last executing test programs: 25.052376973s ago: executing program 4 (id=939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) fcntl$setlease(r2, 0x400, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x2, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 24.043664466s ago: executing program 4 (id=941): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000408a25886a000000000001090224000100000000090400000103000000092100000001220500090581030000000000e4d074a1cce439779f1acdc24e97a1c6a2c8a0378be94deb941579bcd41b34ad21eee7f1bade4531af7bb04e04d74496783601f9d323bd193cb5fdd362b4d562056375936226e3dcd9b97f0e9bbf081254e4f12d4b5e43c4aa047df115b2f6d9c4f4471db9730a98f2f977eacc1de2a4e72896211a4820819e3440cbbf418087f6cdbe1886d3d02e415f"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/cgroup\x00') capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9}) setns(r2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="348b0d151f8218e3c73697e40800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_usb_control_io(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100"], 0x48}}, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000600)=""/185, &(0x7f00000003c0)=0xb9) sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000000bf009dfc47318ccc3455"], 0x48}}, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000380), 0x100000001, 0x220904) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES16=r6, @ANYRES32=r3, @ANYBLOB="0000000000000000b708ff01000000007b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r8}, 0x10) io_setup(0x3, &(0x7f0000000340)) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) r12 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r12, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000020"], 0xfe44, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "860e0a31"}]}}, 0x0}, 0x0) 19.567466621s ago: executing program 4 (id=953): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 17.613708111s ago: executing program 4 (id=960): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c8e13252c3a5cc2197b730df63c85a5000000", @ANYRES16, @ANYBLOB="01000000000000000000210000000e"], 0x3c}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f000026a000/0x1000)=nil, 0x1000, 0x2000007, 0x4010, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000040)=0xfffffffe, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000180), 0x0, 0x4) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/4, 0x4}], 0x1, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000040)) r5 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=0x0], 0xff) r6 = syz_open_dev$ndb(0x0, 0x0, 0x10000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r6, &(0x7f0000000640)=[{&(0x7f00000001c0)="fbfa39876a1b23baf14a671deff76f2efc04f771d0dd423c0a92b1efb53eee28a0bf88ea2d4f0a3771fecb695a6afbc3d795751b1cad679d4d9982ec213e16a025ad7ce6ad74747fd8d71d2dd807d07c676f811e37f6e402f2f7ae06fe94d43af97e2e2c44cbdd0bbe9c", 0x6a}, {&(0x7f0000000300)="d32f84dd7aceeb4d1c0c65121101b77aa7822a6883e0e8eaeae34a5bcd3e8bae3eb3da92e2224cce2aadb889e032d7bc97b3e0a5fe51735ce634deef8d63d733311169cea2ce69e2b9854c8f1950607b01ec47e266161264bc99762c5d927888fdf0bafcdf7c18f0e580145360f128eecaeeae749b58fd709c02ff8df28c", 0x7e}, {0x0}, {&(0x7f00000003c0)}, {&(0x7f0000000e00)="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", 0x1000}, {0x0}, {&(0x7f0000000580)}], 0x7, 0x8) chdir(&(0x7f0000000180)='./file0\x00') pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) inotify_add_watch(r7, 0x0, 0x2) ioctl$NBD_SET_SIZE_BLOCKS(r6, 0xab07, 0x6) 17.188442256s ago: executing program 4 (id=963): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 16.964496854s ago: executing program 4 (id=964): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 7.287990984s ago: executing program 1 (id=995): sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) set_mempolicy(0x3, &(0x7f0000000000)=0x80000001, 0xff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) 6.529780546s ago: executing program 3 (id=1000): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071110020000000008510000002000000850000000500000095000000000000009500a505000000009d626e70e9673322c7b85ffaf65c66ad587d51e8e0c4dfe91759b3f0f9f5ae8e3f9b82270eae11be2c6b3322403a0e3a6ac538f90427f5672fe15e688d62cec17c4a6f411694008948951a47de9b1a3edb8696448c0169532ec1422053b8636554129da48fa59cffe396b8d33b1e214015bc797bea7bc32a0dd1b228af1f0a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 6.380426979s ago: executing program 3 (id=1003): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 5.718894713s ago: executing program 0 (id=1006): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000910c0000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d640500000000006504040001000101040400000b000000b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000055cdc4b57b0c65752a3ad50000ba7ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafebba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe11cc32a790bc0b801f000000000000009d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f745837bf3cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f60000faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122765c8b7e89eddfc3783f6c9129a7c5f8ee4191dc152f638f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b9a60fdecb2717e21f8f187b1866108b668c71309c3a3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd756c6643e9146d2478ce31344b554aca78a00000000000000b50a358575422f03fb74d56788fbc624f8015441e552f894973886ee5a6b01a22f55572cb0eca882c464ddade864906f4c056b53232f24819f81b6eeccea325da278970b46282bf0241464565b47876ddd3d5a147a287f7077aed909"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0x241, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 4.907324549s ago: executing program 2 (id=1007): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)) read$dsp(r0, &(0x7f0000000180)=""/4096, 0x1000) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 4.760660071s ago: executing program 3 (id=1008): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0x541b, 0x0) 4.64665111s ago: executing program 3 (id=1009): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='yeah\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x24, &(0x7f0000000200)=[@window, @mss, @mss, @window], 0x4) 4.625800342s ago: executing program 0 (id=1010): r0 = msgget$private(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x20000000000000d0, &(0x7f0000000340)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYRES32]) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x42, 0x4, 0x3b0, 0xffffffff, 0x1f8, 0xf0, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xc8, 0xf0, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x2}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0x108, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "53a6"}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "d675ef1a27acea4c3c29b1bc225f00641b4756e72736ac9737ed75a12134a9df80284d4b52f6e9a2ed7f2cf113cb0032d3b0e7802fc1a581c0cfc778aab4a6ef"}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'team_slave_0\x00', 'veth1\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r6, &(0x7f0000000000)={0x10}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000380)=""/123) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x0, 0x0, 0x0) 3.699997338s ago: executing program 2 (id=1011): r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x1, 0x80}) 3.686582829s ago: executing program 0 (id=1012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 3.636633032s ago: executing program 3 (id=1013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}]}, 0x24}}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xa41, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@quota}, {@noload}, {@jqfmt_vfsold}]}, 0x2, 0x46a, &(0x7f0000000980)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r3, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="2e5113abb96490e8baa757031fd3113d8fd231aecab2c455591d3bec0b6d42a1d9572dc5078c0de5a68dc252aeb457f345aaef1744f717c71738086a77f819bf8ec2164ad9d225996868d5440c2a1f1759386c920214f5b07fdeaa34d7cbb895ee45108d8715e8678c9e65c8b76f3f4f2a1537de01264b0f6c5a5083f49b6737a25758553b72788c48c129ab89ff000e7d0b1da439dc5e7e6cfad150a664ab7d70dd127f473015976f8f2a3603f45a042d8c3578e6eb3060b986ee9e6b4dbf79896d68301c5d9ea34afe122934", @ANYRES64, @ANYRES8=0x0, @ANYBLOB="d60a83a1f0457481edbb22ba9409462e156a7c242a", @ANYRES32, @ANYRES8, @ANYRES32], 0x0, 0x1c4, &(0x7f0000000440)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6609, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000140)=0x9, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r6}, 0x10) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f00000002c0)) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="74726104006701661dfe48e0e6b2522821a73fb62ab1837c4817ecbfffc8e689d12011afe86b419d692f64dc1e502a7d410ed4c019297f55d617039c5990182374d4b9a48b467be8bc7136d5071fb16517e77e585ff245d4e5341f89dcdec61c8a078507000000b92349096c9ec9f09a42000a68c1599998c1d26611ea98bf03e158ea22456d8e3ebf0922c1b755ac235a75b0fbedf760b92c9925cc1dd4035a19c23c81e1ba156042fffa853f79ca1b1bf15be1aad15fd92595f43e750d4b61b49fad4c2f06ab73657d86b9ea63175dc93c8bb3e016a80b7bc9bea36713a2c492ecf1638ea4d55b9aae232015c39d4677bdb301ae5601812ef60c758a3084da1c5b8413c12670488274557c3af4734ef5b99393c3356987253cbbb5744c3621e873213e5e402cf67f812d0a15ede4fed2655a8855", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 3.574335288s ago: executing program 1 (id=1014): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x16}, {0x0, 0x7, 0x0, 0x20, [0x0, 0x5, 0x1615, 0x9, 0xaf, 0x1ff, 0x5]}}}}, 0x23) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, &(0x7f0000001380)={'ip_vti0\x00', 0x8, 0x2400}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x20043, 0x0) syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) socket$nl_route(0x10, 0x3, 0x0) 3.336035577s ago: executing program 2 (id=1015): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002240)=@delchain={0x2c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}]}, 0x2c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.177096402s ago: executing program 1 (id=1016): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000040)='net/ip6_flowlabel\x00', 0x12) 2.156005724s ago: executing program 0 (id=1017): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x33, &(0x7f00000002c0)=@framed={{}, [@printk={@u}, @alu, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp, @btf_id, @snprintf, @func, @snprintf]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() prlimit64(0x0, 0xd, &(0x7f0000000140)={0x200000000005, 0x8000000000200003}, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000ac0)=""/100, 0x64}], 0x1, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x184, 0x16, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x14c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'bond0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x1cc}, 0x1, 0x0, 0x0, 0x4010}, 0x4081) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f00000000c0)=0x4d) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) rt_sigtimedwait(0x0, 0x0, 0xfffffffffffffffd, 0x0) syz_io_uring_setup(0x10021fd, &(0x7f00000007c0)={0x0, 0x0, 0x12}, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) 2.059017332s ago: executing program 1 (id=1018): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0x541b, 0x0) 2.058683712s ago: executing program 2 (id=1019): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.814445002s ago: executing program 1 (id=1020): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)) read$dsp(r0, &(0x7f0000000180)=""/4096, 0x1000) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 1.069499672s ago: executing program 0 (id=1021): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2}}]}}]}, 0x8c}}, 0x0) 964.827411ms ago: executing program 2 (id=1022): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0xffffffbc}) 855.98072ms ago: executing program 3 (id=1023): sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) set_mempolicy(0x3, &(0x7f0000000000)=0x80000001, 0xff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) 855.49897ms ago: executing program 0 (id=1024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) fcntl$setlease(r2, 0x400, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x2, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 756.806538ms ago: executing program 2 (id=1025): r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6c9, &(0x7f00000037c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) mkdirat(0xffffffffffffff9c, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1/file4/file7\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x4) open$dir(0x0, 0x161683, 0x100) inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001e000102000000000000000000000000000000000000ffff"], 0x28}}, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r3, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @private}, @address_request}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000001400030073797a5f74756e"], 0x3c}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000040) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000010000104000000000000000000480000", @ANYRES32=r6, @ANYRES32], 0x54}}, 0x0) 0s ago: executing program 1 (id=1026): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) kernel console output (not intermixed with test programs): 7244][ T6000] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 217.492580][ T3680] usb 4-1: Using ep0 maxpacket: 32 [ 217.672058][ T3680] usb 4-1: unable to get BOS descriptor or descriptor too short [ 217.695768][ T4439] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 217.700298][ T6003] overlayfs: invalid origin (0000) [ 217.710972][ T4439] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 217.720642][ T4439] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 217.762399][ T3680] usb 4-1: config 1 has an invalid descriptor of length 136, skipping remainder of the config [ 217.779353][ T3680] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 217.792871][ T3680] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.857081][ T6007] loop2: detected capacity change from 0 to 1024 [ 217.864084][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.878649][ T6007] hfsplus: failed to load catalog file [ 217.888823][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.900000][ T14] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 217.909478][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.919225][ T14] usb 5-1: config 0 descriptor?? [ 217.972221][ T6007] loop2: detected capacity change from 0 to 256 [ 217.974602][ T27] gspca_spca508: reg write: error -71 [ 217.990096][ T6007] exfat: Unknown parameter '' [ 217.992016][ T27] spca508: probe of 2-1:0.0 failed with error -71 [ 218.011532][ T27] usb 2-1: USB disconnect, device number 13 [ 218.092247][ T3680] usb 4-1: string descriptor 0 read error: -22 [ 218.105289][ T6009] loop2: detected capacity change from 0 to 512 [ 218.106017][ T3680] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.112600][ T6009] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 218.131016][ T3680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.194401][ T3680] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 218.220038][ T3680] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 218.227462][ T3680] cdc_ncm 4-1:1.0: bind() failure [ 218.417589][ T14] kye 0003:0458:501A.0003: unknown main item tag 0x0 [ 218.884817][ T14] kye 0003:0458:501A.0003: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.4-1/input0 [ 219.156040][ T14] kye 0003:0458:501A.0003: tablet-enabling feature report not found [ 219.260826][ T14] kye 0003:0458:501A.0003: tablet enabling failed [ 219.508816][ T14] usb 5-1: USB disconnect, device number 7 [ 219.627888][ T4150] usb 4-1: USB disconnect, device number 8 [ 220.010658][ T6017] loop0: detected capacity change from 0 to 40427 [ 220.022024][ T6017] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 220.029876][ T6017] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 220.044136][ T6017] F2FS-fs (loop0): Found nat_bits in checkpoint [ 220.087305][ T6017] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 220.094470][ T6017] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 220.378908][ T6030] syz.0.579: attempt to access beyond end of device [ 220.378908][ T6030] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 220.415909][ T26] audit: type=1804 audit(1722363306.574:51): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.579" name="/newroot/142/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 