T3838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.091546][ T3838] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.108879][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.153785][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.191760][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.513868][ T26] audit: type=1326 audit(1725413639.665:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5497ceb9 code=0x7ffc0000 [ 146.565813][ T26] audit: type=1326 audit(1725413639.665:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda5497ceb9 code=0x7ffc0000 [ 146.687069][ T26] audit: type=1326 audit(1725413639.665:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5497ceb9 code=0x7ffc0000 [ 146.881249][ T26] audit: type=1326 audit(1725413639.665:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5497ceb9 code=0x7ffc0000 [ 147.373205][ T26] audit: type=1326 audit(1725413639.675:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda5497ceb9 code=0x7ffc0000 [ 149.101281][ T26] audit: type=1326 audit(1725413639.675:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5497ceb9 code=0x7ffc0000 [ 149.173841][ T26] audit: type=1326 audit(1725413639.675:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5497ceb9 code=0x7ffc0000 [ 149.352287][ T26] audit: type=1326 audit(1725413639.675:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda5497ceb9 code=0x7ffc0000 [ 149.406367][ T26] audit: type=1326 audit(1725413639.675:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5497ceb9 code=0x7ffc0000 [ 149.437853][ T26] audit: type=1326 audit(1725413639.675:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5497ceb9 code=0x7ffc0000 [ 149.613761][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 149.855219][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 149.975518][ T7] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 150.014082][ T7] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x93, skipping [ 150.043801][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 150.247084][ T7] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 150.325454][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.359861][ T4721] loop1: detected capacity change from 0 to 128 [ 150.459623][ T4721] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 150.861536][ T7] usb 3-1: Product: syz [ 150.888614][ T7] usb 3-1: Manufacturer: syz [ 150.895970][ T7] usb 3-1: SerialNumber: syz [ 150.922434][ T4727] netlink: 'syz.4.225': attribute type 27 has an invalid length. [ 150.942950][ T7] usb 3-1: config 0 descriptor?? [ 151.126563][ T7] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 151.196854][ T7] imon 3-1:0.0: unable to initialize intf0, err -19 [ 151.260905][ T7] imon:imon_probe: failed to initialize context! [ 151.294161][ T7] imon 3-1:0.0: unable to register, err -19 [ 151.312414][ T4692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.357325][ T4739] netlink: 108 bytes leftover after parsing attributes in process `syz.1.223'. [ 151.833143][ T4737] loop3: detected capacity change from 0 to 1024 [ 151.835955][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 151.835972][ T26] audit: type=1326 audit(1725413645.015:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda5497ceb9 code=0x7ffc0000 [ 151.881539][ T4692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.910642][ T4737] EXT4-fs: Mount option(s) incompatible with ext2 [ 151.989772][ T7] usb 3-1: USB disconnect, device number 5 [ 152.019179][ T3659] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 152.020920][ T26] audit: type=1326 audit(1725413645.085:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5497ceb9 code=0x7ffc0000 [ 152.069407][ T26] audit: type=1326 audit(1725413645.085:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5497ceb9 code=0x7ffc0000 [ 152.092269][ T26] audit: type=1326 audit(1725413645.085:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda5497ceb9 code=0x7ffc0000 [ 152.296120][ T26] audit: type=1326 audit(1725413645.085:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5497ceb9 code=0x7ffc0000 [ 152.832196][ T26] audit: type=1326 audit(1725413645.085:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5497ceb9 code=0x7ffc0000 [ 152.832236][ T26] audit: type=1326 audit(1725413645.085:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda5497ceb9 code=0x7ffc0000 [ 152.832270][ T26] audit: type=1326 audit(1725413645.085:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5497ceb9 code=0x7ffc0000 [ 152.832306][ T26] audit: type=1326 audit(1725413645.085:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5497ceb9 code=0x7ffc0000 [ 152.832342][ T26] audit: type=1326 audit(1725413645.085:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4735 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fda5497ceb9 code=0x7ffc0000 [ 153.648556][ T4756] Zero length message leads to an empty skb [ 154.702262][ T4759] loop4: detected capacity change from 0 to 2048 [ 154.797059][ T4759] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.885582][ T4748] tty tty4: ldisc open failed (-12), clearing slot 3 [ 156.810295][ T4800] loop4: detected capacity change from 0 to 512 [ 157.320366][ T4800] __quota_error: 21 callbacks suppressed [ 157.320385][ T4800] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 157.382186][ T4800] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 157.396078][ T4800] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.242: Failed to acquire dquot type 0 [ 157.439738][ T4800] EXT4-fs (loop4): Remounting filesystem read-only [ 157.452402][ T4800] EXT4-fs (loop4): 1 orphan inode deleted [ 157.469487][ T4800] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 157.509370][ T4800] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038 (0x7fffffff) [ 158.794907][ T3940] EXT4-fs (loop4): unmounting filesystem. [ 159.389920][ T4844] usb usb8: usbfs: process 4844 (syz.3.250) did not claim interface 0 before use [ 160.668326][ T4865] IPv6: sit1: Disabled Multicast RS [ 162.743747][ T3630] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 162.983774][ T3630] usb 4-1: Using ep0 maxpacket: 16 [ 163.104124][ T3630] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.137770][ T3630] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.180393][ T3630] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 163.209753][ T3630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.274812][ T3630] usb 4-1: config 0 descriptor?? [ 163.483382][ T4907] usb usb8: usbfs: process 4907 (syz.2.264) did not claim interface 0 before use [ 164.231897][ T4914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.244505][ T3630] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 164.261880][ T3630] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 164.280711][ T3630] microsoft 0003:045E:07DA.0007: no inputs found [ 164.294135][ T3630] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 164.354077][ T4914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.575051][ T22] usb 4-1: USB disconnect, device number 9 [ 165.408493][ T4948] usb usb8: usbfs: process 4948 (syz.2.280) did not claim interface 0 before use [ 166.431195][ T4963] loop1: detected capacity change from 0 to 8 [ 167.437613][ T4974] bridge0: port 3(gretap0) entered blocking state [ 167.469375][ T4974] bridge0: port 3(gretap0) entered disabled state [ 167.495443][ T4974] device gretap0 entered promiscuous mode [ 167.511618][ T4974] bridge0: port 3(gretap0) entered blocking state [ 167.518641][ T4974] bridge0: port 3(gretap0) entered forwarding state [ 167.613929][ T3688] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 167.735270][ T153] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 167.874932][ T3688] usb 3-1: Using ep0 maxpacket: 16 [ 168.023644][ T3688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.049027][ T3688] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 168.084077][ T3688] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 168.110476][ T3688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.132027][ T153] usb 4-1: config 1 interface 0 has no altsetting 0 [ 168.140289][ T3688] usb 3-1: config 0 descriptor?? [ 168.307079][ T153] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 168.316410][ T153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.324974][ T153] usb 4-1: Product: syz [ 168.329164][ T153] usb 4-1: Manufacturer: syz [ 168.334147][ T153] usb 4-1: SerialNumber: syz [ 168.620624][ T3688] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 168.639279][ T3688] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 168.651008][ T3688] microsoft 0003:045E:07DA.0008: no inputs found [ 168.658290][ T3688] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 168.875850][ T5005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.904831][ T5005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.081127][ T153] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 169.397385][ T7] usb 4-1: USB disconnect, device number 10 [ 169.403732][ C1] usblp0: nonzero write bulk status received: -71 [ 169.605797][ T4978] usblp0: removed [ 170.355261][ T946] usb 3-1: USB disconnect, device number 6 [ 170.567030][ T5029] netlink: 272 bytes leftover after parsing attributes in process `syz.2.315'. [ 170.807312][ T5034] loop0: detected capacity change from 0 to 4096 [ 170.871749][ T5039] loop4: detected capacity change from 0 to 1024 [ 170.893083][ T5036] loop3: detected capacity change from 0 to 512 [ 170.901330][ T3659] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 170.942858][ T5039] EXT4-fs: Ignoring removed orlov option [ 170.955076][ T5039] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.999973][ T5034] loop0: detected capacity change from 0 to 1024 [ 171.011772][ T5036] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.317: casefold flag without casefold feature [ 171.027374][ T5039] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 171.077823][ T5036] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.317: missing EA_INODE flag [ 171.217517][ T5036] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.317: error while reading EA inode 2 err=-117 [ 171.262267][ T5036] EXT4-fs (loop3): 1 orphan inode deleted [ 171.291352][ T5036] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 171.303717][ T3688] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 171.485682][ T3649] EXT4-fs (loop3): unmounting filesystem. [ 171.513944][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 171.723400][ T5062] loop0: detected capacity change from 0 to 2048 [ 171.875439][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 172.014785][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 172.316466][ T7] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 172.421031][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.460658][ T7] usb 5-1: Product: syz [ 172.476858][ T7] usb 5-1: Manufacturer: syz [ 172.481651][ T7] usb 5-1: SerialNumber: syz [ 172.542440][ T7] usb 5-1: config 0 descriptor?? [ 172.634025][ T5039] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 172.636186][ T3688] usb 3-1: config 1 interface 0 has no altsetting 0 [ 172.935869][ T3688] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 173.038952][ T3688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.189627][ T3688] usb 3-1: Product: syz [ 173.289618][ T3688] usb 3-1: Manufacturer: syz [ 173.352779][ T3688] usb 3-1: SerialNumber: syz [ 173.690072][ T3749] usb 5-1: USB disconnect, device number 6 [ 173.855148][ T3940] EXT4-fs (loop4): unmounting filesystem. [ 173.979850][ T5083] udevd[5083]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.154025][ T5094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.336'. [ 174.199540][ T5089] loop3: detected capacity change from 0 to 4096 [ 174.232025][ T5094] loop0: detected capacity change from 0 to 512 [ 174.301664][ T5094] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 174.328053][ T5094] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038 (0x7fffffff) [ 174.349369][ T3688] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 174.367182][ T5089] loop3: detected capacity change from 0 to 1024 [ 174.444314][ T5094] ------------[ cut here ]------------ [ 174.449854][ T5094] WARNING: CPU: 0 PID: 5094 at net/wireless/core.h:231 __cfg80211_wext_giwrate+0x4a1/0x570 [ 174.459993][ T5094] Modules linked in: [ 174.463982][ T5094] CPU: 0 PID: 5094 Comm: syz.0.336 Not tainted 6.1.107-syzkaller #0 [ 174.472283][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 174.482442][ T5094] RIP: 0010:__cfg80211_wext_giwrate+0x4a1/0x570 [ 174.488896][ T5094] Code: 04 25 28 00 00 00 48 3b 84 24 c0 01 00 00 0f 85 d3 00 00 00 89 d8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 0f 00 6f f7 <0f> 0b e9 63 fd ff ff e8 03 00 6f f7 0f 0b e9 6d fe ff ff 89 d9 80 [ 174.508677][ T5094] RSP: 0018:ffffc900113afa20 EFLAGS: 00010283 [ 174.514826][ T5094] RAX: ffffffff8a1bae61 RBX: 0000000000000000 RCX: 0000000000040000 [ 174.522847][ T5094] RDX: ffffc90004b8a000 RSI: 000000000000039a RDI: 000000000000039b [ 174.531022][ T5094] RBP: ffffc900113afc28 R08: ffffffff8a1bab99 R09: ffffc900113afbb0 [ 174.539085][ T5094] R10: ffffffffffffffff R11: dffffc0000000001 R12: 1ffff92002275f4c [ 174.547160][ T5094] R13: dffffc0000000000 R14: ffff888026c6cc90 R15: 1ffff11004d8d992 [ 174.555225][ T5094] FS: 00007f12c69ff6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 174.564275][ T5094] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.570900][ T5094] CR2: 0000000020002700 CR3: 00000000568d9000 CR4: 00000000003506f0 [ 174.578984][ T5094] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 174.587110][ T5094] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 174.595184][ T5094] Call Trace: [ 174.598492][ T5094] [ 174.601465][ T5094] ? __warn+0x15a/0x520 [ 174.605738][ T5094] ? __cfg80211_wext_giwrate+0x4a1/0x570 [ 174.611480][ T5094] ? report_bug+0x2af/0x500 [ 174.616094][ T5094] ? __cfg80211_wext_giwrate+0x4a1/0x570 [ 174.621792][ T5094] ? handle_bug+0x3d/0x70 [ 174.626314][ T5094] ? exc_invalid_op+0x16/0x40 [ 174.631033][ T5094] ? asm_exc_invalid_op+0x16/0x20 [ 174.636215][ T5094] ? __cfg80211_wext_giwrate+0x1d9/0x570 [ 174.641905][ T5094] ? __cfg80211_wext_giwrate+0x4a1/0x570 [ 174.647662][ T5094] ? __cfg80211_wext_giwrate+0x4a1/0x570 [ 174.649008][ T3688] usb 3-1: USB disconnect, device number 7 [ 174.653349][ T5094] ? __mutex_trylock_common+0x17e/0x2e0 [ 174.653391][ T5094] ? __cfg80211_wext_siwrate+0x970/0x970 [ 174.653458][ T5094] ? dev_load+0x1d/0x1e0 [ 174.653482][ T5094] ? wext_ioctl_dispatch+0xb9/0x460 [ 174.653504][ T5094] ? __lock_acquire+0x1f80/0x1f80 [ 174.653545][ T5094] ? full_name_hash+0x8f/0xe0 [ 174.653577][ T5094] ioctl_standard_call+0xdb/0x280 [ 174.653602][ T5094] ? __cfg80211_wext_siwrate+0x970/0x970 [ 174.659872][ C1] usblp0: nonzero write bulk status received: -71 [ 174.665088][ T5094] ? __cfg80211_wext_siwrate+0x970/0x970 [ 174.712784][ T5094] wext_ioctl_dispatch+0x16f/0x460 [ 174.718005][ T5094] ? wext_ioctl_dispatch+0x460/0x460 [ 174.723332][ T5094] ? iw_handler_get_private+0x1e0/0x1e0 [ 174.728978][ T5094] wext_handle_ioctl+0x15b/0x260 [ 174.733991][ T5094] ? call_commit_handler+0xf0/0xf0 [ 174.739368][ T5094] sock_ioctl+0x13b/0x770 [ 174.743795][ T5094] ? sock_poll+0x410/0x410 [ 174.748264][ T5094] ? __fget_files+0x28/0x4a0 [ 174.752982][ T5094] ? __fget_files+0x435/0x4a0 [ 174.757762][ T5094] ? __fget_files+0x28/0x4a0 [ 174.762399][ T5094] ? bpf_lsm_file_ioctl+0x5/0x10 [ 174.767467][ T5094] ? security_file_ioctl+0x7d/0xa0 [ 174.772620][ T5094] ? sock_poll+0x410/0x410 [ 174.777154][ T5094] __se_sys_ioctl+0xf1/0x160 [ 174.781814][ T5094] do_syscall_64+0x3b/0xb0 [ 174.786343][ T5094] ? clear_bhb_loop+0x45/0xa0 [ 174.791072][ T5094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.797081][ T5094] RIP: 0033:0x7f12c6b7ceb9 [ 174.801547][ T5094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.821264][ T5094] RSP: 002b:00007f12c69ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.829775][ T5094] RAX: ffffffffffffffda RBX: 00007f12c6d35f80 RCX: 00007f12c6b7ceb9 [ 174.837852][ T5094] RDX: 0000000020000040 RSI: 0000000000008b21 RDI: 000000000000000d [ 174.845900][ T5094] RBP: 00007f12c6beefbe R08: 0000000000000000 R09: 0000000000000000 [ 174.853970][ T5094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.861978][ T5094] R13: 0000000000000000 R14: 00007f12c6d35f80 R15: 00007ffca1f901f8 [ 174.870060][ T5094] [ 174.873141][ T5094] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 174.880461][ T5094] CPU: 0 PID: 5094 Comm: syz.0.336 Not tainted 6.1.107-syzkaller #0 [ 174.888470][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 174.898554][ T5094] Call Trace: [ 174.901859][ T5094] [ 174.904943][ T5094] dump_stack_lvl+0x1e3/0x2cb [ 174.909665][ T5094] ? nf_tcp_handle_invalid+0x642/0x642 [ 174.915262][ T5094] ? panic+0x764/0x764 [ 174.919359][ T5094] ? 