last executing test programs: 31.634010269s ago: executing program 0 (id=214): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@grpquota}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x34, r2, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x4000019) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = dup2(r3, r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0505405, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) sendmmsg$unix(r4, &(0x7f00000031c0)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)="2649f172ce5051d17d982233f1e80d1cc06b1f9e0689ddd3bd7be698bfad741dc05a7e3245960000", 0x28}], 0x1}}, {{&(0x7f0000000180)=@abs, 0x6e, 0x0}}], 0x2, 0x0) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) 30.63809955s ago: executing program 0 (id=218): socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000300)="d8", 0x1, 0x0, &(0x7f0000000340)={0xa, 0x0, 0x0, @private0}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) listen(r0, 0xfff) r1 = accept(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8], 0x3c}}, 0x0) 29.263486942s ago: executing program 0 (id=223): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) 29.263106642s ago: executing program 0 (id=224): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x0) r1 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201005) 28.368034705s ago: executing program 0 (id=228): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@grpquota}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x34, r2, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x4000019) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = dup2(r3, r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0505405, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) sendmmsg$unix(r4, &(0x7f00000031c0)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)="2649f172ce5051d17d982233f1e80d1cc06b1f9e0689ddd3bd7be698bfad741dc05a7e3245960000", 0x28}], 0x1}}, {{&(0x7f0000000180)=@abs, 0x6e, 0x0}}], 0x2, 0x0) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) 27.19033011s ago: executing program 0 (id=240): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000001800)}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) 21.600390185s ago: executing program 3 (id=256): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480020009"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 12.565917059s ago: executing program 3 (id=264): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000200)=@v2={0x2, @aes256, 0x0, '\x00', @d}) chdir(&(0x7f0000000300)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 10.854349968s ago: executing program 3 (id=278): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x305}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="e7feeeb53d72", 0x6, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r5) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 8.925325465s ago: executing program 4 (id=283): syz_open_dev$tty1(0xc, 0x4, 0x1) creat(&(0x7f0000000300)='./bus\x00', 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00222200000006231306e53f070c0000000a9000070900be0083000000000b09007a150b5d8c3dda7c50c87931b272770c4c293c9ca1990a6b8bf3ca896772d67adafd"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.108635112s ago: executing program 1 (id=285): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e010000082402010102000008"], 0x0) 7.106984222s ago: executing program 2 (id=286): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7.064254796s ago: executing program 3 (id=287): creat(0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00222200000006231306e53f070c0000000a9000070900be0083000000000b09007a150b5d8c3dda7c50c87931b272770c4c293c9ca1990a6b8bf3"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000000)='B') close_range(r0, 0xffffffffffffffff, 0x0) 7.063797226s ago: executing program 2 (id=288): syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x2) ioctl$TCFLSH(0xffffffffffffffff, 0x40087101, 0x20001100) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000100)="c44060c1d081382bc2cc31ff94e37574", 0x10) listen(r5, 0x0) shutdown(r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x1a4, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x4}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x174, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0x8a, 0x5, "5a43fef4df02b6097bdcca3c4208bc8aab9bd70ab8e2bdd50a72e4889d3f159cc9ab4ad18acc3d3d0545c0c54741260271d06464fe309e146c24493e19ae9458d99b8f1b3cd3f0e76828e8edda2d089f36a11315ac7b437ad19fc0bf11cf6449771a6481a466280d9a3e3f8286c73fecc0c04ecd955d1adb8ac5e0687d59a6a18c515a9b48bb"}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'keyring\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'syz'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7da}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x6}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x80}, 0x40000) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) 5.219297886s ago: executing program 1 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) 5.218667916s ago: executing program 2 (id=290): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 5.218502166s ago: executing program 4 (id=291): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 5.053292429s ago: executing program 4 (id=292): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000010300000000000000000000000000000c0002000000000000000000c97f364ebe"], 0x20}}, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.975131446s ago: executing program 3 (id=293): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x40, &(0x7f00000000c0)={[{@noacl}, {@flushoncommit}, {@usebackuproot}, {@notreelog}, {@treelog}, {@enospc_debug}, {@acl}, {@rescan_uuid_tree}, {@compress}, {@datasum}]}, 0x1, 0x55a8, &(0x7f0000005680)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='cpuset.effective_cpus\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0xc8ab) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r1, 0x5a0000) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001040)=ANY=[@ANYBLOB="01100000000000009f"]) 4.224249957s ago: executing program 1 (id=294): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 2.244776047s ago: executing program 1 (id=295): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) 2.238241838s ago: executing program 2 (id=296): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$caif_seqpacket(0x25, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000300)="d8", 0x1, 0x0, &(0x7f0000000340)={0xa, 0x0, 0x0, @private0}, 0x1c) listen(r2, 0xfff) r3 = accept(r2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r4], 0x3c}}, 0x0) 2.237863978s ago: executing program 3 (id=297): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x305}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="e7feeeb53d72", 0x6, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r5) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 2.237533378s ago: executing program 4 (id=298): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000180)={0x2dd0}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000018c0)={0x2, 0x4e20, @loopback}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xc7, 0x1, 0x0, 0x10, 0xffffffffffffffff, 0x800}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r0, 0xf, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) close(0xffffffffffffffff) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000004140)=ANY=[@ANYBLOB="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"], 0x1, 0x1c9, &(0x7f0000000780)="$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") bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) userfaultfd(0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.168149003s ago: executing program 1 (id=299): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 80.397493ms ago: executing program 1 (id=300): syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x2) ioctl$TCFLSH(0xffffffffffffffff, 0x40087101, 0x20001100) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000100)="c44060c1d081382bc2cc31ff94e37574", 0x10) listen(r5, 0x0) shutdown(r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x1a4, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x4}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x174, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0x8a, 0x5, "5a43fef4df02b6097bdcca3c4208bc8aab9bd70ab8e2bdd50a72e4889d3f159cc9ab4ad18acc3d3d0545c0c54741260271d06464fe309e146c24493e19ae9458d99b8f1b3cd3f0e76828e8edda2d089f36a11315ac7b437ad19fc0bf11cf6449771a6481a466280d9a3e3f8286c73fecc0c04ecd955d1adb8ac5e0687d59a6a18c515a9b48bb"}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'keyring\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'syz'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7da}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptmx\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x6}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x80}, 0x40000) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) 78.068783ms ago: executing program 2 (id=301): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) 71.692294ms ago: executing program 4 (id=302): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)={0x1c8, r2, 0x5, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PEERS={0x1a4, 0x8, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e"}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @WGPEER_A_ALLOWEDIPS={0x70, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 326.559µs ago: executing program 2 (id=303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) finit_module(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r4, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 0s ago: executing program 4 (id=304): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000640)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x5}}, {@gid}, {@errors_continue}, {@utf8}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@errors_remount}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x1524, &(0x7f0000002280)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r1 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r1, r0, 0x0, 0x100800001) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7ece1e40ad8871461ab0800", @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r6, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) kernel console output (not intermixed with test programs): 1229][ T3504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.012244][ T3504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.035564][ T3504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.051878][ T3504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.066947][ T3504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.070432][ T3550] Bluetooth: hci4: command 0x040f tx timeout [ 47.082595][ T3550] Bluetooth: hci3: command 0x040f tx timeout [ 47.090620][ T3550] Bluetooth: hci1: command 0x040f tx timeout [ 47.100932][ T438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.109063][ T438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.123979][ T3550] Bluetooth: hci0: command 0x040f tx timeout [ 47.131116][ T3550] Bluetooth: hci2: command 0x040f tx timeout [ 47.133921][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.150620][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.164894][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.175666][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.187516][ T3504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.198628][ T3504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.208765][ T3504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.219223][ T3504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.229267][ T3504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.240188][ T3504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.251848][ T3504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.262303][ T3504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.273323][ T3504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.275731][ T3589] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 47.287113][ T3589] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 47.306798][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.307835][ T3589] vhci_hcd vhci_hcd.0: Device attached [ 47.314775][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.335851][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.338900][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.352163][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.360870][ T3560] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.372745][ T3504] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.382446][ T372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.386677][ T3504] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.391811][ T372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.400601][ T3504] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.421947][ T3504] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.434337][ T1216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.442972][ T1216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.446741][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.458375][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.612431][ T3595] loop0: detected capacity change from 0 to 16 [ 47.619048][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.620285][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 47.636243][ T3581] usb 16-1: SetAddress Request (2) to port 0 [ 47.650137][ T3581] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 47.670198][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.703899][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.714086][ T3595] erofs: (device loop0): mounted with root inode @ nid 36. [ 47.732347][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.761160][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.798632][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.816773][ T3601] veth1: mtu less than device minimum [ 47.868919][ T3601] tmpfs: Unknown parameter 'usrquota' [ 47.930161][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 48.037498][ T3610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.209793][ T7] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=62.0d [ 48.225953][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.237766][ T7] usb 4-1: Product: syz [ 48.252434][ T7] usb 4-1: Manufacturer: syz [ 48.257309][ T7] usb 4-1: SerialNumber: syz [ 48.293662][ T7] usb 4-1: config 0 