220.824550][ T6043] loop2: detected capacity change from 0 to 16 [ 220.873530][ T6043] erofs: (device loop2): mounted with root inode @ nid 36. [ 220.934189][ T6045] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 220.941718][ T6045] vhci_hcd: invalid port number 10 [ 220.947225][ T6045] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 221.154466][ T4439] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 221.198613][ T4439] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 221.218858][ T4439] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 221.378859][ T26] audit: type=1326 audit(1722363307.554:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.0.586" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f889f7773b9 code=0x0 [ 221.451826][ T3682] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 221.474040][ T6034] loop4: detected capacity change from 0 to 40427 [ 221.486489][ T6058] loop0: detected capacity change from 0 to 128 [ 221.500321][ T6034] F2FS-fs (loop4): invalid crc value [ 221.536467][ T6034] F2FS-fs (loop4): Found nat_bits in checkpoint [ 221.546106][ T3628] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 221.583407][ T6034] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 221.591881][ T4150] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 221.630105][ T3679] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 221.661272][ T4298] syz-executor: attempt to access beyond end of device [ 221.661272][ T4298] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 221.771940][ T3647] Bluetooth: hci2: command 0x0406 tx timeout [ 221.848274][ T3682] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 221.872849][ T6065] loop4: detected capacity change from 0 to 1024 [ 221.877328][ T3682] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 221.898658][ T3682] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 221.911217][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.930756][ T6065] hfsplus: failed to load catalog file [ 221.942135][ T6048] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 221.962087][ T4150] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 221.971665][ T4150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.992002][ T3679] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.003669][ T4150] usb 3-1: config 0 descriptor?? [ 222.008797][ T3679] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.019205][ T3679] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 222.029070][ T3679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.044252][ T4150] gspca_main: spca508-2.14.0 probing 8086:0110 [ 222.052016][ T6065] loop4: detected capacity change from 0 to 256 [ 222.058807][ T6065] exfat: Unknown parameter '' [ 222.067742][ T3679] usb 2-1: config 0 descriptor?? [ 222.182155][ T3682] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 222.191497][ T3682] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input8 [ 222.221251][ T3682] usb 4-1: USB disconnect, device number 9 [ 222.227186][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 222.262143][ T4150] gspca_spca508: reg_read err -32 [ 222.301917][ T4150] gspca_spca508: reg_read err -32 [ 222.341917][ T4150] gspca_spca508: reg_read err -32 [ 222.559288][ T14] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 222.574855][ T3679] kye 0003:0458:501A.0004: unknown main item tag 0x0 [ 222.587177][ T6053] overlayfs: invalid origin (0000) [ 222.603237][ T3679] kye 0003:0458:501A.0004: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.1-1/input0 [ 222.702641][ T6081] loop3: detected capacity change from 0 to 16 [ 222.808941][ T6081] erofs: (device loop3): mounted with root inode @ nid 36. [ 222.855431][ T6081] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 222.881456][ T6081] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 222.900050][ T6081] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 222.955685][ T6081] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 222.965357][ T6081] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 222.984669][ T6081] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 223.653884][ T3679] kye 0003:0458:501A.0004: tablet-enabling feature report not found [ 223.662776][ T3679] kye 0003:0458:501A.0004: tablet enabling failed [ 223.674402][ T3679] usb 2-1: USB disconnect, device number 14 [ 223.691976][ T4150] gspca_spca508: reg write: error -71 [ 223.697418][ T4150] spca508: probe of 3-1:0.0 failed with error -71 [ 223.719896][ T4150] usb 3-1: USB disconnect, device number 8 [ 223.772057][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 223.932278][ T14] usb 5-1: unable to get BOS descriptor or descriptor too short [ 224.000389][ T6088] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 224.012206][ T14] usb 5-1: config 1 has an invalid descriptor of length 136, skipping remainder of the config [ 224.022912][ T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 224.047903][ T6088] vhci_hcd: invalid port number 10 [ 224.056727][ T14] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 224.058457][ T6088] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 224.121505][ T6094] loop2: detected capacity change from 0 to 16 [ 224.130962][ T6094] erofs: (device loop2): mounted with root inode @ nid 36. [ 224.285425][ T4439] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 224.313318][ T14] usb 5-1: string descriptor 0 read error: -22 [ 224.319772][ T14] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.330279][ T4439] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 224.340228][ T4439] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 224.349312][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.407127][ T14] cdc_ncm 5-1:1.0: invalid descriptor buffer length [ 224.424019][ T14] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 224.441130][ T14] cdc_ncm 5-1:1.0: bind() failure [ 224.628006][ T14] usb 5-1: USB disconnect, device number 8 [ 225.054509][ T6099] loop1: detected capacity change from 0 to 40427 [ 225.078955][ T6099] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 225.095160][ T6099] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 225.133899][ T6099] F2FS-fs (loop1): invalid crc value [ 225.140789][ T6102] loop2: detected capacity change from 0 to 40427 [ 225.181277][ T6102] F2FS-fs (loop2): invalid crc value [ 225.182880][ T6099] F2FS-fs (loop1): Found nat_bits in checkpoint [ 225.255591][ T6102] F2FS-fs (loop2): Found nat_bits in checkpoint [ 225.359058][ T6099] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 225.366231][ T6099] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 225.411934][ T6102] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 225.593065][ T4439] syz-executor: attempt to access beyond end of device [ 225.593065][ T4439] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 225.853418][ T6128] syz.1.602: attempt to access beyond end of device [ 225.853418][ T6128] loop1: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 225.905708][ T26] audit: type=1800 audit(1722363311.964:53): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.602" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 226.241942][ T3681] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 226.322176][ T4773] syz-executor: attempt to access beyond end of device [ 226.322176][ T4773] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.531234][ T6132] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 226.544664][ T6132] vhci_hcd: invalid port number 10 [ 226.549951][ T6132] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 226.667885][ T3681] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 226.681883][ T3681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.730590][ T3681] usb 5-1: config 0 descriptor?? [ 226.739030][ T6134] loop3: detected capacity change from 0 to 512 [ 226.768323][ T6134] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 226.793756][ T3681] gspca_main: spca508-2.14.0 probing 8086:0110 [ 226.842577][ T3773] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 227.071963][ T3681] gspca_spca508: reg_read err -32 [ 227.131948][ T3681] gspca_spca508: reg_read err -32 [ 227.673032][ T3681] gspca_spca508: reg_read err -32 [ 227.860454][ T6147] loop2: detected capacity change from 0 to 512 [ 227.919096][ T6127] overlayfs: invalid origin (0000) [ 227.955077][ T6147] loop2: detected capacity change from 0 to 256 [ 227.976404][ T6147] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 228.039570][ T6147] exFAT-fs (loop2): hint_cluster is invalid (17) [ 228.068938][ T26] audit: type=1800 audit(1722363314.244:54): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.615" name="file1" dev="loop2" ino=1048628 res=0 errno=0 [ 228.107879][ T6147] exFAT-fs (loop2): error, broken FAT chain. [ 228.131175][ T6147] exFAT-fs (loop2): Filesystem has been set read-only [ 228.141488][ T26] audit: type=1326 audit(1722363314.314:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz.0.619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f889f7773b9 code=0x0 [ 228.167441][ T6147] exFAT-fs (loop2): error, failed to bmap (inode : ffff888076aa9b60 iblock : 8, err : -5) [ 228.181966][ T3681] gspca_spca508: reg write: error -71 [ 228.187433][ T3681] spca508: probe of 5-1:0.0 failed with error -71 [ 228.211976][ T3681] usb 5-1: USB disconnect, device number 9 [ 228.253960][ T6161] loop0: detected capacity change from 0 to 128 [ 228.290324][ T6160] loop1: detected capacity change from 0 to 2048 [ 228.320235][ T6163] loop3: detected capacity change from 0 to 164 [ 228.342887][ T6160] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18576, location=18576 [ 228.388777][ T6165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.622'. [ 228.401087][ T6160] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.469796][ T6163] rock: directory entry would overflow storage [ 228.476082][ T6163] rock: sig=0x4f50, size=4, remaining=3 [ 228.481950][ T6163] isofs: Unable to find the ".." directory for NFS. [ 228.811895][ T4150] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 229.092512][ T6180] loop4: detected capacity change from 0 to 512 [ 229.112390][ T6180] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 229.208529][ T4150] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 229.221724][ T4150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.341687][ T4150] usb 3-1: config 0 descriptor?? [ 230.351683][ T6171] loop1: detected capacity change from 0 to 40427 [ 230.384500][ T6171] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 230.400962][ T6171] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 230.912767][ T6166] netlink: 'syz.2.622': attribute type 4 has an invalid length. [ 231.087902][ T6171] F2FS-fs (loop1): invalid crc value [ 231.233182][ T6171] F2FS-fs (loop1): Found nat_bits in checkpoint [ 231.313471][ T6205] loop3: detected capacity change from 0 to 164 [ 231.352011][ T4150] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 231.369993][ T6207] loop0: detected capacity change from 0 to 2048 [ 231.378354][ T6171] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 231.381807][ T4150] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 231.415700][ T6207] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576 [ 231.439723][ T6171] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 231.450574][ T6207] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.561339][ T6209] rock: directory entry would overflow storage [ 231.572086][ T6209] rock: sig=0x4f50, size=4, remaining=3 [ 231.592719][ T6209] isofs: Unable to find the ".." directory for NFS. [ 231.825728][ T4150] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 231.969188][ T4150] [drm] Initialized udl on minor 2 [ 232.062067][ T4150] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 232.113760][ T4150] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 232.158548][ T4150] usb 3-1: USB disconnect, device number 9 [ 232.421598][ T6196] loop4: detected capacity change from 0 to 32768 [ 232.523145][ T6196] XFS (loop4): Mounting V5 Filesystem [ 232.574301][ T26] audit: type=1326 audit(1722363318.754:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.639" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4283773b9 code=0x0 [ 232.672095][ T6196] XFS (loop4): Ending clean mount [ 232.683466][ T6234] loop3: detected capacity change from 0 to 128 [ 232.740098][ T6196] XFS (loop4): Quotacheck needed: Please wait. [ 232.828434][ T6196] XFS (loop4): Quotacheck: Done. [ 233.134643][ T6236] loop2: detected capacity change from 0 to 40427 [ 233.163013][ T6236] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 233.170884][ T6236] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 233.313422][ T6236] F2FS-fs (loop2): Found nat_bits in checkpoint [ 234.005952][ T4298] XFS (loop4): Unmounting Filesystem [ 234.149496][ T6236] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 234.156682][ T6236] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 234.378667][ T6252] loop0: detected capacity change from 0 to 164 [ 234.422325][ T6254] syz.2.644: attempt to access beyond end of device [ 234.422325][ T6254] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 234.446671][ T26] audit: type=1804 audit(1722363320.624:57): pid=6251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.644" name="/newroot/88/bus/bus" dev="loop2" ino=10 res=1 errno=0 [ 234.469805][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.807868][ T6256] rock: directory entry would overflow storage [ 234.815994][ T6256] rock: sig=0x4f50, size=4, remaining=3 [ 234.832872][ T6256] isofs: Unable to find the ".." directory for NFS. [ 235.218474][ T6258] loop3: detected capacity change from 0 to 512 [ 235.361276][ T6258] EXT4-fs (loop3): 1 orphan inode deleted [ 235.382520][ T6258] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 235.391606][ T6258] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038 (0x7fffffff) [ 235.427584][ T6244] loop1: detected capacity change from 0 to 40427 [ 235.443028][ T6244] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 235.450972][ T6244] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 235.539703][ T6244] F2FS-fs (loop1): invalid crc value [ 235.595112][ T3653] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 235.623781][ T6244] F2FS-fs (loop1): Found nat_bits in checkpoint [ 235.816529][ T6244] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 235.830211][ T4370] EXT4-fs (loop3): unmounting filesystem. [ 235.832320][ T6244] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 236.003727][ T6277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.651'. [ 236.314480][ T6286] syz.1.646: attempt to access beyond end of device [ 236.314480][ T6286] loop1: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 236.412779][ T26] audit: type=1800 audit(1722363322.464:58): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.646" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 236.838149][ T4773] syz-executor: attempt to access beyond end of device [ 236.838149][ T4773] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 236.881835][ T3679] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 237.106215][ T6266] loop4: detected capacity change from 0 to 40427 [ 237.179992][ T6266] F2FS-fs (loop4): Found nat_bits in checkpoint [ 237.252101][ T3679] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 237.270124][ T3679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.299248][ T3679] usb 3-1: config 0 descriptor?? [ 237.343127][ T6266] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 237.440311][ T6289] loop0: detected capacity change from 0 to 32768 [ 237.485569][ T26] audit: type=1326 audit(1722363323.664:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6298 comm="syz.1.658" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd42eb773b9 code=0x0 [ 237.601523][ T6289] XFS (loop0): Mounting V5 Filesystem [ 237.693676][ T6311] loop4: detected capacity change from 0 to 128 [ 237.702174][ T6311] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 237.748020][ T6289] XFS (loop0): Ending clean mount [ 237.756748][ T6289] XFS (loop0): Quotacheck needed: Please wait. [ 237.832211][ T6289] XFS (loop0): Quotacheck: Done. [ 237.933468][ T6277] netlink: 'syz.2.651': attribute type 4 has an invalid length. [ 238.041900][ T3679] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 238.055158][ T3679] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 238.069111][ T3634] XFS (loop0): Unmounting Filesystem [ 238.123624][ T3679] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 238.124146][ T6320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.138876][ T6320] IPv6: NLM_F_CREATE should be set when creating new route [ 238.146274][ T6320] IPv6: NLM_F_CREATE should be set when creating new route [ 238.158893][ T3679] [drm] Initialized udl on minor 2 [ 238.250758][ T3822] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 238.293001][ T3822] kworker/u4:9: attempt to access beyond end of device [ 238.293001][ T3822] loop4: rw=1, sector=144, nr_sectors = 1 limit=128 [ 238.332738][ T3679] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 238.351338][ T3822] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 238.361107][ T3679] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 238.377441][ T3679] usb 3-1: USB disconnect, device number 10 [ 238.488509][ T6306] loop1: detected capacity change from 0 to 32768 [ 238.521444][ T6306] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.658 (6306) [ 238.601807][ T6306] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 238.640072][ T6306] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 238.678871][ T6306] BTRFS info (device loop1): turning off barriers [ 238.689709][ T6331] loop0: detected capacity change from 0 to 512 [ 238.705817][ T6306] BTRFS info (device loop1): setting nodatasum [ 238.737208][ T6306] BTRFS info (device loop1): use zlib compression, level 3 [ 238.768469][ T6336] loop4: detected capacity change from 0 to 256 [ 238.792493][ T6306] BTRFS info (device loop1): using free space tree [ 238.804434][ T6331] EXT4-fs (loop0): 1 orphan inode deleted [ 238.810180][ T6331] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 238.849289][ T6336] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 238.892021][ T6331] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038 (0x7fffffff) [ 238.926003][ T6331] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz.0.665: deleted inode referenced: 16 [ 238.950816][ T6331] EXT4-fs (loop0): Remounting filesystem read-only [ 238.990374][ T6331] device syzkaller0 entered promiscuous mode [ 239.349666][ T6325] loop3: detected capacity change from 0 to 32768 [ 239.382660][ T6325] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop3 scanned by syz.3.668 (6325) [ 239.648877][ T6325] BTRFS info (device loop3): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 239.714995][ T6325] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 239.737174][ T6325] BTRFS info (device loop3): using free space tree [ 239.892502][ T3653] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 240.050249][ T4773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.105866][ T6325] BTRFS info (device loop3): enabling ssd optimizations [ 240.528902][ T4370] BTRFS info (device loop3): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 240.889608][ T6368] loop4: detected capacity change from 0 to 40427 [ 240.957567][ T6368] F2FS-fs (loop4): Found nat_bits in checkpoint [ 241.046864][ T6368] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 241.452877][ T6410] loop4: detected capacity change from 0 to 1024 [ 241.468163][ T6410] EXT4-fs: Ignoring removed bh option [ 241.523602][ T6410] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 241.539062][ T6410] System zones: 0-1, 3-12 [ 241.546479][ T6410] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 241.560024][ T3932] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 241.687840][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 241.897832][ T3932] usb 4-1: Using ep0 maxpacket: 32 [ 242.566096][ T3932] usb 4-1: unable to get BOS descriptor or descriptor too short [ 242.662122][ T3932] usb 4-1: config 1 has an invalid descriptor of length 136, skipping remainder of the config [ 242.675951][ T3932] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 242.685304][ T3932] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.789779][ T6418] loop4: detected capacity change from 0 to 1024 [ 242.867953][ T6418] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 242.971968][ T3932] usb 4-1: string descriptor 0 read error: -22 [ 242.978263][ T3932] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.997244][ T3932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.010466][ T6420] loop4: detected capacity change from 0 to 256 [ 243.052962][ T6420] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 243.068920][ T3932] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 243.081901][ T3932] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 243.089005][ T3932] cdc_ncm 4-1:1.0: bind() failure [ 243.290103][ T3683] usb 4-1: USB disconnect, device number 10 [ 243.686128][ T6395] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.693425][ T6395] IPv6: NLM_F_CREATE should be set when creating new route [ 243.700852][ T6395] IPv6: NLM_F_CREATE should be set when creating new route [ 243.861610][ T3634] EXT4-fs (loop0): unmounting filesystem. [ 244.006955][ T6433] loop1: detected capacity change from 0 to 512 [ 244.034020][ T6435] loop4: detected capacity change from 0 to 164 [ 244.099436][ T3628] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 244.115633][ T6433] loop1: detected capacity change from 0 to 256 [ 244.136406][ T3628] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.271162][ T3628] Buffer I/O error on dev loop1, logical block 0, async page read [ 244.343875][ T6438] rock: directory entry would overflow storage [ 244.351572][ T6438] rock: sig=0x4f50, size=4, remaining=3 [ 244.353159][ T6433] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 244.387772][ T6438] isofs: Unable to find the ".." directory for NFS. [ 244.725243][ T6433] exFAT-fs (loop1): hint_cluster is invalid (17) [ 244.822365][ T26] audit: type=1800 audit(1722363331.004:60): pid=6433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.687" name="file1" dev="loop1" ino=1048633 res=0 errno=0 [ 244.847796][ T6433] exFAT-fs (loop1): error, broken FAT chain. [ 244.869981][ T6433] exFAT-fs (loop1): Filesystem has been set read-only [ 244.901696][ T6433] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805a38cf60 iblock : 8, err : -5) [ 245.000626][ T6447] loop2: detected capacity change from 0 to 128 [ 245.174506][ T6447] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 245.906431][ T6456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.228412][ T6463] loop3: detected capacity change from 0 to 256 [ 246.279698][ T6463] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 246.303815][ T56] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 246.339451][ T56] kworker/u4:4: attempt to access beyond end of device [ 246.339451][ T56] loop2: rw=1, sector=144, nr_sectors = 1 limit=128 [ 246.380351][ T56] Buffer I/O error on dev loop2, logical block 144, lost async page write [ 246.402488][ T6442] loop0: detected capacity change from 0 to 40427 [ 246.666295][ T6451] loop4: detected capacity change from 0 to 40427 [ 246.679114][ T6451] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 246.704229][ T6451] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 246.726828][ T6451] F2FS-fs (loop4): invalid crc value [ 246.748672][ T6451] F2FS-fs (loop4): Found nat_bits in checkpoint [ 246.865782][ T6451] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 246.891823][ T6451] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 247.102002][ T4150] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 247.127938][ T3943] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 247.269560][ T6480] syz.4.694: attempt to access beyond end of device [ 247.269560][ T6480] loop4: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 247.303944][ T26] audit: type=1800 audit(1722363333.424:61): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.694" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 248.003070][ T4150] usb 3-1: Using ep0 maxpacket: 32 [ 248.023784][ T4298] syz-executor: attempt to access beyond end of device [ 248.023784][ T4298] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 248.165204][ T4150] usb 3-1: unable to get BOS descriptor or descriptor too short [ 248.303047][ T4150] usb 3-1: config 1 has an invalid descriptor of length 136, skipping remainder of the config [ 248.423244][ T4150] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 248.451875][ T4150] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.626132][ T6492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.633478][ T6492] IPv6: NLM_F_CREATE should be set when creating new route [ 248.640820][ T6492] IPv6: NLM_F_CREATE should be set when creating new route [ 248.666670][ T26] audit: type=1326 audit(1722363334.844:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.1.709" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd42eb773b9 code=0x0 [ 248.742019][ T4150] usb 3-1: string descriptor 0 read error: -22 [ 248.748878][ T4150] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 248.796037][ T4150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.811336][ T6499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.710'. [ 248.875474][ T4150] cdc_ncm 3-1:1.0: invalid descriptor buffer length [ 248.894186][ T4150] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 248.901022][ T4150] cdc_ncm 3-1:1.0: bind() failure [ 248.907020][ T6501] loop0: detected capacity change from 0 to 1024 [ 248.966581][ T6501] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 249.112377][ T14] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 249.137056][ T3648] usb 3-1: USB disconnect, device number 11 [ 249.168260][ T6505] loop4: detected capacity change from 0 to 164 [ 249.340555][ T6505] rock: directory entry would overflow storage [ 249.346858][ T6505] rock: sig=0x4f50, size=4, remaining=3 [ 249.352553][ T6505] isofs: Unable to find the ".." directory for NFS. [ 249.449140][ T6497] loop1: detected capacity change from 0 to 32768 [ 249.472032][ T14] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 249.491628][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.504194][ T6497] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.709 (6497) [ 249.558108][ T6497] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 249.558947][ T14] usb 4-1: config 0 descriptor?? [ 249.599314][ T6497] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 249.631260][ T6497] BTRFS info (device loop1): turning off barriers [ 249.644460][ T6497] BTRFS info (device loop1): setting nodatasum [ 249.672065][ T6497] BTRFS info (device loop1): use zlib compression, level 3 [ 249.679335][ T6497] BTRFS info (device loop1): using free space tree [ 250.072824][ T6538] loop4: detected capacity change from 0 to 24 [ 250.910265][ T4773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 250.945844][ T6544] loop4: detected capacity change from 0 to 1024 [ 250.978169][ T6499] netlink: 'syz.3.710': attribute type 4 has an invalid length. [ 251.072513][ T6544] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 251.162272][ T14] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 251.170833][ T14] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 251.248997][ T14] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 251.272550][ T14] [drm] Initialized udl on minor 2 [ 251.281668][ T6509] loop0: detected capacity change from 0 to 40427 [ 251.342327][ T6509] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 251.347007][ T6548] sctp: [Deprecated]: syz.4.724 (pid 6548) Use of int in maxseg socket option. [ 251.347007][ T6548] Use struct sctp_assoc_value instead [ 251.371159][ T6509] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 251.412272][ T6509] F2FS-fs (loop0): invalid crc value [ 251.445688][ T6509] F2FS-fs (loop0): Found nat_bits in checkpoint [ 251.462246][ T14] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 251.483378][ T14] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 251.508540][ T14] usb 4-1: USB disconnect, device number 11 [ 251.605238][ T6509] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 251.651843][ T6509] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 251.698659][ T6564] loop4: detected capacity change from 0 to 2048 [ 251.713446][ T6564] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18576, location=18576 [ 251.817257][ T6564] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.011377][ T6569] syz.0.715: attempt to access beyond end of device [ 252.011377][ T6569] loop0: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 252.332086][ T26] audit: type=1800 audit(1722363338.164:63): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.715" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 252.518002][ T3634] syz-executor: attempt to access beyond end of device [ 252.518002][ T3634] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 252.582037][ T3648] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 252.637677][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 252.823457][ T26] audit: type=1326 audit(1722363339.004:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.3.733" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4283773b9 code=0x0 [ 252.852010][ T3648] usb 2-1: Using ep0 maxpacket: 32 [ 253.012068][ T3648] usb 2-1: unable to get BOS descriptor or descriptor too short [ 253.102086][ T3648] usb 2-1: config 1 has an invalid descriptor of length 136, skipping remainder of the config [ 253.131823][ T3648] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 253.140861][ T3648] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.436325][ T6577] loop3: detected capacity change from 0 to 32768 [ 253.443695][ T3648] usb 2-1: string descriptor 0 read error: -22 [ 253.449966][ T3648] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.474319][ T6577] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.733 (6577) [ 253.523952][ T3648] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.549392][ T6577] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 253.590654][ T3648] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 253.634944][ T3648] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 253.691314][ T3648] cdc_ncm 2-1:1.0: bind() failure [ 253.699384][ T6577] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 253.737805][ T6577] BTRFS info (device loop3): turning off barriers [ 253.920178][ T6577] BTRFS info (device loop3): setting nodatasum [ 253.977444][ T3648] usb 2-1: USB disconnect, device number 15 [ 254.109188][ T6577] BTRFS info (device loop3): use zlib compression, level 3 [ 254.271391][ T6577] BTRFS info (device loop3): using free space tree [ 254.712083][ T3648] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 254.779830][ T4370] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 254.961854][ T3648] usb 1-1: Using ep0 maxpacket: 8 [ 255.015363][ T6619] loop4: detected capacity change from 0 to 40427 [ 255.033044][ T6619] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 255.066777][ T6619] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 255.079480][ T6619] F2FS-fs (loop4): invalid crc value [ 255.082170][ T3648] usb 1-1: config 32 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 255.111060][ T3648] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 255.121376][ T3648] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.139059][ T6619] F2FS-fs (loop4): Found nat_bits in checkpoint [ 255.248281][ T6619] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 255.257173][ T6619] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 255.451925][ T3648] usb 1-1: string descriptor 0 read error: -71 [ 255.468310][ T3648] hub 1-1:32.0: bad descriptor, ignoring hub [ 255.521551][ T3648] hub: probe of 1-1:32.0 failed with error -5 [ 255.534793][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.542529][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.639303][ T6635] syz.4.742: attempt to access beyond end of device [ 255.639303][ T6635] loop4: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 255.673335][ T26] audit: type=1800 audit(1722363341.794:65): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.742" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 256.179042][ T26] audit: type=1326 audit(1722363342.344:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4283773b9 code=0x7ffc0000 [ 256.312876][ T3648] usb 1-1: USB disconnect, device number 12 [ 256.352109][ T4298] syz-executor: attempt to access beyond end of device [ 256.352109][ T4298] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 256.352131][ T26] audit: type=1326 audit(1722363342.344:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4283773b9 code=0x7ffc0000 [ 256.352164][ T26] audit: type=1326 audit(1722363342.394:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4283773b9 code=0x7ffc0000 [ 256.846150][ T3652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 256.861460][ T3652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 256.883756][ T3652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 256.898103][ T3652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 256.910193][ T3652] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 256.919209][ T3652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.675643][ T26] audit: type=1326 audit(1722363342.394:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4283773b9 code=0x7ffc0000 [ 258.048093][ T26] audit: type=1326 audit(1722363342.394:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4283773b9 code=0x7ffc0000 [ 258.161966][ T26] audit: type=1326 audit(1722363342.394:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fb4283773b9 code=0x7ffc0000 [ 258.296204][ T26] audit: type=1326 audit(1722363342.394:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4283773b9 code=0x7ffc0000 [ 258.571666][ T6667] loop3: detected capacity change from 0 to 4096 [ 258.586704][ T6667] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 258.630403][ T26] audit: type=1326 audit(1722363342.394:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.3.