last executing test programs: 25.475279978s ago: executing program 4 (id=1537): r0 = openat$audio(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000040)) 25.355264459s ago: executing program 4 (id=1538): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x38, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x38}}, 0x0) 25.283803124s ago: executing program 4 (id=1539): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x180000e, &(0x7f0000000080)={[{@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@acl}, {@auto_da_alloc}, {@block_validity}, {@quota}]}, 0x3, 0x434, &(0x7f00000002c0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) rmdir(&(0x7f0000000700)='./bus\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x0, @desc4}) 24.9698508s ago: executing program 4 (id=1543): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000001100)="94", 0x1) tee(r0, r5, 0x81, 0x0) vmsplice(r4, &(0x7f0000000580)=[{&(0x7f00000000c0)="d7", 0x1}], 0x1, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4) 24.611655699s ago: executing program 4 (id=1548): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000480)={0x0, 0x0, 0xa}) 24.431250324s ago: executing program 4 (id=1550): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fadvise64(r1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x8000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) getuid() getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000006c0)) stat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)) fcntl$getownex(r0, 0x10, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read(0xffffffffffffffff, &(0x7f0000000200)=""/209, 0xd1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r5, r6, 0x100000000, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x1, r5, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) unshare(0x68060200) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) socket$inet6_tcp(0xa, 0x1, 0x0) 22.389987071s ago: executing program 2 (id=1556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = fcntl$dupfd(r1, 0x0, r0) pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x0) 15.53942205s ago: executing program 2 (id=1570): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000480)={0x0, 0x0, 0xa}) 15.388390253s ago: executing program 2 (id=1572): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@migrate={0xac, 0x21, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in6=@mcast1={0xff, 0x2}, @in6=@private1, @in=@multicast2}]}, @policy_type={0xa}]}, 0xac}}, 0x0) 15.248632954s ago: executing program 2 (id=1573): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3f00}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x0, 0x0, 0x1, 0x3}, 0x20) syz_open_procfs(0x0, &(0x7f0000000480)='net/psched\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f00000009c0)=0x8, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, 0x14a, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) creat(&(0x7f0000001040)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000600)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000180)={r8}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000080)={r9, 0x3, r7, 0x5}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="6c57d4ad82c0080836cd3764001e0008"], 0x2c}}, 0x0) keyctl$restrict_keyring(0x5, 0xfffffffffffffffd, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 14.176629531s ago: executing program 2 (id=1580): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x45}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x80000}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000140)={0x1000200, 0x0, 0x80000000, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r4, 0x4b2f, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x1d, 0x20, 0x0}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000002840)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x3a) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0x3f0, 0x0, 0x200, 0x200, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x118}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@realm={{0x30}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'bridge0\x00'}) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}}) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000080)='bridge0\x00') 13.002668797s ago: executing program 2 (id=1589): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x8080) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1) 3.90863419s ago: executing program 3 (id=1625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000bc0), &(0x7f0000000c00)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0x6f, 0xa4, &(0x7f0000000640)="33925721762e9250c6f7af96c846983a99c5d499d97060ac7e6d1b2e62d3f311125c9e493af0f9376a47b4b543aa61e6158a38f8eeabe6ecae48bf9ebbd700a5ae33da3461f46ab37a89da06ebf962a150cac3dc9443d9528ad1bb96a9a28ee459d9110932ade7ff24abc5e7841ec9", &(0x7f0000000300)=""/164, 0x0, 0x0, 0xbf, 0x94, &(0x7f00000003c0)="ce9993e5e592082dff4da82f42cbe9d0908b5e869371ace1ac0f18774a3514fa025ea1f09f0fd4b2952dcc58619e94954efc8a1d9e4c1e31397ba8bb9889149779296ad76c707d25d867ee4f169aebe754f46d06699a2841fdb30d33ab14295f6820243695e89f7784a036ba5abbd97df678b7f2544ab9a79d49e1e075f25906722c27852306a2409c13f0978dbddbaacc0e84ed1155666c2e94827b80cdab160ce1c4d8b2eef873f38fd3d60c36d47be448df957f8130931e6c1533c5c5ae", &(0x7f0000000480)="cee239a7df8f6687abb1478ec0a07366d12cb684f2819c638b9cb81f55608257f16c4a9a9892b83fed01c8e8819b7c49b00477fd0b2521eb4c71380c4199c76f5025082d5473a08cd9d20b6d3d3aa733c02832c0c1e3000ba8f9da3d68b0a68116bea6510218c2e95874aa58f6b7188095cda1929210335253c39e13e7586422f6a8c9106be452a49aec7a1ae7fa54f3317fe9c5", 0x2, 0x0, 0x1}, 0x9) 3.771557921s ago: executing program 1 (id=1627): socket$igmp6(0xa, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xf3, 0x0, 0x200d}}}, 0x7) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.738922344s ago: executing program 3 (id=1628): syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x47) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/4096, &(0x7f0000000480)=""/255}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x4b}, @l2cap_cid_signaling={{0x47}, [@l2cap_info_rsp={{0xb, 0x3, 0x8}, {0x0, 0x400, "aef7d7a4"}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0xfffa, 0x800}}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x1, 0xfbff}}, @l2cap_move_chan_req={{0xe, 0xe1, 0x3}, {0x3f, 0x3}}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0xad, 0x401}}, @l2cap_conf_rsp={{0x5, 0x6, 0xa}, {0xfff8, 0x9f51, 0x8, [@l2cap_conf_flushto={0x2, 0x2, 0x3ff}]}}, @l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}, @l2cap_move_chan_cfm={{0x10, 0xf9, 0x4}, {0x6, 0x1}}]}}, 0x50) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000002c0)=ANY=[@ANYBLOB="000000001465cd3457096f4bb115f8048793d38480846c3122c0b466d94004c843407cd6a025c89cae031dbdb1152e403fe8a5c8b223f1357ec807f306fbb6f65c7c688825694f7f034fb20008bb37", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000000000007410000001400180000000069623a6e6963766630000000"], 0x30}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0xbc7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xb1b2350], 0x0, 0x202}) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x0, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x3, 0x5}, {0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, {0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0xfffffffc}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r9, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x301) close(r8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000280)=[{}, {}], 0x53, &(0x7f00000002c0), 0x0, 0x0) 3.653690561s ago: executing program 0 (id=1629): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x37, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) 3.272718452s ago: executing program 1 (id=1630): openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r5, 0x0, 0x0) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4, @local}, 0x10) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x346}, &(0x7f0000000100), &(0x7f0000000080)) 3.191572369s ago: executing program 0 (id=1631): r0 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000001c0)=0x20) 3.150581862s ago: executing program 0 (id=1632): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x2284, 0x0) 3.005063584s ago: executing program 0 (id=1633): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x5}]}, 0x18}}, 0x0) 1.922460002s ago: executing program 0 (id=1635): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000005a40)='./file0\x00') 1.917716533s ago: executing program 1 (id=1636): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r1 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000080)='\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x7}, 0x90) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"/270], &(0x7f0000000180)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0}}, 0x10) mount(&(0x7f0000000080), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000040)='nsfs\x00', 0x1002080, &(0x7f0000000000)='\x95\xbb\x80,') socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a700600000000042020207b1af8ff00000000ffa100000000000007010000f8ffffffb7020000a83ed792b7030000feffffff85000000720000009500100000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x4, 0x8, &(0x7f00000002c0)="0000ffff", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfff) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/99, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000004c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r4, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) 1.691816272s ago: executing program 3 (id=1637): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200800, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000001a40)=ANY=[], 0xfd14) lseek(r0, 0x0, 0x4) 1.539289204s ago: executing program 0 (id=1638): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x3, 0x2a8, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) getdents(r1, 0x0, 0x0) fstat(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x6b105ee3b60fe757, 0x4, 0x2, 0x5, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x8, 0x1ff, 0x9}}) getpeername$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="480000000fe10507002000000000000000000000d221a03a2527d2410cb7d37c1df13c10ffff3bd05b6d013e016bfc669f0d02bf09d5ef0ce79f1457ba894511266c00ef1bcf95375fa9b8438579af6ecec9073cc1c212430a977961d4c71ed29baf990e2d01932a5f593581cfb8d5e20e84575d372968cafdd4627916506700"/140, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40), 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@delchain={0x2c, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x8001}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)=@can_delroute={0x188, 0x19, 0x0, 0x1, 0x25dfdbff, {}, [@CGW_FILTER={0xc, 0xb, {{0x3, 0x0, 0x1, 0x1}, {0x4}}}, @CGW_MOD_UID={0x8, 0xe, r2}, @CGW_LIM_HOPS={0x5, 0xd, 0x4}, @CGW_DST_IF={0x8}, @CGW_DST_IF={0x8, 0xa, r3}, @CGW_CS_CRC8={0x11e, 0x6, {0x12, 0x3a, 0x31, 0x6, 0x3, "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", 0x0, "ca74d2d9ccd4f009b5bab399d57c58db5e02459b"}}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3}, 0x4, 0x2, 0x0, 0x0, "bf9b5e908e91e701"}, 0x6}}, @CGW_SRC_IF={0x8, 0x9, r9}]}, 0x188}, 0x1, 0x0, 0x0, 0x80080}, 0x4) r10 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000b40)={'syztnl2\x00', &(0x7f0000000ac0)={'syztnl0\x00', r4, 0x29, 0x9, 0xfd, 0xffff, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x20, 0x20, 0x8, 0xff}}) r11 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r11, &(0x7f0000000300), 0x16) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r10, 0x0, 0xef84) 1.054238654s ago: executing program 3 (id=1639): socket$igmp6(0xa, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xf3, 0x0, 0x200d}}}, 0x7) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 592.089762ms ago: executing program 3 (id=1640): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f0000000800)={[{@resuid}]}, 0x1, 0x793, &(0x7f0000001700)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14553e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) rmdir(&(0x7f0000000180)='./file0/../file0\x00') 578.186413ms ago: executing program 1 (id=1641): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x15, 0x8, 0x8, 0x0, 0x820}, 0x48) 387.549948ms ago: executing program 1 (id=1642): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x2284, 0x0) 276.678907ms ago: executing program 1 (id=1643): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x1, 0x5509, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 0s ago: executing program 3 (id=1644): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x5}]}, 0x18}}, 0x0) kernel console output (not intermixed with test programs): 269.022283][ T7218] bond0: (slave team0): Enslaving as an active interface with an up link [ 269.048602][ T7221] device bond_slave_0 entered promiscuous mode [ 269.055373][ T7221] device bond_slave_1 entered promiscuous mode [ 269.063165][ T7221] device team_slave_0 entered promiscuous mode [ 269.069824][ T7221] device team_slave_1 entered promiscuous mode [ 269.191392][ T3596] usb 5-1: USB disconnect, device number 3 [ 269.197375][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 269.212292][ T7228] netlink: 'syz.1.1090': attribute type 10 has an invalid length. [ 269.251890][ T7228] bond0: (slave team0): Releasing backup interface [ 269.296850][ T7228] device team_slave_0 left promiscuous mode [ 269.303358][ T7228] device team_slave_1 left promiscuous mode [ 269.323576][ T3560] Bluetooth: hci2: unexpected event for opcode 0x0508 [ 269.344096][ T7228] bridge0: port 3(team0) entered blocking state [ 269.405743][ T7228] bridge0: port 3(team0) entered disabled state [ 269.452761][ T7228] device team0 entered promiscuous mode [ 269.485460][ T7228] device team_slave_0 entered promiscuous mode [ 269.512555][ T7228] device team_slave_1 entered promiscuous mode [ 269.568133][ T7217] device bond_slave_0 left promiscuous mode [ 269.574599][ T7217] device bond_slave_1 left promiscuous mode [ 270.780384][ T7237] tty tty25: ldisc open failed (-12), clearing slot 24 [ 271.130188][ T3562] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 271.865955][ T7257] loop4: detected capacity change from 0 to 2048 [ 271.897059][ T7257] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 271.962879][ T7257] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.090975][ T26] kauditd_printk_skb: 56 callbacks suppressed [ 272.090995][ T26] audit: type=1800 audit(1720543731.756:368): pid=7259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1107" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 272.181168][ T26] audit: type=1326 audit(1720543731.916:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.4.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cb775bd9 code=0x7fc00000 [ 272.245490][ T7263] netlink: 'syz.1.1108': attribute type 10 has an invalid length. [ 272.283247][ T26] audit: type=1326 audit(1720543731.916:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.4.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc4cb775bd9 code=0x7fc00000 [ 272.290320][ T7263] device team0 left promiscuous mode [ 272.359970][ T7263] device team_slave_0 left promiscuous mode [ 272.376262][ T7263] device team_slave_1 left promiscuous mode [ 272.388677][ T7263] bridge0: port 3(team0) entered disabled state [ 272.447694][ T7263] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.463465][ T7263] bond0: (slave team0): Enslaving as an active interface with an up link [ 272.475396][ T7272] device bond_slave_0 entered promiscuous mode [ 272.481680][ T7272] device bond_slave_1 entered promiscuous mode [ 272.488030][ T7272] device team_slave_0 entered promiscuous mode [ 272.494238][ T7272] device team_slave_1 entered promiscuous mode [ 272.547741][ T7276] netlink: 'syz.1.1108': attribute type 10 has an invalid length. [ 272.590665][ T7276] bond0: (slave team0): Releasing backup interface [ 272.611924][ T7276] device team_slave_0 left promiscuous mode [ 272.618079][ T7276] device team_slave_1 left promiscuous mode [ 272.631565][ T26] audit: type=1326 audit(1720543732.376:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.4.