descriptor?? [ 48.343407][ T7] cytherm 4-1:0.0: Cypress thermometer device now attached [ 48.499534][ T3597] Process accounting resumed [ 48.544452][ T3590] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 48.579264][ T154] vhci_hcd: stop threads [ 48.588051][ T154] vhci_hcd: release socket [ 48.599119][ T154] vhci_hcd: disconnect device [ 48.626325][ T3620] tipc: Started in network mode [ 48.645563][ T3620] tipc: Node identity ac1414aa, cluster identity 4711 [ 48.669167][ T3620] tipc: Enabled bearer , priority 10 [ 49.110741][ T25] audit: type=1107 audit(1720018122.486:2): pid=3618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 49.363378][ T3550] Bluetooth: hci2: command 0x0419 tx timeout [ 49.390626][ T3550] Bluetooth: hci0: command 0x0419 tx timeout [ 49.478698][ T3550] Bluetooth: hci1: command 0x0419 tx timeout [ 49.522198][ T3550] Bluetooth: hci3: command 0x0419 tx timeout [ 49.548572][ T3550] Bluetooth: hci4: command 0x0419 tx timeout [ 49.597366][ T3634] loop1: detected capacity change from 0 to 2048 [ 49.685002][ T3640] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 49.744345][ T3634] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=2048, inode=0, rec_len=0, name_len=0 [ 49.780416][ T13] tipc: Node number set to 2886997162 [ 49.808713][ T3634] Remounting filesystem read-only [ 49.826688][ T3634] NILFS error (device loop1): nilfs_find_entry: dir 2 size 2199023257600 exceeds block count 1 [ 49.982321][ T3550] usb 4-1: USB disconnect, device number 2 [ 49.987168][ T3642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.001591][ T3550] cytherm 4-1:0.0: Cypress thermometer now disconnected [ 50.059396][ T3642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.257273][ T3649] loop3: detected capacity change from 0 to 2048 [ 50.332084][ T3649] loop3: p3 < > p4 < > [ 50.336585][ T3649] loop3: partition table partially beyond EOD, truncated [ 50.392392][ T3649] loop3: p3 start 4284289 is beyond EOD, truncated [ 50.457818][ T2963] loop3: p3 < > p4 < > [ 50.465114][ T2963] loop3: partition table partially beyond EOD, truncated [ 50.485911][ T2963] loop3: p3 start 4284289 is beyond EOD, truncated [ 50.699239][ T3520] udevd[3520]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 50.898086][ T3655] veth1: mtu less than device minimum [ 50.913279][ T3655] tmpfs: Unknown parameter 'usrquota' [ 51.189771][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 51.381442][ T3651] loop3: detected capacity change from 0 to 32768 [ 51.459711][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 51.466926][ T3651] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.22 (3651) [ 51.533192][ T3651] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 51.563599][ T3651] BTRFS info (device loop3): using free space tree [ 51.583747][ T3651] BTRFS info (device loop3): has skinny extents [ 51.609816][ T26] usb 2-1: config 0 has an invalid descriptor of length 253, skipping remainder of the config [ 51.787055][ T3652] Process accounting resumed [ 51.859852][ T26] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 51.879344][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.882792][ T3651] BTRFS info (device loop3): enabling ssd optimizations [ 51.899578][ T26] usb 2-1: Product: syz [ 51.904026][ T26] usb 2-1: Manufacturer: syz [ 51.908614][ T26] usb 2-1: SerialNumber: syz [ 51.925495][ T26] usb 2-1: config 0 descriptor?? [ 52.180816][ T3686] netlink: 76 bytes leftover after parsing attributes in process `syz.0.28'. [ 52.325160][ T25] audit: type=1107 audit(1720018125.916:3): pid=3680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 52.474847][ T26] usb 2-1: USB disconnect, device number 2 [ 52.763136][ T3581] usb 16-1: device descriptor read/8, error -110 [ 53.190553][ T3581] usb usb16-port1: Cannot enable. Maybe the USB cable is bad? [ 53.207217][ T3581] usb usb16-port1: attempt power cycle [ 53.214222][ T3705] loop4: detected capacity change from 0 to 2048 [ 53.276553][ T3714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.286430][ T3520] loop4: p3 < > p4 < > [ 53.290665][ T3520] loop4: partition table partially beyond EOD, truncated [ 53.297826][ T3520] loop4: p3 start 4284289 is beyond EOD, truncated [ 53.365568][ T3705] loop4: p3 < > p4 < > [ 53.376909][ T3705] loop4: partition table partially beyond EOD, truncated [ 53.384701][ T3714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.429855][ T3705] loop4: p3 start 4284289 is beyond EOD, truncated [ 53.577141][ T3581] usb usb16-port1: Cannot enable. Maybe the USB cable is bad? [ 53.600994][ T3520] udevd[3520]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 53.682814][ T3520] udevd[3520]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 53.889794][ T3581] usb usb16-port1: Cannot enable. Maybe the USB cable is bad? [ 53.903359][ T3520] udevd[3520]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 53.918486][ T3581] usb usb16-port1: unable to enumerate USB device [ 54.884668][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 54.893979][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 54.919630][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 54.928605][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 54.937592][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 54.946546][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 54.955504][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 54.964461][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 54.973420][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 54.982371][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 55.268871][ T25] audit: type=1107 audit(1720018128.426:4): pid=3727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 55.429729][ T3735] netlink: 76 bytes leftover after parsing attributes in process `syz.3.42'. [ 55.702577][ T3743] capability: warning: `syz.0.45' uses 32-bit capabilities (legacy support in use) [ 55.925782][ T3751] IPVS: stopping backup sync thread 3753 ... [ 55.930719][ T3753] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 0, id = 0 [ 55.971657][ T3751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'. [ 55.983317][ T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 56.259666][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 56.412437][ T26] usb 4-1: config 0 has an invalid descriptor of length 253, skipping remainder of the config [ 56.513836][ T3770] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 56.659930][ T26] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 56.685308][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.693492][ T26] usb 4-1: Product: syz [ 56.697663][ T26] usb 4-1: Manufacturer: syz [ 56.702333][ T26] usb 4-1: SerialNumber: syz [ 56.708890][ T26] usb 4-1: config 0 descriptor?? [ 56.790889][ T3777] netlink: 'syz.0.57': attribute type 9 has an invalid length. [ 56.825054][ T3777] netlink: 'syz.0.57': attribute type 6 has an invalid length. [ 56.853867][ T3782] netlink: 76 bytes leftover after parsing attributes in process `syz.1.56'. [ 57.027817][ T26] usb 4-1: USB disconnect, device number 3 [ 57.150165][ T3701] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 57.158782][ T3701] Bluetooth: hci1: Injecting HCI hardware error event [ 57.190426][ T3519] Bluetooth: hci1: hardware error 0x00 [ 57.415097][ T3581] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 57.433466][ T3799] block nbd1: shutting down sockets [ 57.465830][ T3798] nbd1: detected capacity change from 0 to 4 [ 57.522953][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.534057][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 57.545822][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.557227][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 57.576266][ T1497] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.587134][ T1497] Buffer I/O error on dev nbd1, logical block 0, async page read [ 57.600743][ T1497] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.611594][ T1497] Buffer I/O error on dev nbd1, logical block 0, async page read [ 57.619538][ T1497] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.630619][ T1497] Buffer I/O error on dev nbd1, logical block 0, async page read [ 57.639645][ T3799] ldm_validate_partition_table(): Disk read failed. [ 57.646403][ T1497] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.657774][ T1497] Buffer I/O error on dev nbd1, logical block 0, async page read [ 57.665799][ T1497] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.676677][ T1497] Buffer I/O error on dev nbd1, logical block 0, async page read [ 57.690276][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.701423][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 57.713604][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.724502][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 57.732829][ T3799] Dev nbd1: unable to read RDB block 0 [ 57.738417][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 57.749279][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 57.776103][ T3799] nbd1: unable to read partition table [ 57.789498][ T3801] ntfs3: nbd3: try to read out of volume at offset 0x0 [ 57.807348][ T3799] nbd1: partition table beyond EOD, truncated [ 57.828405][ T3799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 57.829810][ T3581] usb 1-1: config 1 interface 0 altsetting 231 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 57.839673][ T3520] ldm_validate_partition_table(): Disk read failed. [ 57.869711][ T3581] usb 1-1: config 1 interface 0 has no altsetting 0 [ 57.913629][ T3520] Dev nbd1: unable to read RDB block 0 [ 57.949744][ T3799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 57.949777][ T3520] nbd1: unable to read partition table [ 57.984326][ T3799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 58.013331][ T3799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 58.030427][ T3581] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 58.039462][ T3581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.057915][ T3799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 58.068009][ T3581] usb 1-1: Manufacturer: ȗ⩪㞄밽屠莅㩁齟୾ᗞ洫뜠ඓ睗ǽ馊䚭讇㕁㣸ꗌ㓛Ὃ楄銹ꋥ껗⊻矤ك琮褟ᄆ言晔飧쳾慧핀匥忋呑듄쯮ဈ톉薓䆻翳켊ﹰ杈 [ 58.104971][ T3520] nbd1: partition table beyond EOD, truncated [ 58.123899][ T3799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 58.187935][ T3799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 58.208128][ T3581] usb 1-1: SerialNumber: syz [ 58.227504][ T3799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 58.237037][ T3799] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 58.241403][ T3520] ldm_validate_partition_table(): Disk read failed. [ 58.245314][ T3799] UDF-fs: Scanning with blocksize 1024 failed [ 58.258889][ T3799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 58.384106][ T3792] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 59.978419][ T3814] sched: RT throttling activated [ 59.993460][ T3581] usb 1-1: USB disconnect, device number 2 [ 60.011864][ T3799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 60.026440][ T3520] Dev nbd1: unable to read RDB block 0 [ 60.033577][ T3799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 60.064882][ T3520] nbd1: unable to read partition table [ 60.076558][ T3520] nbd1: partition table beyond EOD, truncated [ 60.080029][ T3799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 60.182552][ T3799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 60.245331][ T3799] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 60.301385][ T3799] UDF-fs: Scanning with blocksize 2048 failed [ 60.308082][ T3799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 60.343643][ T3826] tmpfs: Unknown parameter 'usrquota' [ 60.348751][ T3799] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 60.379260][ T3799] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 60.399162][ T3799] UDF-fs: Scanning with blocksize 4096 failed [ 60.471813][ T3799] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 60.609874][ T3549] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 60.866087][ T3830] chnl_net:caif_netlink_parms(): no params data found [ 60.923811][ T3549] usb 4-1: Using ep0 maxpacket: 16 [ 60.944769][ T3844] kvm: emulating exchange as write [ 61.051901][ T3830] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.058981][ T3830] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.072119][ T3549] usb 4-1: config 0 has an invalid descriptor of length 253, skipping remainder of the config [ 61.099806][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 61.109064][ T3830] device bridge_slave_0 entered promiscuous mode [ 61.143054][ T3830] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.159679][ T3830] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.170450][ T3830] device bridge_slave_1 entered promiscuous mode [ 61.263330][ T3830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.295380][ T3830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.304857][ T3549] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 61.326285][ T3549] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.354365][ T3549] usb 4-1: Product: syz [ 61.367920][ T3549] usb 4-1: Manufacturer: syz [ 61.372923][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 61.384882][ T3549] usb 4-1: SerialNumber: syz [ 61.401423][ T3549] usb 4-1: config 0 descriptor?? [ 61.440171][ T3830] team0: Port device team_slave_0 added [ 61.447915][ T3830] team0: Port device team_slave_1 added [ 61.553184][ T3858] device wlan0 entered promiscuous mode [ 61.572480][ T3830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.581014][ T3830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.606891][ C1] vkms_vblank_simulate: vblank timer overrun [ 61.671763][ T3830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.685310][ T3830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.695544][ T26] usb 1-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 61.711729][ T3549] usb 4-1: USB disconnect, device number 4 [ 61.721661][ T3830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.752127][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.775766][ T26] usb 1-1: Product: syz [ 61.780408][ T26] usb 1-1: Manufacturer: syz [ 61.785065][ T26] usb 1-1: SerialNumber: syz [ 61.798339][ T26] usb 1-1: config 0 descriptor?? [ 61.803425][ T3830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.861977][ T26] usb 1-1: Found UVC 0.00 device syz (046d:0721) [ 61.877756][ T26] usb 1-1: No valid video chain found. [ 61.910537][ T3830] device hsr_slave_0 entered promiscuous mode [ 61.928100][ T3830] device hsr_slave_1 entered promiscuous mode [ 