last executing test programs: 11m38.362466808s ago: executing program 3 (id=1246): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) 11m37.796002068s ago: executing program 3 (id=1249): mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0\x00', 0x166) 11m37.139417076s ago: executing program 3 (id=1250): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000280)=""/251, 0xfb) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/197, 0xc5}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000040), 0x2) 11m35.671303037s ago: executing program 3 (id=1253): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000f00)='./file0\x00', 0x0, 0x8b7448, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 11m34.83105875s ago: executing program 3 (id=1256): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r1 = syz_open_pts(r0, 0xa0200) dup3(r1, r0, 0x0) io_setup(0x8, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000013c0)={0x6, 0x0, 0x5, 0xf5a, 0x10, "b4de5198626f6246f3719a1370ddaf6bd0bced", 0x101, 0x7ff}) 11m33.992592532s ago: executing program 3 (id=1260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x2, 0x3c00000000000000, 0x9, 0x9, 0x9, 0x403, 0x0, 0x7], 0x25000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeeee000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x7f, 0x2, 0x89}, {0x1, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x83, 0xa4, 0x5, 0x5}, {0x1, 0xdddd0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x8f, 0xe}, {0xeeee0000, 0xffffffff, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x7}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0x5, 0x82, 0xe, 0x81, 0x7}, {0xeeef0000, 0xeeee0000, 0xd, 0x5, 0x7, 0x15, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0x4, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x10, 0xb0, 0x9}, {0x3000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x1, 0x1500, 0x3000, [0x9, 0x204, 0x5b, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m31.852817536s ago: executing program 32 (id=1260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x2, 0x3c00000000000000, 0x9, 0x9, 0x9, 0x403, 0x0, 0x7], 0x25000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeeee000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x7f, 0x2, 0x89}, {0x1, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x83, 0xa4, 0x5, 0x5}, {0x1, 0xdddd0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x8f, 0xe}, {0xeeee0000, 0xffffffff, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x7}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0x5, 0x82, 0xe, 0x81, 0x7}, {0xeeef0000, 0xeeee0000, 0xd, 0x5, 0x7, 0x15, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0x4, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x10, 0xb0, 0x9}, {0x3000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x1, 0x1500, 0x3000, [0x9, 0x204, 0x5b, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m19.662182783s ago: executing program 1 (id=2133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) 6m14.243818847s ago: executing program 1 (id=2142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x3, 0xbe, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000000c0), 0x0}, 0x20) 6m12.74368059s ago: executing program 1 (id=2145): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m7.387416903s ago: executing program 1 (id=2152): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000040)={[{@volatile}]}) 6m6.347289527s ago: executing program 1 (id=2156): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="1b", 0x1}], 0x1, 0x0, 0x0, 0x4855}, 0x24000052) 6m3.62227927s ago: executing program 1 (id=2161): r0 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=macgaelic,shortname=lower,utf8=1,utf8=1,check=strict,nonumtail=0,rodir,shortname=winnt,allow_utime=0000000077604,shortname=win95,nonumtail=0,utf8=0,shortname=lower,shortname=mixed,\x00'], 0x91, 0x369, &(0x7f0000001ac0)="$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") mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@local, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62050200) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) syz_pidfd_open(r4, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r5, 0x4b4d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 5m46.973037802s ago: executing program 33 (id=2161): r0 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=macgaelic,shortname=lower,utf8=1,utf8=1,check=strict,nonumtail=0,rodir,shortname=winnt,allow_utime=0000000077604,shortname=win95,nonumtail=0,utf8=0,shortname=lower,shortname=mixed,\x00'], 0x91, 0x369, &(0x7f0000001ac0)="$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") mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@local, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62050200) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) syz_pidfd_open(r4, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r5, 0x4b4d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 5m10.310600935s ago: executing program 4 (id=2223): r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x80800) r1 = accept$unix(r0, &(0x7f0000000140)=@abs, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000200)=""/121, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$eJzs3c+LG1UcAPDvZHf7W9tCKSoiCz1Yqc12d/1RwUM9ihYLeq9hM13KJk3ZZEt3Ldge7MWLFEHEgnjXu8fiP+BfUdBCkbLowUtkspNt2k266TZttubzgSnvZSZ5852Z7+ubvFkSwMiazP4pRLwcEd8kEfsjIsnXjUe+cnJtu9V7V+ayJYlm89O/ktZ2Wb39We337c0rL0XEb19FHCtsbLe+vLJQqlTSxbw+1ahenKovrxw/Xy3Np/PphZlm8+TbszPvvfvOwGJ948w/339y68OTXx9Z/e6XOwdvJHEq9uXrOuN4Alc7K5MxmR+TiTj10IbTA2hsO0mGvQNsyVie5xOR9QH7YyzPeuD/78uIaAIjKpH/MKLa44D2vf2A7oOfG3c/WLsB2hj/+Np3I7GrdW+0ZzV54M4ou989MID2szZ+/fPmjWyJwX0PAbCpq9ci4sT4+Mb+L8n7v6070cc2D7eh/4Nn51Y2/nmz2/insD7+iS7jn71dcncrNs//wp0BNNNTNv57v+v4d33S6sBYXnuhNeabSM6dr6RZ3/ZiRByNiZ1Z/VHzOSdXbzd7resc/2VL1n57LJjvx53xnQ++p1xqlJ4k5k53r0W80nX8m6yf/6TL+c+Ox5k+2zic3nyt17rN43+6mj9FvN71/N+f0Uq6zk/Ozubzk1Ot62GqfVVs9Pf1w7/3an/Y8Wfnf8+j4z+QdM7X1h+/jR93/Zv2WvdA/NH/9b8j+axV3pG/drnUaCxOR+xIPt74+sz997br7e2z+I8eeXT/1+363x0Rn/cZ//VDP7/aV/xDOv/lxzr/j1+4/dEXP/Rqv7/+761W6Wj+Sj/9X787+CTHDgAAAAAAALabQkTsi6RQXC8XCsXi2vMdh2JPoVKrN46dqy1dKMe1fWvPPxTaM937O56HmM6fh23XZx6qz0bEwYj4dmx3q16cq1XKww4eAAAAAAAAAAAAAAAAAAAAtom9Pf7+P/PH2LD3Dnjq/OQ3jK5N838Qv/QEbEv+/4fRJf9hdMl/GF3yH0aX/IfRJf9hdMl/GF3yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbqzOnT2dJcvXdlLquXLy0vLdQuHS+n9YVidWmuOFdbvFicr9XmK2lxrlbd7PMqtdrF6ZlYujzVSOuNqfryytlqbelC4+z5amk+PZtOPJOoAAAAAAAAAAAAAAAAAAAA4PlSX15ZKFUq6aKCwpYK49tjNxQGXBh2zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9/0XAAD//zWdOco=") ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fspick(0xffffffffffffff9c, 0x0, 0x0) r7 = socket$inet(0x2, 0x80000, 0x200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, 0x0, 0x0) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r6, 0x8070587c, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_nanosleep(0x1, 0x0, &(0x7f0000002000), 0x0) fallocate(0xffffffffffffffff, 0x11, 0x0, 0x7fffffc) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50) 5m3.505046322s ago: executing program 4 (id=2227): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4, 0x6c8d, 0xffffffffffffffff, 0x2}, 0x50) 4m58.796395617s ago: executing program 4 (id=2234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 4m57.918601267s ago: executing program 4 (id=2235): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000001800)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) finit_module(r0, 0x0, 0x0) 4m56.286737857s ago: executing program 4 (id=2239): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xffff, r3, 0x0}]) 4m52.521944965s ago: executing program 4 (id=2244): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = eventfd2(0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000001840)={0x0, 0x0, 0xfe, 0x0, 0x200, r2, 0x0, 0x0, 0x4, 0x0, 0x1, r2}]) 4m36.747952012s ago: executing program 34 (id=2244): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = eventfd2(0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000001840)={0x0, 0x0, 0xfe, 0x0, 0x200, r2, 0x0, 0x0, 0x4, 0x0, 0x1, r2}]) 2m49.419116946s ago: executing program 0 (id=2363): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2m48.774034248s ago: executing program 0 (id=2364): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="28000000040000000000000000000000010000000000e4"], 0x28) 2m47.692365072s ago: executing program 0 (id=2365): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfe, 0x1501, &(0x7f00000002c0)="$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") open(&(0x7f0000001080)='./bus\x00', 0x185242, 0x77) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001800)=""/249, 0xf9) 2m46.978788118s ago: executing program 0 (id=2368): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 2m45.427351602s ago: executing program 0 (id=2370): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x3, "bcfe66"}, 0x0}) 2m44.277838274s ago: executing program 0 (id=2372): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x62040200) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x6d5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000180)='./bus\x00', 0x2000884, &(0x7f0000000500)={[{@shortname_winnt}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x237}}, {@utf8}, {@numtail}, {@numtail}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8no}, {@utf8}, {@numtail}, {@numtail}, {@shortname_mixed}, {@utf8no}, {@utf8no}]}, 0x1, 0x289, &(0x7f00000001c0)="$eJzs3c1qA1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE7hx6/O4EV/AB1Dc2YU4ks7kTyctkbQp+n2bHs69J/fM3KHtZm4+eWVwfnpxdXbz5c/RbCaxdRAHcZtEJ7Zi4uuo9NOv1XkA4Jm7zfP4LS80itT14oz6ksp069GbAwAexfzf/033AgA8jfc/+PCdw+Pjo/eyrBkx+GbYTaL4WYwfnsVn0Y9e7EU7/ojIp4r4rbePjyLNxjrx2mA07I4rBx//UH7+4S8Rd/X70Y5Odf1+VpirHw279XihXP+gH713v492vFRd/8as/jYv66O7Ha+/Otf/brTjx0/jIvpxGsX/OpP6r/az7M3829+/+GicHdcno2G3EacLdyqvPfXeAAAAAAAAAAAAAAAAAAAAAADw37WbTXUWz9+ZHPx/z/g95wON5s7n2cuyLE+K+bP6NF5OI93ktQMAAAAAAAAAAAAAAAAAAMBzcXX9+flJv9+7XGswea2/Yij+XMw0ImLJ56QPr7WzaodRK1vrJxGrXVc9GneVD0+urXjHWuN+epdJGuvbgmSaac0P7USx1jjTKoK5zGpLfPfPjWvGXTB5us5PkmWbOwmaVQ/JGoK84vGrLa3a/numVV5BxeTWPatvv/ives7bS4aSiKhPb2Y51KqeXF/vPXy630EAAAAAAAAAAAAAAAAAAEBh9tJvxeDNBhoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA2Yff//CsGoLF42J6+NgzTKzIYvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwIAAP//XAxp4w==") r4 