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cb775bd9 code=0x7fc00000 [ 272.658370][ T7276] bridge0: port 3(team0) entered blocking state [ 272.687907][ T7276] bridge0: port 3(team0) entered disabled state [ 272.695422][ T7188] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 272.706811][ T7276] device team0 entered promiscuous mode [ 272.712600][ T7276] device team_slave_0 entered promiscuous mode [ 272.719207][ T7276] device team_slave_1 entered promiscuous mode [ 272.802965][ T7262] device bond_slave_0 left promiscuous mode [ 272.809063][ T7262] device bond_slave_1 left promiscuous mode [ 272.935423][ T7188] usb 4-1: Using ep0 maxpacket: 32 [ 272.942263][ T7267] loop2: detected capacity change from 0 to 32768 [ 272.961082][ T7267] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 scanned by syz.2.1111 (7267) [ 272.994320][ T7267] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 273.005221][ T7267] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 273.015038][ T7267] BTRFS info (device loop2): use zlib compression, level 3 [ 273.029018][ T7267] BTRFS info (device loop2): turning on sync discard [ 273.041928][ T7291] loop4: detected capacity change from 0 to 1024 [ 273.064709][ T7267] BTRFS info (device loop2): max_inline at 79 [ 273.074231][ T7267] BTRFS info (device loop2): enabling ssd optimizations [ 273.085525][ T7188] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 273.098608][ T7267] BTRFS info (device loop2): using spread ssd allocation scheme [ 273.106433][ T26] audit: type=1800 audit(1720543732.846:372): pid=7288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1119" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 273.133630][ T7267] BTRFS info (device loop2): metadata ratio 4 [ 273.140994][ T7267] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 273.152606][ T7267] BTRFS info (device loop2): trying to use backup root at mount time [ 273.164526][ T7267] BTRFS info (device loop2): setting nodatacow, compression disabled [ 273.202806][ T7267] BTRFS info (device loop2): disabling tree log [ 273.211372][ T7267] BTRFS info (device loop2): using free space tree [ 273.240469][ T3680] hfsplus: b-tree write err: -5, ino 4 [ 273.290731][ T7188] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 273.335637][ T7188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.353812][ T3562] Bluetooth: hci1: unexpected event for opcode 0x0508 [ 273.376984][ T3562] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 273.385775][ T3562] Bluetooth: hci2: Injecting HCI hardware error event [ 273.386504][ T7188] usb 4-1: Product: syz [ 273.397652][ T3560] Bluetooth: hci2: hardware error 0x00 [ 273.575364][ T7188] usb 4-1: Manufacturer: syz [ 273.580044][ T7188] usb 4-1: SerialNumber: syz [ 273.599234][ T7188] usb 4-1: config 0 descriptor?? [ 273.625703][ T7274] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 274.874176][ T3555] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 275.133283][ T7188] hub 4-1:0.0: bad descriptor, ignoring hub [ 275.139320][ T7188] hub: probe of 4-1:0.0 failed with error -5 [ 275.147709][ T7188] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17 [ 275.164897][ T7188] usb 4-1: USB disconnect, device number 10 [ 275.175330][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 275.632309][ T3560] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 276.101333][ T7344] loop4: detected capacity change from 0 to 1024 [ 276.250560][ T26] audit: type=1800 audit(1720543735.996:373): pid=7343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1133" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 276.351825][ T3680] hfsplus: b-tree write err: -5, ino 4 [ 276.621903][ T7352] Process accounting resumed [ 276.871464][ T3560] Bluetooth: hci4: unexpected event for opcode 0x0508 [ 277.054602][ T7379] loop3: detected capacity change from 0 to 1024 [ 278.096115][ T3560] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 278.096219][ T3560] Bluetooth: hci1: Injecting HCI hardware error event [ 278.098904][ T3560] Bluetooth: hci1: hardware error 0x00 [ 278.168796][ T3610] hfsplus: b-tree write err: -5, ino 4 [ 278.668495][ T7349] loop2: detected capacity change from 0 to 32768 [ 278.752673][ T7349] XFS (loop2): Mounting V5 Filesystem [ 278.814817][ T7349] XFS (loop2): Ending clean mount [ 279.282472][ T7401] loop3: detected capacity change from 0 to 2048 [ 279.516459][ T7401] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 279.537664][ T3555] XFS (loop2): Unmounting Filesystem [ 279.773508][ T7401] Process accounting resumed [ 280.043480][ T7417] netlink: 'syz.0.1161': attribute type 10 has an invalid length. [ 280.067773][ T7412] loop4: detected capacity change from 0 to 2048 [ 280.132947][ T7417] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.143737][ T7412] loop4: p3 < > p4 < > [ 280.150544][ T7412] loop4: partition table partially beyond EOD, truncated [ 280.173292][ T7417] bond0: (slave team0): Enslaving as an active interface with an up link [ 280.175499][ T3560] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 280.193116][ T7418] device bond_slave_0 entered promiscuous mode [ 280.199436][ T7418] device bond_slave_1 entered promiscuous mode [ 280.205691][ T7418] device team_slave_0 entered promiscuous mode [ 280.207578][ T7412] loop4: p3 start 4284289 is beyond EOD, truncated [ 280.211869][ T7418] device team_slave_1 entered promiscuous mode [ 280.253136][ T7417] netlink: 'syz.0.1161': attribute type 10 has an invalid length. [ 280.324086][ T7417] bond0: (slave team0): Releasing backup interface [ 280.334289][ T7417] device team_slave_0 left promiscuous mode [ 280.340375][ T7417] device team_slave_1 left promiscuous mode [ 280.382599][ T7412] kvm: emulating exchange as write [ 280.397356][ T7417] bridge0: port 3(team0) entered blocking state [ 280.414198][ T7417] bridge0: port 3(team0) entered disabled state [ 280.432109][ T7417] device team0 entered promiscuous mode [ 280.451358][ T7417] device team_slave_0 entered promiscuous mode [ 280.473810][ T7417] device team_slave_1 entered promiscuous mode [ 280.541489][ T7413] device bond_slave_0 left promiscuous mode [ 280.547601][ T7413] device bond_slave_1 left promiscuous mode [ 280.895422][ T3560] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 280.904258][ T3560] Bluetooth: hci4: Injecting HCI hardware error event [ 280.914434][ T3560] Bluetooth: hci4: hardware error 0x00 [ 282.179446][ T7447] loop3: detected capacity change from 0 to 2048 [ 283.124126][ T3560] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 283.280308][ T7447] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 283.782771][ T7447] Process accounting resumed [ 284.670476][ T7484] loop1: detected capacity change from 0 to 2048 [ 284.683365][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1187'. [ 284.705547][ T7484] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 284.819260][ T7484] Process accounting resumed [ 284.953805][ T7497] loop4: detected capacity change from 0 to 256 [ 285.221656][ T7508] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1195'. [ 285.252674][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1195'. [ 285.295552][ T3598] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 285.407685][ T7517] netlink: 'syz.0.1199': attribute type 10 has an invalid length. [ 285.424671][ T7517] device team0 left promiscuous mode [ 285.430274][ T7517] device team_slave_0 left promiscuous mode [ 285.443320][ T7517] device team_slave_1 left promiscuous mode [ 285.449790][ T7517] bridge0: port 3(team0) entered disabled state [ 285.487122][ T7517] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.499385][ T7517] bond0: (slave team0): Enslaving as an active interface with an up link [ 285.510398][ T7520] device bond_slave_0 entered promiscuous mode [ 285.516819][ T7520] device bond_slave_1 entered promiscuous mode [ 285.523110][ T7520] device team_slave_0 entered promiscuous mode [ 285.529377][ T7520] device team_slave_1 entered promiscuous mode [ 285.545172][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1201'. [ 285.564715][ T3598] usb 4-1: Using ep0 maxpacket: 16 [ 285.610097][ T7517] netlink: 'syz.0.1199': attribute type 10 has an invalid length. [ 285.620043][ T7517] bond0: (slave team0): Releasing backup interface [ 285.627880][ T7517] device team_slave_0 left promiscuous mode [ 285.633988][ T7517] device team_slave_1 left promiscuous mode [ 285.672594][ T7517] bridge0: port 3(team0) entered blocking state [ 285.681158][ T7517] bridge0: port 3(team0) entered disabled state [ 285.689510][ T7517] device team0 entered promiscuous mode [ 285.695963][ T3598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.696380][ T7517] device team_slave_0 entered promiscuous mode [ 285.713688][ T7517] device team_slave_1 entered promiscuous mode [ 285.714627][ T3598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.733146][ T3598] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 285.743511][ T7516] device bond_slave_0 left promiscuous mode [ 285.746226][ T3598] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 285.752016][ T7516] device bond_slave_1 left promiscuous mode [ 285.762170][ T3598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.804054][ T3598] usb 4-1: config 0 descriptor?? [ 285.868314][ T3596] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 286.092546][ T7541] loop1: detected capacity change from 0 to 2048 [ 286.122503][ T7541] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.235566][ T3596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.262383][ T3596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.283635][ T3596] usb 3-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 286.299600][ T3598] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 286.303587][ T3596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.311113][ T7543] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1210'. [ 286.334078][ T3598] HID 045e:07da: Invalid code 65791 type 1 [ 286.340863][ T3596] usb 3-1: config 0 descriptor?? [ 286.353193][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1210'. [ 286.371387][ T3598] HID 045e:07da: Invalid code 768 type 1 [ 286.391689][ T3598] HID 045e:07da: Invalid code 769 type 1 [ 286.409138][ T3598] HID 045e:07da: Invalid code 770 type 1 [ 286.419296][ T3598] HID 045e:07da: Invalid code 771 type 1 [ 286.435335][ T3598] HID 045e:07da: Invalid code 772 type 1 [ 286.451358][ T3598] HID 045e:07da: Invalid code 773 type 1 [ 286.468587][ T3598] HID 045e:07da: Invalid code 774 type 1 [ 286.480017][ T3598] HID 045e:07da: Invalid code 775 type 1 [ 286.492765][ T3598] HID 045e:07da: Invalid code 776 type 1 [ 286.560851][ T3598] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000A/input/input18 [ 286.676832][ T3598] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 286.708996][ T3598] usb 4-1: USB disconnect, device number 11 [ 286.769768][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'. [ 286.840369][ T3596] wacom 0003:056A:0015.000B: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 286.875914][ T3596] wacom 0003:056A:0015.000B: hidraw0: USB HID v0.00 Device [HID 056a:0015] on usb-dummy_hcd.2-1/input0 [ 286.889386][ T3596] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0015.000B/input/input19 [ 287.041760][ T22] usb 3-1: USB disconnect, device number 6 [ 287.372257][ T7576] loop4: detected capacity change from 0 to 2048 [ 287.383192][ T7576] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.435682][ T3598] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 287.657450][ T7582] loop2: detected capacity change from 0 to 512 [ 287.683014][ T7582] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 287.705591][ T3598] usb 2-1: Using ep0 maxpacket: 32 [ 287.724839][ T7582] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 287.751115][ T7582] EXT4-fs (loop2): 1 truncate cleaned up [ 287.758251][ T7582] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 287.856259][ T3598] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.897611][ T3598] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.968178][ T3598] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 287.990341][ T3598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.047616][ T3598] hub 2-1:4.0: USB hub found [ 288.305892][ T3598] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 288.376642][ T3598] usb 2-1: USB disconnect, device number 12 [ 288.383404][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.396052][ T3628] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 288.536140][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.645332][ T3628] usb 1-1: Using ep0 maxpacket: 16 [ 288.651921][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.664048][ T7594] loop3: detected capacity change from 0 to 40427 [ 288.739289][ T7594] F2FS-fs (loop3): Found nat_bits in checkpoint [ 288.775615][ T3628] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.791761][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.792258][ T3628] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.856730][ T3628] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 288.880401][ T3628] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 288.902246][ T3555] EXT4-fs (loop2): unmounting filesystem. [ 288.925206][ T3628] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.979424][ T7594] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 288.981661][ T3628] usb 1-1: config 0 descriptor?? [ 289.707949][ T7618] syz.3.1231: attempt to access beyond end of device [ 289.707949][ T7618] loop3: rw=2049, sector=53248, nr_sectors = 976 limit=40427 [ 290.117115][ T26] audit: type=1800 audit(1720543749.366:374): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1231" name="bus" dev="loop3" ino=14 res=0 errno=0 [ 290.212309][ T3628] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 290.236423][ T4603] syz-executor: attempt to access beyond end of device [ 290.236423][ T4603] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 290.284431][ T7625] loop4: detected capacity change from 0 to 512 [ 290.354932][ T7625] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 290.362180][ T3628] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000C/input/input22 [ 290.414657][ T7625] EXT4-fs (loop4): 1 truncate cleaned up [ 290.425646][ T7625] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 290.485630][ T3628] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 290.608243][ T3628] usb 1-1: USB disconnect, device number 10 [ 290.833708][ T3562] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 290.852307][ T3562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 290.861029][ T3562] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 290.871037][ T3562] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 290.878723][ T3562] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 290.886435][ T3562] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 291.735487][ T3628] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 291.905664][ T7635] chnl_net:caif_netlink_parms(): no params data found [ 292.015510][ T3628] usb 4-1: Using ep0 maxpacket: 32 [ 292.030587][ T5026] EXT4-fs (loop4): unmounting filesystem. [ 292.162237][ T3628] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.191661][ T3628] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.242227][ T3628] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 292.277580][ T3628] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.366538][ T3628] hub 4-1:4.0: USB hub found [ 292.523014][ T36] device hsr_slave_0 left promiscuous mode [ 292.537935][ T36] device hsr_slave_1 left promiscuous mode [ 292.559105][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.588019][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.613613][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.625874][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.635716][ T3628] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 292.669348][ T36] device bridge_slave_1 left promiscuous mode [ 292.689079][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.706905][ T3628] usb 4-1: USB disconnect, device number 12 [ 292.748280][ T36] device bridge_slave_0 left promiscuous mode [ 292.771514][ T7687] loop1: detected capacity change from 0 to 256 [ 292.782275][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.856612][ T7687] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 292.878029][ T36] device veth1_macvtap left promiscuous mode [ 292.886322][ T36] device veth0_macvtap left promiscuous mode [ 292.912518][ T36] device veth1_vlan left promiscuous mode [ 292.935498][ T36] device veth0_vlan left promiscuous mode [ 292.975385][ T3560] Bluetooth: hci2: command tx timeout [ 292.997692][ T3563] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 293.009599][ T3563] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 293.018605][ T3563] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 293.028969][ T3563] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 293.039811][ T3563] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 293.047579][ T3563] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 293.365024][ T7697] loop3: detected capacity change from 0 to 2048 [ 293.396166][ T7697] loop3: p3 < > p4 < > [ 293.400524][ T7697] loop3: partition table partially beyond EOD, truncated [ 293.411199][ T7697] loop3: p3 start 4284289 is beyond EOD, truncated [ 293.791060][ T7703] loop3: detected capacity change from 0 to 2048 [ 293.841662][ T7703] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.923411][ T36] team0 (unregistering): Port device team_slave_1 removed [ 293.996311][ T36] team0 (unregistering): Port device team_slave_0 removed [ 294.069191][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.078995][ T36] device bond_slave_1 left promiscuous mode [ 294.122399][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.132127][ T36] device bond_slave_0 left promiscuous mode [ 294.619891][ T36] bond0 (unregistering): Released all slaves [ 294.708696][ T7635] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.716124][ T7635] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.724075][ T7635] device bridge_slave_0 entered promiscuous mode [ 294.732960][ T7635] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.740667][ T7635] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.749220][ T7635] device bridge_slave_1 entered promiscuous mode [ 294.887882][ T7635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.937334][ T7635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.056079][ T3563] Bluetooth: hci2: command tx timeout [ 295.068217][ T7635] team0: Port device team_slave_0 added [ 295.127771][ T7635] team0: Port device team_slave_1 added [ 295.153962][ T3563] Bluetooth: hci3: command tx timeout [ 295.245556][ T3719] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 295.261969][ T7635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.271922][ T7635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.327080][ T7635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.351753][ T7635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.365563][ T7635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.406678][ T7635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.465216][ T7635] device hsr_slave_0 entered promiscuous mode [ 295.482807][ T7635] device hsr_slave_1 entered promiscuous mode [ 295.491558][ T7690] chnl_net:caif_netlink_parms(): no params data found [ 295.535609][ T3719] usb 2-1: Using ep0 maxpacket: 32 [ 295.585585][ T3598] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 295.685538][ T3719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.706048][ T3719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.717991][ T7690] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.725645][ T7690] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.734295][ T7690] device bridge_slave_0 entered promiscuous mode [ 295.750409][ T7690] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.758412][ T7690] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.767213][ T7690] device bridge_slave_1 entered promiscuous mode [ 295.777976][ T3719] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 295.810004][ T3719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.845584][ T3598] usb 1-1: Using ep0 maxpacket: 32 [ 295.854228][ T3719] usb 2-1: config 0 descriptor?? [ 295.860019][ T7690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.902960][ T7690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.947737][ T7690] team0: Port device team_slave_0 added [ 295.986307][ T3598] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.020405][ T3598] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.036256][ T3598] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 296.053281][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.067534][ T7690] team0: Port device team_slave_1 added [ 296.116535][ T3598] hub 1-1:4.0: USB hub found [ 296.147539][ T7690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.159981][ T7690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.188807][ T7690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.201372][ T7690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.208480][ T7690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.236550][ T7690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.368760][ T3719] logitech 0003:046D:C293.000D: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.1-1/input0 [ 296.385391][ T3598] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 296.401816][ T3719] logitech 0003:046D:C293.000D: no inputs found [ 296.465959][ T3598] usb 1-1: USB disconnect, device number 11 [ 296.573397][ T3628] usb 2-1: USB disconnect, device number 13 [ 296.609424][ T7690] device hsr_slave_0 entered promiscuous mode [ 296.618328][ T7690] device hsr_slave_1 entered promiscuous mode [ 296.627109][ T7690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.634788][ T7690] Cannot create hsr debugfs directory [ 297.027995][ T7635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 297.136168][ T3563] Bluetooth: hci2: command tx timeout [ 297.165060][ T7690] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.192300][ T7759] loop3: detected capacity change from 0 to 512 [ 297.215675][ T3563] Bluetooth: hci3: command tx timeout [ 297.254450][ T7635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 297.325526][ T7759] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 297.381508][ T7690] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.419301][ T7759] EXT4-fs (loop3): 1 truncate cleaned up [ 297.425472][ T7759] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 297.510350][ T7635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 297.539278][ T7635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 297.635156][ T7690] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.797616][ T7690] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.006270][ T7635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.165945][ T7635] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.207465][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.228698][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.295404][ T3595] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 298.303473][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.316681][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.355475][ T3719] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.362619][ T3719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.405734][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 298.414771][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.465917][ T3719] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.473077][ T3719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.533212][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 298.544951][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 298.566452][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 298.596194][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 298.623325][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 298.665644][ T3595] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.697203][ T3595] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.698681][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 298.725880][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 298.737749][ T3595] usb 1-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 298.755822][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 298.768100][ T3595] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.793882][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 298.794117][ T3595] usb 1-1: config 0 descriptor?? [ 298.808114][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 298.841437][ T7635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.895973][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 298.913274][ T7771] loop1: detected capacity change from 0 to 40427 [ 298.938656][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 298.972458][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 298.990544][ T7690] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 299.034736][ T7690] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 299.043441][ T7771] F2FS-fs (loop1): Found nat_bits in checkpoint [ 299.088776][ T7690] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 299.122031][ T7690] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 299.215667][ T3563] Bluetooth: hci2: command tx timeout [ 299.295396][ T3563] Bluetooth: hci3: command tx timeout [ 299.301376][ T7771] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 299.321931][ T3595] wacom 0003:056A:0015.000E: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 299.353492][ T3595] wacom 0003:056A:0015.000E: hidraw0: USB HID v0.00 Device [HID 056a:0015] on usb-dummy_hcd.0-1/input0 [ 299.374761][ T3595] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0015.000E/input/input23 [ 299.407111][ T26] audit: type=1804 audit(1720543759.146:375): pid=7771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1280" name="/newroot/187/file0/file1" dev="loop1" ino=10 res=1 errno=0 [ 299.439335][ T7771] syz.1.1280: attempt to access beyond end of device [ 299.439335][ T7771] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 299.520919][ T4603] EXT4-fs (loop3): unmounting filesystem. [ 299.568726][ T3595] usb 1-1: USB disconnect, device number 12 [ 299.582204][ T7690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.668144][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.677572][ T4545] syz-executor: attempt to access beyond end of device [ 299.677572][ T4545] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 299.679014][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.807260][ T7690] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.966768][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.986165][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.994812][ T3598] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.002198][ T3598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.052103][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.072749][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.099247][ T3598] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.106470][ T3598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.134826][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.176407][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.216601][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.224928][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.253137][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.274358][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.284031][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.321750][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.345802][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 300.354683][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.373750][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 300.392578][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.422392][ T7635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.431070][ T3560] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.445710][ T3560] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.454655][ T3560] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.464492][ T3560] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.472305][ T3560] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 300.489329][ T7690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 300.503622][ T3560] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.566117][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.574390][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 300.608251][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 300.693317][ T7817] loop1: detected capacity change from 0 to 22 [ 300.733584][ T7817] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 300.741406][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 300.769523][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.788016][ T7817] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 300.892419][ T7635] device veth0_vlan entered promiscuous mode [ 300.938353][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 300.956458][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.993462][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 301.016382][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 301.053892][ T7635] device veth1_vlan entered promiscuous mode [ 301.172271][ T7635] device veth0_macvtap entered promiscuous mode [ 301.204353][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 301.226888][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 301.235736][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 301.266248][ T7188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.287201][ T7635] device veth1_macvtap entered promiscuous mode [ 301.305592][ T27] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 301.343508][ T7832] loop1: detected capacity change from 0 to 512 [ 301.375628][ T3563] Bluetooth: hci3: command tx timeout [ 301.399340][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 301.408611][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 301.437174][ T7832] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 301.469089][ T7635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.489828][ T7635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.513393][ T7832] EXT4-fs (loop1): 1 truncate cleaned up [ 301.521426][ T7832] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 301.523654][ T7635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.566896][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 301.592599][ T7635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.612882][ T7635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.644858][ T7635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.667394][ T7635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.681600][ T7635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.693771][ T7635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.707928][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.732364][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.746467][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.746975][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 301.769222][ T27] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 301.779123][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.785601][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.814703][ T27] usb 1-1: config 0 descriptor?? [ 301.819848][ T7810] chnl_net:caif_netlink_parms(): no params data found [ 301.858059][ T7635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.875299][ T7635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.885173][ T7635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.906921][ T7635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.917218][ T7635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.933474][ T7635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.948543][ T7635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.975372][ T7635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.987484][ T7635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.034887][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.072362][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.086280][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.095088][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 302.112971][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 302.210898][ T7635] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.220241][ T7635] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.241719][ T7635] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.250881][ T7635] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.268863][ T7690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.309734][ T27] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max [ 302.321083][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.324147][ T27] hid_map_usage: 23542 callbacks suppressed [ 302.324163][ T27] HID 045e:07da: Invalid