61.947474][ T3830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.957123][ T3830] Cannot create hsr debugfs directory [ 61.979924][ T3548] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 62.063891][ T3311] usb 1-1: USB disconnect, device number 3 [ 62.170481][ T3830] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.186105][ T3581] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.319889][ T3548] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 62.332285][ T3830] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.413340][ T3870] loop3: detected capacity change from 0 to 512 [ 62.422168][ T3830] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.429756][ T3701] Bluetooth: hci5: command 0x0409 tx timeout [ 62.450143][ T3548] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 62.477707][ T3548] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 62.499067][ T3548] usb 2-1: config 0 interface 0 has no altsetting 0 [ 62.535752][ T3830] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.591323][ T3870] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.87: casefold flag without casefold feature [ 62.609974][ T3581] usb 5-1: config 1 interface 0 altsetting 231 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 62.619774][ T3548] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 62.635314][ T3548] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 62.646844][ T3548] usb 2-1: config 0 interface 0 has no altsetting 0 [ 62.654134][ T3581] usb 5-1: config 1 interface 0 has no altsetting 0 [ 62.668395][ T3870] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.87: missing EA_INODE flag [ 62.739088][ T3870] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.87: error while reading EA inode 2 err=-117 [ 62.759874][ T3548] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 62.763653][ T3870] EXT4-fs (loop3): 1 orphan inode deleted [ 62.779121][ T3548] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 62.791328][ T3870] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.821617][ T3548] usb 2-1: config 0 interface 0 has no altsetting 0 [ 62.850003][ T25] audit: type=1804 audit(1720018136.436:5): pid=3870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.87" name="/newroot/18/file1/bus" dev="loop3" ino=15 res=1 errno=0 [ 62.869801][ T3581] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 62.889213][ T3581] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.898228][ T3581] usb 5-1: Manufacturer: ȗ⩪㞄밽屠莅㩁齟୾ᗞ洫뜠ඓ睗ǽ馊䚭讇㕁㣸ꗌ㓛Ὃ楄銹ꋥ껗⊻矤ك琮褟ᄆ言晔飧쳾慧핀匥忋呑듄쯮ဈ톉薓䆻翳켊ﹰ杈 [ 62.919956][ T3548] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 62.924946][ T3581] usb 5-1: SerialNumber: syz [ 62.928877][ T25] audit: type=1804 audit(1720018136.516:6): pid=3870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.87" name="/newroot/18/file1/bus" dev="loop3" ino=15 res=1 errno=0 [ 62.960752][ T3506] syz-executor (3506) used greatest stack depth: 19320 bytes left [ 62.967947][ T3548] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 62.971085][ T3866] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 63.011689][ T3830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.018773][ T3548] usb 2-1: config 0 interface 0 has no altsetting 0 [ 63.039297][ T3830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.054875][ T3830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.067894][ T3830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.150220][ T3548] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 63.159099][ T3548] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 63.211380][ T3548] usb 2-1: config 0 interface 0 has no altsetting 0 [ 63.231054][ T3830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.254247][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.267190][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.283021][ T3830] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.302068][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.310597][ T3548] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 63.319469][ T3548] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 63.400698][ T3581] usb 5-1: USB disconnect, device number 2 [ 63.424606][ T3311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.438115][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.445249][ T3311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.167467][ T3548] usb 2-1: config 0 interface 0 has no altsetting 0 [ 64.237457][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.253731][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.263613][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.296414][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.303533][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.312022][ T3548] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.325893][ T3548] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.326887][ T3894] netlink: 'syz.3.95': attribute type 11 has an invalid length. [ 64.346523][ T3548] usb 2-1: config 0 interface 0 has no altsetting 0 [ 64.352378][ T3894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 64.354363][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.370736][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.419314][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.429517][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.448971][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.457501][ T3548] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.472208][ T3548] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.490674][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.509752][ T3581] Bluetooth: hci5: command 0x041b tx timeout [ 64.514531][ T3548] usb 2-1: config 0 interface 0 has no altsetting 0 [ 64.523264][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.550227][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.563426][ T3830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.603957][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.617233][ T3900] loop4: detected capacity change from 0 to 512 [ 64.631771][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.641151][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.670044][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.868303][ T3900] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.949848][ T3900] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038 (0x7fffffff) [ 64.950881][ T3903] loop3: detected capacity change from 0 to 40427 [ 65.002258][ T3548] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 65.020043][ T3548] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 65.037507][ T3548] usb 2-1: Product: syz [ 65.048651][ T3903] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 65.056598][ T3903] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 65.073989][ T3548] usb 2-1: config 0 descriptor?? [ 65.099762][ T3548] usb 2-1: can't set config #0, error -71 [ 65.109494][ T3548] usb 2-1: USB disconnect, device number 3 [ 65.148980][ T3903] F2FS-fs (loop3): Found nat_bits in checkpoint [ 65.210739][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.218167][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.251801][ T3903] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 65.258979][ T3903] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 65.445796][ T3830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.634753][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.658344][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.821566][ T3920] dlm: dev_write: no op 0 74000000000000 [ 67.249696][ T3701] Bluetooth: hci5: command 0x040f tx timeout [ 68.387809][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.418296][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.463590][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.501636][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.560143][ T3830] device veth0_vlan entered promiscuous mode [ 68.608079][ T3830] device veth1_vlan entered promiscuous mode [ 68.703037][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.740713][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.773283][ T3830] device veth0_macvtap entered promiscuous mode [ 68.798713][ T3830] device veth1_macvtap entered promiscuous mode [ 68.849804][ T3701] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.870160][ T3830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.890983][ T3830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.915664][ T3830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.950123][ T3830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.970823][ T3830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.002665][ T3830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.016882][ T3830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.027612][ T3830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.038007][ T3830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.048789][ T3830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.064018][ T3830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.072311][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.092341][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.102065][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.110954][ T3552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.142019][ T3830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.166549][ T3830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.190056][ T3830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.227763][ T3830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.243474][ T3830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.254603][ T3830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.265084][ T3830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.282857][ T3701] usb 5-1: config 1 interface 0 altsetting 231 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 69.292254][ T3830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.312519][ T3830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.313373][ T3701] usb 5-1: config 1 interface 0 has no altsetting 0 [ 69.333711][ T3830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.334565][ T3693] Bluetooth: hci5: command 0x0419 tx timeout [ 69.345492][ T3830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.368338][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.385388][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.413498][ T3971] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 69.420017][ T3971] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 69.430098][ T3971] vhci_hcd vhci_hcd.0: Device attached [ 69.458186][ T3830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.484618][ T3830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.493688][ T3701] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 69.502788][ T3830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.511682][ T3701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.519712][ T3830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.524938][ T3519] Bluetooth: Wrong link type (-71) [ 69.529093][ T3701] usb 5-1: Manufacturer: ȗ⩪㞄밽屠莅㩁齟୾ᗞ洫뜠ඓ睗ǽ馊䚭讇㕁㣸ꗌ㓛Ὃ楄銹ꋥ껗⊻矤ك琮褟ᄆ言晔飧쳾慧핀匥忋呑듄쯮ဈ톉薓䆻翳켊ﹰ杈 [ 69.546310][ T3973] vhci_hcd: connection closed [ 69.554270][ T3701] usb 5-1: SerialNumber: syz [ 69.559261][ T144] vhci_hcd: stop threads [ 69.584956][ T144] vhci_hcd: release socket [ 69.590069][ T144] vhci_hcd: disconnect device [ 69.590138][ T3936] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 69.650268][ T3548] vhci_hcd: vhci_device speed not set [ 69.677113][ T3689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.693828][ T3689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.716854][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.726568][ T372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.736095][ T372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.750142][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.757555][ T3693] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 69.782231][ T9] device hsr_slave_0 left promiscuous mode [ 69.789082][ T9] device hsr_slave_1 left promiscuous mode [ 69.806560][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.836234][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.846014][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.856791][ T3701] usb 5-1: USB disconnect, device number 3 [ 69.865202][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.877861][ T9] device bridge_slave_1 left promiscuous mode [ 69.885247][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.905979][ T9] device bridge_slave_0 left promiscuous mode [ 69.912401][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.935501][ T9] device veth1_macvtap left promiscuous mode [ 69.943561][ T9] device veth0_macvtap left promiscuous mode [ 69.951166][ T9] device veth1_vlan left promiscuous mode [ 69.957183][ T9] device veth0_vlan left promiscuous mode [ 69.999817][ T3693] usb 4-1: Using ep0 maxpacket: 32 [ 70.119886][ T3693] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 70.137988][ T3693] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 70.159120][ T3693] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.180525][ T9] team0 (unregistering): Port device team_slave_1 removed [ 70.212670][ T9] team0 (unregistering): Port device team_slave_0 removed [ 70.228076][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.241856][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.319843][ T3693] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.325834][ T9] bond0 (unregistering): Released all slaves [ 70.332316][ T3693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.346583][ T3693] usb 4-1: Product: syz [ 70.352877][ T3693] usb 4-1: Manufacturer: syz [ 70.357737][ T3693] usb 4-1: SerialNumber: syz [ 70.397473][ T3983] netlink: 76 bytes leftover after parsing attributes in process `syz.2.69'. [ 70.418474][ T3990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.126'. [ 70.429135][ T3990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.126'. [ 70.467047][ T3992] Zero length message leads to an empty skb [ 70.489712][ T3895] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 70.605218][ T4001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 70.649442][ T3976] device wlan0 entered promiscuous mode [ 70.693527][ T3976] device macsec1 entered promiscuous mode [ 70.738600][ T3976] device wlan0 left promiscuous mode [ 70.771454][ T3895] usb 1-1: Using ep0 maxpacket: 8 [ 70.889850][ T3693] usb 4-1: 0:2 : does not exist [ 70.934382][ T4016] program syz.1.137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.952492][ T4014] fuse: root generation should be zero [ 70.970111][ T3693] usb 4-1: USB disconnect, device number 5 [ 70.985920][ T4016] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551614) [ 71.017590][ T4016] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 71.119945][ T3895] usb 1-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=62.0d [ 71.136729][ T3895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.153492][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.162564][ T1629] cfg80211: failed to load regulatory.db [ 71.172925][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.183703][ T3895] usb 1-1: Product: syz [ 71.195313][ T3895] usb 1-1: Manufacturer: syz [ 71.201578][ T3895] usb 1-1: SerialNumber: syz [ 71.223693][ T3895] usb 1-1: config 0 descriptor?? [ 71.281119][ T3895] cytherm 1-1:0.0: Cypress thermometer device now attached [ 71.349702][ T1629] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 71.434722][ T4020] sctp: [Deprecated]: syz.3.138 (pid 4020) Use of struct sctp_assoc_value in delayed_ack socket option. [ 71.434722][ T4020] Use struct sctp_sack_info instead [ 71.488895][ T3548] usb 1-1: USB disconnect, device number 4 [ 71.496333][ T3548] cytherm 1-1:0.0: Cypress thermometer now disconnected [ 71.599711][ T1629] usb 2-1: Using ep0 maxpacket: 16 [ 71.729913][ T1629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.781952][ T1629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.814686][ T1629] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 71.844294][ T1629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.876214][ T1629] usb 2-1: config 0 descriptor?? [ 72.119689][ T3693] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.346729][ T4050] fuse: Bad value for 'fd' [ 72.360694][ T3693] usb 3-1: Using ep0 maxpacket: 16 [ 72.373229][ T3548] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 72.401965][ T1629] lenovo 0003:17EF:6009.