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414"], 0x18) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000000)={0xa0000001}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) fstat(r7, &(0x7f0000000700)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="40090500000049a234b85bb600dda3999fb90d057cb682b4bab08741236f0117ecef16597dac67a53c685eb8cfe62e8383fa6f6db05d1eb45af3cb6a20fc2b000000000000000000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2m28.634711494s ago: executing program 35 (id=2372): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x62040200) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x6d5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000180)='./bus\x00', 0x2000884, &(0x7f0000000500)={[{@shortname_winnt}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x237}}, {@utf8}, {@numtail}, {@numtail}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8no}, {@utf8}, {@numtail}, {@numtail}, {@shortname_mixed}, {@utf8no}, {@utf8no}]}, 0x1, 0x289, &(0x7f00000001c0)="$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") r4 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414"], 0x18) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000000)={0xa0000001}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) fstat(r7, &(0x7f0000000700)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="40090500000049a234b85bb600dda3999fb90d057cb682b4bab08741236f0117ecef16597dac67a53c685eb8cfe62e8383fa6f6db05d1eb45af3cb6a20fc2b000000000000000000"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1m49.674752704s ago: executing program 5 (id=2430): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000780)) 1m49.078452454s ago: executing program 5 (id=2432): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m48.298828465s ago: executing program 5 (id=2434): unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@volatile}], [], 0x2c}) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fdatasync(r1) 1m47.528246794s ago: executing program 5 (id=2435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, 0x0, 0x2000004) 1m46.641663173s ago: executing program 5 (id=2437): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x5505, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x183341, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000040), &(0x7f0000000180)={0x0, 0xfb, 0x78, 0x0, 0x41, "ca617b1cbc4d145e710e6bd5c24bf43d", "3e4845feaa6f848bb86e461c19609c143fbe7ed7026e3213b0dcf4d50d82e4c440edb1b3a04b1633750e075a3b79d6f8db49a76e658d8dcfa0df98fd4e1b9c352a5eccd1de69f8629d5910ad6406d6286eac42c42a6912bd0e3cd6d381d90bf8a34ea1"}, 0x78, 0x1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x86}) 1m42.698306045s ago: executing program 5 (id=2439): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000300)={[{@test_dummy_encryption}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x2}}]}, 0x3, 0x470, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) getrlimit(0x7, &(0x7f0000000000)) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000001c00), 0x12) write$binfmt_elf64(r3, &(0x7f0000002700)=ANY=[], 0xaa4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) ioprio_set$pid(0x2, 0x0, 0x4000) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0xa8002, 0x0) splice(r6, 0x0, r5, 0x0, 0x2000000000000004, 0x9) 1m26.350956901s ago: executing program 36 (id=2439): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000300)={[{@test_dummy_encryption}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x2}}]}, 0x3, 0x470, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) getrlimit(0x7, &(0x7f0000000000)) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000001c00), 0x12) write$binfmt_elf64(r3, &(0x7f0000002700)=ANY=[], 0xaa4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) ioprio_set$pid(0x2, 0x0, 0x4000) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0xa8002, 0x0) splice(r6, 0x0, r5, 0x0, 0x2000000000000004, 0x9) 18.977248602s ago: executing program 2 (id=2478): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000069c0)=ANY=[], 0x1, 0x5538, &(0x7f000000c0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f00000005c0)={[{@delalloc}, {@data_err_abort}, {@bsdgroups}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x642f}}, {@minixdf}, {@nouid32}, {@quota}, {@i_version}, {@stripe={'stripe', 0x3d, 0x9}}, {@dioread_nolock}], [{@flag='ro'}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1182, 0x9b) write(r1, &(0x7f0000000440)="e933adf1e68a56280d702f73146e50607121bd06d6", 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000080), 0x4) 15.653838686s ago: executing program 2 (id=2479): keyctl$restrict_keyring(0xf, 0xfffffffffffffffc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x452, 0x189b00) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) shutdown(r0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x9, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x5}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_extract_tcp_res(0x0, 0x2, 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 13.053889408s ago: executing program 2 (id=2480): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x2000000, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d6, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3502, 0x3, 0x3, 0x10, 0x9, 0x0, 0x10003}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}], 0x20}, 0x200040c4) 11.167087062s ago: executing program 2 (id=2481): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 9.877141869s ago: executing program 2 (id=2482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@mpls_getnetconf={0x5c, 0x52, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1800000}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x0) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2044d0, &(0x7f00000005c0)={[{@noauto_da_alloc}]}, 0x3, 0x4ab, &(0x7f0000000080)="$eJzs3DtsHEUfAPD/nu34+/KyCeGREMAQEBEPO3ECSYHEQ0KiAIQERSgPx4lCLjGKjYQjixgUhQYJIiFaBKJBUFNQUSGgQqKhgB5FipCbhFSH9m7vOJ99j1wuPj9+P2m9M3t7NzO7O7szO94NYMMaSf8kEVsj4o+IGIqIXP0KI+XZtYW5iX8W5iaSKBZf+ztJvxZXF+YmKqsm2XxLOdKfznIXknh2mXSnZ8+dyhcKk2ez+NjM6bfHpmfPPXHydP7E5InJM+NHjhw6eODwU+NPdqWct6V53f3e1J5dL75x6eWJo5fe/PnbpCbTteWo2wIdGoj5mm1S7+EupLCabKsJJ/1NV+3GxqVLBiNKFXWgVP+Hou/C9upnQ/HCBz3NHHBLFYvF4njjj+eLwDqWRK9zAPRG5UJ/deGzibQPvLgfvP5dea7cAUrLfS2byp2e/mpHdaCuf9tNcxFxdP765+kUS+5DAAB03w9p++fxcrtjcfsvF3fWrLc9GxsazsZSdkTE7RGxMyLuiCite1dE3H2D6Y/UxZe2f3KXOypYm9L239PZ2FZlytKtrDLcl8W2lco/kBw/WZjcn22TfTEwmMYPLPvrSZQGgeK3jxulP1LT/kunNP1KWzDLx+X+wcXfOZafyd90wTNX3o/Y3b9c+bMBvGwMa1dE7O4wjZOPfr1n8ZK+aqh1+ZtoPs7UluIXEY+U9/981JW/Imk+Pjn2vyhM7h+rHBVL/fLrxVcbpX9T5e+CdP9vXvb4r5Z/OKkdr51e8hObWqVx8c8PG/ZpRiKeiQ6O/03J64sSfzc/M3O9GLEpeWnJ8rM1N7gr8dL8QLn8+/YuX/93xH9b4p6ISA/ieyPivoi4P9t3D0TEgxGxt0n5f3r+obealL+n+z++KZ+h2tr/lf1QPhCqR0SrQN+pH79vlHx7579DpdC+bEk75792M9jhVgMAAIA1JRcRWyPJjVbDudzoaPl/+HfG5lxhanrmseNT75w5Vn5GYDgGcpU7XUNZPLL7n8PleKn3PV6aR5zP7pcezO4bf9r3/1J8dGKqcKzXhYcNbkuD+p/6q6/XuQNuuS6MowFrVLP6/+XhFcwIsOI6v/5rOcBa16IWe2EDrGOu4rBxLVf/z/cgH8DKa3z9n9Q0gHWuWsk/aWPlmse96h/eBNYeF3nYuFrX/1du1fuvgN5p/yn+1RJIkkVL4quI5t9Kep/nDgIfrY5sNA5ErtFHgzf6goieBPKrIxutApWKOnvuVH/bb7WYLZ7PFwq/f3czqff2vAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAt/wYAAP//gN/guA==") 0s ago: executing program 2 (id=2483): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1d0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) kernel console output (not intermixed with test programs): vice number 52 using dummy_hcd [ 863.583023][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.623285][ T5828] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 863.646320][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.715884][ T5828] usb 5-1: config 0 descriptor?? [ 864.070859][ T5828] usbhid 5-1:0.0: can't add hid device: -71 [ 864.124714][ T5828] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 864.175236][ T5828] usb 5-1: USB disconnect, device number 52 [ 864.609933][ T5828] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 865.424182][ T5828] usb 5-1: Using ep0 maxpacket: 16 [ 865.447332][T12429] netlink: 'syz.0.2109': attribute type 29 has an invalid length. [ 865.470753][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.541218][ T5828] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice= 0.40 [ 865.565241][T12432] netlink: 'syz.0.2109': attribute type 29 has an invalid length. [ 865.587984][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.731337][ T5828] usb 5-1: config 0 descriptor?? [ 866.167996][ T5828] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 866.405927][ T5828] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 866.744285][ T5828] usbhid 5-1:0.0: can't add hid device: -32 [ 866.799155][ T5828] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 867.013522][ T5828] usb 5-1: USB disconnect, device number 53 [ 867.312474][T12435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 868.150647][T12451] loop4: detected capacity change from 0 to 512 [ 868.300460][T12451] EXT4-fs (loop4): Test dummy encryption mode enabled [ 868.345970][T12451] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 868.386195][T12451] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 868.819701][T12460] netlink: 'syz.0.2122': attribute type 29 has an invalid length. [ 868.864358][T12460] netlink: 'syz.0.2122': attribute type 29 has an invalid length. [ 868.988427][T12451] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2118: bad orphan inode 131083 [ 869.023853][T12451] loop4: lost filesystem error report for type 5 error -117 [ 869.028837][T12451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 873.337498][ T5779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.445307][T12481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2127'. [ 877.103445][T12505] netlink: 'syz.0.2136': attribute type 29 has an invalid length. [ 877.176099][T12506] loop5: detected capacity change from 0 to 256 [ 877.243147][T12508] netlink: 'syz.0.2136': attribute type 29 has an invalid length. [ 877.256646][T12506] exfat: Deprecated parameter 'utf8' [ 877.262330][T12506] exfat: Deprecated parameter 'utf8' [ 877.451187][T12506] exfat: Deprecated parameter 'utf8' [ 877.734370][T12506] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 