code 65791 type 1 [ 302.353504][ T27] HID 045e:07da: Invalid code 768 type 1 [ 302.365093][ T27] HID 045e:07da: Invalid code 769 type 1 [ 302.381887][ T27] HID 045e:07da: Invalid code 770 type 1 [ 302.431084][ T4545] EXT4-fs (loop1): unmounting filesystem. [ 302.437132][ T27] HID 045e:07da: Invalid code 771 type 1 [ 302.442881][ T27] HID 045e:07da: Invalid code 772 type 1 [ 302.469068][ T27] HID 045e:07da: Invalid code 773 type 1 [ 302.487462][ T27] HID 045e:07da: Invalid code 774 type 1 [ 302.493778][ T27] HID 045e:07da: Invalid code 775 type 1 [ 302.525759][ T27] HID 045e:07da: Invalid code 776 type 1 [ 302.578956][ T3560] Bluetooth: hci0: command tx timeout [ 302.595609][ T27] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000F/input/input26 [ 302.713946][ T27] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 302.766942][ T27] usb 1-1: USB disconnect, device number 13 [ 302.791173][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.921706][ T7810] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.935393][ T7810] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.953931][ T7810] device bridge_slave_0 entered promiscuous mode [ 303.020362][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.078467][ T7810] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.098785][ T7810] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.119334][ T7810] device bridge_slave_1 entered promiscuous mode [ 303.208664][ T7810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.263628][ T7810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.337675][ T4057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.356403][ T4057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.428630][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 303.467264][ T3563] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.479288][ T3563] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.491435][ T3563] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.502274][ T3563] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.510109][ T3563] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 303.518337][ T3563] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.623576][ T7810] team0: Port device team_slave_0 added [ 303.638470][ T7810] team0: Port device team_slave_1 added [ 303.791072][ T7810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.861768][ T7810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.999885][ T7810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.087850][ T7810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.122305][ T7810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.242742][ T7810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.333793][ T7810] device hsr_slave_0 entered promiscuous mode [ 304.344957][ T7810] device hsr_slave_1 entered promiscuous mode [ 304.360482][ T7810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.372355][ T7810] Cannot create hsr debugfs directory [ 304.427539][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 304.445080][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 304.475749][ T5583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.484054][ T5583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.541528][ T7690] device veth0_vlan entered promiscuous mode [ 304.564546][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 304.573636][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 304.584519][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 304.594186][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 304.603059][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 304.657781][ T3563] Bluetooth: hci0: command tx timeout [ 304.700298][ T7690] device veth1_vlan entered promiscuous mode [ 304.942963][ T26] audit: type=1326 audit(1720543764.676:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff75d75bd9 code=0x7ffc0000 [ 304.991692][ T26] audit: type=1326 audit(1720543764.676:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff75d75bd9 code=0x7ffc0000 [ 305.046742][ T26] audit: type=1326 audit(1720543764.716:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff75d75bd9 code=0x7ffc0000 [ 305.071062][ T26] audit: type=1326 audit(1720543764.716:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff75d75bd9 code=0x7ffc0000 [ 305.103179][ T3593] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 305.124876][ T26] audit: type=1326 audit(1720543764.716:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff75d75bd9 code=0x7ffc0000 [ 305.174393][ T7690] device veth0_macvtap entered promiscuous mode [ 305.182707][ T26] audit: type=1326 audit(1720543764.716:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff75d75bd9 code=0x7ffc0000 [ 305.191258][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 305.231542][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 305.235317][ T26] audit: type=1326 audit(1720543764.716:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff75d75bd9 code=0x7ffc0000 [ 305.250097][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 305.275043][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 305.334661][ T26] audit: type=1326 audit(1720543764.716:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff75d75bd9 code=0x7ffc0000 [ 305.365560][ T3593] usb 1-1: Using ep0 maxpacket: 32 [ 305.394313][ T26] audit: type=1326 audit(1720543764.716:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff75d75bd9 code=0x7ffc0000 [ 305.476330][ T7690] device veth1_macvtap entered promiscuous mode [ 305.483833][ T26] audit: type=1326 audit(1720543764.716:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.2.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff75d75bd9 code=0x7ffc0000 [ 305.485431][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 305.514052][ T3593] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 305.535904][ T3563] Bluetooth: hci1: command tx timeout [ 305.544146][ T3593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.564253][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 305.574515][ T3593] usb 1-1: config 0 descriptor?? [ 305.617593][ T3593] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 305.765807][ T7916] loop2: detected capacity change from 0 to 64 [ 305.835858][ T7690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.846135][ T3593] gspca_sunplus: reg_w_riv err -71 [ 305.856366][ T3593] sunplus: probe of 1-1:0.0 failed with error -71 [ 305.859589][ T7690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.866111][ T3593] usb 1-1: USB disconnect, device number 14 [ 305.895066][ T7690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.909557][ T7690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.919512][ T7690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.930084][ T7690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.940247][ T7690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.950943][ T7690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.961272][ T7690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.971819][ T7690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.984840][ T7690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.059839][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.079036][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.182742][ T7690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.205671][ T7690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.215680][ T7690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.226200][ T7690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.272277][ T7690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.284586][ T7690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.303004][ T7690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.314441][ T7690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.324686][ T7690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.335776][ T7690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.348047][ T7690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.479542][ T7929] loop2: detected capacity change from 0 to 64 [ 306.499285][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 306.526414][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.559044][ T7690] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.578216][ T7690] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.591670][ T7690] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.600930][ T7690] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.745555][ T3563] Bluetooth: hci0: command tx timeout [ 306.772931][ T7938] loop2: detected capacity change from 0 to 64 [ 307.626272][ T3563] Bluetooth: hci1: command tx timeout [ 307.823467][ T7874] chnl_net:caif_netlink_parms(): no params data found [ 308.240912][ T3593] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 309.058038][ T3563] Bluetooth: hci0: command tx timeout [ 309.186521][ T3610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.203194][ T3610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.240911][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 309.251054][ T7979] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 309.257628][ T7979] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 309.269108][ T7979] vhci_hcd vhci_hcd.0: Device attached [ 309.315368][ T3593] usb 1-1: Using ep0 maxpacket: 32 [ 309.438328][ T3610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.449182][ T3610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.455750][ T3593] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 309.470790][ T3593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.497769][ T3593] usb 1-1: config 0 descriptor?? [ 309.520736][ T7874] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.528321][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.536903][ T7874] device bridge_slave_0 entered promiscuous mode [ 309.547671][ T3593] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 309.554246][ T3598] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 309.566407][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 309.588248][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.625410][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.633731][ T7874] device bridge_slave_1 entered promiscuous mode [ 309.696148][ T3563] Bluetooth: hci1: command tx timeout [ 309.774000][ T3593] gspca_sunplus: reg_w_riv err -71 [ 309.779369][ T3593] sunplus: probe of 1-1:0.0 failed with error -71 [ 309.815079][ T3593] usb 1-1: USB disconnect, device number 15 [ 309.963109][ T7810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 310.016001][ T7810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 310.034416][ T7874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.072578][ T7980] vhci_hcd: connection reset by peer [ 310.081221][ T3680] vhci_hcd: stop threads [ 310.099458][ T7994] loop4: detected capacity change from 0 to 64 [ 310.100004][ T3680] vhci_hcd: release socket [ 310.143653][ T3680] vhci_hcd: disconnect device [ 310.170583][ T7874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.338989][ T7810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 310.524338][ T7810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 311.267901][ T7874] team0: Port device team_slave_0 added [ 311.344210][ T36] device hsr_slave_0 left promiscuous mode [ 311.360814][ T36] device hsr_slave_1 left promiscuous mode [ 311.381865][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.391512][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.416933][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.424422][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.435543][ T3596] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 311.465564][ T36] device bridge_slave_1 left promiscuous mode [ 311.507162][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.516588][ T36] device bridge_slave_0 left promiscuous mode [ 311.522887][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.552187][ T36] device hsr_slave_0 left promiscuous mode [ 311.584294][ T36] device hsr_slave_1 left promiscuous mode [ 311.598411][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.615422][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.638310][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.675115][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.695607][ T3596] usb 3-1: Using ep0 maxpacket: 16 [ 311.702725][ T36] device bridge_slave_1 left promiscuous mode [ 311.721884][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.723970][ T8031] loop4: detected capacity change from 0 to 64 [ 311.738619][ T36] device bridge_slave_0 left promiscuous mode [ 311.744896][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.775924][ T3563] Bluetooth: hci1: command tx timeout [ 311.825539][ T3596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.859382][ T3596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.879550][ T3596] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 311.900752][ T3596] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 311.915007][ T3596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.948803][ T3596] usb 3-1: config 0 descriptor?? [ 312.050878][ T36] device veth1_macvtap left promiscuous mode [ 312.057043][ T36] device veth0_macvtap left promiscuous mode [ 312.063311][ T36] device veth1_vlan left promiscuous mode [ 312.075631][ T36] device veth0_vlan left promiscuous mode [ 312.094096][ T36] device veth1_macvtap left promiscuous mode [ 312.102467][ T36] device veth0_macvtap left promiscuous mode [ 312.110555][ T36] device veth1_vlan left promiscuous mode [ 312.136652][ T36] device veth0_vlan left promiscuous mode [ 312.513550][ T3596] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max [ 312.594781][ T3596] hid_map_usage: 11766 callbacks suppressed [ 312.594800][ T3596] HID 045e:07da: Invalid code 65791 type 1 [ 312.645718][ T3596] HID 045e:07da: Invalid code 768 type 1 [ 312.664100][ T3596] HID 045e:07da: Invalid code 769 type 1 [ 312.703732][ T3596] HID 045e:07da: Invalid code 770 type 1 [ 312.712564][ T3596] HID 045e:07da: Invalid code 771 type 1 [ 312.737156][ T3596] HID 045e:07da: Invalid code 772 type 1 [ 312.742834][ T3596] HID 045e:07da: Invalid code 773 type 1 [ 312.764116][ T3596] HID 045e:07da: Invalid code 774 type 1 [ 312.782118][ T3596] HID 045e:07da: Invalid code 775 type 1 [ 312.788332][ T3596] HID 045e:07da: Invalid code 776 type 1 [ 312.813753][ T3596] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0010/input/input27 [ 312.898967][ T3596] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 312.949641][ T8037] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 312.956240][ T8037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 312.975690][ T3596] usb 3-1: USB disconnect, device number 7 [ 313.014398][ T8037] vhci_hcd vhci_hcd.0: Device attached [ 313.275629][ T3292] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 313.664832][ T8049] binder: 8048:8049 ioctl c018620c 0 returned -14 [ 313.730072][ T8038] vhci_hcd: connection reset by peer [ 313.760428][ T3795] vhci_hcd: stop threads [ 313.764726][ T3795] vhci_hcd: release socket [ 313.778799][ T3795] vhci_hcd: disconnect device [ 313.933815][ T36] team0 (unregistering): Port device team_slave_1 removed [ 313.982791][ T36] team0 (unregistering): Port device team_slave_0 removed [ 314.029012][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.078657][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.616734][ T36] bond0 (unregistering): Released all slaves [ 314.666392][ T3598] vhci_hcd: vhci_device speed not set [ 315.109741][ T36] team0 (unregistering): Port device team_slave_1 removed [ 315.171638][ T36] team0 (unregistering): Port device team_slave_0 removed [ 315.219471][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.267180][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.766623][ T36] bond0 (unregistering): Released all slaves [ 315.864102][ T7874] team0: Port device team_slave_1 added [ 315.923367][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.930520][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.960772][ T7874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.057109][ T7874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.064112][ T7874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.185281][ T7874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.457808][ T7874] device hsr_slave_0 entered promiscuous mode [ 316.509687][ T7874] device hsr_slave_1 entered promiscuous mode [ 316.518520][ T7874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.526661][ T7874] Cannot create hsr debugfs directory [ 316.578439][ T7810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.635131][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 316.672825][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 316.689566][ T7810] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.755615][ T3593] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 316.769665][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 316.786281][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 316.802623][ T3719] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.809855][ T3719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.854407][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 316.871566][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 316.881805][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 316.898501][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.905720][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.922443][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 316.932161][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 317.005482][ T3593] usb 5-1: Using ep0 maxpacket: 16 [ 317.006114][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 317.030419][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 317.043782][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 317.057953][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.064313][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.081792][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 317.090774][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 317.099864][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 317.113707][ T7810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.125847][ T3593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.131586][ T7810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 317.157504][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 317.157906][ T3593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.166802][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 317.184032][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.263395][ T3593] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 317.293698][ T3593] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 317.335344][ T3593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.374588][ T3593] usb 5-1: config 0 descriptor?? [ 317.382633][ T7874] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.561503][ T7874] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.699999][ T7874] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.763974][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 317.772443][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 317.791156][ T7810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.867405][ T3593] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max [ 317.877661][ T7874] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.889668][ T3593] hid_map_usage: 11766 callbacks suppressed [ 317.889684][ T3593] HID 045e:07da: Invalid code 65791 type 1 [ 317.941724][ T3593] HID 045e:07da: Invalid code 768 type 1 [ 317.959728][ T3593] HID 045e:07da: Invalid code 769 type 1 [ 317.985319][ T3593] HID 045e:07da: Invalid code 770 type 1 [ 318.005002][ T7810] device veth0_vlan entered promiscuous mode [ 318.011226][ T3593] HID 045e:07da: Invalid code 771 type 1 [ 318.020170][ T3593] HID 045e:07da: Invalid code 772 type 1 [ 318.043574][ T7810] device veth1_vlan entered promiscuous mode [ 318.055359][ T3593] HID 045e:07da: Invalid code 773 type 1 [ 318.081438][ T3593] HID 045e:07da: Invalid code 774 type 1 [ 318.111824][ T3593] HID 045e:07da: Invalid code 775 type 1 [ 318.132107][ T3593] HID 045e:07da: Invalid code 776 type 1 [ 318.233767][ T3593] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0011/input/input28 [ 318.267511][ T7810] device veth0_macvtap entered promiscuous mode [ 318.291396][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 318.310903][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.322801][ T8097] loop2: detected capacity change from 0 to 32768 [ 318.331661][ T3593] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 318.353907][ T8097] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.1355 (8097) [ 318.372200][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 318.390455][ T3593] usb 5-1: USB disconnect, device number 4 [ 318.397303][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.416037][ T8097] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 318.416385][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 318.433941][ T3292] vhci_hcd: vhci_device speed not set [ 318.449318][ T8097] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 318.469352][ T8097] BTRFS info (device loop2): disabling tree log [ 318.477935][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 318.485911][ T8097] BTRFS info (device loop2): metadata ratio 65537 [ 318.497673][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 318.502781][ T8097] BTRFS info (device loop2): metadata ratio 64 [ 318.512438][ T8097] BTRFS info (device loop2): using free space tree [ 318.521706][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 318.543301][ T7810] device veth1_macvtap entered promiscuous mode [ 318.601061][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.623141][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.644046][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 318.662670][ T7874] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 318.742123][ T7874] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 318.781047][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.809960][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.820712][ T8097] BTRFS info (device loop2): enabling ssd optimizations [ 318.852557][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.912910][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.950240][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.979097][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.013514][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.035341][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.068929][ T7810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.086289][ T7874] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 319.108265][ T7874] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 319.140684][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 319.140703][ T26] audit: type=1804 audit(1720543778.886:397): pid=8097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1355" name="/newroot/29/file0/file1" dev="loop2" ino=260 res=1 errno=0 [ 319.145748][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 319.216274][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 319.229901][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.246992][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.273783][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.312159][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.332142][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.374729][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.405480][ T7810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.428258][ T7810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.446879][ T7810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.470366][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 319.498726][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 319.527721][ T7635] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 319.550396][ T7810] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.587003][ T7810] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.692029][ T7810] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.735311][ T7810] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.151338][ T8150] syz.4.1361 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 321.040540][ T3613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.073990][ T3613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.121243][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 321.270048][ T7874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.470859][ T3795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.534900][ T3795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.756381][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.772947][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.820424][ T7874] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.880119][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 321.968235][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.993329][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 322.046471][ T3718] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.053643][ T3718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.096070][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 322.105006][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 322.129565][ T3718] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.136794][ T3718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.173785][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 322.200936][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 322.234891][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 322.283636][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 322.303825][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 322.332347][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 322.371004][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 322.392118][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 322.411446][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 322.436616][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 322.464981][ T7874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.532885][ T7874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 322.589597][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 322.606197][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.948379][ T6361] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 323.815418][ T6361] usb 4-1: Using ep0 maxpacket: 32 [ 323.869686][ T3719] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 323.935553][ T6361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.945805][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.954061][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.966754][ T6361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.007782][ T7874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.016686][ T6361] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 324.058690][ T6361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.086114][ T6361] usb 4-1: config 0 descriptor?? [ 324.132178][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 324.146399][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 324.185995][ T3719] usb 3-1: Using ep0 maxpacket: 8 [ 324.212111][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 324.223990][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.279081][ T7874] device veth0_vlan entered promiscuous mode [ 324.287598][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.296597][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.315629][ T3719] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.356203][ T7874] device veth1_vlan entered promiscuous mode [ 324.452942][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 324.466341][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 324.476257][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 324.496382][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 324.531423][ T7874] device veth0_macvtap entered promiscuous mode [ 324.565613][ T3719] usb 3-1: New USB device found, idVendor=20a6, idProduct=1105, bcdDevice=c2.ab [ 324.570316][ T6361] logitech 0003:046D:C293.0012: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.3-1/input0 [ 324.590320][ T7874] device veth1_macvtap entered promiscuous mode [ 324.603807][ T6361] logitech 0003:046D:C293.0012: no inputs found [ 324.616841][ T3719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.622842][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.631699][ T3719] usb 3-1: Product: syz [ 324.667937][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.680790][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.691386][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.702856][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.702901][ T3719] usb 3-1: Manufacturer: syz [ 324.713618][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.730601][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.752914][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.752937][ T3719] usb 3-1: SerialNumber: syz [ 324.790206][ T3719] usb 3-1: config 0 descriptor?? [ 324.807760][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.832906][ T22] usb 4-1: USB disconnect, device number 13 [ 324.844332][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.888223][ T3719] usb 3-1: bad CDC descriptors [ 324.894557][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.896213][ T3719] usb 3-1: bad CDC descriptors [ 324.942154][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 324.951712][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 324.960441][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.967543][ T3719] option 3-1:0.0: GSM modem (1-port) converter detected [ 324.988588][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.129658][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.178744][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.195379][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.212218][ T3596] usb 3-1: USB disconnect, device number 8 [ 325.235702][ T3596] option 3-1:0.0: device disconnected [ 325.281799][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.302472][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.315205][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.332635][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.352910][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.370158][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.391957][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.427018][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.435557][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.444468][ T3719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.504563][ T7874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.532747][ T7874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.542398][ T7874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.561674][ T7874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.035486][ T36] device hsr_slave_0 left promiscuous mode [ 326.053538][ T36] device hsr_slave_1 left promiscuous mode [ 326.087237][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.094894][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.106528][ T8226] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 326.164642][ T8225] loop4: detected capacity change from 0 to 2048 [ 326.200917][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.215616][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.234670][ T36] device team0 left promiscuous mode [ 326.253547][ T36] device team_slave_0 left promiscuous mode [ 326.263890][ T36] device team_slave_1 left promiscuous mode [ 326.307702][ T36] bridge0: port 3(team0) entered disabled state [ 326.319574][ T8225] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 326.363661][ T36] device bridge_slave_1 left promiscuous mode [ 326.365831][ T8234] binder: 8233:8234 ioctl c018620c 0 returned -14 [ 326.370479][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.442654][ T36] device bridge_slave_0 left promiscuous mode [ 326.472755][ T7690] EXT4-fs (loop4): unmounting filesystem. [ 326.484491][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.651979][ T36] device veth1_macvtap left promiscuous mode [ 326.666929][ T36] device veth0_macvtap left promiscuous mode [ 326.682472][ T36] device veth1_vlan left promiscuous mode [ 326.696040][ T36] device veth0_vlan left promiscuous mode [ 326.841671][ T8232] loop2: detected capacity change from 0 to 32768 [ 326.862587][ T8232] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.1385 (8232) [ 326.908633][ T8232] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 326.919173][ T8232] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 