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.1-1/input0 [ 72.519883][ T3693] usb 3-1: unable to get BOS descriptor or descriptor too short [ 72.601237][ T3693] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.616312][ T3693] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 72.689731][ T3548] usb 1-1: Using ep0 maxpacket: 16 [ 72.713510][ T4016] netlink: 68 bytes leftover after parsing attributes in process `syz.1.137'. [ 72.754219][ T25] audit: type=1326 audit(1720018146.346:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4053 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032a3bdb99 code=0x7ffc0000 [ 72.786961][ T3701] usb 2-1: USB disconnect, device number 4 [ 72.793071][ T3693] usb 3-1: New USB device found, idVendor=12d1, idProduct=c46d, bcdDevice=6a.f5 [ 72.814344][ T4054] loop3: detected capacity change from 0 to 128 [ 72.818022][ T3693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.835063][ T3693] usb 3-1: Product: syz [ 72.839258][ T3693] usb 3-1: Manufacturer: syz [ 72.843958][ T3693] usb 3-1: SerialNumber: syz [ 72.849361][ T25] audit: type=1326 audit(1720018146.406:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4053 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f032a3bdb99 code=0x7ffc0000 [ 72.871354][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.887049][ T3693] usb 3-1: config 0 descriptor?? [ 72.895637][ T25] audit: type=1326 audit(1720018146.406:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4053 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f032a3bdbd3 code=0x7ffc0000 [ 72.921962][ T25] audit: type=1326 audit(1720018146.406:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4053 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f032a3bc71f code=0x7ffc0000 [ 72.949265][ T25] audit: type=1326 audit(1720018146.406:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4053 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f032a3bdc27 code=0x7ffc0000 [ 72.971259][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.980147][ T3548] usb 1-1: config 1 interface 0 altsetting 104 endpoint 0x81 has an invalid bInterval 27, changing to 8 [ 73.001376][ T25] audit: type=1326 audit(1720018146.406:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4053 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f032a3bc5d0 code=0x7ffc0000 [ 73.004714][ T3548] usb 1-1: config 1 interface 0 altsetting 104 bulk endpoint 0x82 has invalid maxpacket 1023 [ 73.023421][ C0] vkms_vblank_simulate: vblank timer overrun [ 73.031711][ T25] audit: type=1326 audit(1720018146.406:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4053 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f032a3bd79b code=0x7ffc0000 [ 73.064714][ T3548] usb 1-1: config 1 interface 0 altsetting 104 bulk endpoint 0x3 has invalid maxpacket 64 [ 73.068770][ T25] audit: type=1326 audit(1720018146.436:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4053 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f032a3bc8ca code=0x7ffc0000 [ 73.096090][ T3548] usb 1-1: config 1 interface 0 has no altsetting 0 [ 73.103541][ T25] audit: type=1326 audit(1720018146.436:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4053 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f032a3bc8ca code=0x7ffc0000 [ 73.152176][ T25] audit: type=1326 audit(1720018146.486:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4053 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f032a3bc4d7 code=0x7ffc0000 [ 73.180673][ T3693] qmi_wwan: probe of 3-1:0.0 failed with error -22 [ 73.215576][ T3693] usb 3-1: USB disconnect, device number 2 [ 73.235675][ T4056] netlink: 104 bytes leftover after parsing attributes in process `syz.4.156'. [ 73.289859][ T3548] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.303426][ T3548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.317629][ T3548] usb 1-1: Product: syz [ 73.329639][ T3548] usb 1-1: Manufacturer: syz [ 73.334419][ T3548] usb 1-1: SerialNumber: syz [ 73.373602][ T4063] loop4: detected capacity change from 0 to 512 [ 73.380346][ T4043] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 73.387358][ T4043] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 73.424235][ T4062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 73.474359][ T4065] loop1: detected capacity change from 0 to 1024 [ 73.539393][ T4063] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.562993][ T4063] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.616131][ T4063] EXT4-fs (loop4): 1 truncate cleaned up [ 73.629085][ T4065] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,resgid=0x0000000000000000,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 73.655347][ C0] vkms_vblank_simulate: vblank timer overrun [ 73.660596][ T4063] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 73.745142][ T4070] loop2: detected capacity change from 0 to 512 [ 73.794775][ T4063] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #2: comm syz.4.157: Siphash requires key [ 73.808850][ T4063] EXT4-fs warning (device loop4): dx_probe:844: inode #2: comm syz.4.157: Hash code is SIPHASH, but hash not in dirent [ 73.826285][ T4063] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.157: Corrupt directory, running e2fsck is recommended [ 73.855449][ T4070] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.892050][ T4070] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.950007][ T3548] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 73.975758][ T4070] EXT4-fs (loop2): 1 truncate cleaned up [ 73.990981][ T3548] usb 1-1: USB disconnect, device number 5 [ 74.007542][ T4070] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,nodelalloc,nombcache,abort,,errors=continue. Quota mode: none. [ 74.257353][ T4080] loop2: detected capacity change from 0 to 512 [ 74.273556][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 74.377685][ T4080] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.399050][ T4080] EXT4-fs (loop2): 1 truncate cleaned up [ 74.405066][ T4080] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 74.467195][ T4080] EXT4-fs warning (device loop2): __ext4fs_dirhash:270: inode #2: comm syz.2.163: Siphash requires key [ 74.517916][ T4080] EXT4-fs warning (device loop2): dx_probe:844: inode #2: comm syz.2.163: Hash code is SIPHASH, but hash not in dirent [ 74.540093][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 74.594118][ T4080] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.163: Corrupt directory, running e2fsck is recommended [ 74.610593][ T4087] EXT4-fs warning (device loop2): dx_probe:844: inode #2: comm syz.2.163: Hash code is SIPHASH, but hash not in dirent [ 74.623447][ T4087] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.163: Corrupt directory, running e2fsck is recommended [ 74.814488][ T3689] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.887446][ T3689] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.946598][ T26] usb 5-1: New USB device found, idVendor=19d2, idProduct=1119, bcdDevice=39.9d [ 74.960736][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.969439][ T26] usb 5-1: Product: syz [ 74.973995][ T26] usb 5-1: Manufacturer: syz [ 74.978627][ T26] usb 5-1: SerialNumber: syz [ 74.987821][ T26] usb 5-1: config 0 descriptor?? [ 75.007810][ T3689] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.040735][ T26] usb 5-1: bad CDC descriptors [ 75.345940][ T3689] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.456422][ T4085] chnl_net:caif_netlink_parms(): no params data found [ 76.412449][ T4085] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.427173][ T4085] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.451705][ T4085] device bridge_slave_0 entered promiscuous mode [ 76.508226][ T4085] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.518331][ T4085] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.545500][ T4085] device bridge_slave_1 entered promiscuous mode [ 76.626730][ T4085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.676309][ T4085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.749894][ T3701] Bluetooth: hci2: command 0x0409 tx timeout [ 76.771387][ T4085] team0: Port device team_slave_0 added [ 76.802969][ T4085] team0: Port device team_slave_1 added [ 76.805542][ T3549] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.847072][ T4085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.861769][ T4085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.915927][ T4085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.089973][ T3549] usb 3-1: Using ep0 maxpacket: 16 [ 77.290417][ T3549] usb 3-1: unable to get BOS descriptor or descriptor too short [ 77.302723][ T4085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.570397][ T3548] usb 5-1: USB disconnect, device number 4 [ 77.595411][ T4085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.630316][ T3549] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.660487][ T3549] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 77.673618][ T4085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.694603][ T4128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.172'. [ 77.784610][ T4130] netem: change failed [ 77.804932][ T4085] device hsr_slave_0 entered promiscuous mode [ 77.812764][ T4085] device hsr_slave_1 entered promiscuous mode [ 77.876454][ T3549] usb 3-1: New USB device found, idVendor=12d1, idProduct=c46d, bcdDevice=6a.f5 [ 77.905169][ T3549] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.927634][ T3549] usb 3-1: Product: syz [ 77.942605][ T3549] usb 3-1: Manufacturer: syz [ 77.949282][ T3549] usb 3-1: SerialNumber: syz [ 77.986514][ T3549] usb 3-1: config 0 descriptor?? [ 78.219678][ T3548] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 78.270155][ T3549] qmi_wwan: probe of 3-1:0.0 failed with error -22 [ 78.284491][ T3549] usb 3-1: USB disconnect, device number 3 [ 78.404979][ T3689] device hsr_slave_0 left promiscuous mode [ 78.414274][ T3689] device hsr_slave_1 left promiscuous mode [ 78.421364][ T3689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.428768][ T3689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.444129][ T3689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.451828][ T3689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.464607][ T3689] device bridge_slave_1 left promiscuous mode [ 78.470879][ T3689] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.480540][ T3548] usb 5-1: Using ep0 maxpacket: 16 [ 78.509007][ T3689] device bridge_slave_0 left promiscuous mode [ 78.519236][ T3689] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.545999][ T3689] device veth0_macvtap left promiscuous mode [ 78.560478][ T3689] device veth1_vlan left promiscuous mode [ 78.566746][ T3689] device veth0_vlan left promiscuous mode [ 78.750900][ T3548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 79.158985][ T3548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 79.252906][ T3548] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 79.298703][ T3548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.385689][ T3548] usb 5-1: config 0 descriptor?? [ 79.480887][ T1066] Bluetooth: hci2: command 0x041b tx timeout [ 79.545771][ T25] kauditd_printk_skb: 14 callbacks suppressed [ 79.545783][ T25] audit: type=1326 audit(1720018153.136:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4160 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032a3bdb99 code=0x7ffc0000 [ 79.612882][ T25] audit: type=1326 audit(1720018153.136:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4160 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032a3bdb99 code=0x7ffc0000 [ 79.653510][ T4130] udc-core: couldn't find an available UDC or it's busy [ 79.670003][ T4130] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.700274][ T25] audit: type=1326 audit(1720018153.136:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4160 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f032a3bdb99 code=0x7ffc0000 [ 79.760029][ T25] audit: type=1326 audit(1720018153.136:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4160 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032a3bdb99 code=0x7ffc0000 [ 79.811656][ T3689] team0 (unregistering): Port device team_slave_1 removed [ 79.822732][ T25] audit: type=1326 audit(1720018153.136:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4160 comm="syz.3.