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4283773b9 code=0x7ffc0000 [ 258.983173][ T3652] Bluetooth: hci5: command tx timeout [ 259.012198][ T6667] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 259.329806][ T5516] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.539424][ T5516] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.665246][ T26] audit: type=1326 audit(1722363345.844:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff351773b9 code=0x7ffc0000 [ 259.728230][ T4370] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 259.816451][ T26] audit: type=1326 audit(1722363345.874:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff351773b9 code=0x7ffc0000 [ 259.868846][ T5516] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.911629][ T26] audit: type=1326 audit(1722363345.884:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff351773b9 code=0x7ffc0000 [ 260.045512][ T26] audit: type=1326 audit(1722363345.884:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7eff351773b9 code=0x7ffc0000 [ 260.085184][ T3683] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 260.154700][ T5516] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.165066][ T26] audit: type=1326 audit(1722363345.884:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.4.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff351773b9 code=0x7ffc0000 [ 260.987844][ T6646] chnl_net:caif_netlink_parms(): no params data found [ 261.061894][ T3653] Bluetooth: hci5: command tx timeout [ 261.111980][ T3683] usb 1-1: Using ep0 maxpacket: 8 [ 261.114778][ T6646] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.125406][ T6693] loop2: detected capacity change from 0 to 512 [ 261.155016][ T6646] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.177738][ T6646] device bridge_slave_0 entered promiscuous mode [ 261.204334][ T6693] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 261.215508][ T6693] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038 (0x7fffffff) [ 261.232085][ T3683] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 261.243025][ T6646] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.256015][ T3683] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 261.264933][ T6646] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.283549][ T6646] device bridge_slave_1 entered promiscuous mode [ 261.290369][ T3683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.339047][ T4439] EXT4-fs (loop2): unmounting filesystem. [ 261.351840][ T3932] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 261.448901][ T6686] loop3: detected capacity change from 0 to 32768 [ 261.484894][ T6646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.538316][ T6646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.563755][ T6686] XFS (loop3): Mounting V5 Filesystem [ 261.602254][ T3683] usb 1-1: string descriptor 0 read error: -71 [ 261.610313][ T3683] hub 1-1:32.0: bad descriptor, ignoring hub [ 261.640442][ T3683] hub: probe of 1-1:32.0 failed with error -5 [ 261.699938][ T6686] XFS (loop3): Ending clean mount [ 261.752004][ T3932] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 261.782061][ T3932] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 261.785425][ T3683] usb 1-1: USB disconnect, device number 13 [ 261.840629][ T3932] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 261.860402][ T6646] team0: Port device team_slave_0 added [ 261.868190][ T3932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.920910][ T6646] team0: Port device team_slave_1 added [ 261.932358][ T6697] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 261.988331][ T4370] XFS (loop3): Unmounting Filesystem [ 262.119614][ T6646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.130780][ T6646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.164034][ T3932] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 262.190495][ T6646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.193590][ T3652] Bluetooth: Wrong link type (-71) [ 262.219481][ T3932] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input11 [ 262.253044][ T3932] usb 5-1: USB disconnect, device number 10 [ 262.328677][ T6646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.342494][ T6646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.602457][ T6646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.689235][ T6738] loop4: detected capacity change from 0 to 16 [ 262.728726][ T6739] loop2: detected capacity change from 0 to 4096 [ 262.806909][ T6739] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 262.820034][ T6738] erofs: (device loop4): mounted with root inode @ nid 36. [ 262.847145][ T6738] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 262.862065][ T6738] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 262.880514][ T6738] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 262.936737][ T6738] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 262.946371][ T6738] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 262.965036][ T6738] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 263.131831][ T3652] Bluetooth: hci5: command tx timeout [ 263.700851][ T6739] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 263.906884][ T6646] device hsr_slave_0 entered promiscuous mode [ 263.938023][ T6646] device hsr_slave_1 entered promiscuous mode [ 263.995534][ T6646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.018730][ T6646] Cannot create hsr debugfs directory [ 264.257862][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 264.257875][ T26] audit: type=1326 audit(1722363350.434:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.0.775" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f889f7773b9 code=0x0 [ 264.326545][ T4439] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 265.470083][ T3653] Bluetooth: hci5: command tx timeout [ 265.972944][ T5516] device hsr_slave_0 left promiscuous mode [ 265.987474][ T5516] device hsr_slave_1 left promiscuous mode [ 266.002694][ T5516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.021908][ T5516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.022334][ T6751] loop0: detected capacity change from 0 to 32768 [ 266.056764][ T5516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.065574][ T6751] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.775 (6751) [ 266.101187][ T5516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.101648][ T6751] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 266.150241][ T6751] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 266.163774][ T5516] device bridge_slave_1 left promiscuous mode [ 266.177784][ T6751] BTRFS info (device loop0): turning off barriers [ 266.188010][ T5516] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.206447][ T6751] BTRFS info (device loop0): setting nodatasum [ 266.230286][ T5516] device bridge_slave_0 left promiscuous mode [ 266.236764][ T6751] BTRFS info (device loop0): use zlib compression, level 3 [ 266.250107][ T5516] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.270024][ T6751] BTRFS info (device loop0): using free space tree [ 266.343453][ T5516] device veth1_macvtap left promiscuous mode [ 266.367034][ T5516] device veth0_macvtap left promiscuous mode [ 266.393943][ T5516] device veth1_vlan left promiscuous mode [ 266.399866][ T5516] device veth0_vlan left promiscuous mode [ 266.423754][ T6786] loop4: detected capacity change from 0 to 512 [ 266.563742][ T6786] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 266.593831][ T6786] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038 (0x7fffffff) [ 266.762405][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 266.884275][ T3634] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 267.191155][ T3932] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 267.585137][ T3932] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 267.616141][ T3932] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 267.630038][ T3932] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 267.639654][ T3932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.672133][ T6813] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 267.816941][ T5516] team0 (unregistering): Port device team_slave_1 removed [ 267.870764][ T5516] team0 (unregistering): Port device team_slave_0 removed [ 267.892158][ T3653] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 267.905089][ T3653] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 267.914337][ T3653] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 267.922787][ T3932] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 267.930832][ T3932] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input13 [ 267.951027][ T3653] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 267.958482][ T3932] usb 5-1: USB disconnect, device number 11 [ 267.964518][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 267.972377][ T3653] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 267.981122][ T3653] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 268.079362][ T5516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.127010][ T5516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.465218][ T6828] loop4: detected capacity change from 0 to 16 [ 268.525596][ T6828] erofs: (device loop4): mounted with root inode @ nid 36. [ 268.549276][ T6828] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 268.577924][ T6828] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 268.596533][ T6828] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 268.650322][ T6828] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 268.659897][ T6828] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 268.678759][ T6828] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 269.665097][ T5516] bond0 (unregistering): Released all slaves [ 270.011971][ T3653] Bluetooth: hci0: command tx timeout [ 270.177455][ T6646] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 270.189056][ T6646] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 270.224138][ T6646] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 270.254006][ T6646] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 270.355831][ T6825] chnl_net:caif_netlink_parms(): no params data found [ 270.501773][ T6837] loop3: detected capacity change from 0 to 64 [ 271.143181][ T6825] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.150323][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.201353][ T6825] device bridge_slave_0 entered promiscuous mode [ 271.259694][ T6646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.307447][ T6825] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.320269][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.362075][ T6825] device bridge_slave_1 entered promiscuous mode [ 271.470987][ T6825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.527564][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.556207][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.585719][ T6646] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.602936][ T6825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.654767][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.683718][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.706984][ T3648] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.715864][ T3648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.800506][ T6817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.821553][ T6817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.875888][ T6817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.910970][ T6817] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.918468][ T6817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.985691][ T6817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.000184][ T6817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.057623][ T6825] team0: Port device team_slave_0 added [ 272.091914][ T3653] Bluetooth: hci0: command tx timeout [ 272.193961][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.231451][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.282787][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.330231][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.373623][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.407973][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.448290][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.494624][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.530807][ T6825] team0: Port device team_slave_1 added [ 272.552629][ T6646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.598142][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.715963][ T6825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.761902][ T6825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.871191][ T6887] loop4: detected capacity change from 0 to 256 [ 272.931890][ T6825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.961323][ T6887] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 273.027183][ T6825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.066629][ T6825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.209199][ T6825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.189465][ T6825] device hsr_slave_0 entered promiscuous mode [ 274.212801][ T6825] device hsr_slave_1 entered promiscuous mode [ 274.220397][ T3653] Bluetooth: hci0: command tx timeout [ 274.533701][ T6646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.540818][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.557462][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.780794][ T6910] loop3: detected capacity change from 0 to 64 [ 274.839587][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 274.878047][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 274.989437][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.041634][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.089488][ T6646] device veth0_vlan entered promiscuous mode [ 275.298375][ T6825] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.341011][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.376214][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.397757][ T6646] device veth1_vlan entered promiscuous mode [ 275.575179][ T6825] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.622452][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 275.777601][ T6825] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.822370][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.920564][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.944306][ T6646] device veth0_macvtap entered promiscuous mode [ 275.967039][ T6933] loop4: detected capacity change from 0 to 2048 [ 276.251868][ T3653] Bluetooth: hci0: command tx timeout [ 276.692245][ T6933] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.760817][ T6825] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.830752][ T3652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.842410][ T3652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.850978][ T3652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.860654][ T3652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.872152][ T3652] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.879639][ T3652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.986164][ T6646] device veth1_macvtap entered promiscuous mode [ 