326.928660][ T8232] BTRFS info (device loop2): disabling tree log [ 326.935205][ T8232] BTRFS info (device loop2): metadata ratio 65537 [ 326.944342][ T8232] BTRFS info (device loop2): metadata ratio 64 [ 326.952472][ T8232] BTRFS info (device loop2): using free space tree [ 327.054026][ T6358] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 327.144252][ T8232] BTRFS info (device loop2): enabling ssd optimizations [ 327.192216][ T26] audit: type=1804 audit(1720543786.936:398): pid=8232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1385" name="/newroot/36/file0/file1" dev="loop2" ino=260 res=1 errno=0 [ 327.298937][ T6358] usb 1-1: Using ep0 maxpacket: 32 [ 327.362728][ T7635] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 327.415739][ T6358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.452155][ T6358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.470825][ T6358] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 327.500842][ T6358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.533057][ T6358] usb 1-1: config 0 descriptor?? [ 328.039048][ T6358] logitech 0003:046D:C293.0013: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.0-1/input0 [ 328.062109][ T6358] logitech 0003:046D:C293.0013: no inputs found [ 328.153271][ T36] team0 (unregistering): Port device team_slave_1 removed [ 328.202815][ T36] team0 (unregistering): Port device team_slave_0 removed [ 328.252131][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.253855][ T4518] usb 1-1: USB disconnect, device number 16 [ 328.329402][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.852326][ T36] bond0 (unregistering): Released all slaves [ 329.079821][ T3795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.102732][ T3795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.159948][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 329.190529][ T3795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.238238][ T3795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.269072][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 329.297644][ T8276] loop3: detected capacity change from 0 to 2048 [ 329.386722][ T8282] netlink: 'syz.2.1399': attribute type 3 has an invalid length. [ 329.394528][ T8282] netlink: 16114 bytes leftover after parsing attributes in process `syz.2.1399'. [ 329.451741][ T8276] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 329.605573][ T7810] EXT4-fs (loop3): unmounting filesystem. [ 330.082691][ T8296] loop2: detected capacity change from 0 to 8192 [ 330.186212][ T8296] REISERFS warning (device loop2): super-6509 reiserfs_parse_options: nolargeio option is no longer supported [ 330.317420][ T8315] netlink: 'syz.1.1412': attribute type 3 has an invalid length. [ 330.345504][ T8315] netlink: 16114 bytes leftover after parsing attributes in process `syz.1.1412'. [ 330.422315][ T8313] loop4: detected capacity change from 0 to 4096 [ 330.586050][ T8313] NILFS (loop4): invalid segment: Checksum error in segment payload [ 330.608149][ T8313] NILFS (loop4): trying rollback from an earlier position [ 330.696856][ T8313] NILFS (loop4): recovery cancelled because norecovery option was specified for a read/write mount [ 331.099456][ T8298] loop3: detected capacity change from 0 to 32768 [ 331.234630][ T8298] XFS (loop3): Mounting V5 Filesystem [ 331.331304][ T8347] loop4: detected capacity change from 0 to 8192 [ 331.339646][ T8347] REISERFS warning (device loop4): super-6509 reiserfs_parse_options: nolargeio option is no longer supported [ 331.442697][ T8298] XFS (loop3): Ending clean mount [ 331.496355][ T8298] XFS (loop3): Quotacheck needed: Please wait. [ 331.604927][ T8298] XFS (loop3): Quotacheck: Done. [ 331.748652][ T8363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1429'. [ 331.827593][ T8364] loop2: detected capacity change from 0 to 2048 [ 331.882002][ T7810] XFS (loop3): Unmounting Filesystem [ 331.920815][ T8364] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 332.047664][ T7635] EXT4-fs (loop2): unmounting filesystem. [ 332.095894][ T6358] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 332.338560][ T6358] usb 5-1: Using ep0 maxpacket: 16 [ 332.455539][ T6358] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.475932][ T6358] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 332.515477][ T6358] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 332.545330][ T6358] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 332.665709][ T6358] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 332.688266][ T6358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 332.717575][ T6358] usb 5-1: SerialNumber: syz [ 332.755837][ T8365] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 332.767898][ T8365] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 332.810255][ T8386] loop1: detected capacity change from 0 to 8192 [ 332.848185][ T8386] REISERFS warning (device loop1): super-6509 reiserfs_parse_options: nolargeio option is no longer supported [ 333.037774][ T8363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.082529][ T8363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.157057][ T6358] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 333.197116][ T6358] usb 5-1: USB disconnect, device number 5 [ 333.882473][ T8400] loop2: detected capacity change from 0 to 32768 [ 333.956756][ T8420] vxcan1: tx address claim with dest, not broadcast [ 333.969733][ T8400] XFS (loop2): Mounting V5 Filesystem [ 334.085517][ T8400] XFS (loop2): Ending clean mount [ 334.103964][ T8400] XFS (loop2): Quotacheck needed: Please wait. [ 334.212246][ T8400] XFS (loop2): Quotacheck: Done. [ 334.360256][ T7635] XFS (loop2): Unmounting Filesystem [ 334.937630][ T8444] loop2: detected capacity change from 0 to 1024 [ 335.074725][ T8444] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 335.357795][ T8451] device bond_slave_0 entered promiscuous mode [ 335.364449][ T8451] device bond_slave_1 entered promiscuous mode [ 335.393711][ T8451] device bond_slave_0 left promiscuous mode [ 335.399751][ T8451] device bond_slave_1 left promiscuous mode [ 335.737886][ T8444] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 335.813676][ T8444] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 892 with error 28 [ 335.829155][ T8444] EXT4-fs (loop2): This should not happen!! Data will be lost [ 335.829155][ T8444] [ 335.829220][ T8444] EXT4-fs (loop2): Total free blocks count 0 [ 335.829241][ T8444] EXT4-fs (loop2): Free/Dirty block details [ 335.829380][ T8444] EXT4-fs (loop2): free_blocks=68451041280 [ 335.829482][ T8444] EXT4-fs (loop2): dirty_blocks=896 [ 335.829498][ T8444] EXT4-fs (loop2): Block reservation details [ 335.829553][ T8444] EXT4-fs (loop2): i_reserved_data_blocks=56 [ 335.996736][ T8461] Bluetooth: MGMT ver 1.22 [ 336.223388][ T8466] 9pnet: Found fid 0 not clunked [ 336.567109][ T8477] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 336.584301][ T7635] EXT4-fs (loop2): unmounting filesystem. [ 336.601132][ T8479] netlink: 'syz.1.1469': attribute type 3 has an invalid length. [ 336.620810][ T8479] netlink: 16114 bytes leftover after parsing attributes in process `syz.1.1469'. [ 337.252152][ T8506] ptrace attach of "./syz-executor exec"[7635] was attempted by "./syz-executor exec"[8506] [ 337.964743][ T8511] loop1: detected capacity change from 0 to 128 [ 338.018483][ T8511] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 338.100627][ T8515] loop4: detected capacity change from 0 to 128 [ 338.120662][ T8515] EXT4-fs: Ignoring removed mblk_io_submit option [ 338.142560][ T8515] EXT4-fs: Ignoring removed nomblk_io_submit option [ 338.150635][ T8515] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 338.227199][ T8521] loop2: detected capacity change from 0 to 512 [ 338.332408][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1481'. [ 338.348899][ T26] audit: type=1326 audit(1720543798.096:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8510 comm="syz.1.1481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77acf75bd9 code=0x0 [ 338.381393][ T8521] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 338.429858][ T8521] EXT4-fs (loop2): 1 truncate cleaned up [ 338.437069][ T8521] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 338.478239][ T7635] EXT4-fs (loop2): unmounting filesystem. [ 339.427454][ T8538] loop4: detected capacity change from 0 to 4096 [ 339.450259][ T8538] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 339.470382][ T8538] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 339.480675][ T8538] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 339.500604][ T8538] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 339.534921][ T8538] ntfs: volume version 3.1. [ 339.614085][ T8538] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp737. You might want to try to use the mount option nls=utf8. [ 339.660274][ T8538] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 339.706380][ T8552] loop1: detected capacity change from 0 to 64 [ 339.733333][ T8552] hfs: invalid btree extent records [ 339.743487][ T8552] hfs: unable to open extent tree [ 339.757278][ T8552] hfs: can't find a HFS filesystem on dev loop1 [ 339.978555][ T8557] syz.1.1496 (8557) used greatest stack depth: 18264 bytes left [ 340.012666][ T8542] loop2: detected capacity change from 0 to 32768 [ 340.075810][ T8561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1497'. [ 340.215386][ T22] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 340.309009][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1498'. [ 340.329741][ T26] audit: type=1326 audit(1720543800.076:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.0.1498" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5391975bd9 code=0x0 [ 340.356502][ T6358] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 340.475494][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 340.605379][ T6358] usb 2-1: Using ep0 maxpacket: 16 [ 340.606568][ T22] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 340.638811][ T22] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x83 has invalid wMaxPacketSize 0 [ 340.649076][ T22] usb 5-1: config 0 interface 0 has no altsetting 1 [ 340.725598][ T6358] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.745289][ T6358] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 340.770150][ T6358] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 340.794271][ T6358] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 340.835724][ T22] usb 5-1: New USB device found, idVendor=1b80, idProduct=a340, bcdDevice=ce.dd [ 340.858734][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.878105][ T22] usb 5-1: Product: syz [ 340.882469][ T22] usb 5-1: Manufacturer: syz [ 340.885806][ T6358] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 340.890827][ T22] usb 5-1: SerialNumber: syz [ 340.901418][ T6358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 340.910748][ T22] usb 5-1: config 0 descriptor?? [ 340.924345][ T6358] usb 2-1: SerialNumber: syz [ 340.955655][ T8561] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 340.965446][ T8561] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 340.973182][ T22] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 341.077443][ T8577] 9pnet: Found fid 0 not clunked [ 341.199273][ T6361] usb 5-1: USB disconnect, device number 6 [ 341.210013][ T8561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.225589][ T8561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.276475][ T6358] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 341.294262][ T6358] usb 2-1: USB disconnect, device number 14 [ 341.777202][ T8588] loop2: detected capacity change from 0 to 32768 [ 341.975422][ T8605] loop1: detected capacity change from 0 to 128 [ 341.983921][ T8605] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 342.117068][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1517'. [ 342.156914][ T26] audit: type=1326 audit(1720543801.906:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8604 comm="syz.1.1517" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77acf75bd9 code=0x0 [ 342.180896][ T8609] loop4: detected capacity change from 0 to 128 [ 342.252172][ T6539] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 342.392538][ T8615] loop4: detected capacity change from 0 to 64 [ 342.421529][ T8615] hfs: invalid btree extent records [ 342.426970][ T8615] hfs: unable to open extent tree [ 342.432315][ T8615] hfs: can't find a HFS filesystem on dev loop4 [ 342.575113][ T8617] loop4: detected capacity change from 0 to 512 [ 342.593597][ T8617] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 342.701880][ T8617] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1522: bg 0: block 64: padding at end of block bitmap is not set [ 342.752353][ T8617] Quota error (device loop4): write_blk: dquota write failed [ 342.779810][ T8617] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.1522: Failed to acquire dquot type 0 [ 342.813240][ T8617] EXT4-fs (loop4): 1 truncate cleaned up [ 342.833460][ T8617] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 342.878157][ T8617] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.1522: Failed to acquire dquot type 0 [ 342.978697][ T8633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1528'. [ 343.157216][ T7690] EXT4-fs (loop4): unmounting filesystem. [ 343.255091][ T8637] ptrace attach of "./syz-executor exec"[7874] was attempted by "./syz-executor exec"[8637] [ 344.035402][ T6358] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 344.290649][ T6358] usb 1-1: Using ep0 maxpacket: 16 [ 344.322108][ T3562] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.339551][ T3562] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.349737][ T3562] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.366242][ T3562] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.374098][ T3562] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 344.381763][ T3562] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.415509][ T6358] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.444019][ T6358] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 344.465419][ T6358] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 344.475740][ T6358] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 344.575995][ T6358] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 344.585089][ T6358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 344.618471][ T6358] usb 1-1: SerialNumber: syz [ 344.647495][ T8633] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 344.654923][ T8633] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 344.681480][ T8648] chnl_net:caif_netlink_parms(): no params data found [ 344.746066][ T8648] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.753484][ T8648] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.762804][ T8648] device bridge_slave_0 entered promiscuous mode [ 344.774590][ T8648] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.782016][ T8648] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.790249][ T8648] device bridge_slave_1 entered promiscuous mode [ 344.818708][ T8648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.833091][ T8648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.864150][ T8648] team0: Port device team_slave_0 added [ 344.873796][ T8648] team0: Port device team_slave_1 added [ 344.889935][ T8633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.903125][ T8633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.921986][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.933790][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.974420][ T6358] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 345.005845][ T6358] usb 1-1: USB disconnect, device number 17 [ 345.056318][ T8648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.078357][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.092305][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.118971][ T8648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.186678][ T8648] device hsr_slave_0 entered promiscuous mode [ 345.194265][ T8648] device hsr_slave_1 entered promiscuous mode [ 345.201743][ T8648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.210624][ T8648] Cannot create hsr debugfs directory [ 345.352247][ T8669] tipc: Started in network mode [ 345.363313][ T8669] tipc: Node identity 7, cluster identity 4711 [ 345.371000][ T8669] tipc: Node number set to 7 [ 345.379270][ T8669] tipc: Cannot configure node identity twice [ 345.480785][ T8648] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.529820][ T8671] loop4: detected capacity change from 0 to 512 [ 345.563543][ T8671] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 345.612024][ T8671] EXT4-fs (loop4): 1 truncate cleaned up [ 345.618132][ T8671] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 345.648643][ T8648] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.734484][ T7690] EXT4-fs (loop4): unmounting filesystem. [ 345.858806][ T8648] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.074059][ T8648] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.216130][ T8698] tipc: Started in network mode [ 346.221242][ T8698] tipc: Node identity 7, cluster identity 4711 [ 346.237994][ T8698] tipc: Node number set to 7 [ 346.245901][ T8698] tipc: Cannot configure node identity twice [ 346.425502][ T3562] Bluetooth: hci5: command tx timeout [ 347.093701][ T8648] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 347.127675][ T8648] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 347.130347][ T8648] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 347.132976][ T8648] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 347.336358][ T8648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.363551][ T8648] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.364072][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.364826][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.409287][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.410077][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.410563][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.410678][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.411177][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 347.411796][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.412272][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.412334][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.412796][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 347.413683][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.414786][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.428943][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.446879][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 347.449712][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 347.450658][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 347.451357][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 347.452014][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 347.452745][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 347.455949][ T8648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.298020][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 348.298808][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.495622][ T3562] Bluetooth: hci5: command tx timeout [ 348.631509][ T8723] device syzkaller0 entered promiscuous mode [ 350.575458][ T3563] Bluetooth: hci5: command tx timeout [ 352.655377][ T3563] Bluetooth: hci5: command tx timeout [ 355.079225][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 355.106167][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 355.143339][ T8648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.297868][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 355.315964][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 355.374196][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 355.412885][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 355.457785][ T8648] device veth0_vlan entered promiscuous mode [ 355.533675][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 355.546316][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 355.571842][ T8648] device veth1_vlan entered promiscuous mode [ 355.708078][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 355.724917][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 355.749653][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 355.766838][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 355.785832][ T8771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1573'. [ 355.831130][ T8648] device veth0_macvtap entered promiscuous mode [ 355.853085][ T8648] device veth1_macvtap entered promiscuous mode [ 355.887990][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.916089][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.944875][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.984484][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.016406][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.061063][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.104812][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.164421][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.196893][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.230209][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.278493][ T8648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.310218][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 356.324396][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 356.364633][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 356.426129][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 356.479783][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.550122][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.613719][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.666031][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.720430][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.750201][ T8785] 9pnet_fd: Insufficient options for proto=fd [ 356.776649][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.818637][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.863508][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.922097][ T8648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.977516][ T3562] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 357.000637][ T8648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.000803][ T3562] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 357.021334][ T3562] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 357.031386][ T3562] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 357.043542][ T3562] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 357.066425][ T3562] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 357.094643][ T8648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.169640][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.179319][ T8783] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.303990][ T8785] device bridge_slave_1 left promiscuous mode [ 357.343149][ T8785] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.439001][ T8785] device bridge_slave_0 left promiscuous mode [ 357.450519][ T8785] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.630200][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 357.677522][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 357.699151][ T8648] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.725292][ T8648] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.734126][ T8648] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.745424][ T3596] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 357.831761][ T8648] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.108804][ T3596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.144312][ T3596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.187119][ T6672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.198938][ T3596] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 358.216645][ T6672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.235115][ T3596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.297370][ T3596] usb 2-1: config 0 descriptor?? [ 358.363193][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 358.401472][ T3733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.441734][ T3733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.497087][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 358.558262][ T8788] chnl_net:caif_netlink_parms(): no params data found [ 358.677884][ T8821] loop3: detected capacity change from 0 to 256 [ 358.763748][ T8821] MINIX-fs: mounting file system with errors, running fsck is recommended [ 358.779428][ T3596] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0909.0014/input/input29 [ 358.904817][ T8788] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.918210][ T3596] uclogic 0003:28BD:0909.0014: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.1-1/input0 [ 358.939111][ T8788] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.996303][ T3596] usb 2-1: USB disconnect, device number 15 [ 359.033093][ T8788] device bridge_slave_0 entered promiscuous mode [ 359.120369][ T8788] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.135810][ T3562] Bluetooth: hci6: command tx timeout [ 359.236315][ T8788] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.314716][ T8788] device bridge_slave_1 entered promiscuous mode [ 359.529154][ T8788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.633264][ T8788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.278728][ T8845] 9pnet_fd: Insufficient options for proto=fd [ 360.599157][ T8840] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.607990][ T8840] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.665551][ T4520] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 360.672882][ T8845] device bridge_slave_1 left promiscuous mode [ 360.710643][ T8845] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.771704][ T8845] device bridge_slave_0 left promiscuous mode [ 360.785072][ T8845] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.914760][ T8788] team0: Port device team_slave_0 added [ 361.107337][ T4520] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 361.120801][ T4520] usb 4-1: can't read configurations, error -61 [ 361.172578][ T3733] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.216426][ T3562] Bluetooth: hci6: command tx timeout [ 361.231295][ T8788] team0: Port device team_slave_1 added [ 361.295799][ T4520] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 361.570616][ T8856] ptrace attach of "./syz-executor exec"[7874] was attempted by "./syz-executor exec"[8856] [ 362.388067][ T4520] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 362.435126][ T4520] usb 4-1: can't read configurations, error -61 [ 362.465562][ T4520] usb usb4-port1: attempt power cycle [ 362.544451][ T3733] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.592749][ T8788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.605264][ T8788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.666114][ T8861] loop1: detected capacity change from 0 to 256 [ 362.675416][ T8788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.806732][ T3733] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.853559][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 362.853573][ T26] audit: type=1800 audit(1720543822.596:402): pid=8861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1603" name="file1" dev="loop1" ino=1048651 res=0 errno=0 [ 362.893437][ T8788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.915469][ T4520] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 362.925435][ T8788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.093210][ T8788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.279330][ T3733] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.296009][ T3563] Bluetooth: hci6: command tx timeout [ 363.335535][ T4520] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 363.343188][ T4520] usb 4-1: can't read configurations, error -71 [ 363.494780][ T8788] device hsr_slave_0 entered promiscuous mode [ 363.529760][ T8788] device hsr_slave_1 entered promiscuous mode [ 363.544498][ T8788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.558697][ T8788] Cannot create hsr debugfs directory [ 364.867392][ T3733] tipc: Left network mode [ 365.385462][ T3563] Bluetooth: hci6: command tx timeout [ 366.426329][ T8912] loop1: detected capacity change from 0 to 1024 [ 366.618749][ T8912] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 366.938093][ T3680] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 367.026084][ T3680] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 367.085356][ T3680] EXT4-fs (loop1): This should not happen!! Data will be lost [ 367.085356][ T3680] [ 367.104379][ T3680] EXT4-fs (loop1): Total free blocks count 0 [ 367.121228][ T3680] EXT4-fs (loop1): Free/Dirty block details [ 367.145030][ T3680] EXT4-fs (loop1): free_blocks=68451041280 [ 367.176953][ T3680] EXT4-fs (loop1): dirty_blocks=64 [ 367.195873][ T3680] EXT4-fs (loop1): Block reservation details [ 367.209076][ T8937] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1629'. [ 367.223844][ T3680] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 367.245418][ T8937] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1629'. [ 367.250627][ T7874] EXT4-fs (loop1): unmounting filesystem. [ 367.375719][ T3562] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 367.384501][ T3562] Bluetooth: hci1: Injecting HCI hardware error event [ 367.396602][ T3563] Bluetooth: hci1: hardware error 0x00 [ 367.452689][ T8788] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 368.656992][ T8788] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 368.719786][ T8788] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 368.962778][ T8963] overlayfs: failed to resolve './file0': -2 [ 369.094132][ T8788] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 369.191999][ T8966] loop3: detected capacity change from 0 to 1024 [ 369.215786][ T3562] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 369.227394][ T3562] Bluetooth: hci5: Injecting HCI hardware error event [ 369.240490][ T3560] Bluetooth: hci5: hardware error 0x00 [ 369.372287][ T8966] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 369.546459][ T3563] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 369.561766][ T3733] device hsr_slave_0 left promiscuous mode [ 369.602632][ T3733] device hsr_slave_1 left promiscuous mode [ 369.610795][ T3564] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 369.622894][ T8975] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 369.641791][ T102] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 369.679437][ T8975] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 369.697253][ T8975] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 369.705053][ T8975] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 369.712911][ T8975] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.767053][ T102] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 369.787593][ T102] EXT4-fs (loop3): This should not happen!! Data will be lost [ 369.787593][ T102] [ 369.808953][ T102] EXT4-fs (loop3): Total free blocks count 0 [ 369.820636][ T102] EXT4-fs (loop3): Free/Dirty block details [ 369.831138][ T102] EXT4-fs (loop3): free_blocks=68451041280 [ 369.841791][ T102] EXT4-fs (loop3): dirty_blocks=64 [ 369.855393][ T102] EXT4-fs (loop3): Block reservation details [ 369.867160][ T102] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 369.886914][ T8648] EXT4-fs (loop3): unmounting filesystem. [ 369.940221][ T3733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.976252][ T3733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.027897][ T3733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.053806][ T8975] Bluetooth: hci5: unexpected event for opcode 0x200d [ 370.078360][ T3733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.180583][ T3733] device bridge_slave_1 left promiscuous mode [ 370.190275][ T3733] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.247791][ T3733] device bridge_slave_0 left promiscuous mode [ 370.254116][ T3733] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.341221][ T8988] loop3: detected capacity change from 0 to 2048 [ 370.351919][ T3733] device veth1_macvtap left promiscuous mode [ 370.359917][ T3733] device veth0_macvtap left promiscuous mode [ 370.369779][ T3733] device veth1_vlan left promiscuous mode [ 370.382635][ T3733] device veth0_vlan left promiscuous mode [ 370.408384][ T8988] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 370.479411][ T8988] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm syz.3.1640: Invalid inode table block 0 in block_group 0 [ 370.562629][ T8988] EXT4-fs error (device loop3): empty_inline_dir:1832: inode #12: comm syz.3.1640: error -117 getting inode 12 block [ 370.694483][ T8648] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 370.753145][ T8648] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 370.781292][ T8648] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #2: comm syz-executor: mark_inode_dirty error [ 370.825925][ T8648] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 370.875990][ T8648] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 371.167469][ T8998] loop1: detected capacity change from 0 to 40427 [ 371.240972][ T8998] F2FS-fs (loop1): Found nat_bits in checkpoint [ 371.301796][ T8998] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 371.375458][ T3560] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 371.397678][ T3560] [ 371.400064][ T3560] ============================================ [ 371.406236][ T3560] WARNING: possible recursive locking detected [ 371.412414][ T3560] 6.1.97-syzkaller #0 Not tainted [ 371.417461][ T3560] -------------------------------------------- [ 371.423612][ T3560] kworker/u5:4/3560 is trying to acquire lock: [ 371.423935][ T8998] F2FS-fs (loop1): access invalid blkaddr:2048 [ 371.429761][ T3560] ffff888028e39138 ((wq_completion)hci5){+.