879.982426][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.989638][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 883.210267][ T5828] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 887.154827][ T5828] usb 5-1: device descriptor read/all, error -71 [ 887.452590][T12552] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 887.521439][T12552] overlayfs: missing 'lowerdir' [ 887.958560][T12559] binder: 12557:12559 ioctl c0306201 0 returned -14 [ 888.025497][T12559] binder: 12557:12559 ioctl c0306201 200000000900 returned -14 [ 890.866431][T12576] cgroup: No subsys list or none specified [ 891.021805][T12575] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 893.771431][T12588] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2164'. [ 893.954011][ T5306] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 894.144496][ T5306] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 894.176519][ T5306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.256409][ T5306] usb 6-1: config 0 descriptor?? [ 894.412974][ T5306] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 895.490635][T12586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.584773][T12586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.811404][ T5306] gspca_cpia1: usb_control_msg 03, error -110 [ 895.819081][ T5306] gspca_cpia1: usb_control_msg 01, error -32 [ 895.826647][ T5306] gspca_cpia1: usb_control_msg 01, error -32 [ 895.834175][ T5306] gspca_cpia1: usb_control_msg 01, error -32 [ 895.843432][ T5306] gspca_cpia1: usb_control_msg 01, error -32 [ 895.849796][ T5306] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 897.914700][T12603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2167'. [ 898.685300][T12603] syz.2.2167 (12603) used greatest stack depth: 2000 bytes left [ 899.378159][ T24] usb 6-1: USB disconnect, device number 29 [ 899.820877][T12605] overlayfs: failed to clone upperpath [ 900.770329][ T5306] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 901.556482][ T5306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.589323][ T5306] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 901.623935][ T5306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.690226][ T5306] usb 5-1: config 0 descriptor?? [ 902.852099][ T5306] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 903.485715][ T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 903.525958][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 903.695498][ T24] usb 6-1: device descriptor read/64, error -32 [ 903.778266][ T5306] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0008/input/input13 [ 904.030237][ T24] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 904.293986][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 904.401329][ T24] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 904.493138][ T24] usb 6-1: config 0 has no interface number 0 [ 904.652995][ T24] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 904.754514][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.837321][ T24] usb 6-1: Product: syz [ 904.933820][ T24] usb 6-1: Manufacturer: syz [ 904.944661][ T24] usb 6-1: SerialNumber: syz [ 905.074619][ T24] usb 6-1: config 0 descriptor?? [ 905.164383][ T5306] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 905.181846][ T24] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 905.573954][ T5306] usb 5-1: USB disconnect, device number 56 [ 905.784455][T12624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.875328][T12624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.304466][T12677] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2176'. [ 906.570917][ T24] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 906.654794][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 909.146920][ T24] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 909.379008][ T24] usb 6-1: USB disconnect, device number 31 [ 909.488226][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 909.605703][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 909.684627][ T5828] hid_parser_main: 23 callbacks suppressed [ 909.684746][ T5828] hid-generic 0003:0004:FFFFFFFE.0009: unknown main item tag 0x0 [ 909.720174][ T24] quatech2 6-1:0.51: device disconnected [ 909.783492][ T5828] hid-generic 0003:0004:FFFFFFFE.0009: unknown main item tag 0x0 [ 909.843101][ T5828] hid-generic 0003:0004:FFFFFFFE.0009: unknown main item tag 0x0 [ 909.876319][ T5828] hid-generic 0003:0004:FFFFFFFE.0009: unknown main item tag 0x0 [ 909.928731][ T5828] hid-generic 0003:0004:FFFFFFFE.0009: unknown main item tag 0x0 [ 909.977282][ T5828] hid-generic 0003:0004:FFFFFFFE.0009: unknown main item tag 0x0 [ 910.201412][ T5828] hid-generic 0003:0004:FFFFFFFE.0009: unknown main item tag 0x0 [ 910.248474][ T5828] hid-generic 0003:0004:FFFFFFFE.0009: unknown main item tag 0x0 [ 910.274864][ T5828] hid-generic 0003:0004:FFFFFFFE.0009: unknown main item tag 0x0 [ 910.314115][ T5828] hid-generic 0003:0004:FFFFFFFE.0009: unknown main item tag 0x0 [ 910.394616][ T5828] hid-generic 0003:0004:FFFFFFFE.0009: hidraw0: USB HID v4.00 Device [syz0] on syz1 [ 915.029127][T12709] fido_id[12709]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 916.185305][T10806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 916.235233][T10806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 916.242909][ T5828] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 916.287766][T10806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 916.355500][T10806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 916.393001][T10806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 916.654365][ T5828] usb 5-1: Using ep0 maxpacket: 32 [ 916.783954][ T5828] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 917.840828][ T5828] usb 5-1: config 0 has no interface number 0 [ 917.924482][ T5828] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 917.938635][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.045231][ T5828] usb 5-1: Product: syz [ 918.309611][ T5828] usb 5-1: Manufacturer: syz [ 918.371896][ T5828] usb 5-1: SerialNumber: syz [ 918.484077][T10806] Bluetooth: hci5: command tx timeout [ 918.514684][ T5828] usb 5-1: config 0 descriptor?? [ 918.690259][ T5828] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 920.570925][T10806] Bluetooth: hci5: command tx timeout [ 920.651686][ T5828] usb 5-1: qt2_attach - failed to power on unit: -71 [ 920.765806][ T5828] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 921.038692][ T5828] usb 5-1: USB disconnect, device number 57 [ 921.074051][T12787] loop2: detected capacity change from 0 to 512 [ 921.571338][T12787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 921.772720][T12787] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 921.798686][T12782] fido_id[12782]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 922.638026][T10806] Bluetooth: hci5: command tx timeout [ 923.161748][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.714199][T10806] Bluetooth: hci5: command tx timeout [ 924.904812][T12769] chnl_net:caif_netlink_parms(): no params data found [ 939.491834][T12884] loop5: detected capacity change from 0 to 1024 [ 939.591132][T12884] EXT4-fs: Ignoring removed orlov option [ 939.891032][T12884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 940.368411][T12894] loop4: detected capacity change from 0 to 256 [ 940.456580][T12894] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 940.569031][T12894] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 940.660623][T12769] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.698975][T12769] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.732585][T12894] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 940.760245][T12769] bridge_slave_0: entered allmulticast mode [ 940.822320][T12894] exFAT-fs (loop4): failed to load alloc-bitmap [ 940.823444][ T9211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.855276][T12894] exFAT-fs (loop4): failed to recognize exfat type [ 940.868660][T12769] bridge_slave_0: entered promiscuous mode [ 940.974274][T12769] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.016853][T12769] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.066139][T12769] bridge_slave_1: entered allmulticast mode [ 941.109952][T12769] bridge_slave_1: entered promiscuous mode [ 941.387227][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.403414][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.797790][T12900] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2214'. [ 941.845385][T12902] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2214'. [ 941.923198][T12769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.968069][T12904] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2214'. [ 942.107325][T12769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.412268][T12908] loop2: detected capacity change from 0 to 128 [ 942.675628][T12769] team0: Port device team_slave_0 added [ 942.782907][T12769] team0: Port device team_slave_1 added [ 943.199815][T12769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.244526][T12769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.389241][T12769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.489600][T12769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.533903][T12769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.642396][T12769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.514349][T12924] loop4: detected capacity change from 0 to 1024 [ 944.583295][T12924] EXT4-fs: inline encryption not supported [ 944.667365][T12924] EXT4-fs: Ignoring removed nobh option [ 944.673249][T12924] EXT4-fs: Ignoring removed bh option [ 944.938445][T12924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 945.069369][T12769] hsr_slave_0: entered promiscuous mode [ 945.081217][T12769] hsr_slave_1: entered promiscuous mode [ 945.113033][T12769] debugfs: 'hsr0' already exists in 'hsr' [ 945.202127][T12769] Cannot create hsr debugfs directory [ 946.129516][T12920] loop2: detected capacity change from 0 to 8192 [ 947.824023][T12928] fuse: Bad value for 'fd' [ 950.842465][ T5779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.550957][T12942] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2228'. [ 