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032a3bdb99 code=0x7ffc0000 [ 79.845659][ T3689] team0 (unregistering): Port device team_slave_0 removed [ 79.870668][ T3689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.912622][ T3689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.933399][ T4130] udc-core: couldn't find an available UDC or it's busy [ 79.950093][ T4130] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.971583][ T3548] hid (null): bogus close delimiter [ 80.001489][ T3548] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 80.008882][ T3548] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 80.037495][ T3689] bond0 (unregistering): Released all slaves [ 80.049777][ T3548] hid-generic 0003:0158:0100.0002: bogus close delimiter [ 80.069628][ T3548] hid-generic 0003:0158:0100.0002: item 0 0 2 10 parsing failed [ 80.078740][ T3548] hid-generic: probe of 0003:0158:0100.0002 failed with error -22 [ 80.182555][ T3701] usb 5-1: USB disconnect, device number 5 [ 80.244687][ T4178] netlink: 36 bytes leftover after parsing attributes in process `syz.3.183'. [ 80.261382][ T4085] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.283161][ T4085] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.314176][ T4085] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.329735][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 80.341898][ T4085] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.482459][ T4085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.513983][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.531301][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.541603][ T4085] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.572921][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 80.573927][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.608500][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.630292][ T3895] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.637344][ T3895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.686297][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.692959][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.698221][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.714894][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 80.758698][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.776459][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.777438][ T7] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 80.783562][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.799057][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.831141][ T4198] loop3: detected capacity change from 0 to 16 [ 80.839422][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.847534][ T7] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 80.854243][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.875958][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.909665][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.928029][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.945895][ T4198] erofs: (device loop3): mounted with root inode @ nid 36. [ 80.967486][ T4198] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 80.970162][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.990781][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.013962][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 81.020331][ T4198] attempt to access beyond end of device [ 81.020331][ T4198] loop3: rw=0, want=304, limit=16 [ 81.038403][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.053809][ T4201] loop4: detected capacity change from 0 to 2048 [ 81.057735][ T7] usb 2-1: SerialNumber: syz [ 81.061043][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.073301][ T4198] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 81.088257][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.115458][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.120484][ T7] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 81.129752][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.150506][ T7] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 81.184659][ T4201] EXT4-fs (loop4): Ignoring removed orlov option [ 81.272510][ T4201] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 81.420918][ T3693] usb 2-1: USB disconnect, device number 5 [ 81.477288][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.489090][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.512208][ T4085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.550942][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 81.616131][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.633903][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.659739][ T3895] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 81.739420][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.757899][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.790410][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.810036][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.863194][ T4085] device veth0_vlan entered promiscuous mode [ 81.895973][ T4085] device veth1_vlan entered promiscuous mode [ 81.929712][ T3895] usb 4-1: Using ep0 maxpacket: 16 [ 82.014386][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.041057][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.054051][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.071585][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.090804][ T4085] device veth0_macvtap entered promiscuous mode [ 82.108167][ T4085] device veth1_macvtap entered promiscuous mode [ 82.139810][ T3895] usb 4-1: unable to get BOS descriptor or descriptor too short [ 82.174385][ T4085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.222052][ T4085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.239707][ T3895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.259980][ T3895] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.277383][ T4085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.288177][ T4085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.298857][ T4085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.313819][ T4085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.323793][ T4085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.349965][ T4085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.396851][ T4085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.407964][ T4085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.424233][ T4085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.436954][ T4085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.447813][ T3895] usb 4-1: New USB device found, idVendor=12d1, idProduct=c46d, bcdDevice=6a.f5 [ 82.457048][ T4085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.469193][ T3895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.480747][ T4085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.495955][ T3895] usb 4-1: Product: syz [ 82.501262][ T3895] usb 4-1: Manufacturer: syz [ 82.506008][ T3895] usb 4-1: SerialNumber: syz [ 82.519712][ T4085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.542719][ T3895] usb 4-1: config 0 descriptor?? [ 82.555589][ T4085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.566509][ T4085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.586799][ T4085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.598073][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.609567][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.634718][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.662453][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.690047][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.716164][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.755691][ T4085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.782039][ T4085] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.809807][ T3895] qmi_wwan: probe of 4-1:0.0 failed with error -22 [ 82.825894][ T4232] loop4: detected capacity change from 0 to 40427 [ 82.850511][ T3895] usb 4-1: USB disconnect, device number 6 [ 82.857681][ T4085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.881811][ T4085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.062497][ T4232] F2FS-fs (loop4): Found nat_bits in checkpoint [ 83.108567][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.127232][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.161010][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.191128][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.199543][ T4232] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 83.239757][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.252770][ T3895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.379713][ T3693] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 83.630998][ T1066] Bluetooth: hci2: command 0x0419 tx timeout [ 83.799883][ T3693] usb 2-1: Using ep0 maxpacket: 8 [ 83.919975][ T3693] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 83.928509][ T3693] usb 2-1: config 0 has no interface number 0 [ 83.963743][ T3693] usb 2-1: config 0 interface 1 altsetting 0 has an invalid endpoint with address 0xFE, skipping [ 83.994065][ T4259] loop3: detected capacity change from 0 to 512 [ 84.056568][ T3693] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 84.108514][ T4259] EXT4-fs (loop3): Ignoring removed nobh option [ 84.128515][ T3693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.150013][ T4259] EXT4-fs (loop3): Mount option "nojournal_checksum" incompatible with ext2 [ 84.233084][ T3693] usb 2-1: config 0 descriptor?? [ 84.291268][ T3693] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 84.452539][ T3514] attempt to access beyond end of device [ 84.452539][ T3514] loop4: rw=2049, want=45104, limit=40427 [ 84.517126][ T7] usb 2-1: USB disconnect, device number 6 [ 84.529187][ T4259] smc: net device erspan0 applied user defined pnetid SYZ2 [ 85.129722][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 85.389893][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 85.509836][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.531021][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.546975][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 85.569423][ T7] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 85.585476][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.595699][ T7] usb 1-1: config 0 descriptor?? [ 85.649792][ T3895] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 85.709895][ T3548] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 85.949926][ T3548] usb 2-1: Using ep0 maxpacket: 16 [ 86.040642][ T3895] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.050840][ T3895] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 86.059853][ T3895] usb 5-1: config 1 has no interface number 0 [ 86.065950][ T3895] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.076980][ T3895] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 86.081404][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.086238][ T3895] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 86.102859][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.113716][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.121949][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.129188][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.129731][ T3548] usb 2-1: unable to get BOS descriptor or descriptor too short [ 86.136559][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.151873][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.159204][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.166614][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.174183][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.181598][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.188922][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.196284][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.203562][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.210936][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.218169][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.226151][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.229826][ T3548] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.233509][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.250959][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.259058][ T3548] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 86.281108][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.288420][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.296137][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.299922][ T3895] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.304132][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.319506][ T3895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.322459][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.330683][ T3895] usb 5-1: Product: syz [ 86.336398][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.341434][ T3895] usb 5-1: Manufacturer: syz [ 86.349779][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.352997][ T3895] usb 5-1: SerialNumber: syz [ 86.359671][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.371456][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.378665][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.385930][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.393177][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.400445][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.407654][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.414939][ T7] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 86.423011][ T7] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 86.434122][ T7] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 86.445582][ T7] microsoft 0003:045E:07DA.0003: no inputs found [ 86.452074][ T7] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 86.463015][ T7] usb 1-1: USB disconnect, device number 6 [ 86.469827][ T3548] usb 2-1: New USB device found, idVendor=12d1, idProduct=c46d, bcdDevice=6a.f5 [ 86.483922][ T3548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.492568][ T3548] usb 2-1: Product: syz [ 86.496728][ T3548] usb 2-1: Manufacturer: syz [ 86.501751][ T3548] usb 2-1: SerialNumber: syz [ 86.510136][ T3548] usb 2-1: config 0 descriptor?? [ 86.699722][ T3693] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 86.760098][ T3548] qmi_wwan: probe of 2-1:0.0 failed with error -22 [ 86.769068][ T3548] usb 2-1: USB disconnect, device number 7 [ 86.829537][ T4305] loop0: detected capacity change from 0 to 16 [ 86.847941][ T4305] erofs: (device loop0): mounted with root inode @ nid 36. [ 86.880298][ T4305] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 86.939689][ T3693] usb 4-1: Using ep0 maxpacket: 32 [ 86.992124][ T4307] loop0: detected capacity change from 0 to 