+.}-{0:0}, at: __flush_workqueue+0x157/0x1610 [ 371.429817][ T3560] [ 371.429817][ T3560] but task is already holding lock: [ 371.429822][ T3560] ffff888028e39138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 371.429870][ T3560] [ 371.429870][ T3560] other info that might help us debug this: [ 371.429877][ T3560] Possible unsafe locking scenario: [ 371.429877][ T3560] [ 371.429883][ T3560] CPU0 [ 371.429887][ T3560] ---- [ 371.429891][ T3560] lock((wq_completion)hci5); [ 371.429905][ T3560] lock((wq_completion)hci5); [ 371.429919][ T3560] [ 371.429919][ T3560] *** DEADLOCK *** [ 371.429919][ T3560] [ 371.429923][ T3560] May be due to missing lock nesting notation [ 371.429923][ T3560] [ 371.429929][ T3560] 2 locks held by kworker/u5:4/3560: [ 371.429941][ T3560] #0: ffff888028e39138 ( [ 371.436213][ T8998] CPU: 1 PID: 8998 Comm: syz.1.1643 Not tainted 6.1.97-syzkaller #0 [ 371.445893][ T3560] (wq_completion)hci5 [ 371.453254][ T8998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 371.462943][ T3560] ){+.+.}-{0:0} [ 371.471002][ T8998] Call Trace: [ 371.478422][ T3560] , at: process_one_work+0x7a9/0x11d0 [ 371.481695][ T8998] [ 371.484960][ T3560] #1: ffffc900041dfd20 [ 371.489704][ T8998] dump_stack_lvl+0x1e3/0x2cb [ 371.494449][ T3560] ((work_completion)(&hdev->error_reset) [ 371.502584][ T8998] ? nf_tcp_handle_invalid+0x642/0x642 [ 371.510907][ T3560] ){+.+.}-{0:0} [ 371.516173][ T8998] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 371.520482][ T3560] , at: process_one_work+0x7a9/0x11d0 [ 371.528442][ T8998] ? blkg_tryget+0x22/0x260 [ 371.532493][ T3560] [ 371.532493][ T3560] stack backtrace: [ 371.602613][ T8998] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 371.608037][ T8998] f2fs_map_blocks+0x15fd/0x3ab0 [ 371.613029][ T8998] ? f2fs_do_map_lock+0x70/0x70 [ 371.617893][ T8998] ? page_index+0xff/0x4b0 [ 371.622319][ T8998] f2fs_mpage_readpages+0xbd5/0x2b90 [ 371.627643][ T8998] ? __lock_acquire+0x1f80/0x1f80 [ 371.632687][ T8998] ? dquot_release_reservation_block+0x90/0x90 [ 371.638850][ T8998] ? folio_add_lru+0x34d/0xd70 [ 371.643615][ T8998] ? rcu_is_watching+0x11/0xb0 [ 371.648392][ T8998] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 371.654559][ T8998] ? f2fs_readahead+0x18a/0x3a0 [ 371.659415][ T8998] ? blk_start_plug+0x95/0x110 [ 371.664279][ T8998] read_pages+0x17f/0x830 [ 371.668619][ T8998] ? folio_add_lru+0x34d/0xd70 [ 371.673383][ T8998] ? folio_add_lru+0x34d/0xd70 [ 371.678157][ T8998] ? page_cache_ra_unbounded+0x7b0/0x7b0 [ 371.683822][ T8998] ? __filemap_add_folio+0x1ba0/0x1ba0 [ 371.689300][ T8998] ? page_cache_ra_order+0xb2a/0xd80 [ 371.694607][ T8998] page_cache_ra_unbounded+0x68b/0x7b0 [ 371.700091][ T8998] f2fs_readdir+0x5ae/0xc30 [ 371.704612][ T8998] ? __might_sleep+0xb0/0xb0 [ 371.709218][ T8998] ? f2fs_fill_dentries+0xd60/0xd60 [ 371.714431][ T8998] ? iterate_dir+0x10a/0x560 [ 371.719030][ T8998] ? __fdget_pos+0x2ba/0x360 [ 371.723628][ T8998] ? common_file_perm+0x17d/0x1d0 [ 371.728664][ T8998] ? fsnotify_perm+0x42f/0x590 [ 371.733433][ T8998] iterate_dir+0x224/0x560 [ 371.737856][ T8998] ? f2fs_fill_dentries+0xd60/0xd60 [ 371.743073][ T8998] __se_sys_getdents+0x1eb/0x4c0 [ 371.748024][ T8998] ? __x64_sys_getdents+0x80/0x80 [ 371.753078][ T8998] ? fillonedir+0x4c0/0x4c0 [ 371.757607][ T8998] ? rcu_is_watching+0x11/0xb0 [ 371.762387][ T8998] ? syscall_enter_from_user_mode+0x2e/0x230 [ 371.768382][ T8998] do_syscall_64+0x3b/0xb0 [ 371.772817][ T8998] ? clear_bhb_loop+0x45/0xa0 [ 371.777513][ T8998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.783423][ T8998] RIP: 0033:0x7f77acf75bd9 [ 371.787854][ T8998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.807481][ T8998] RSP: 002b:00007f77adc74048 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 371.815902][ T8998] RAX: ffffffffffffffda RBX: 00007f77ad103f60 RCX: 00007f77acf75bd9 [ 371.823881][ T8998] RDX: 0000000000000058 RSI: 0000000000000000 RDI: 0000000000000005 [ 371.831857][ T8998] RBP: 00007f77acfe4e60 R08: 0000000000000000 R09: 0000000000000000 [ 371.839839][ T8998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.847811][ T8998] R13: 000000000000000b R14: 00007f77ad103f60 R15: 00007fff67456d08 [ 371.855793][ T8998] [ 371.858819][ T3560] CPU: 0 PID: 3560 Comm: kworker/u5:4 Not tainted 6.1.97-syzkaller #0 [ 371.867012][ T3560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 371.877089][ T3560] Workqueue: hci5 hci_error_reset [ 371.882127][ T3560] Call Trace: [ 371.885407][ T3560] [ 371.888344][ T3560] dump_stack_lvl+0x1e3/0x2cb [ 371.893037][ T3560] ? nf_tcp_handle_invalid+0x642/0x642 [ 371.898507][ T3560] ? panic+0x764/0x764 [ 371.902584][ T3560] validate_chain+0x4711/0x5950 [ 371.907460][ T3560] ? reacquire_held_locks+0x660/0x660 [ 371.912846][ T3560] ? rcu_read_lock_sched_held+0x89/0x130 [ 371.918484][ T3560] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 371.924471][ T3560] ? reacquire_held_locks+0x660/0x660 [ 371.929853][ T3560] ? rcu_is_watching+0x11/0xb0 [ 371.934614][ T3560] ? __update_load_avg_cfs_rq+0x6cc/0xbe0 [ 371.940344][ T3560] ? cpufreq_update_util+0x94/0x250 [ 371.945554][ T3560] ? update_load_avg+0xf61/0x1540 [ 371.950588][ T3560] ? mark_lock+0x9a/0x340 [ 371.954929][ T3560] __lock_acquire+0x125b/0x1f80 [ 371.959799][ T3560] lock_acquire+0x1f8/0x5a0 [ 371.964314][ T3560] ? __flush_workqueue+0x157/0x1610 [ 371.969562][ T3560] ? read_lock_is_recursive+0x10/0x10 [ 371.974949][ T3560] ? lockdep_softirqs_off+0x420/0x420 [ 371.980345][ T3560] ? __init_swait_queue_head+0xaa/0x140 [ 371.985899][ T3560] ? __flush_workqueue+0x157/0x1610 [ 371.991105][ T3560] __flush_workqueue+0x170/0x1610 [ 371.996146][ T3560] ? __flush_workqueue+0x157/0x1610 [ 372.001350][ T3560] ? trace_contention_end+0x61/0x170 [ 372.006647][ T3560] ? rcu_work_rcufn+0x140/0x140 [ 372.011519][ T3560] ? mark_lock+0x9a/0x340 [ 372.015864][ T3560] drain_workqueue+0xc5/0x390 [ 372.020549][ T3560] destroy_workqueue+0x7b/0xae0 [ 372.025404][ T3560] ? _raw_spin_unlock_irq+0x1f/0x40 [ 372.030608][ T3560] ? lockdep_hardirqs_on+0x94/0x130 [ 372.035817][ T3560] hci_release_dev+0x165/0x16b0 [ 372.040671][ T3560] ? devres_release_all+0x1e1/0x240 [ 372.045880][ T3560] ? _raw_spin_unlock+0x40/0x40 [ 372.050738][ T3560] ? hci_unregister_suspend_notifier+0x90/0x90 [ 372.056894][ T3560] ? devres_release+0x90/0x90 [ 372.061583][ T3560] ? hci_sock_dev_event+0x2ee/0x5e0 [ 372.066792][ T3560] bt_host_release+0x7f/0x90 [ 372.071390][ T3560] ? bt_link_release+0x20/0x20 [ 372.076161][ T3560] device_release+0x91/0x1c0 [ 372.080761][ T3560] kobject_put+0x224/0x460 [ 372.085186][ T3560] ? process_one_work+0x7a9/0x11d0 [ 372.090313][ T3560] process_one_work+0x8a9/0x11d0 [ 372.095264][ T3560] ? worker_detach_from_pool+0x260/0x260 [ 372.100907][ T3560] ? _raw_spin_lock_irqsave+0x120/0x120 [ 372.106460][ T3560] ? kthread_data+0x4e/0xc0 [ 372.110976][ T3560] ? wq_worker_running+0x97/0x190 [ 372.116017][ T3560] worker_thread+0xa47/0x1200 [ 372.120702][ T3560] ? __sched_text_start+0x8/0x8 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 372.125571][ T3560] kthread+0x28d/0x320 [ 372.129640][ T3560] ? worker_clr_flags+0x190/0x190 [ 372.134670][ T3560] ? kthread_blkcg+0xd0/0xd0 [ 372.139272][ T3560] ret_from_fork+0x1f/0x30 [ 372.143707][ T3560] [ 372.158703][ T8975] Bluetooth: hci3: command tx timeout [ 372.177195][ T8998] syz.1.1643: attempt to access beyond end of device [ 372.177195][ T8998] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 372.191413][ T9007] syz.1.1643: attempt to access beyond end of device [ 372.191413][ T9007] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 372.206107][ T8998] syz.1.1643: attempt to access beyond end of device [ 372.206107][ T8998] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 372.430218][ T3733] team0 (unregistering): Port device team_slave_1 removed [ 372.503154][ T3733] team0 (unregistering): Port device team_slave_0 removed [ 372.543994][ T3733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.584498][ T3733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.038088][ T3733] bond0 (unregistering): Released all slaves [ 373.418685][ T3895] EXT4-fs error (device loop3): __ext4_get_inode_loc:4495: comm kworker/u4:13: Invalid inode table block 0 in block_group 0 [ 373.456437][ T8648] EXT4-fs (loop3): unmounting filesystem. [ 373.590185][ T8997] syz.1.1643: attempt to access beyond end of device [ 373.590185][ T8997] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 374.287477][ T3733] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.329784][ T3733] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.390729][ T3733] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.462745][ T3733] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.557167][ T3733] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.590160][ T3733] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.640580][ T3733] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.703114][ T3733] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.794978][ T3733] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.839569][ T3733] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.880384][ T3733] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.934647][ T3733] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.038224][ T3733] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.090742][ T3733] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.142456][ T3733] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.190165][ T3733] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.304086][ T3733] tipc: Left network mode [ 376.613136][ T3733] device hsr_slave_0 left promiscuous mode [ 376.619623][ T3733] device hsr_slave_1 left promiscuous mode [ 376.626432][ T3733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.634100][ T3733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.643512][ T3733] device bridge_slave_1 left promiscuous mode [ 376.653677][ T3733] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.662208][ T3733] device bridge_slave_0 left promiscuous mode [ 376.668529][ T3733] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.680642][ T3733] device hsr_slave_0 left promiscuous mode [ 376.687046][ T3733] device hsr_slave_1 left promiscuous mode [ 376.693429][ T3733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.701720][ T3733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.709747][ T3733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.717721][ T3733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.728684][ T3733] device hsr_slave_0 left promiscuous mode [ 376.735023][ T3733] device hsr_slave_1 left promiscuous mode [ 376.741746][ T3733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.749599][ T3733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.758306][ T3733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.766028][ T3733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.773726][ T3733] device team0 left promiscuous mode [ 376.779493][ T3733] device team_slave_0 left promiscuous mode [ 376.786421][ T3733] device team_slave_1 left promiscuous mode [ 376.792539][ T3733] bridge0: port 3(team0) entered disabled state [ 376.800251][ T3733] device bridge_slave_1 left promiscuous mode [ 376.806921][ T3733] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.815115][ T3733] device bridge_slave_0 left promiscuous mode [ 376.822215][ T3733] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.833447][ T3733] device hsr_slave_0 left promiscuous mode [ 376.839985][ T3733] device hsr_slave_1 left promiscuous mode [ 376.846768][ T3733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.854217][ T3733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.862610][ T3733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.870142][ T3733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.878301][ T3733] device bridge_slave_1 left promiscuous mode [ 376.884517][ T3733] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.892901][ T3733] device bridge_slave_0 left promiscuous mode [ 376.899612][ T3733] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.909831][ T3733] device hsr_slave_0 left promiscuous mode [ 376.916254][ T3733] device hsr_slave_1 left promiscuous mode [ 376.922693][ T3733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.930147][ T3733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.938074][ T3733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.945704][ T3733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.959448][ T3733] device veth1_macvtap left promiscuous mode [ 376.965575][ T3733] device veth0_macvtap left promiscuous mode [ 376.971644][ T3733] device veth1_vlan left promiscuous mode [ 376.977507][ T3733] device veth0_vlan left promiscuous mode [ 376.983978][ T3733] device veth1_macvtap left promiscuous mode [ 376.990321][ T3733] device veth0_macvtap left promiscuous mode [ 376.996582][ T3733] device veth1_vlan left promiscuous mode [ 377.002392][ T3733] device veth0_vlan left promiscuous mode [ 377.009211][ T3733] device veth1_macvtap left promiscuous mode [ 377.015279][ T3733] device veth0_macvtap left promiscuous mode [ 377.021442][ T3733] device veth1_vlan left promiscuous mode [ 377.027307][ T3733] device veth0_vlan left promiscuous mode [ 377.033753][ T3733] device veth1_macvtap left promiscuous mode [ 377.040049][ T3733] device veth0_macvtap left promiscuous mode [ 377.046134][ T3733] device veth1_vlan left promiscuous mode [ 377.051888][ T3733] device veth0_vlan left promiscuous mode [ 377.360854][ T3733] team0 (unregistering): Port device team_slave_1 removed [ 377.371632][ T3733] team0 (unregistering): Port device team_slave_0 removed [ 377.397114][ T3733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.423222][ T3733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.469068][ T3733] bond0 (unregistering): Released all slaves [ 377.667208][ T3733] team0 (unregistering): Port device team_slave_1 removed [ 377.692970][ T3733] team0 (unregistering): Port device team_slave_0 removed [ 377.719124][ T3733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.747111][ T3733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.798631][ T3733] bond0 (unregistering): Released all slaves [ 377.962358][ T3733] team0 (unregistering): Port device team_slave_1 removed [ 377.989994][ T3733] team0 (unregistering): Port device team_slave_0 removed [ 378.001046][ T3733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.029278][ T3733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.190062][ T3733] bond0 (unregistering): Released all slaves [ 378.347013][ T3733] team0 (unregistering): Port device team_slave_1 removed [ 378.374791][ T3733] team0 (unregistering): Port device team_slave_0 removed [ 378.401709][ T3733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.430318][ T3733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.497245][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.503850][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.526250][ T3733] bond0 (unregistering): Released all slaves [ 378.686971][ T3733] team0 (unregistering): Port device team_slave_1 removed [ 378.715636][ T3733] team0 (unregistering): Port device team_slave_0 removed [ 378.742020][ T3733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.754443][ T3733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.806626][ T3733] bond0 (unregistering): Released all slaves