952.813098][T12944] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2228'. [ 954.444137][ T5831] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 954.634424][ T5831] usb 3-1: Using ep0 maxpacket: 32 [ 954.688569][ T5831] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 954.713780][ T5831] usb 3-1: config 0 has no interface number 0 [ 954.734215][ T5831] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 954.776974][ T5831] usb 3-1: config 0 interface 184 has no altsetting 0 [ 954.858788][ T5831] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 954.876750][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.954334][ T5831] usb 3-1: Product: syz [ 954.958772][ T5831] usb 3-1: Manufacturer: syz [ 954.983871][ T5831] usb 3-1: SerialNumber: syz [ 955.035946][ T5831] usb 3-1: config 0 descriptor?? [ 955.103388][ T5831] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 955.151346][T12769] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 955.159455][ T5831] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 955.249275][T12769] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 955.352202][T12769] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 955.450253][T12769] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 957.046532][T12967] loop4: detected capacity change from 0 to 2048 [ 957.171934][T12769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.177691][T12967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 957.192006][T12967] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 957.331356][ T29] audit: type=1800 audit(1772563429.560:168): pid=12967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2235" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 957.332805][T12967] EXT4-fs (loop4): shut down requested (1) [ 957.477410][ T5828] usb 3-1: USB disconnect, device number 37 [ 957.486050][T12972] Invalid ELF header magic: != ELF [ 957.750115][T12769] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.932398][T12036] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.932596][T12974] overlayfs: failed to resolve './file0': -2 [ 957.940076][T12036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.057859][ T5779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.224620][T12062] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.232199][T12062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.616038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 965.025866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 965.335268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 965.437650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 966.532475][T13017] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2247'. [ 971.166081][T13032] loop5: detected capacity change from 0 to 256 [ 971.414200][ T5775] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 971.497491][ T5775] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 971.509718][ T5775] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 971.539030][ T5775] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 971.551081][ T5775] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 971.719824][T13032] FAT-fs (loop5): Directory bread(block 64) failed [ 971.727430][T13032] FAT-fs (loop5): Directory bread(block 65) failed [ 971.734763][T13032] FAT-fs (loop5): Directory bread(block 66) failed [ 971.741867][T13032] FAT-fs (loop5): Directory bread(block 67) failed [ 971.749390][T13032] FAT-fs (loop5): Directory bread(block 68) failed [ 971.807233][T13032] FAT-fs (loop5): Directory bread(block 69) failed [ 971.824408][T13032] FAT-fs (loop5): Directory bread(block 70) failed [ 971.831188][T13032] FAT-fs (loop5): Directory bread(block 71) failed [ 971.900153][T13032] FAT-fs (loop5): Directory bread(block 72) failed [ 971.939546][T13032] FAT-fs (loop5): Directory bread(block 73) failed [ 972.423337][ T29] audit: type=1326 audit(1772563444.640:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13035 comm="syz.2.2253" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd031d9c799 code=0x0 [ 973.678212][T10806] Bluetooth: hci6: command tx timeout [ 974.959529][ T5828] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 975.254946][ T5828] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 975.413850][ T5828] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 975.423266][ T5828] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 975.630239][ T5828] usb 6-1: config 220 has no interface number 2 [ 975.721181][ T5828] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 975.767379][T10806] Bluetooth: hci6: command tx timeout [ 975.896460][ T5828] usb 6-1: config 220 interface 0 has no altsetting 0 [ 975.964058][ T5828] usb 6-1: config 220 interface 76 has no altsetting 0 [ 975.971313][ T5828] usb 6-1: config 220 interface 1 has no altsetting 0 [ 976.214968][ T5828] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 976.344021][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.414237][ T5828] usb 6-1: Product: syz [ 976.504108][ T5828] usb 6-1: Manufacturer: syz [ 976.545456][ T5828] usb 6-1: SerialNumber: syz [ 976.787453][T13033] chnl_net:caif_netlink_parms(): no params data found [ 977.796702][ T5828] usb 6-1: can't set config #220, error -71 [ 977.814641][ T5828] usb 6-1: USB disconnect, device number 32 [ 977.836841][T10806] Bluetooth: hci6: command tx timeout [ 980.065170][ T5775] Bluetooth: hci6: command tx timeout [ 981.520515][T13074] loop2: detected capacity change from 0 to 256 [ 981.680651][ T5775] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 981.744974][ T5775] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 981.755857][ T5775] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 981.771107][ T5775] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 981.785127][ T5775] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 981.798649][T13074] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 982.074749][T13074] exFAT-fs (loop2): valid_size(562949953421322) is greater than size(10) [ 983.835273][T13033] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.909886][T13033] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.928288][ T5775] Bluetooth: hci5: command tx timeout [ 983.982428][T13033] bridge_slave_0: entered allmulticast mode [ 985.013372][T13033] bridge_slave_0: entered promiscuous mode [ 986.009693][ T5775] Bluetooth: hci5: command tx timeout [ 987.582962][T13033] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.870431][T13033] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.077996][ T5775] Bluetooth: hci5: command tx timeout [ 988.887539][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 988.896911][T13033] bridge_slave_1: entered allmulticast mode [ 988.909390][T13033] bridge_slave_1: entered promiscuous mode [ 989.209838][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 989.325230][ T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 989.440863][ T24] usb 3-1: config 0 has no interface number 0 [ 989.508101][ T24] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 989.607895][ T24] usb 3-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 989.700505][ T24] usb 3-1: config 0 interface 184 has no altsetting 0 [ 989.855846][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 989.960408][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.044792][ T24] usb 3-1: Product: syz [ 990.097152][ T24] usb 3-1: Manufacturer: syz [ 990.102126][ T24] usb 3-1: SerialNumber: syz [ 990.156377][ T5775] Bluetooth: hci5: command tx timeout [ 990.222300][ T24] usb 3-1: config 0 descriptor?? [ 990.264635][ T9421] bridge_slave_1: left allmulticast mode [ 990.293000][ T9421] bridge_slave_1: left promiscuous mode [ 990.321630][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.347428][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 990.411482][ T9421] bridge_slave_0: left allmulticast mode [ 990.425560][ T24] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 990.477732][ T9421] bridge_slave_0: left promiscuous mode [ 990.544917][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.414482][T13117] binder: 13115:13117 ioctl c018620c 200000000a40 returned -22 [ 991.908333][ T5831] usb 3-1: USB disconnect, device number 38 [ 992.303179][ T9421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.462204][ T9421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 992.586709][ T9421] bond0 (unregistering): Released all slaves [ 992.681116][T13033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.858796][T13129] loop5: detected capacity change from 0 to 512 [ 992.935789][T13129] EXT4-fs (loop5): Test dummy encryption mode enabled [ 992.971488][T13129] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 993.045870][T13129] EXT4-fs (loop5): SIPHASH is not a valid default hash value [ 993.364476][T13033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.672829][ T9421] hsr_slave_0: left promiscuous mode [ 993.730535][ T9421] hsr_slave_1: left promiscuous mode [ 993.774870][ T9421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 993.831547][ T9421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.688542][ T9421] team0 (unregistering): Port device team_slave_1 removed [ 995.753072][ T9421] team0 (unregistering): Port device team_slave_0 removed [ 996.437875][T13033] team0: Port device team_slave_0 added [ 996.588150][T13033] team0: Port device team_slave_1 added [ 997.963834][ T5831] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 998.103204][T13033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 998.154040][T13033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.273923][T13033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 998.377428][T13033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.404211][T13033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.523776][T13033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 998.650826][T13075] chnl_net:caif_netlink_parms(): no params data found [ 998.991377][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.013912][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.032571][ T5831] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 999.400147][ T7206] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.667691][ T5831] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 999.677324][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.709478][ T5831] usb 6-1: config 0 descriptor?? [ 999.986818][ T7206] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.142900][ T5831] usb 6-1: can't set config #0, error -71 [ 1000.219670][ T5831] usb 6-1: USB disconnect, device number 33 [ 1000.425288][T13033] hsr_slave_0: entered promiscuous mode [ 1000.477024][T13033] hsr_slave_1: entered promiscuous mode [ 1000.524317][T13033] debugfs: 'hsr0' already exists in 'hsr' [ 1000.530275][T13033] Cannot create hsr debugfs directory [ 1000.727430][ T7206] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.166061][ T7206] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.263935][ T5835] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1002.338518][T13075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.352202][T13075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.360898][T13075] bridge_slave_0: entered allmulticast mode [ 1002.381306][T13075] bridge_slave_0: entered promiscuous mode [ 1002.416086][T13075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.430197][T13075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.439809][T13075] bridge_slave_1: entered allmulticast mode [ 1002.451235][T13075] bridge_slave_1: entered promiscuous mode [ 1002.467151][ T5835] usb 3-1: no configurations [ 1002.471996][ T5835] usb 3-1: can't read configurations, error -22 [ 1002.625310][ T5835] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1002.826467][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.841614][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.868136][ T5835] usb 3-1: no configurations [ 1002.882209][ T5835] usb 3-1: can't read configurations, error -22 [ 1002.891280][ T5835] usb usb3-port1: attempt power cycle [ 1003.254027][ T5835] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1003.329163][ T5835] usb 3-1: no configurations [ 1003.344036][ T5835] usb 3-1: can't read configurations, error -22 [ 1003.440750][T13075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.529066][ T5835] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1003.579467][ T5835] usb 3-1: no configurations [ 1003.591348][T13075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1003.609622][ T5835] usb 3-1: can't read configurations, error -22 [ 1003.618318][ T5835] usb usb3-port1: unable to enumerate USB device [ 1003.986534][T13075] team0: Port device team_slave_0 added [ 1004.271434][T13075] team0: Port device team_slave_1 added [ 1004.767105][T13075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.780401][T13075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.823167][T13075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.106935][T13075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.170369][T13075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.201481][T13075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1006.771781][T13075] hsr_slave_0: entered promiscuous mode [ 1006.810290][T13075] hsr_slave_1: entered promiscuous mode [ 1006.855685][T13075] debugfs: 'hsr0' already exists in 'hsr' [ 1006.871696][T13075] Cannot create hsr debugfs directory [ 1008.595515][ T7206] bridge_slave_1: left allmulticast mode [ 1008.602340][ T7206] bridge_slave_1: left promiscuous mode [ 1008.657458][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.679404][ T7206] bridge_slave_0: left allmulticast mode [ 1008.703874][ T7206] bridge_slave_0: left promiscuous mode [ 1008.710781][ T7206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.843943][ T5306] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1009.052117][ T5306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.091786][ T5306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.125663][ T5306] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1009.184011][ T5306] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1009.193352][ T5306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.227422][ T5306] usb 3-1: config 0 descriptor?? [ 1009.790444][ T5306] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1009.861873][ T7206] bond0 (unregistering): Released all slaves [ 1010.633930][ T7206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1010.675479][ T7206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1010.733121][ T7206] bond0 (unregistering): Released all slaves [ 1011.024668][ C1] plantronics 0003:047F:FFFF.000A: usb_submit_urb(ctrl) failed: -1 [ 1011.162150][T13033] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1011.271182][T13033] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1011.504230][T13033] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1011.818612][ T5306] usb 3-1: USB disconnect, device number 43 [ 1011.941227][T13033] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1013.631175][ T7206] hsr_slave_0: left promiscuous mode [ 1013.669944][ T7206] hsr_slave_1: left promiscuous mode [ 1013.816588][ T7206] hsr_slave_0: left promiscuous mode [ 1013.829211][ T7206] hsr_slave_1: left promiscuous mode [ 1013.887449][ T7206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1013.937413][ T7206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.024431][ T7206] veth1_macvtap: left promiscuous mode [ 1014.040165][ T7206] veth0_macvtap: left promiscuous mode [ 1014.060783][ T7206] veth1_vlan: left promiscuous mode [ 1014.097537][ T7206] veth0_vlan: left promiscuous mode [ 1015.020986][T13229] loop5: detected capacity change from 0 to 2048 [ 1015.091873][T13229] msdos: Unknown parameter '?¥ÿ' [ 1016.211707][T13242] No such timeout policy "syz1" [ 1016.752717][ T5828] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1017.053899][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.196809][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.228430][ T5828] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1017.414583][ T5828] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1017.501115][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.595929][ T5828] usb 3-1: config 0 descriptor?? [ 1019.659187][ T5828] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1020.403664][ T5828] usb 3-1: USB disconnect, device number 44 [ 1021.882337][T13255] fido_id[13255]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1022.005383][ T5306] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1022.211616][ T5306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.231602][ T5306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.254490][ T5306] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1022.276425][ T5306] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1022.293194][ T5306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.316965][ T5306] usb 3-1: config 0 descriptor?? [ 1022.612303][ T7206] team0 (unregistering): Port device team_slave_1 removed [ 1022.654338][ T7206] team0 (unregistering): Port device team_slave_0 removed [ 1023.063423][ T5306] usbhid 3-1:0.0: can't add hid device: -71 [ 1023.070437][ T5306] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1023.091075][T13075] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1023.126874][ T5306] usb 3-1: USB disconnect, device number 45 [ 1023.307234][T13075] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1023.499576][T13075] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1023.613275][T13075] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1024.550946][T13270] process 'syz.2.2316' launched '/dev/fd/7' with NULL argv: empty string added [ 1028.108690][T13033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.443411][T13075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.365337][T13075] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.463976][ T5306] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1034.786569][ T5306] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.913211][ T5306] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.975804][ T5306] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1035.011192][ T5306] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1035.032786][ T5306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.061119][ T9460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.069037][ T9460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.149542][ T5306] usb 6-1: config 0 descriptor?? [ 1035.414405][ T9460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.422017][ T9460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.810095][ T5306] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1039.644278][ T5306] usb 6-1: USB disconnect, device number 34 [ 1039.949749][T13307] loop2: detected capacity change from 0 to 256 [ 1041.853963][T10806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1041.875119][T10806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1041.886503][T10806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1041.910191][T10806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1041.939533][T10806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1043.289792][T13313] fido_id[13313]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1043.994056][T10806] Bluetooth: hci1: command tx timeout [ 1045.164953][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1045.188152][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1045.198137][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1045.265053][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1045.307540][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1046.825581][ T5775] Bluetooth: hci1: command tx timeout [ 1047.813287][ T5775] Bluetooth: hci3: command tx timeout [ 1048.873860][ T5775] Bluetooth: hci1: command tx timeout [ 1050.895774][ T5775] Bluetooth: hci3: command tx timeout [ 1050.959849][ T5775] Bluetooth: hci1: command tx timeout [ 1051.895097][T13314] chnl_net:caif_netlink_parms(): no params data found [ 1052.977290][ T5775] Bluetooth: hci3: command tx timeout [ 1055.550696][ T5775] Bluetooth: hci3: command tx timeout [ 1058.294791][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1058.588671][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.694373][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.779059][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1059.863894][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1059.873258][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.902111][ T10] usb 3-1: config 0 descriptor?? [ 1061.714317][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1061.721162][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1061.789457][ T10] usb 3-1: USB disconnect, device number 46 [ 1061.964262][T13323] chnl_net:caif_netlink_parms(): no params data found [ 1062.661560][T13314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.727575][T13314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.744292][T13314] bridge_slave_0: entered allmulticast mode [ 1062.770713][T13314] bridge_slave_0: entered promiscuous mode [ 1062.849572][T12076] bridge_slave_1: left allmulticast mode [ 1062.864008][T12076] bridge_slave_1: left promiscuous mode [ 1062.895518][T12076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.975291][T12076] bridge_slave_0: left allmulticast mode [ 1062.981202][T12076] bridge_slave_0: left promiscuous mode [ 1063.037379][T12076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.152238][T13388] loop2: detected capacity change from 0 to 512 [ 1063.218703][T13388] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2341: inode has both inline data and extents flags [ 1063.236017][T13388] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1063.243659][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1063.259674][ C1] EXT4-fs (loop2): initial error at time 1772563535: ext4_orphan_get:1391: inode 15 [ 1063.269501][ C1] EXT4-fs (loop2): last error at time 1772563535: ext4_orphan_get:1391: inode 15 [ 1063.280452][T13388] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2341: couldn't read orphan inode 15 (err -117) [ 1063.394268][T13388] loop2: lost filesystem error report for type 5 error -117 [ 1063.408415][T13388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1063.745051][T13393] loop5: detected capacity change from 0 to 1024 [ 1063.782842][T13393] EXT4-fs: Ignoring removed orlov option [ 1063.890457][T13393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1063.909196][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.232160][T12076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.277165][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.289808][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.374585][T12076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.392302][ T9211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.470421][T12076] bond0 (unregistering): Released all slaves [ 1065.265411][T13314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.337035][T13314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.345226][T13314] bridge_slave_1: entered allmulticast mode [ 1065.371854][T13314] bridge_slave_1: entered promiscuous mode [ 1067.721022][T12076] hsr_slave_0: left promiscuous mode [ 1068.024363][T12076] hsr_slave_1: left promiscuous mode [ 1068.255223][T12076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.402207][T12076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.153600][T12076] team0 (unregistering): Port device team_slave_1 removed [ 1073.252316][T12076] team0 (unregistering): Port device team_slave_0 removed [ 1073.540111][T13474] loop5: detected capacity change from 0 to 512 [ 1073.580505][T13474] EXT4-fs: Ignoring removed orlov option [ 1073.597219][T13474] EXT4-fs: Ignoring removed mblk_io_submit option [ 1073.720846][T13474] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.2353: corrupted in-inode xattr: e_value size too large [ 1073.802040][T13474] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1073.803689][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1073.820074][ C0] EXT4-fs (loop5): initial error at time 1772563546: ext4_iget_extra_inode:5025: inode 15 [ 1073.830566][ C0] EXT4-fs (loop5): last error at time 1772563546: ext4_iget_extra_inode:5025: inode 15 [ 1073.877071][T13474] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2353: couldn't read orphan inode 15 (err -117) [ 1073.953038][T13474] loop5: lost filesystem error report for type 5 error -117 [ 1073.958321][T13474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1075.439598][T13474] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.2353: corrupted in-inode xattr: e_value size too large [ 1075.712588][T13314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.932362][T13314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.972199][T13314] team0: Port device team_slave_0 added [ 1077.011160][T13487] netlink: 182 bytes leftover after parsing attributes in process `syz.0.2355'. [ 1077.089826][T13314] team0: Port device team_slave_1 added [ 1077.600990][ T9211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.851513][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1078.037544][T13314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.075548][T13314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.106660][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.133995][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.166279][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1078.193805][T13314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.228519][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1078.265370][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.317961][ T10] usb 3-1: config 0 descriptor?? [ 1078.418756][T13323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.449720][T13323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.512672][T13323] bridge_slave_0: entered allmulticast mode [ 1078.550243][T13323] bridge_slave_0: entered promiscuous mode [ 1078.652296][T13314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.052070][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1079.094133][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1079.245193][ T10] usb 3-1: USB disconnect, device number 47 [ 1079.474792][T13314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.552113][T13314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.644248][T13323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.651851][T13323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.848757][T13323] bridge_slave_1: entered allmulticast mode [ 1083.993058][T13323] bridge_slave_1: entered promiscuous mode [ 1086.195213][T13565] fuse: Bad value for 'fd' [ 1089.822103][T13314] hsr_slave_0: entered promiscuous mode [ 1089.891849][T13314] hsr_slave_1: entered promiscuous mode [ 1089.926651][T13314] debugfs: 'hsr0' already exists in 'hsr' [ 1089.949861][T13314] Cannot create hsr debugfs directory [ 1090.083003][T13323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.201922][T13323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.334311][T13593] loop2: detected capacity change from 0 to 256 [ 1093.149984][T13323] team0: Port device team_slave_0 added [ 1093.261940][T13323] team0: Port device team_slave_1 added [ 1093.894418][T12076] bridge_slave_1: left allmulticast mode [ 1093.948838][T12076] bridge_slave_1: left promiscuous mode [ 1093.964790][T12076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.018305][T12076] bridge_slave_0: left allmulticast mode [ 1094.037426][T12076] bridge_slave_0: left promiscuous mode [ 1094.065184][ T5828] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1094.085759][T12076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.311398][ T5828] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1094.379654][ T5828] usb 3-1: config 3 has an invalid interface number: 147 but max is 0 [ 1094.438901][ T5828] usb 3-1: config 3 has no interface number 0 [ 1094.470018][ T5828] usb 3-1: config 3 interface 147 altsetting 4 endpoint 0x2 has an invalid bInterval 171, changing to 11 [ 1094.549470][ T5828] usb 3-1: config 3 interface 147 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1094.619914][ T5828] usb 3-1: config 3 interface 147 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1094.714564][ T5828] usb 3-1: config 3 interface 147 has no altsetting 0 [ 1094.814822][ T5828] usb 3-1: string descriptor 0 read error: -22 [ 1094.821785][ T5828] usb 3-1: New USB device found, idVendor=0763, idProduct=201a, bcdDevice=ad.0a [ 1094.892527][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.077422][ T5828] usb 3-1: unknown interface protocol 0xb2, assuming v1 [ 1095.148246][ T5828] usb 3-1: 147:1 : does not exist [ 1095.194126][ T5828] usb 3-1: 147:2 : does not exist [ 1095.635924][T12076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1095.760799][T12076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1095.826169][T12076] bond0 (unregistering): Released all slaves [ 1095.844489][ T5828] usb 3-1: USB disconnect, device number 48 [ 1096.266140][T13606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2378'. [ 1096.333692][T13606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2378'. [ 1098.194423][T10806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1099.152768][T10806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1099.214061][T10806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1099.958044][T10806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1099.970756][T10806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1100.289805][T13323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.353948][T13323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.446086][T13323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.407497][T12076] hsr_slave_0: left promiscuous mode [ 1101.453982][T12076] hsr_slave_1: left promiscuous mode [ 1101.462402][T12076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1101.544467][T12076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1102.158955][T10806] Bluetooth: hci5: command tx timeout [ 1102.713911][ T5828] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1102.933919][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.964738][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.013820][ T5828] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1103.053847][ T5828] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1103.123724][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.186867][ T5828] usb 6-1: config 0 descriptor?? [ 1103.641346][T12076] team0 (unregistering): Port