2048 [ 87.032372][ T4307] EXT4-fs (loop0): Ignoring removed orlov option [ 87.053749][ T4307] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 87.185844][ T4314] loop0: detected capacity change from 0 to 512 [ 87.219757][ T3693] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=3f.2b [ 87.228809][ T3693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.237183][ T3693] usb 4-1: Product: syz [ 87.238831][ T4314] EXT4-fs (loop0): Ignoring removed nobh option [ 87.247169][ T3693] usb 4-1: Manufacturer: syz [ 87.252723][ T3693] usb 4-1: SerialNumber: syz [ 87.258959][ T3693] usb 4-1: config 0 descriptor?? [ 87.260804][ T4314] EXT4-fs (loop0): Mount option "nojournal_checksum" incompatible with ext2 [ 87.299847][ T3895] cdc_ncm 5-1:1.1: bind() failure [ 87.313963][ T3895] usb 5-1: USB disconnect, device number 6 [ 87.321541][ T3693] (null): radio-mr800 - initialization failed [ 87.351933][ T3693] radio-mr800: probe of 4-1:0.0 failed with error -22 [ 87.383967][ T3693] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 87.559036][ T3693] usb 4-1: USB disconnect, device number 7 [ 88.109923][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.187691][ T4324] mmap: syz.4.217 (4324) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 88.264746][ T4330] netlink: 96 bytes leftover after parsing attributes in process `syz.4.219'. [ 88.326896][ T4316] chnl_net:caif_netlink_parms(): no params data found [ 88.426925][ T4316] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.434812][ T4316] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.443430][ T4316] device bridge_slave_0 entered promiscuous mode [ 88.482781][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.578519][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.600419][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.611063][ T4316] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.616627][ T13] usb 3-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00 [ 88.619301][ T4316] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.628373][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.725208][ T4316] device bridge_slave_1 entered promiscuous mode [ 89.187236][ T4335] loop4: detected capacity change from 0 to 32768 [ 89.246071][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.284271][ T4335] ======================================================= [ 89.284271][ T4335] WARNING: The mand mount option has been deprecated and [ 89.284271][ T4335] and is ignored by this kernel. Remove the mand [ 89.284271][ T4335] option from the mount to silence this warning. [ 89.284271][ T4335] ======================================================= [ 89.430199][ T4316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.472475][ T3547] Bluetooth: hci0: command 0x0409 tx timeout [ 89.488123][ T4316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.505600][ T4335] XFS: attr2 mount option is deprecated. [ 89.521658][ T4335] XFS: ikeep mount option is deprecated. [ 89.527306][ T4335] XFS: noikeep mount option is deprecated. [ 89.544250][ T13] usb 3-1: config 0 descriptor?? [ 89.557814][ T4349] loop0: detected capacity change from 0 to 1024 [ 89.608489][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.637998][ T4335] XFS (loop4): Mounting V5 Filesystem [ 89.665507][ T4349] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 89.669947][ T4316] team0: Port device team_slave_0 added [ 89.711146][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.738911][ T4316] team0: Port device team_slave_1 added [ 89.769460][ T25] audit: type=1800 audit(1720018163.356:36): pid=4349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.224" name="bus" dev="overlay" ino=21 res=0 errno=0 [ 89.781160][ T4335] XFS (loop4): Ending clean mount [ 89.802301][ T4316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.815888][ T25] audit: type=1804 audit(1720018163.386:37): pid=4349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.224" name="/newroot/9/file1/bus/bus" dev="overlay" ino=21 res=1 errno=0 [ 89.848674][ T4335] XFS (loop4): Quotacheck needed: Please wait. [ 89.855106][ T4316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.950473][ T4335] XFS (loop4): Quotacheck: Done. [ 89.953424][ T4316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.970274][ T4316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.977214][ T4316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.003250][ T4316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.030925][ T13] wacom 0003:056A:0031.0004: hidraw0: USB HID v0.00 Device [HID 056a:0031] on usb-dummy_hcd.2-1/input0 [ 90.093244][ T3514] XFS (loop4): Unmounting Filesystem [ 90.099689][ T3693] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 90.127622][ T4316] device hsr_slave_0 entered promiscuous mode [ 90.150092][ T4316] device hsr_slave_1 entered promiscuous mode [ 90.157822][ T4316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.169125][ T4316] Cannot create hsr debugfs directory [ 90.229502][ T3548] usb 3-1: USB disconnect, device number 4 [ 90.346347][ T3693] usb 4-1: Using ep0 maxpacket: 8 [ 90.454561][ T4085] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 90.475156][ T4085] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 90.490684][ T4085] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 90.508751][ T4085] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 90.556176][ T4085] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 90.559987][ T3693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 90.581942][ T4085] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 90.638602][ T4085] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 90.677804][ T4085] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 90.712041][ T4085] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 90.756043][ T4085] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 90.767031][ T3693] usb 4-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 90.786486][ T3693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.818055][ T3693] usb 4-1: Product: syz [ 90.883663][ T3693] usb 4-1: Manufacturer: syz [ 90.888273][ T3693] usb 4-1: SerialNumber: syz [ 90.914499][ T4391] Bluetooth: hci3: invalid length 0, exp 2 for type 22 [ 90.925060][ T3693] usb 4-1: config 0 descriptor?? [ 90.984959][ T3693] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 91.003306][ T3693] radio-si470x: probe of 4-1:0.0 failed with error -5 [ 91.014166][ T3693] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 91.165990][ T4401] xt_CT: No such helper "pptp" [ 91.196531][ T3693] usb 4-1: USB disconnect, device number 8 [ 91.349557][ T4316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.404625][ T4316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.478236][ T4316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.514912][ T4316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.559804][ T3547] Bluetooth: hci0: command 0x041b tx timeout [ 91.782509][ T144] device hsr_slave_0 left promiscuous mode [ 91.830510][ T144] device hsr_slave_1 left promiscuous mode [ 91.837611][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.856654][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.876012][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.959679][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.981840][ T144] device bridge_slave_1 left promiscuous mode [ 92.007873][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.050429][ T144] device bridge_slave_0 left promiscuous mode [ 92.064079][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.113419][ T144] device veth0_macvtap left promiscuous mode [ 92.139962][ T144] device veth1_vlan left promiscuous mode [ 92.170563][ T144] device veth0_vlan left promiscuous mode [ 92.297822][ T4418] loop2: detected capacity change from 0 to 40427 [ 92.404807][ T4418] F2FS-fs (loop2): Found nat_bits in checkpoint [ 92.548921][ T4418] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 93.346978][ T3830] attempt to access beyond end of device [ 93.346978][ T3830] loop2: rw=2049, want=45104, limit=40427 [ 93.369277][ T4434] loop4: detected capacity change from 0 to 65536 [ 93.413523][ T144] team0 (unregistering): Port device team_slave_1 removed [ 93.440272][ T144] team0 (unregistering): Port device team_slave_0 removed [ 93.510066][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.557483][ T4434] XFS (loop4): Mounting V5 Filesystem [ 93.571294][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.639827][ T3895] Bluetooth: hci0: command 0x040f tx timeout [ 93.669508][ T4434] XFS (loop4): Ending clean mount [ 93.762214][ T3514] XFS (loop4): Unmounting Filesystem [ 93.859346][ T144] bond0 (unregistering): Released all slaves [ 94.023978][ T4461] loop2: detected capacity change from 0 to 512 [ 94.028597][ T4316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.064462][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.080101][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.105497][ T4316] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.139289][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.142460][ T4461] EXT4-fs (loop2): Ignoring removed nobh option [ 94.148618][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.163399][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.170494][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.172723][ T4461] EXT4-fs (loop2): Mount option "nojournal_checksum" incompatible with ext2 [ 94.179146][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.195415][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.204181][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.211288][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.227044][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.258850][ T4316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.269410][ T4316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.288715][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.297543][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.311984][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.322133][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.330685][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.339017][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.347560][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.355793][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.364267][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.372742][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.398641][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.406796][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.489979][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.497579][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.537452][ T4316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.573431][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.587151][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.643774][ T4316] device veth0_vlan entered promiscuous mode [ 94.650968][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.659051][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.668049][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.675799][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.688305][ T4316] device veth1_vlan entered promiscuous mode [ 94.894631][ T4316] device veth0_macvtap entered promiscuous mode [ 94.909554][ T4316] device veth1_macvtap entered promiscuous mode [ 94.934973][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.953226][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.966731][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.979681][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.989541][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.008535][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.019296][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.055788][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.077238][ T4316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.119085][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.150677][ T4473] loop3: detected capacity change from 0 to 1024 [ 95.165335][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.179147][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.189990][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.199877][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.213470][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.229917][ T4316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.240804][ T4316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.252393][ T4316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.265761][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.289631][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.297743][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.306910][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.316297][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.317782][ T4473] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 95.324518][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.351865][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.360497][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.372303][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.392711][ T4316] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.408164][ T4316] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.408477][ T25] audit: type=1800 audit(1720018168.996:38): pid=4473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.250" name="bus" dev="overlay" ino=21 res=0 errno=0 [ 95.416977][ T4316] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.446532][ T4316] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.456618][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.467839][ T25] audit: type=1800 audit(1720018169.036:39): pid=4480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.250" name="bus" dev="overlay" ino=21 res=0 errno=0 [ 95.535513][ T3548] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 95.719879][ T3547] Bluetooth: hci0: command 0x0419 tx timeout [ 95.959497][ T3548] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.986072][ T3548] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 96.017557][ T3548] usb 5-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 96.077574][ T3548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.112314][ T3505] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 96.153490][ T3548] usb 5-1: config 0 descriptor?? [ 96.176832][ T3505] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 