276.995816][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.026371][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.133283][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.147929][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.158169][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.189309][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.219057][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.243192][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.263580][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.279942][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.303506][ T6646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.324990][ T6817] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.337227][ T6817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.367131][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.382506][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.400188][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.411638][ T6950] loop3: detected capacity change from 0 to 128 [ 277.413516][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.428188][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.439277][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.449994][ T6646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.461016][ T6646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.482414][ T6646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.512872][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.527557][ T6950] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 277.537330][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.555612][ T6950] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038 (0x7fffffff) [ 277.574648][ T6646] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.592160][ T6646] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.621197][ T6646] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.647064][ T6950] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #2: comm syz.3.813: No space for directory leaf checksum. Please run e2fsck -D. [ 277.654440][ T6646] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.671083][ T6950] EXT4-fs error (device loop3): __ext4_find_entry:1695: inode #2: comm syz.3.813: checksumming directory block 0 [ 277.758605][ T4370] EXT4-fs (loop3): unmounting filesystem. [ 277.821716][ T6825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 277.846057][ T6825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 277.866951][ T6825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 277.885750][ T6825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 277.969983][ T5516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.001955][ T5516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.036514][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 278.069557][ T3938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.095832][ T3938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.120818][ T6936] chnl_net:caif_netlink_parms(): no params data found [ 278.145663][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 278.367213][ T6825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.411911][ T6936] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.419104][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.457510][ T6936] device bridge_slave_0 entered promiscuous mode [ 278.541212][ T6936] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.552619][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.568962][ T6936] device bridge_slave_1 entered promiscuous mode [ 278.584475][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.598538][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.611965][ T6825] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.635718][ T6976] loop1: detected capacity change from 0 to 256 [ 278.649261][ T6976] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 278.703939][ T6936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.719465][ T6936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.784632][ T6817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.810470][ T6817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.829735][ T6817] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.837685][ T6817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.857215][ T6817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.907457][ T6936] team0: Port device team_slave_0 added [ 278.925849][ T6936] team0: Port device team_slave_1 added [ 278.973360][ T3653] Bluetooth: hci1: command tx timeout [ 279.062153][ T6387] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 279.361980][ T6387] usb 4-1: Using ep0 maxpacket: 8 [ 279.606389][ T6817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.621304][ T6817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.631231][ T6817] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.638369][ T6817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.642075][ T6387] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 279.661886][ T6387] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 279.672615][ T6387] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.686483][ T6387] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 279.695685][ T6387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.734414][ T6936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.741383][ T6936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.777982][ T6387] usbtmc 4-1:16.0: bulk endpoints not found [ 279.783762][ T6936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.872812][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.884749][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 279.920690][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 279.930819][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.940067][ T6936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.981891][ T6936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.008236][ T6936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.028610][ T6974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.058160][ T6974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.080386][ T22] usb 4-1: USB disconnect, device number 12 [ 280.084870][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 280.113296][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.132344][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.141019][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 280.162532][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.192824][ T6825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.211238][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 280.235214][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 280.262840][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.328109][ T6936] device hsr_slave_0 entered promiscuous mode [ 280.344554][ T6936] device hsr_slave_1 entered promiscuous mode [ 280.361256][ T6936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.370158][ T6936] Cannot create hsr debugfs directory [ 280.575915][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.583844][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.595844][ T6825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.630636][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.640438][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.692012][ T22] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 280.787308][ T6936] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.837286][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.846573][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.858520][ T6825] device veth0_vlan entered promiscuous mode [ 280.868030][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.878448][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.062140][ T3653] Bluetooth: hci1: command tx timeout [ 281.078093][ T6936] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.089005][ T22] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 281.112151][ T22] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 281.130331][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 281.133395][ T6999] loop1: detected capacity change from 0 to 2048 [ 281.185686][ T6825] device veth1_vlan entered promiscuous mode [ 281.195561][ T6999] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.290790][ T6936] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.302380][ T22] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 281.311530][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.333745][ T22] usb 4-1: Product: syz [ 281.337956][ T22] usb 4-1: Manufacturer: syz [ 281.351309][ T22] usb 4-1: SerialNumber: syz [ 281.363561][ T22] usb 4-1: config 0 descriptor?? [ 281.373601][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 281.392104][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 281.401242][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 281.413250][ T22] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 281.436559][ T22] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 281.443330][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.453662][ T22] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 281.473920][ T22] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 281.481580][ T22] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 281.482215][ T6825] device veth0_macvtap entered promiscuous mode [ 281.510131][ T22] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 281.521927][ T3682] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 281.541291][ T22] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 281.554222][ T7006] loop1: detected capacity change from 0 to 256 [ 281.560029][ T22] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 281.570749][ T6936] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.571955][ T22] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 281.618235][ T22] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 281.624262][ T7006] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 281.636186][ T22] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 281.648055][ T6825] device veth1_macvtap entered promiscuous mode [ 281.667991][ T22] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 281.703061][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.708670][ T22] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 281.741932][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.766139][ T22] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 281.801996][ T22] usb 4-1: USB disconnect, device number 13 [ 281.848804][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.861973][ T22] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 281.902295][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.934827][ T22] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 281.955370][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.971999][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.972723][ T22] keyspan 4-1:0.0: device disconnected [ 281.982898][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.992257][ T3682] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 281.998224][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.145563][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.271428][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.580311][ T6825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.835731][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.971298][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.121672][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.249259][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.364751][ T3653] Bluetooth: hci1: command tx timeout [ 283.372468][ T3682] usb 5-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 283.381546][ T3682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.387913][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.427240][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.452281][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.456760][ T3682] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 283.501853][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.514843][ T3943] udevd[3943]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.530407][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.557482][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.612201][ T6825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.631611][ T22] usb 5-1: USB disconnect, device number 12 [ 283.663884][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 283.679553][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 283.699185][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 283.723718][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.741404][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 283.751585][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 283.874102][ T6825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.901945][ T6825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.911489][ T6825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.922166][ T6825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.151417][ T6936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 284.191543][ T6936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 284.192165][ T3819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.222198][ T3819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.262928][ T6936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 284.345158][ T7027] loop1: detected capacity change from 0 to 512 [ 284.366589][ T6816] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 284.384852][ T6936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 284.423852][ T7027] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 284.438121][ T7032] loop4: detected capacity change from 0 to 512 [ 284.456970][ T3861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.466114][ T7027] EXT4-fs (loop1): 1 truncate cleaned up [ 284.503408][ T7027] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 284.508360][ T3861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.703502][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 284.834596][ T7036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.838'. [ 284.993930][ T7036] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 4: comm syz.1.838: lblock 0 mapped to illegal pblock 4 (length 1) [ 285.202494][ T7032] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 285.244060][ T7032] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038 (0x7fffffff) [ 285.341469][ T6646] EXT4-fs (loop1): unmounting filesystem. [ 285.470352][ T3653] Bluetooth: hci1: command tx timeout [ 285.480134][ T7043] netlink: 40 bytes leftover after parsing attributes in process `syz.0.789'. [ 285.502250][ T6936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.516936][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.525242][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.550492][ T6936] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.583772][ T22] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 285.612627][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.621384][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.643628][ T6384] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.650790][ T6384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.676603][ T7046] loop0: detected capacity change from 0 to 256 [ 285.686059][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.704747][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.725175][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 285.730392][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.754284][ T6384] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.761457][ T6384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.792172][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.797792][ T7046] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 285.833071][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.848005][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.868840][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.920176][ T6936] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 285.935159][ T6936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.083421][ T7050] tipc: Started in network mode [ 286.112094][ T7050] tipc: Node identity 7f000001, cluster identity 4711 [ 286.128346][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.139805][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.149856][ T22] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 286.163588][ T7050] tipc: Enabled bearer , priority 10 [ 286.171193][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.178918][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.193859][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.234831][ T22] usb 4-1: config 0 descriptor?? [ 286.246302][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.260355][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.420763][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.676727][ T7038] capability: warning: `syz.3.840' uses 32-bit capabilities (legacy support in use) [ 286.737440][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.860202][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.015022][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 287.095283][ T22] itetech 0003:258A:6A88.0005: unknown main item tag 0x0 [ 287.167835][ T22] itetech 0003:258A:6A88.0005: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.3-1/input0 [ 287.230325][ T7067] loop4: detected capacity change from 0 to 128 [ 287.244742][ T6936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.269902][ T6387] tipc: Node number set to 2130706433 [ 287.299998][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 287.309153][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 287.324500][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 287.333953][ T22] usb 4-1: USB disconnect, device number 14 [ 287.340829][ T7067] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 287.368591][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 287.384692][ T7067] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038 (0x7fffffff) [ 287.404581][ T7074] loop0: detected capacity change from 0 to 256 [ 287.439621][ T7067] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz.4.847: No space for directory leaf checksum. Please run e2fsck -D. [ 287.464050][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 287.474383][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 287.478796][ T7067] EXT4-fs error (device loop4): __ext4_find_entry:1695: inode #2: comm syz.4.847: checksumming directory block 0 [ 287.505664][ T6936] device veth0_vlan entered promiscuous mode [ 287.520348][ T7074] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 287.529662][ T6936] device veth1_vlan entered promiscuous mode [ 287.556966][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 287.565730][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 287.590556][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 287.625356][ T7076] loop0: detected capacity change from 0 to 512 [ 287.629822][ T6815] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 287.663455][ T7076] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 287.677088][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 287.686231][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 287.696878][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.717017][ T6936] device veth0_macvtap entered promiscuous mode [ 287.733949][ T7076] EXT4-fs (loop0): 1 truncate cleaned up [ 287.739029][ T7079] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 287.739765][ T7076] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 287.755251][ T7079] syzkaller0: linktype set to 776 [ 287.775772][ T6936] device veth1_macvtap entered promiscuous mode [ 287.792649][ T6815] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 287.844707][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.866656][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.884609][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.905616][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.920354][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.943690][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.953757][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.964953][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.974842][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.986262][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.998646][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.009541][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.035437][ T6936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.122997][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.850'. [ 288.338018][ T7081] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 4: comm syz.0.850: lblock 0 mapped to illegal pblock 4 (length 1) [ 288.694067][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.784521][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.873090][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.904133][ T3653] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 288.913101][ T3653] Bluetooth: hci5: Injecting HCI hardware error event [ 288.925227][ T3647] Bluetooth: hci5: hardware error 0x00 [ 288.948862][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.990451][ T7085] netlink: 40 bytes leftover after parsing attributes in process `syz.3.852'. [ 289.008580][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.029769][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.073938][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.120818][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.132445][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.143263][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.153955][ T6936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.164549][ T6936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.178539][ T6936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.193074][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 289.201569][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 289.239546][ T6825] EXT4-fs (loop0): unmounting filesystem. [ 289.282254][ T6815] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 289.303672][ T6815] usb 2-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 289.322858][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 289.332206][ T6815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.375854][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 289.408643][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 289.423364][ T6815] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 289.449154][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 289.488287][ T6936] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.516802][ T3628] udevd[3628]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.543908][ T6936] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.573318][ T6936] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.620070][ T3679] usb 2-1: USB disconnect, device number 16 [ 289.633427][ T6936] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.929545][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.959633][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.047756][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 290.069351][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.108530][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.142980][ T3936] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 290.212289][ T7103] tipc: Started in network mode [ 290.219157][ T7103] tipc: Node identity 7f000001, cluster identity 4711 [ 290.220463][ T7103] tipc: Enabled bearer , priority 10 [ 290.296351][ T7109] netlink: 'syz.1.858': attribute type 3 has an invalid length. [ 290.399033][ T7114] loop1: detected capacity change from 0 to 256 [ 290.419973][ T7114] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 290.763253][ T7121] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 290.789994][ T7121] syzkaller0: linktype set to 776 [ 290.927969][ T7128] loop0: detected capacity change from 0 to 1024 [ 291.007730][ T7129] netlink: 44 bytes leftover after parsing attributes in process `syz.3.863'. [ 291.039633][ T7129] tmpfs: Unknown parameter 'usrquota' [ 291.418690][ T3682] tipc: Node number set to 2130706433 [ 291.518547][ T3647] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 291.716048][ T26] audit: type=1800 audit(1722363377.894:81): pid=7134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.864" name="file7" dev="loop0" ino=28 res=0 errno=0 [ 291.767885][ T7140] loop3: detected capacity change from 0 to 512 [ 291.850329][ T7140] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 291.958031][ T7140] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038 (0x7fffffff) [ 292.104201][ T6387] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 292.172330][ T3647] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 292.181102][ T3647] Bluetooth: hci0: Injecting HCI hardware error event [ 292.190480][ T3653] Bluetooth: hci0: hardware error 0x00 [ 292.307454][ T4370] EXT4-fs (loop3): unmounting filesystem. [ 292.446188][ T7158] tipc: Enabling of bearer rejected, already enabled [ 292.522115][ T6387] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 292.582039][ T6387] usb 3-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 292.615580][ T6387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.941944][ T7171] process 'syz.0.876' launched './file0' with NULL argv: empty string added [ 293.380869][ T6387] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 293.522078][ T6387] usb 3-1: USB disconnect, device number 12 [ 293.762784][ T3628] udevd[3628]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.007138][ T6815] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 294.031223][ T7190] loop1: detected capacity change from 0 to 128 [ 294.050361][ T7183] loop4: detected capacity change from 0 to 1024 [ 294.082832][ T7192] netlink: 48 bytes leftover after parsing attributes in process `syz.2.882'. [ 294.184564][ T7190] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 294.251988][ T6815] usb 1-1: Using ep0 maxpacket: 16 [ 294.261341][ T26] audit: type=1800 audit(1722363380.434:82): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.881" name="file7" dev="loop4" ino=28 res=0 errno=0 [ 294.288618][ T7190] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 294.331845][ T3653] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 294.392125][ T6815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 294.417573][ T7190] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 17 (only 1 groups) [ 294.438824][ T7204] tipc: Enabling of bearer rejected, already enabled [ 294.453571][ T6815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 294.501918][ T6815] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 294.540226][ T6815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.612671][ T6815] usb 1-1: config 0 descriptor?? [ 295.037280][ T6646] EXT4-fs (loop1): unmounting filesystem. [ 295.157469][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.192040][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.194356][ T7222] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 295.239453][ T7222] syzkaller0: linktype set to 776 [ 295.252618][ T6815] hid (null): report_id 0 is invalid [ 295.274884][ T6815] hid-generic 0003:0158:0100.0006: unknown main item tag 0x1 [ 295.352037][ T7226] loop4: detected capacity change from 0 to 2048 [ 295.362135][ T6815] hid-generic 0003:0158:0100.0006: unexpected long global item [ 295.403187][ T6815] hid-generic: probe of 0003:0158:0100.0006 failed with error -22 [ 295.449983][ T7226] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 295.568302][ T6815] usb 1-1: USB disconnect, device number 14 [ 295.658232][ T7220] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 295.729064][ T7236] hub 9-0:1.0: USB hub found [ 295.746689][ T7240] loop1: detected capacity change from 0 to 512 [ 295.758177][ T7236] hub 9-0:1.0: 8 ports detected [ 295.791940][ T3682] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 295.806047][ T7240] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 295.885902][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 295.903157][ T7240] EXT4-fs (loop1): 1 truncate cleaned up [ 295.942556][ T7240] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 295.955331][ T7240] EXT4-fs (loop1): shut down requested (2) [ 296.334362][ T7251] loop4: detected capacity change from 0 to 1024 [ 296.349884][ T3682] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 297.934813][ T3682] usb 4-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 297.935584][ T7251] EXT4-fs (loop4): barriers disabled [ 297.962085][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.962202][ T7251] JBD2: no valid journal superblock found [ 297.976017][ T7251] EXT4-fs (loop4): error loading journal [ 298.044409][ T3628] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 298.145027][ T3682] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 298.307608][ T3628] udevd[3628]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.325697][ T6816] usb 4-1: USB disconnect, device number 15 [ 298.525306][ T7266] tipc: Enabling of bearer rejected, already enabled [ 298.536271][ T7268] loop2: detected capacity change from 0 to 128 [ 298.562385][ T3936] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 298.605497][ T6646] EXT4-fs (loop1): unmounting filesystem. [ 298.648866][ T7268] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 298.663213][ T7268] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 298.741492][ T7268] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 17 (only 1 groups) [ 298.779458][ T6936] EXT4-fs (loop2): unmounting filesystem. [ 299.000578][ T7282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.906'. [ 299.034336][ T7282] device vlan2 entered promiscuous mode [ 299.039983][ T7282] device veth0_to_hsr entered promiscuous mode [ 299.134196][ T3936] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 299.147874][ T3936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.477181][ T7286] loop1: detected capacity change from 0 to 256 [ 299.724423][ T3936] usb 1-1: config 0 descriptor?? [ 299.791946][ T7286] FAT-fs (loop1): Directory bread(block 64) failed [ 299.822062][ T7286] FAT-fs (loop1): Directory bread(block 65) failed [ 299.837222][ T7286] FAT-fs (loop1): Directory bread(block 66) failed [ 299.882455][ T7286] FAT-fs (loop1): Directory bread(block 67) failed [ 300.042733][ T7293] loop2: detected capacity change from 0 to 1024 [ 300.073059][ T7293] EXT4-fs (loop2): barriers disabled [ 300.087095][ T7293] JBD2: no valid journal superblock found [ 300.094623][ T7293] EXT4-fs (loop2): error loading journal [ 300.168184][ T7286] FAT-fs (loop1): Directory bread(block 68) failed [ 300.276987][ T7286] FAT-fs (loop1): Directory bread(block 69) failed [ 300.438277][ T7286] FAT-fs (loop1): Directory bread(block 70) failed [ 300.583050][ T7286] FAT-fs (loop1): Directory bread(block 71) failed [ 300.625518][ T7286] FAT-fs (loop1): Directory bread(block 72) failed [ 300.632461][ T7286] FAT-fs (loop1): Directory bread(block 73) failed [ 300.774234][ T7255] loop0: detected capacity change from 0 to 512 [ 300.902562][ T7255] ext3: Bad value for 'max_dir_size_kb' [ 301.715622][ T3943] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 301.732133][ T3936] [drm:udl_init] *ERROR* Selecting channel failed [ 301.754027][ T3936] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 301.772080][ T3936] [drm] Initialized udl on minor 2 [ 301.791995][ T3936] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 301.810952][ T3936] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 301.847691][ T3936] usb 1-1: USB disconnect, device number 15 [ 301.854231][ T6387] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 301.869950][ T7302] loop2: detected capacity change from 0 to 512 [ 301.870168][ T7305] loop4: detected capacity change from 0 to 128 [ 301.901462][ T6387] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 301.917961][ T6387] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 301.961100][ T7305] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 301.977097][ T7308] loop1: detected capacity change from 0 to 512 [ 301.988734][ T7302] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 301.997948][ T7308] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 302.016008][ T7305] ext4 filesystem being mounted at /151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 302.052440][ T7302] EXT4-fs (loop2): 1 truncate cleaned up [ 302.058146][ T7302] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 302.068760][ T7308] EXT4-fs (loop1): 1 truncate cleaned up [ 302.089340][ T7308] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 302.243160][ T7305] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 17 (only 1 groups) [ 302.487350][ T7318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.913'. [ 302.694719][ T7318] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 4: comm syz.2.913: lblock 0 mapped to illegal pblock 4 (length 1) [ 303.106140][ T6936] EXT4-fs (loop2): unmounting filesystem. [ 303.114775][ T4298] EXT4-fs (loop4): unmounting filesystem. [ 303.354976][ T7329] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 304.076945][ T6817] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 304.169305][ T6646] EXT4-fs (loop1): unmounting filesystem. [ 304.295551][ T7337] loop4: detected capacity change from 0 to 2048 [ 304.325140][ T7340] loop1: detected capacity change from 0 to 256 [ 304.388507][ T7340] FAT-fs (loop1): Directory bread(block 64) failed [ 304.395923][ T7340] FAT-fs (loop1): Directory bread(block 65) failed [ 304.403050][ T7340] FAT-fs (loop1): Directory bread(block 66) failed [ 304.408545][ T7337] loop4: p2 < > p4 [ 304.417990][ T7340] FAT-fs (loop1): Directory bread(block 67) failed [ 304.418690][ T7337] loop4: p4 size 8192 extends beyond EOD, [ 304.430288][ T7340] FAT-fs (loop1): Directory bread(block 68) failed [ 304.441864][ T7337] truncated [ 304.451692][ T7340] FAT-fs (loop1): Directory bread(block 69) failed [ 304.475141][ T7340] FAT-fs (loop1): Directory bread(block 70) failed [ 304.476991][ T6817] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.485052][ T7340] FAT-fs (loop1): Directory bread(block 71) failed [ 304.522271][ T7340] FAT-fs (loop1): Directory bread(block 72) failed [ 304.529223][ T7340] FAT-fs (loop1): Directory bread(block 73) failed [ 304.531837][ T6817] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 304.600164][ T6817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.631630][ T6817] usb 4-1: config 0 descriptor?? [ 304.631815][ T6387] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 304.673180][ T7337] loop4: detected capacity change from 0 to 1024 [ 304.699749][ T6817] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 304.717987][ T6817] usb 4-1: No valid video chain found. [ 305.082140][ T6387] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.094431][ T6387] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.105872][ T6387] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 305.115131][ T6387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.136109][ T6387] usb 1-1: config 0 descriptor?? [ 305.221346][ T3648] usb 4-1: USB disconnect, device number 16 [ 307.043787][ T7351] netlink: 44 bytes leftover after parsing attributes in process `syz.2.927'. [ 307.252020][ T7352] tmpfs: Unknown parameter 'usrquota' [ 307.599354][ T3653] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 307.621791][ T3653] Bluetooth: hci1: Injecting HCI hardware error event [ 307.631948][ T3653] Bluetooth: hci1: hardware error 0x00 [ 307.802035][ T6387] usbhid 1-1:0.0: can't add hid device: -71 [ 307.811974][ T6387] usbhid: probe of 1-1:0.0 failed with error -71 [ 307.894510][ T6387] usb 1-1: USB disconnect, device number 16 [ 307.953068][ T7361] loop2: detected capacity change from 0 to 128 [ 308.041523][ T7361] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 308.064005][ T7361] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 308.136490][ T7362] hub 9-0:1.0: USB hub found [ 308.154676][ T7370] loop1: detected capacity change from 0 to 2048 [ 308.177267][ T7369] loop0: detected capacity change from 0 to 2048 [ 308.207005][ T7362] hub 9-0:1.0: 8 ports detected [ 308.259182][ T7370] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.321542][ T7361] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 17 (only 1 groups) [ 308.355924][ T7369] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 308.423095][ T7359] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 308.496737][ T7377] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 309.350437][ T6936] EXT4-fs (loop2): unmounting filesystem. [ 309.442924][ T7379] loop3: detected capacity change from 0 to 512 [ 309.468533][ T7379] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 309.505258][ T6825] EXT4-fs (loop0): unmounting filesystem. [ 309.549056][ T7379] EXT4-fs (loop3): 1 truncate cleaned up [ 309.597409][ T7379] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 309.713617][ T3653] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 309.868411][ T7379] EXT4-fs (loop3): shut down requested (2) [ 310.210729][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.257906][ T7382] loop2: detected capacity change from 0 to 1764 [ 310.435656][ T3653] block nbd0: Receive control failed (result -32) [ 310.451241][ T7387] block nbd0: shutting down sockets [ 310.497721][ T7395] loop1: detected capacity change from 0 to 2048 [ 310.711857][ T7395] loop1: p2 < > p4 [ 310.738304][ T7395] loop1: p4 size 8192 extends beyond EOD, truncated [ 310.833367][ T7404] netlink: 44 bytes leftover after parsing attributes in process `syz.0.942'. [ 310.865194][ T7404] tmpfs: Unknown parameter 'usrquota' [ 311.072027][ T3648] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 311.471970][ T6387] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 311.503498][ T3943] udevd[3943]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 311.528219][ T4370] EXT4-fs (loop3): unmounting filesystem. [ 311.557577][ T3628] udevd[3628]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 311.573348][ T3648] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.599357][ T3648] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 311.608996][ T3648] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.633709][ T3648] usb 3-1: config 0 descriptor?? [ 311.922142][ T6387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.933172][ T6387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.945797][ T6387] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 311.953796][ T3648] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 311.959118][ T6387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.985662][ T6387] usb 5-1: config 0 descriptor?? [ 312.015353][ T3648] usb 3-1: No valid video chain found. [ 312.070492][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 312.075298][ T3628] udevd[3628]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 312.126260][ T7409] loop3: detected capacity change from 0 to 2048 [ 312.159094][ T7409] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 312.196866][ T3648] usb 3-1: USB disconnect, device number 13 [ 312.215402][ T7409] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.323736][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 312.338699][ T7416] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 312.535765][ T6387] itetech 0003:258A:6A88.0007: unknown main item tag 0x0 [ 312.568423][ T6387] itetech 0003:258A:6A88.0007: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.4-1/input0 [ 312.710454][ T7418] loop1: detected capacity change from 0 to 2048 [ 312.764740][ T7422] loop3: detected capacity change from 0 to 2048 [ 312.794342][ T7418] loop1: p2 p3 < > p4 < p5 > [ 312.799105][ T7418] loop1: partition table partially beyond EOD, truncated [ 312.801572][ T6816] usb 5-1: USB disconnect, device number 13 [ 312.835515][ T7418] loop1: p2 start 33028 is beyond EOD, truncated [ 312.849793][ T7422] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 312.862912][ T7418] loop1: p3 start 4284160 is beyond EOD, truncated [ 312.875437][ T7418] loop1: p5 start 33028 is beyond EOD, truncated [ 312.890911][ T3092] loop1: p2 p3 < > p4 < p5 > [ 312.898985][ T3092] loop1: partition table partially beyond EOD, truncated [ 312.907348][ T3092] loop1: p2 start 33028 is beyond EOD, truncated [ 312.914333][ T3092] loop1: p3 start 4284160 is beyond EOD, truncated [ 312.923062][ T3092] loop1: p5 start 33028 is beyond EOD, truncated [ 312.967758][ T7420] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 313.056612][ T3943] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 313.088188][ T4370] EXT4-fs (loop3): unmounting filesystem. [ 313.098416][ T3628] udevd[3628]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 313.334393][ T6387] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 313.566163][ T7434] loop3: detected capacity change from 0 to 1024 [ 313.638367][ T7434] EXT4-fs (loop3): barriers disabled [ 313.651342][ T7434] JBD2: no valid journal superblock found [ 313.657231][ T7434] EXT4-fs (loop3): error loading journal [ 314.761890][ T6387] usb 3-1: Using ep0 maxpacket: 16 [ 314.927462][ T6387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.948766][ T6387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.032488][ T7439] block nbd4: Device being setup by another task [ 315.043472][ T6387] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.088557][ T6387] usb 3-1: New USB device found, idVendor=1e7d, idProduct=71ce, bcdDevice= 0.00 [ 315.092266][ T7443] loop0: detected capacity change from 0 to 2048 [ 315.100192][ T6387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.127071][ T3628] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 315.137477][ T6387] usb 3-1: config 0 descriptor?? [ 315.163926][ T7443] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 315.242569][ T6825] EXT4-fs (loop0): unmounting filesystem. [ 315.311904][ T3679] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 316.668938][ T3653] block nbd4: Receive control failed (result -32) [ 316.672771][ T7438] block nbd4: shutting down sockets [ 316.762541][ T3679] usb 2-1: config 0 has no interfaces? [ 316.774734][ T3679] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 316.818645][ T3679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.830512][ T6387] hid-generic 0003:1E7D:71CE.0008: unknown main item tag 0x0 [ 316.840096][ T3679] usb 2-1: config 0 descriptor?? [ 316.880091][ T6387] hid-generic 0003:1E7D:71CE.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:71ce] on usb-dummy_hcd.2-1/input0 [ 316.977450][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.983808][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.314808][ T6387] usb 2-1: USB disconnect, device number 17 [ 317.372930][ T7465] loop3: detected capacity change from 0 to 2048 [ 317.413187][ T7465] loop3: p2 p3 < > p4 < p5 > [ 317.421340][ T7465] loop3: partition table partially beyond EOD, truncated [ 317.440326][ T7465] loop3: p2 start 33028 is beyond EOD, truncated [ 317.459602][ T7465] loop3: p3 start 4284160 is beyond EOD, truncated [ 317.483193][ T7465] loop3: p5 start 33028 is beyond EOD, truncated [ 318.061834][ T6387] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 318.165491][ T6384] usb 3-1: USB disconnect, device number 14 [ 318.299486][ T7479] loop1: detected capacity change from 0 to 2048 [ 318.381118][ T7479] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 318.472760][ T6387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.484048][ T6387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.494650][ T6387] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 318.504080][ T6387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.515426][ T6387] usb 4-1: config 0 descriptor?? [ 318.600394][ T6646] EXT4-fs (loop1): unmounting filesystem. [ 319.025943][ T6387] itetech 0003:258A:6A88.0009: unknown main item tag 0x0 [ 319.042719][ T6387] itetech 0003:258A:6A88.0009: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.3-1/input0 [ 319.260614][ T6387] usb 4-1: USB disconnect, device number 17 [ 319.596736][ T26] audit: type=1326 audit(1722363405.774:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.1.972" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc427b773b9 code=0x0 [ 319.790737][ T7503] loop2: detected capacity change from 0 to 2048 [ 319.853675][ T7503] loop2: p2 p3 < > p4 < p5 > [ 319.858516][ T7503] loop2: partition table partially beyond EOD, truncated [ 319.880863][ T7503] loop2: p2 start 33028 is beyond EOD, truncated [ 319.909781][ T7503] loop2: p3 start 4284160 is beyond EOD, truncated [ 319.941484][ T7503] loop2: p5 start 33028 is beyond EOD, truncated [ 321.002019][ T3648] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 321.139408][ T7516] loop3: detected capacity change from 0 to 2048 [ 321.210431][ T7516] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 321.265937][ T3648] usb 2-1: Using ep0 maxpacket: 16 [ 321.381253][ T4370] EXT4-fs (loop3): unmounting filesystem. [ 321.382244][ T3648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.407459][ T3648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.418390][ T3648] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.434406][ T3648] usb 2-1: New USB device found, idVendor=1e7d, idProduct=71ce, bcdDevice= 0.00 [ 321.444213][ T3648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.456899][ T3648] usb 2-1: config 0 descriptor?? [ 321.955393][ T3648] hid-generic 0003:1E7D:71CE.000A: unknown main item tag 0x0 [ 321.996004][ T3648] hid-generic 0003:1E7D:71CE.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:71ce] on usb-dummy_hcd.1-1/input0 [ 322.026217][ T7523] netlink: 168 bytes leftover after parsing attributes in process `syz.3.983'. [ 322.855199][ T7532] loop2: detected capacity change from 0 to 16 [ 324.023613][ T7532] erofs: (device loop2): mounted with root inode @ nid 36. [ 324.058713][ T7530] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 324.069581][ T7530] syz.2.985: attempt to access beyond end of device [ 324.069581][ T7530] loop2: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 324.182087][ T6387] usb 2-1: USB disconnect, device number 18 [ 324.347121][ T7534] loop1: detected capacity change from 0 to 2048 [ 324.478568][ T7534] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.987: bad orphan inode 8192 [ 324.515491][ T7534] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 325.002673][ T7551] overlayfs: './file2' not a directory [ 325.314987][ T6817] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 325.528933][ T6646] EXT4-fs (loop1): unmounting filesystem. [ 325.643610][ T7555] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 325.752307][ T6817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.848890][ T6817] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 326.002459][ T6817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.174489][ T6817] usb 3-1: config 0 descriptor?? [ 326.288399][ T6817] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 326.298238][ T6817] usb 3-1: No valid video chain found. [ 326.408226][ T7559] hub 9-0:1.0: USB hub found [ 326.413731][ T7559] hub 9-0:1.0: 8 ports detected [ 326.900459][ T6384] usb 3-1: USB disconnect, device number 15 [ 328.204189][ T7578] loop0: detected capacity change from 0 to 64 [ 328.380113][ T3647] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 328.390811][ T3647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 328.400545][ T3647] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 328.437388][ T3647] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 328.459913][ T3647] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 328.475831][ T3647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 330.093325][ T7606] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 330.561100][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.771088][ T3647] Bluetooth: hci4: command tx timeout [ 330.815769][ T7582] chnl_net:caif_netlink_parms(): no params data found [ 330.948647][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.000366][ T7613] loop3: detected capacity change from 0 to 512 [ 331.015215][ T7613] EXT4-fs: Ignoring removed mblk_io_submit option [ 331.177464][ T7619] xt_limit: Overflow, try lower: 0/0 [ 332.181345][ T7613] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 332.291617][ T7613] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 332.336830][ T7613] System zones: 1-12 [ 332.342700][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.430001][ T7613] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.1013: corrupted in-inode xattr [ 332.462111][ T7613] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1013: couldn't read orphan inode 15 (err -117) [ 332.490749][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.502765][ T7613] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 332.672826][ T7582] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.723504][ T7582] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.778991][ T7639] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz.3.1013: No space for directory leaf checksum. Please run e2fsck -D. [ 332.933287][ T3647] Bluetooth: hci4: command tx timeout [ 333.029575][ T7582] device bridge_slave_0 entered promiscuous mode [ 333.213345][ T7582] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.360172][ T7639] EXT4-fs error (device loop3): __ext4_find_entry:1695: inode #11: comm syz.3.1013: checksumming directory block 0 [ 333.388578][ T7582] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.400390][ T7582] device bridge_slave_1 entered promiscuous mode [ 333.553694][ T7613] EXT4-fs warning (device loop3): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 1049521477 [ 333.588938][ T7582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.610938][ T7582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.656257][ T4370] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5868: Out of memory [ 333.697002][ T7651] program syz.2.1022 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 333.712793][ T4370] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #2: comm syz-executor: mark_inode_dirty error [ 333.761375][ T4370] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 333.784352][ T7582] team0: Port device team_slave_0 added [ 333.807972][ T7582] team0: Port device team_slave_1 added [ 333.813248][ T4370] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 334.063771][ T4370] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 334.117007][ T37] tipc: Disabling bearer [ 334.152588][ T37] tipc: Left network mode [ 334.177616][ T7630] EXT4-fs warning (device loop3): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 585783521 [ 334.491339][ T4370] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 334.518536][ T7658] loop2: detected capacity change from 0 to 1024 [ 334.525354][ T7630] EXT4-fs error (device loop3): ext4_init_inode_table:1568: comm ext4lazyinit: Something is wrong with group 0: used itable blocks: -13567; itable unused count: 54301 [ 334.550355][ T4370] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 334.586235][ T7658] [ 334.588598][ T7658] ====================================================== [ 334.595614][ T7658] WARNING: possible circular locking dependency detected [ 334.602618][ T7658] 6.1.102-syzkaller #0 Not tainted [ 334.607708][ T7658] ------------------------------------------------------ [ 334.614706][ T7658] syz.2.1025/7658 is trying to acquire lock: [ 334.620716][ T7658] ffff88807f219c08 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x1d2/0x1b10 [ 334.631757][ T7658] [ 334.631757][ T7658] but task is already holding lock: [ 334.639101][ T7658] ffff8881413360b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0 [ 334.648575][ T7658] [ 334.648575][ T7658] which lock already depends on the new lock. [ 334.648575][ T7658] [ 334.658959][ T7658] [ 334.658959][ T7658] the existing dependency chain (in reverse order) is: [ 334.667957][ T7658] [ 334.667957][ T7658] -> #1 (&tree->tree_lock){+.+.}-{3:3}: [ 334.675675][ T7658] lock_acquire+0x1f8/0x5a0 [ 334.680691][ T7658] __mutex_lock+0x132/0xd80 [ 334.685703][ T7658] hfsplus_file_truncate+0x80d/0xb40 [ 334.691495][ T7658] hfsplus_setattr+0x1b9/0x280 [ 334.696762][ T7658] notify_change+0xce3/0xfc0 [ 334.701865][ T7658] do_truncate+0x21c/0x300 [ 334.706791][ T7658] vfs_truncate+0x2dd/0x3a0 [ 334.711832][ T7658] do_sys_truncate+0xda/0x190 [ 334.717023][ T7658] do_syscall_64+0x3b/0xb0 [ 334.721951][ T7658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.728355][ T7658] [ 334.728355][ T7658] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}: [ 334.737380][ T7658] validate_chain+0x1661/0x5950 [ 334.742749][ T7658] __lock_acquire+0x125b/0x1f80 [ 334.748201][ T7658] lock_acquire+0x1f8/0x5a0 [ 334.753222][ T7658] __mutex_lock+0x132/0xd80 [ 334.758236][ T7658] hfsplus_file_extend+0x1d2/0x1b10 [ 334.763942][ T7658] hfsplus_bmap_reserve+0x101/0x4e0 [ 334.769653][ T7658] hfsplus_create_cat+0x1a9/0x1ba0 [ 334.775272][ T7658] hfsplus_fill_super+0x13e6/0x1c90 [ 334.780977][ T7658] mount_bdev+0x2c9/0x3f0 [ 334.785817][ T7658] legacy_get_tree+0xeb/0x180 [ 334.791194][ T7658] vfs_get_tree+0x88/0x270 [ 334.796122][ T7658] do_new_mount+0x2ba/0xb40 [ 334.801134][ T7658] __se_sys_mount+0x2d5/0x3c0 [ 334.806326][ T7658] do_syscall_64+0x3b/0xb0 [ 334.811251][ T7658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.817651][ T7658] [ 334.817651][ T7658] other info that might help us debug this: [ 334.817651][ T7658] [ 334.827862][ T7658] Possible unsafe locking scenario: [ 334.827862][ T7658] [ 334.835292][ T7658] CPU0 CPU1 [ 334.840642][ T7658] ---- ---- [ 334.845991][ T7658] lock(&tree->tree_lock); [ 334.850920][ T7658] lock(&HFSPLUS_I(inode)->extents_lock); [ 334.859238][ T7658] lock(&tree->tree_lock); [ 334.866418][ T7658] lock(&HFSPLUS_I(inode)->extents_lock); [ 334.872231][ T7658] [ 334.872231][ T7658] *** DEADLOCK *** [ 334.872231][ T7658] [ 334.880360][ T7658] 3 locks held by syz.2.1025/7658: [ 334.885539][ T7658] #0: ffff8880745700e0 (&type->s_umount_key#49/1){+.+.}-{3:3}, at: alloc_super+0x217/0x930 [ 334.895723][ T7658] #1: ffff8880762d7998 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_fill_super+0x1378/0x1c90 [ 334.905807][ T7658] #2: ffff8881413360b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0 [ 334.915807][ T7658] [ 334.915807][ T7658] stack backtrace: [ 334.921685][ T7658] CPU: 1 PID: 7658 Comm: syz.2.1025 Not tainted 6.1.102-syzkaller #0 [ 334.929997][ T7658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 334.940041][ T7658] Call Trace: [ 334.943308][ T7658] [ 334.946228][ T7658] dump_stack_lvl+0x1e3/0x2cb [ 334.950901][ T7658] ? nf_tcp_handle_invalid+0x642/0x642 [ 334.956358][ T7658] ? print_circular_bug+0x12b/0x1a0 [ 334.961544][ T7658] check_noncircular+0x2fa/0x3b0 [ 334.966469][ T7658] ? is_bpf_text_address+0x22/0x2a0 [ 334.971674][ T7658] ? add_chain_block+0x850/0x850 [ 334.976608][ T7658] ? lockdep_lock+0x11f/0x2a0 [ 334.981305][ T7658] ? __lock_acquire+0x125b/0x1f80 [ 334.986345][ T7658] ? _find_first_zero_bit+0xd0/0x100 [ 334.991637][ T7658] validate_chain+0x1661/0x5950 [ 334.997105][ T7658] ? __lock_acquire+0x125b/0x1f80 [ 335.002127][ T7658] ? reacquire_held_locks+0x660/0x660 [ 335.008021][ T7658] ? mark_lock+0x9a/0x340 [ 335.012347][ T7658] ? __lock_acquire+0x125b/0x1f80 [ 335.017453][ T7658] ? look_up_lock_class+0x77/0x140 [ 335.022577][ T7658] ? register_lock_class+0x100/0x990 [ 335.027872][ T7658] ? is_dynamic_key+0x260/0x260 [ 335.032747][ T7658] ? validate_chain+0x112/0x5950 [ 335.037712][ T7658] ? mark_lock+0x9a/0x340 [ 335.042044][ T7658] __lock_acquire+0x125b/0x1f80 [ 335.046898][ T7658] lock_acquire+0x1f8/0x5a0 [ 335.051399][ T7658] ? hfsplus_file_extend+0x1d2/0x1b10 [ 335.056769][ T7658] ? read_lock_is_recursive+0x10/0x10 [ 335.062133][ T7658] ? stack_trace_save+0x1c0/0x1c0 [ 335.067160][ T7658] ? __might_sleep+0xb0/0xb0 [ 335.071742][ T7658] ? __kernel_text_address+0x9/0x40 [ 335.076965][ T7658] ? unwind_get_return_address+0x49/0x80 [ 335.082587][ T7658] ? arch_stack_walk+0xf3/0x140 [ 335.087426][ T7658] ? mark_lock+0x9a/0x340 [ 335.091748][ T7658] __mutex_lock+0x132/0xd80 [ 335.096244][ T7658] ? hfsplus_file_extend+0x1d2/0x1b10 [ 335.101699][ T7658] ? hfsplus_file_extend+0x1d2/0x1b10 [ 335.107087][ T7658] ? mutex_lock_nested+0x10/0x10 [ 335.112042][ T7658] hfsplus_file_extend+0x1d2/0x1b10 [ 335.117247][ T7658] ? __might_sleep+0xb0/0xb0 [ 335.121833][ T7658] ? trace_raw_output_contention_end+0xd0/0xd0 [ 335.128097][ T7658] ? hfsplus_get_block+0x14e0/0x14e0 [ 335.133387][ T7658] ? trace_contention_end+0x61/0x170 [ 335.138685][ T7658] ? __mutex_lock+0x2f7/0xd80 [ 335.143362][ T7658] ? hfsplus_find_init+0x146/0x1c0 [ 335.148465][ T7658] ? mutex_lock_nested+0x10/0x10 [ 335.153402][ T7658] hfsplus_bmap_reserve+0x101/0x4e0 [ 335.158600][ T7658] hfsplus_create_cat+0x1a9/0x1ba0 [ 335.163711][ T7658] ? look_up_lock_class+0x77/0x140 [ 335.168986][ T7658] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 335.174441][ T7658] ? hfsplus_find_cat+0x5c0/0x5c0 [ 335.179550][ T7658] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 335.185457][ T7658] ? do_raw_spin_unlock+0x137/0x8a0 [ 335.190661][ T7658] ? _raw_spin_unlock+0x24/0x40 [ 335.195527][ T7658] ? hfsplus_new_inode+0x5c9/0x740 [ 335.200649][ T7658] hfsplus_fill_super+0x13e6/0x1c90 [ 335.205852][ T7658] ? hfsplus_mount+0x40/0x40 [ 335.210457][ T7658] ? snprintf+0xd6/0x120 [ 335.214692][ T7658] ? vscnprintf+0x80/0x80 [ 335.219011][ T7658] ? set_blocksize+0x1c6/0x350 [ 335.223768][ T7658] mount_bdev+0x2c9/0x3f0 [ 335.228180][ T7658] ? hfsplus_mount+0x40/0x40 [ 335.233036][ T7658] legacy_get_tree+0xeb/0x180 [ 335.237730][ T7658] ? hfsplus_mark_mdb_dirty+0x1b0/0x1b0 [ 335.243281][ T7658] vfs_get_tree+0x88/0x270 [ 335.247709][ T7658] do_new_mount+0x2ba/0xb40 [ 335.252304][ T7658] ? ns_capable+0x85/0xe0 [ 335.256641][ T7658] ? do_move_mount_old+0x160/0x160 [ 335.261749][ T7658] __se_sys_mount+0x2d5/0x3c0 [ 335.266511][ T7658] ? __x64_sys_mount+0xc0/0xc0 [ 335.271451][ T7658] ? syscall_enter_from_user_mode+0x2e/0x230 [ 335.277441][ T7658] ? lockdep_hardirqs_on+0x94/0x130 [ 335.282645][ T7658] ? __x64_sys_mount+0x1c/0xc0 [ 335.287410][ T7658] do_syscall_64+0x3b/0xb0 [ 335.291826][ T7658] ? clear_bhb_loop+0x45/0xa0 [ 335.296501][ T7658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.302392][ T7658] RIP: 0033:0x7fab5ad78aba [ 335.306804][ T7658] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.326664][ T7658] RSP: 002b:00007fab5bab3e78 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 335.335082][ T7658] RAX: ffffffffffffffda RBX: 00007fab5bab3f00 RCX: 00007fab5ad78aba [ 335.343046][ T7658] RDX: 0000000020000000 RSI: 0000000020002900 RDI: 00007fab5bab3ec0 [ 335.351004][ T7658] RBP: 0000000020000000 R08: 00007fab5bab3f00 R09: 0000000002000010 [ 335.358965][ T7658] R10: 0000000002000010 R11: 0000000000000202 R12: 0000000020002900 [ 335.367126][ T7658] R13: 00007fab5bab3ec0 R14: 00000000000006c9 R15: 00000000200022c0 [ 335.375101][ T7658] [ 335.400849][ T3653] Bluetooth: hci4: command tx timeout [ 335.438738][ T4370] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 2048 [ 335.506967][ T4370] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5868: Out of memory [ 335.564496][ T4370] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #11: comm syz-executor: mark_inode_dirty error [ 335.582490][ T7582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.589486][ T7582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.711803][ T7582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.270010][ T4370] EXT4-fs (loop3): unmounting filesystem. [ 336.655743][ T37] device hsr_slave_0 left promiscuous mode [ 336.662559][ T37] device hsr_slave_1 left promiscuous mode [ 336.668817][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.676917][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.688371][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.696166][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.704078][ T37] device bridge_slave_1 left promiscuous mode [ 336.710282][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.720034][ T37] device bridge_slave_0 left promiscuous mode [ 336.726444][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.736934][ T37] device veth0_to_hsr left promiscuous mode [ 336.743957][ T37] device veth1_macvtap left promiscuous mode [ 336.749989][ T37] device veth0_macvtap left promiscuous mode [ 336.756512][ T37] device veth1_vlan left promiscuous mode [ 336.762367][ T37] device veth0_vlan left promiscuous mode [ 336.917839][ T37] team0 (unregistering): Port device team_slave_1 removed [ 336.941682][ T37] team0 (unregistering): Port device team_slave_0 removed [ 336.953746][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.966472][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.026109][ T37] bond0 (unregistering): Released all slaves [ 337.728588][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.778871][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.827079][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.867673][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.967746][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.025899][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.068810][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.126301][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.206300][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.247988][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.295855][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.336467][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.546212][ T37] device hsr_slave_0 left promiscuous mode [ 339.552697][ T37] device hsr_slave_1 left promiscuous mode [ 339.559092][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.567640][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.576011][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.584631][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.593327][ T37] device bridge_slave_1 left promiscuous mode [ 339.599713][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.608584][ T37] device bridge_slave_0 left promiscuous mode [ 339.615378][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.624336][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.632356][ T37] device bridge_slave_1 left promiscuous mode [ 339.639169][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.647473][ T37] device bridge_slave_0 left promiscuous mode [ 339.653806][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.664417][ T37] device hsr_slave_0 left promiscuous mode [ 339.670809][ T37] device hsr_slave_1 left promiscuous mode [ 339.677614][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.685298][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.694230][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.702148][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.710133][ T37] device bridge_slave_1 left promiscuous mode [ 339.717211][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.726422][ T37] device bridge_slave_0 left promiscuous mode [ 339.732634][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.743247][ T37] device hsr_slave_0 left promiscuous mode [ 339.749492][ T37] device hsr_slave_1 left promiscuous mode [ 339.755841][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.763302][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.771181][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.779037][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.786639][ T37] device bridge_slave_1 left promiscuous mode [ 339.792990][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.800756][ T37] device bridge_slave_0 left promiscuous mode [ 339.807301][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.819411][ T37] device veth1_macvtap left promiscuous mode [ 339.825484][ T37] device veth0_macvtap left promiscuous mode [ 339.831516][ T37] device veth1_vlan left promiscuous mode [ 339.837329][ T37] device veth0_vlan left promiscuous mode [ 339.843643][ T37] device veth1_macvtap left promiscuous mode [ 339.849631][ T37] device veth0_macvtap left promiscuous mode [ 339.855993][ T37] device veth1_vlan left promiscuous mode [ 339.861875][ T37] device veth0_vlan left promiscuous mode [ 339.868241][ T37] device veth1_macvtap left promiscuous mode [ 339.874597][ T37] device veth0_macvtap left promiscuous mode [ 339.880631][ T37] device veth1_vlan left promiscuous mode [ 339.886739][ T37] device veth0_vlan left promiscuous mode [ 340.098061][ T37] team0 (unregistering): Port device team_slave_1 removed [ 340.120504][ T37] team0 (unregistering): Port device team_slave_0 removed [ 340.143617][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.167642][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.210970][ T37] bond0 (unregistering): Released all slaves [ 340.280908][ T37] team0 (unregistering): Port device team_slave_1 removed [ 340.291640][ T37] team0 (unregistering): Port device team_slave_0 removed [ 340.301304][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.314755][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.349221][ T37] bond0 (unregistering): Released all slaves [ 340.465219][ T37] team0 (unregistering): Port device team_slave_1 removed [ 340.488977][ T37] team0 (unregistering): Port device team_slave_0 removed [ 340.514255][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.539374][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.606881][ T37] bond0 (unregistering): Released all slaves [ 340.721866][ T37] team0 (unregistering): Port device team_slave_1 removed [ 340.749869][ T37] team0 (unregistering): Port device team_slave_0 removed [ 340.775906][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.802068][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.844585][ T37] bond0 (unregistering): Released all slaves