device team_slave_1 removed [ 1103.781862][T12076] team0 (unregistering): Port device team_slave_0 removed [ 1103.814974][ T5828] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1103.995472][ T5775] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1104.020386][ T5775] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1104.041144][ T5775] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1104.075129][ T5775] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1104.098192][ T5775] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1104.236075][ T5775] Bluetooth: hci5: command tx timeout [ 1104.670194][T13323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.707775][T13323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.748093][T13323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.914480][T13641] sch_fq: defrate 4294967295 ignored. [ 1105.770541][ T5835] usb 6-1: USB disconnect, device number 36 [ 1105.997694][T12076] bridge_slave_1: left allmulticast mode [ 1106.045863][T12076] bridge_slave_1: left promiscuous mode [ 1106.066840][T12076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.165519][T12076] bridge_slave_0: left allmulticast mode [ 1106.209760][T12076] bridge_slave_0: left promiscuous mode [ 1106.240291][T12076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.245707][ T5775] Bluetooth: hci6: command tx timeout [ 1106.313968][ T5775] Bluetooth: hci5: command tx timeout [ 1106.333919][ T5306] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1106.652388][ T5306] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.692154][ T5306] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1106.740725][ T5306] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1106.783949][ T5306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.792399][ T5306] usb 3-1: Product: syz [ 1106.863982][ T5306] usb 3-1: Manufacturer: syz [ 1106.868862][ T5306] usb 3-1: SerialNumber: syz [ 1107.005630][T12076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1107.115955][T12076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1107.201648][T12076] bond0 (unregistering): Released all slaves [ 1107.321232][T13653] loop5: detected capacity change from 0 to 256 [ 1107.327963][ T5306] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1107.551385][T10806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1107.577745][T10806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1107.595629][T10806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1107.620716][T10806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1107.635258][T10806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1107.944574][T13653] FAT-fs (loop5): Directory bread(block 64) failed [ 1107.951473][T13653] FAT-fs (loop5): Directory bread(block 65) failed [ 1108.028285][T13653] FAT-fs (loop5): Directory bread(block 66) failed [ 1108.112568][T13653] FAT-fs (loop5): Directory bread(block 67) failed [ 1108.121166][T12076] hsr_slave_0: left promiscuous mode [ 1108.121528][T13653] FAT-fs (loop5): Directory bread(block 68) failed [ 1108.139385][T13653] FAT-fs (loop5): Directory bread(block 69) failed [ 1108.151884][T13653] FAT-fs (loop5): Directory bread(block 70) failed [ 1108.164410][T12076] hsr_slave_1: left promiscuous mode [ 1108.172831][T12076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.185670][T13653] FAT-fs (loop5): Directory bread(block 71) failed [ 1108.194396][T13653] FAT-fs (loop5): Directory bread(block 72) failed [ 1108.214923][T13653] FAT-fs (loop5): Directory bread(block 73) failed [ 1108.269592][T12076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1108.314102][ T5775] Bluetooth: hci6: command tx timeout [ 1108.337778][ T5306] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1108.364809][ T5306] usb 3-1: USB disconnect, device number 49 [ 1108.393903][ T5775] Bluetooth: hci5: command tx timeout [ 1108.722100][T13384] udevd[13384]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1108.817892][ T5306] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1109.027734][ T5306] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1109.061583][ T5306] usb 3-1: config 0 has no interface number 0 [ 1109.106731][ T5306] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.152317][ T5306] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.175860][ T5306] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1109.231763][T12076] team0 (unregistering): Port device team_slave_1 removed [ 1109.239888][ T5306] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1109.265372][ T5306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.301321][T12076] team0 (unregistering): Port device team_slave_0 removed [ 1109.335870][ T5306] usb 3-1: config 0 descriptor?? [ 1109.753842][ T5775] Bluetooth: hci1: command tx timeout [ 1110.102514][ T5306] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.000E/input/input15 [ 1110.277838][ T5306] uclogic 0003:28BD:0042.000E: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 1110.394712][ T5775] Bluetooth: hci6: command tx timeout [ 1110.475198][ T5306] usb 3-1: USB disconnect, device number 50 [ 1111.397030][T13665] fido_id[13665]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1111.833841][ T5775] Bluetooth: hci1: command tx timeout [ 1112.253753][ T5835] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1112.477887][ T5775] Bluetooth: hci6: command tx timeout [ 1112.491773][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.516146][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.554965][ T5835] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1112.589856][ T5835] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1112.602392][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.622640][ T5835] usb 3-1: config 0 descriptor?? [ 1112.936390][T12076] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.213290][T13637] chnl_net:caif_netlink_parms(): no params data found [ 1113.263979][ T5835] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1113.488794][T12076] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.920795][ T5775] Bluetooth: hci1: command tx timeout [ 1114.243186][T12076] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.331019][T13607] chnl_net:caif_netlink_parms(): no params data found [ 1114.521645][T12076] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.150967][ T5835] usb 3-1: USB disconnect, device number 51 [ 1115.532021][T13706] loop2: detected capacity change from 0 to 512 [ 1115.702357][T13706] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2396: inode has both inline data and extents flags [ 1115.743768][T13706] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1115.753730][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1115.769922][ C0] EXT4-fs (loop2): initial error at time 1772563587: ext4_orphan_get:1391: inode 15 [ 1115.779734][ C0] EXT4-fs (loop2): last error at time 1772563587: ext4_orphan_get:1391: inode 15 [ 1115.803416][T13706] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2396: couldn't read orphan inode 15 (err -117) [ 1115.834929][T13706] loop2: lost filesystem error report for type 5 error -117 [ 1115.861082][T13706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1115.996845][ T5775] Bluetooth: hci1: command tx timeout [ 1116.109941][ T29] audit: type=1800 audit(1772563588.340:170): pid=13706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2396" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 1116.554429][T13637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.583031][T13637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.591823][T13637] bridge_slave_0: entered allmulticast mode [ 1116.623158][T13637] bridge_slave_0: entered promiscuous mode [ 1116.641539][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.757214][T13637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.804978][T13637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.812892][T13637] bridge_slave_1: entered allmulticast mode [ 1116.867578][T13637] bridge_slave_1: entered promiscuous mode [ 1117.014395][T12076] bridge_slave_1: left allmulticast mode [ 1117.043892][T12076] bridge_slave_1: left promiscuous mode [ 1117.050598][T12076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.099341][T12076] bridge_slave_0: left allmulticast mode [ 1117.114264][T12076] bridge_slave_0: left promiscuous mode [ 1117.122479][T12076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.161410][T12076] bridge_slave_1: left allmulticast mode [ 1117.169870][T12076] bridge_slave_1: left promiscuous mode [ 1117.186208][T12076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.254157][T12076] bridge_slave_0: left allmulticast mode [ 1117.260236][T12076] bridge_slave_0: left promiscuous mode [ 1117.302164][T12076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.257890][T12076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.336443][T12076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.381350][T12076] bond0 (unregistering): Released all slaves [ 1118.734757][T12076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.804243][T12076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1118.864301][T12076] bond0 (unregistering): Released all slaves [ 1118.899658][T13654] chnl_net:caif_netlink_parms(): no params data found [ 1119.499103][T13637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.577719][T13637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.389902][T13607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.958871][T13607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.967145][T13607] bridge_slave_0: entered allmulticast mode [ 1120.988486][T13607] bridge_slave_0: entered promiscuous mode [ 1121.207745][T13732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2403'. [ 1121.225968][T13732] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2403'. [ 1121.284020][T13607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.314164][T13607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.343230][T13607] bridge_slave_1: entered allmulticast mode [ 1121.367486][T13607] bridge_slave_1: entered promiscuous mode [ 1121.564439][T13637] team0: Port device team_slave_0 added [ 1121.621077][T13734] loop2: detected capacity change from 0 to 128 [ 