96.211365][ T3548] appletouch 5-1:0.0: Could not find int-in endpoint [ 96.239672][ T3548] appletouch: probe of 5-1:0.0 failed with error -5 [ 96.241440][ T3505] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 96.246956][ T3548] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 96.280295][ T3689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.288295][ T3689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.319837][ T3505] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 96.348845][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.360157][ T3505] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 96.373520][ T3689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.384064][ T3689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.384692][ T3505] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 96.404103][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.441432][ T21] usb 5-1: USB disconnect, device number 7 [ 96.446132][ T3505] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 96.480448][ T3505] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 96.527839][ T3505] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 96.550802][ T3505] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 96.895429][ T4486] loop2: detected capacity change from 0 to 40427 [ 97.038259][ T4486] F2FS-fs (loop2): Found nat_bits in checkpoint [ 97.095592][ T4486] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 97.129706][ T3505] syz-executor (3505) used greatest stack depth: 19096 bytes left [ 97.805313][ T25] audit: type=1326 audit(1720018171.396:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.4.257" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21645f9b99 code=0x0 [ 98.017284][ T3830] attempt to access beyond end of device [ 98.017284][ T3830] loop2: rw=2049, want=45104, limit=40427 [ 98.118155][ T4500] chnl_net:caif_netlink_parms(): no params data found [ 98.218812][ T4500] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.266625][ T4500] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.277241][ T4500] device bridge_slave_0 entered promiscuous mode [ 98.287519][ T4500] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.294978][ T4500] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.307912][ T4500] device bridge_slave_1 entered promiscuous mode [ 98.332552][ T4512] loop1: detected capacity change from 0 to 2048 [ 98.382546][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.411326][ T4512] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 98.452057][ T4512] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.453280][ T4500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.477689][ T4515] loop2: detected capacity change from 0 to 8 [ 98.553233][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.579372][ T4500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.634956][ T4500] team0: Port device team_slave_0 added [ 98.650425][ T4500] team0: Port device team_slave_1 added [ 98.684202][ T4515] SQUASHFS error: zstd decompression failed, data probably corrupt [ 98.693408][ T4515] SQUASHFS error: Failed to read block 0x4ec: -5 [ 98.699937][ T4515] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 98.707237][ T4515] SQUASHFS error: Unable to read inode 0x2011f [ 98.716263][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.728995][ T4500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.736396][ T4500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.770436][ T4500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.207844][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.437226][ T4500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.445860][ T4500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.473995][ T4500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.557140][ T4519] loop2: detected capacity change from 0 to 16 [ 99.623874][ T4500] device hsr_slave_0 entered promiscuous mode [ 99.635616][ T4500] device hsr_slave_1 entered promiscuous mode [ 99.646739][ T4500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.655824][ T4500] Cannot create hsr debugfs directory [ 99.950040][ T3701] Bluetooth: hci1: command 0x0409 tx timeout [ 100.224104][ T4519] erofs: (device loop2): mounted with root inode @ nid 36. [ 100.235379][ T4518] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 100.248277][ T4518] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -35 in[64, 4032] out[1851] [ 100.261275][ T4518] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 100.464938][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.569349][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.641171][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.740353][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.321504][ T4500] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.358511][ T4500] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.370533][ T4500] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.380937][ T4500] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.535613][ T4500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.619551][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.628364][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.638779][ T4571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 101.662186][ T4500] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.678310][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.689772][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.736658][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.743755][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.796396][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.806770][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.825369][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.843894][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.850999][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.867288][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.888142][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.914305][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.943657][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.997120][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.005091][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.025851][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.044539][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.060111][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.068452][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.076841][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.085698][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 102.117619][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.242883][ T4574] loop1: detected capacity change from 0 to 32768 [ 102.289039][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.300111][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.300324][ T4574] XFS: ikeep mount option is deprecated. [ 102.318523][ T4500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.355740][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.365223][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.484693][ T4574] XFS (loop1): Mounting V5 Filesystem [ 102.501444][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.510526][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.520569][ T4500] device veth0_vlan entered promiscuous mode [ 102.552474][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.562475][ T1629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.573001][ T4500] device veth1_vlan entered promiscuous mode [ 102.624209][ T4574] XFS (loop1): Ending clean mount [ 102.633396][ T4574] XFS (loop1): Quotacheck needed: Please wait. [ 102.642166][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.650890][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.658862][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.668517][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.716611][ T4574] XFS (loop1): Quotacheck: Done. [ 102.723300][ T4500] device veth0_macvtap entered promiscuous mode [ 102.780261][ T144] device hsr_slave_0 left promiscuous mode [ 102.791092][ T144] device hsr_slave_1 left promiscuous mode [ 102.820356][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.827762][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.872539][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.889662][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.902949][ T144] device bridge_slave_1 left promiscuous mode [ 102.909120][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.960929][ T144] device bridge_slave_0 left promiscuous mode [ 102.967119][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.005770][ T144] device hsr_slave_0 left promiscuous mode [ 103.030032][ T144] device hsr_slave_1 left promiscuous mode [ 103.040080][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.047468][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.079688][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.099721][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.112607][ T144] device bridge_slave_1 left promiscuous mode [ 103.138300][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.160826][ T144] device bridge_slave_0 left promiscuous mode [ 103.167001][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.229327][ T4316] XFS (loop1): Unmounting Filesystem [ 103.304177][ T4607] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 103.327357][ T144] device veth1_macvtap left promiscuous mode [ 103.338738][ T144] device veth0_macvtap left promiscuous mode [ 103.345113][ T4607] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 103.357346][ T144] device veth1_vlan left promiscuous mode [ 103.384999][ T144] device veth0_vlan left promiscuous mode [ 103.402773][ T144] device veth1_macvtap left promiscuous mode [ 103.408802][ T144] device veth0_macvtap left promiscuous mode [ 103.419891][ T144] device veth1_vlan left promiscuous mode [ 103.426545][ T144] device veth0_vlan left promiscuous mode [ 103.932593][ T144] team0 (unregistering): Port device team_slave_1 removed [ 103.946757][ T144] team0 (unregistering): Port device team_slave_0 removed [ 103.965213][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.981983][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.056540][ T144] bond0 (unregistering): Released all slaves [ 104.109673][ T3698] Bluetooth: hci1: command 0x040f tx timeout [ 104.192561][ T144] team0 (unregistering): Port device team_slave_1 removed [ 104.205028][ T144] team0 (unregistering): Port device team_slave_0 removed [ 104.218669][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.232190][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.288357][ T144] bond0 (unregistering): Released all slaves [ 104.328316][ T4500] device veth1_macvtap entered promiscuous mode [ 104.347234][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.369445][ T4500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.379996][ T4500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.392782][ T4500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.403312][ T4500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.413128][ T4500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.423612][ T4500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.434444][ T4500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.447292][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.456699][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.467920][ T4500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.479473][ T4500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.489938][ T4500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.502410][ T4500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.512502][ T4500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.523213][ T4500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.534265][ T4500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.543185][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.553502][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.564826][ T4500] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.574061][ T4500] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.583340][ T4500] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.592786][ T4500] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.671417][ T4618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'. [ 104.678510][ T4620] loop4: detected capacity change from 0 to 512 [ 104.714001][ T4619] loop2: detected capacity change from 0 to 2048 [ 104.770241][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.780510][ T4620] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.272: casefold flag without casefold feature [ 104.818472][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.845799][ T4620] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.272: missing EA_INODE flag [ 104.858214][ T4619] EXT4-fs (loop2): Ignoring removed orlov option [ 104.874424][ T372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.889047][ T4620] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.272: error while reading EA inode 2 err=-117 [ 104.905268][ T372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.917558][ T4619] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 104.936206][ T4620] EXT4-fs (loop4): 1 orphan inode deleted [ 104.943472][ T4620] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.963330][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.009335][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.309993][ T3698] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.549973][ T3698] usb 3-1: Using ep0 maxpacket: 32 [ 105.671042][ T3698] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 105.686844][ T3698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.714027][ T3698] usb 3-1: config 0 descriptor?? [ 105.771527][ T3698] gspca_main: sunplus-2.14.0 probing 041e:400b [ 106.190171][ T1066] Bluetooth: hci1: command 0x0419 tx timeout [ 106.408092][ T4689] loop3: detected capacity change from 0 to 512 [ 106.537342][ T4692] loop4: detected capacity change from 0 to 8 [ 106.898247][ T4692] SQUASHFS error: zlib decompression failed, data probably corrupt [ 106.906709][ T4692] SQUASHFS error: Failed to read block 0x9b: -5 [ 106.913171][ T4692] SQUASHFS error: Unable to read metadata cache entry [99] [ 106.920427][ T4692] SQUASHFS error: Unable to read inode 0x127 [ 106.990249][ T4689] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.264: casefold flag without