0xffffffffa0001fa0 [ 174.923578][ T5094] ? vscnprintf+0x59/0x80 [ 174.927940][ T5094] panic+0x318/0x764 [ 174.931867][ T5094] ? __warn+0x169/0x520 [ 174.936052][ T5094] ? memcpy_page_flushcache+0xfc/0xfc [ 174.941453][ T5094] __warn+0x348/0x520 [ 174.945634][ T5094] ? __cfg80211_wext_giwrate+0x4a1/0x570 [ 174.951329][ T5094] report_bug+0x2af/0x500 [ 174.955667][ T5094] ? __cfg80211_wext_giwrate+0x4a1/0x570 [ 174.961324][ T5094] handle_bug+0x3d/0x70 [ 174.965484][ T5094] exc_invalid_op+0x16/0x40 [ 174.969988][ T5094] asm_exc_invalid_op+0x16/0x20 [ 174.974855][ T5094] RIP: 0010:__cfg80211_wext_giwrate+0x4a1/0x570 [ 174.981228][ T5094] Code: 04 25 28 00 00 00 48 3b 84 24 c0 01 00 00 0f 85 d3 00 00 00 89 d8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 0f 00 6f f7 <0f> 0b e9 63 fd ff ff e8 03 00 6f f7 0f 0b e9 6d fe ff ff 89 d9 80 [ 175.000853][ T5094] RSP: 0018:ffffc900113afa20 EFLAGS: 00010283 [ 175.006951][ T5094] RAX: ffffffff8a1bae61 RBX: 0000000000000000 RCX: 0000000000040000 [ 175.014937][ T5094] RDX: ffffc90004b8a000 RSI: 000000000000039a RDI: 000000000000039b [ 175.022910][ T5094] RBP: ffffc900113afc28 R08: ffffffff8a1bab99 R09: ffffc900113afbb0 [ 175.030900][ T5094] R10: ffffffffffffffff R11: dffffc0000000001 R12: 1ffff92002275f4c [ 175.038896][ T5094] R13: dffffc0000000000 R14: ffff888026c6cc90 R15: 1ffff11004d8d992 [ 175.046882][ T5094] ? __cfg80211_wext_giwrate+0x1d9/0x570 [ 175.052618][ T5094] ? __cfg80211_wext_giwrate+0x4a1/0x570 [ 175.058274][ T5094] ? __mutex_trylock_common+0x17e/0x2e0 [ 175.063874][ T5094] ? __cfg80211_wext_siwrate+0x970/0x970 [ 175.069564][ T5094] ? dev_load+0x1d/0x1e0 [ 175.073833][ T5094] ? wext_ioctl_dispatch+0xb9/0x460 [ 175.079058][ T5094] ? __lock_acquire+0x1f80/0x1f80 [ 175.084119][ T5094] ? full_name_hash+0x8f/0xe0 [ 175.088801][ T5094] ioctl_standard_call+0xdb/0x280 [ 175.093838][ T5094] ? __cfg80211_wext_siwrate+0x970/0x970 [ 175.099517][ T5094] ? __cfg80211_wext_siwrate+0x970/0x970 [ 175.105187][ T5094] wext_ioctl_dispatch+0x16f/0x460 [ 175.110314][ T5094] ? wext_ioctl_dispatch+0x460/0x460 [ 175.115627][ T5094] ? iw_handler_get_private+0x1e0/0x1e0 [ 175.121256][ T5094] wext_handle_ioctl+0x15b/0x260 [ 175.126335][ T5094] ? call_commit_handler+0xf0/0xf0 [ 175.131497][ T5094] sock_ioctl+0x13b/0x770 [ 175.135853][ T5094] ? sock_poll+0x410/0x410 [ 175.140287][ T5094] ? __fget_files+0x28/0x4a0 [ 175.144881][ T5094] ? __fget_files+0x435/0x4a0 [ 175.149574][ T5094] ? __fget_files+0x28/0x4a0 [ 175.154176][ T5094] ? bpf_lsm_file_ioctl+0x5/0x10 [ 175.159132][ T5094] ? security_file_ioctl+0x7d/0xa0 [ 175.164376][ T5094] ? sock_poll+0x410/0x410 [ 175.168847][ T5094] __se_sys_ioctl+0xf1/0x160 [ 175.173502][ T5094] do_syscall_64+0x3b/0xb0 [ 175.177958][ T5094] ? clear_bhb_loop+0x45/0xa0 [ 175.182766][ T5094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.188674][ T5094] RIP: 0033:0x7f12c6b7ceb9 [ 175.193106][ T5094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.212742][ T5094] RSP: 002b:00007f12c69ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.221181][ T5094] RAX: ffffffffffffffda RBX: 00007f12c6d35f80 RCX: 00007f12c6b7ceb9 [ 175.229172][ T5094] RDX: 0000000020000040 RSI: 0000000000008b21 RDI: 000000000000000d [ 175.237201][ T5094] RBP: 00007f12c6beefbe R08: 0000000000000000 R09: 0000000000000000 [ 175.245198][ T5094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.253176][ T5094] R13: 0000000000000000 R14: 00007f12c6d35f80 R15: 00007ffca1f901f8 [ 175.261200][ T5094] [ 175.264493][ T5094] Kernel Offset: disabled [ 175.268851][ T5094] Rebooting in 86400 seconds..