casefold feature [ 107.128971][ T4689] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.264: missing EA_INODE flag [ 107.174152][ T4689] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.264: error while reading EA inode 2 err=-117 [ 107.194236][ T4689] EXT4-fs (loop3): 1 orphan inode deleted [ 107.200229][ T4689] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.216263][ T4690] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 107.404039][ T3698] gspca_sunplus: reg_w_riv err -71 [ 107.439036][ T3698] sunplus: probe of 3-1:0.0 failed with error -71 [ 107.467095][ T3698] usb 3-1: USB disconnect, device number 5 [ 107.957482][ T4735] loop4: detected capacity change from 0 to 64 [ 108.084758][ T25] audit: type=1800 audit(1720018181.676:41): pid=4735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.279" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 108.117004][ T4731] loop1: detected capacity change from 0 to 4096 [ 108.182081][ T4731] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 108.947137][ T4731] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 109.020266][ T4731] ntfs3: loop1: Failed to load $Extend. [ 109.085927][ T25] audit: type=1804 audit(1720018182.676:42): pid=4731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.276" name="/newroot/9/file0/bus" dev="loop1" ino=33 res=1 errno=0 [ 109.128879][ T3657] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22. [ 109.148586][ T4316] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 110.169627][ T1066] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 110.199698][ T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 110.469670][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 110.529805][ T1066] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.542448][ T1066] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.630190][ T1066] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.639202][ T1066] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.649870][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.649955][ T1066] usb 2-1: SerialNumber: syz [ 110.661235][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 110.678609][ T21] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 110.687799][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.697727][ T21] usb 5-1: config 0 descriptor?? [ 110.952003][ T1066] usb 2-1: 0:2 : does not exist [ 110.964422][ T1066] usb 2-1: USB disconnect, device number 8 [ 111.171926][ T21] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 111.182097][ T21] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 111.193499][ T21] microsoft 0003:045E:07DA.0005: no inputs found [ 111.200238][ T21] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 111.427833][ T3698] usb 5-1: USB disconnect, device number 8 [ 111.999890][ T21] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 111.999933][ T26] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 112.249798][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 112.329906][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 112.370555][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.400863][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.465315][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 112.478693][ T26] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 112.488061][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.504347][ T26] usb 4-1: config 0 descriptor?? [ 112.669749][ T21] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 112.678866][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.686896][ T21] usb 2-1: Product: syz [ 112.691106][ T21] usb 2-1: Manufacturer: syz [ 112.695683][ T21] usb 2-1: SerialNumber: syz [ 112.704932][ T21] usb 2-1: config 0 descriptor?? [ 112.763222][ T21] usb 2-1: Found UVC 0.00 device syz (046d:0721) [ 112.769602][ T21] usb 2-1: No valid video chain found. [ 112.967033][ T21] usb 2-1: USB disconnect, device number 9 [ 112.993105][ T26] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 113.001794][ T26] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 113.014076][ T26] microsoft 0003:045E:07DA.0006: no inputs found [ 113.020616][ T26] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 113.246340][ T26] usb 4-1: USB disconnect, device number 9 [ 113.594104][ T25] audit: type=1326 audit(1720018187.186:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21645f9b99 code=0x7ffc0000 [ 113.626522][ T25] audit: type=1326 audit(1720018187.186:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21645f9b99 code=0x7ffc0000 [ 113.701908][ T25] audit: type=1326 audit(1720018187.296:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21645fb9b7 code=0x7ffc0000 [ 113.763125][ T25] audit: type=1326 audit(1720018187.296:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f21645fb92c code=0x7ffc0000 [ 113.787703][ T25] audit: type=1326 audit(1720018187.296:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f21645fb864 code=0x7ffc0000 [ 114.006869][ T25] audit: type=1326 audit(1720018187.296:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f21645fb864 code=0x7ffc0000 [ 114.059115][ T25] audit: type=1326 audit(1720018187.296:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f21645f88ca code=0x7ffc0000 [ 114.105634][ T25] audit: type=1326 audit(1720018187.296:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21645f9b99 code=0x7ffc0000 [ 114.179426][ T25] audit: type=1326 audit(1720018187.296:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21645f9b99 code=0x7ffc0000 [ 114.679663][ T3698] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 114.764523][ T4793] loop3: detected capacity change from 0 to 32768 [ 114.854845][ T4793] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop3 scanned by syz.3.293 (4793) [ 114.867123][ T26] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 114.888165][ T4793] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 114.915461][ T4793] BTRFS info (device loop3): turning on flush-on-commit [ 114.926490][ T4793] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 114.938462][ T3698] usb 5-1: Using ep0 maxpacket: 16 [ 114.947125][ T4793] BTRFS info (device loop3): trying to use backup root at mount time [ 114.956631][ T4793] BTRFS info (device loop3): disabling tree log [ 114.966400][ T4793] BTRFS info (device loop3): enabling tree log [ 114.973886][ T4793] BTRFS info (device loop3): use zlib compression, level 3 [ 115.004572][ T4793] BTRFS info (device loop3): using free space tree [ 115.023574][ T4793] BTRFS info (device loop3): has skinny extents [ 115.053015][ T4793] BTRFS info (device loop3): enabling ssd optimizations [ 115.061839][ T3698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 115.075808][ T4793] BTRFS info (device loop3): checking UUID tree [ 115.083931][ T3698] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 115.094385][ T3698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.116054][ T3698] usb 5-1: config 0 descriptor?? [ 115.259892][ T26] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 115.479826][ T26] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 115.489046][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.500513][ T26] usb 2-1: Product: syz [ 115.504661][ T26] usb 2-1: Manufacturer: syz [ 115.509536][ T26] usb 2-1: SerialNumber: syz [ 115.561772][ T26] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 115.583327][ T4790] udc-core: couldn't find an available UDC or it's busy [ 115.590302][ T4790] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 115.601644][ T3698] hid (null): unknown global tag 0x83 [ 115.607044][ T3698] hid (null): unknown global tag 0xc [ 115.617094][ T3698] hid-generic 0003:0158:0100.0007: unknown main item tag 0x1 [ 115.624521][ T3698] hid-generic 0003:0158:0100.0007: unexpected long global item [ 115.632324][ T3698] hid-generic: probe of 0003:0158:0100.0007 failed with error -22 [ 115.765751][ T3547] usb 2-1: USB disconnect, device number 10 [ 115.802858][ T3698] usb 5-1: USB disconnect, device number 9 [ 116.945031][ T4838] loop4: detected capacity change from 0 to 8 [ 117.455775][ T4838] SQUASHFS error: zlib decompression failed, data probably corrupt [ 117.463904][ T4838] SQUASHFS error: Failed to read block 0x9b: -5 [ 117.470246][ T4838] SQUASHFS error: Unable to read metadata cache entry [99] [ 117.477483][ T4838] SQUASHFS error: Unable to read inode 0x127 [ 119.214871][ T4903] loop4: detected capacity change from 0 to 256 [ 119.602364][ T4903] exfat: Deprecated parameter 'utf8' [ 119.689053][ T4903] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: repeatedly failed to execute the program proc=0 req=241 state=1 status=1 (errno 9: Bad file descriptor) [ 120.394421][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.495404][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.586373][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.666798][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.854265][ T9] tipc: Disabling bearer [ 120.867668][ T9] tipc: Left network mode [ 121.658192][ T9] device hsr_slave_0 left promiscuous mode [ 121.665707][ T9] device hsr_slave_1 left promiscuous mode [ 121.672728][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.680309][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.688459][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.696177][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.705459][ T9] device bridge_slave_1 left promiscuous mode [ 121.712728][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.727861][ T9] device bridge_slave_0 left promiscuous mode [ 121.734240][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.745931][ T9] device veth1_macvtap left promiscuous mode [ 121.752543][ T9] device veth0_macvtap left promiscuous mode [ 121.758554][ T9] device veth1_vlan left promiscuous mode [ 121.766517][ T9] device veth0_vlan left promiscuous mode [ 121.835319][ T9] bond1 (unregistering): Released all slaves [ 121.905355][ T9] team0 (unregistering): Port device team_slave_1 removed [ 121.916419][ T9] team0 (unregistering): Port device team_slave_0 removed [ 121.930678][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.943897][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.998175][ T9] bond0 (unregistering): Released all slaves [ 123.647569][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.704775][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.775565][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.814840][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.900248][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.955706][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.997433][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.055927][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.167888][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.213832][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.258360][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.328348][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.515843][ T9] device hsr_slave_0 left promiscuous mode [ 125.523880][ T9] device hsr_slave_1 left promiscuous mode [ 125.530951][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.538314][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.547188][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.555006][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.565608][ T9] device bridge_slave_1 left promiscuous mode [ 125.572286][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.580829][ T9] device bridge_slave_0 left promiscuous mode [ 125.586961][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.597557][ T9] device hsr_slave_0 left promiscuous mode [ 125.603984][ T9] device hsr_slave_1 left promiscuous mode [ 125.610396][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.617755][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.626106][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.633574][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.641940][ T9] device bridge_slave_1 left promiscuous mode [ 125.648045][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.656231][ T9] device bridge_slave_0 left promiscuous mode [ 125.662659][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.674785][ T9] device hsr_slave_0 left promiscuous mode [ 125.681040][ T9] device hsr_slave_1 left promiscuous mode [ 125.687180][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.694652][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.703352][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.710873][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.718984][ T9] device bridge_slave_1 left promiscuous mode [ 125.725305][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.733294][ T9] device bridge_slave_0 left promiscuous mode [ 125.739447][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.754538][ T9] device veth1_macvtap left promiscuous mode [ 125.761179][ T9] device veth0_macvtap left promiscuous mode [ 125.767190][ T9] device veth1_vlan left promiscuous mode [ 125.773052][ T9] device veth0_vlan left promiscuous mode [ 125.779486][ T9] device veth1_macvtap left promiscuous mode [ 125.785733][ T9] device veth0_macvtap left promiscuous mode [ 125.791927][ T9] device veth1_vlan left promiscuous mode [ 125.797671][ T9] device veth0_vlan left promiscuous mode [ 125.805983][ T9] device veth1_macvtap left promiscuous mode [ 125.812036][ T9] device veth0_macvtap left promiscuous mode [ 125.818036][ T9] device veth1_vlan left promiscuous mode [ 125.823911][ T9] device veth0_vlan left promiscuous mode [ 126.072438][ T9] team0 (unregistering): Port device team_slave_1 removed [ 126.085859][ T9] team0 (unregistering): Port device team_slave_0 removed [ 126.096992][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.109108][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.159861][ T9] bond0 (unregistering): Released all slaves [ 126.254774][ T9] team0 (unregistering): Port device team_slave_1 removed [ 126.266869][ T9] team0 (unregistering): Port device team_slave_0 removed [ 126.278432][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.291368][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.341064][ T9] bond0 (unregistering): Released all slaves [ 126.420717][ T9] team0 (unregistering): Port device team_slave_1 removed [ 126.435395][ T9] team0 (unregistering): Port device team_slave_0 removed [ 126.447136][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.462697][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.507833][ T9] bond0 (unregistering): Released all slaves