1121.742763][T13734] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1121.812342][T13637] team0: Port device team_slave_1 added [ 1121.870484][T13734] ext4 filesystem being mounted at /489/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1122.000572][T12076] hsr_slave_0: left promiscuous mode [ 1122.047874][T12076] hsr_slave_1: left promiscuous mode [ 1122.066638][T12076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1122.084367][T12076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.096743][T12076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1122.110480][T12076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.123161][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1122.136283][T12076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.155109][T12076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.254481][T12076] veth1_macvtap: left promiscuous mode [ 1122.260277][T12076] veth0_macvtap: left promiscuous mode [ 1122.295361][T12076] veth1_vlan: left promiscuous mode [ 1122.306053][T12076] veth0_vlan: left promiscuous mode [ 1122.602095][T13740] loop5: detected capacity change from 0 to 256 [ 1123.901380][T12076] team0 (unregistering): Port device team_slave_1 removed [ 1123.988344][T12076] team0 (unregistering): Port device team_slave_0 removed [ 1124.093989][ T5835] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1124.264326][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.292528][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.313991][ T5835] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1124.323347][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.383874][ T5835] usb 3-1: config 0 descriptor?? [ 1124.647659][ T5835] usbhid 3-1:0.0: can't add hid device: -71 [ 1124.676915][ T5835] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1124.691239][ T5835] usb 3-1: USB disconnect, device number 52 [ 1124.951914][T12076] team0 (unregistering): Port device team_slave_1 removed [ 1125.081649][T12076] team0 (unregistering): Port device team_slave_0 removed [ 1125.263878][ T5835] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1125.463879][ T5835] usb 3-1: Using ep0 maxpacket: 32 [ 1125.478558][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.498421][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.543743][ T5835] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1125.565101][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.580834][T13755] loop5: detected capacity change from 0 to 256 [ 1125.606349][ T5835] usb 3-1: config 0 descriptor?? [ 1125.704005][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.710920][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.750364][ T5835] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1125.765906][T13607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1125.779216][ T5835] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1125.812497][T13755] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 1125.886577][T13607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1125.914909][ T5835] usb 3-1: USB disconnect, device number 53 [ 1125.988784][ T5835] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1126.430677][T13637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1126.444920][T13637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1126.477449][T13757] loop5: detected capacity change from 0 to 256 [ 1126.493815][T13637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1126.771054][T13637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1126.823835][T13637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1126.891647][T13637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.043176][T13607] team0: Port device team_slave_0 added [ 1127.083220][T13607] team0: Port device team_slave_1 added [ 1127.133892][T13654] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.141494][T13654] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.161577][T13654] bridge_slave_0: entered allmulticast mode [ 1127.197275][T13654] bridge_slave_0: entered promiscuous mode [ 1127.247467][T13654] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.274394][T13654] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.282293][T13654] bridge_slave_1: entered allmulticast mode [ 1127.319791][T13654] bridge_slave_1: entered promiscuous mode [ 1127.715060][T13607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1127.738715][T13607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.808261][T13607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.100481][T13607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1128.118704][T13607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.240585][T13607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1128.471078][T13654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.758340][T13637] hsr_slave_0: entered promiscuous mode [ 1128.782533][T13770] loop2: detected capacity change from 0 to 256 [ 1128.799991][T13637] hsr_slave_1: entered promiscuous mode [ 1129.000156][T13654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.492874][T13654] team0: Port device team_slave_0 added [ 1130.627646][T13654] team0: Port device team_slave_1 added [ 1130.753182][T13607] hsr_slave_0: entered promiscuous mode [ 1130.829351][T13607] hsr_slave_1: entered promiscuous mode [ 1130.879585][T13607] debugfs: 'hsr0' already exists in 'hsr' [ 1130.929949][T13607] Cannot create hsr debugfs directory [ 1133.791576][T13654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.824164][T13654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.903679][T13654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.229137][T13654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.257926][T13654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.299171][T13654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.123042][T13654] hsr_slave_0: entered promiscuous mode [ 1136.165691][T13654] hsr_slave_1: entered promiscuous mode [ 1136.194581][T13654] debugfs: 'hsr0' already exists in 'hsr' [ 1136.200535][T13654] Cannot create hsr debugfs directory [ 1138.440437][T13607] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1138.589974][T13607] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1138.652237][T13816] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2425'. [ 1138.907093][T13607] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1139.110616][T13817] syzkaller0: entered promiscuous mode [ 1139.153901][T13817] syzkaller0: entered allmulticast mode [ 1139.176483][T13607] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1139.647832][T13826] loop5: detected capacity change from 0 to 512 [ 1139.704786][T13826] EXT4-fs: Ignoring removed orlov option [ 1139.742778][T13826] EXT4-fs: Ignoring removed mblk_io_submit option [ 1139.863212][T13637] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1139.906937][T13826] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.2427: corrupted in-inode xattr: e_value size too large [ 1139.931837][T13826] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1139.933361][T13826] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2427: couldn't read orphan inode 15 (err -117) [ 1139.933696][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1139.961738][ C0] EXT4-fs (loop5): initial error at time 1772563612: ext4_iget_extra_inode:5025: inode 15 [ 1139.972244][ C0] EXT4-fs (loop5): last error at time 1772563612: ext4_iget_extra_inode:5025: inode 15 [ 1139.979776][T13637] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1139.994110][T13826] loop5: lost filesystem error report for type 5 error -117 [ 1140.045056][T13826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1140.145604][T13637] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1140.474575][T13637] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1141.358403][T13836] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.2427: corrupted in-inode xattr: e_value size too large [ 1141.769942][T13654] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1142.148862][T13654] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1142.305620][T13654] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1142.526432][T13654] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1143.452754][T13607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1143.829611][ T9211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.901046][T13607] 8021q: adding VLAN 0 to HW filter on device team0 [ 1144.154483][T12069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.162160][T12069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1144.378663][ T9453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.386532][ T9453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.193419][T13851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2431'. [ 1145.936109][T13637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1146.324371][T13654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1146.412372][T13637] 8021q: adding VLAN 0 to HW filter on device team0 [ 1146.619827][ T9412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.627675][ T9412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.797589][ T9412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.805268][ T9412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.940252][T13654] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.238683][T12036] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.246399][T12036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1147.580909][T12049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.588651][T12049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.338959][T13607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1149.057153][T13885] loop2: detected capacity change from 0 to 256 [ 1152.045609][T13893] loop5: detected capacity change from 0 to 512 [ 1152.121857][T13893] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1152.327601][T13893] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1152.559188][T13893] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2439: bad orphan inode 131083 [ 1152.765059][T13893] loop5: lost filesystem error report for type 5 error -117 [ 1152.773599][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1152.787914][ C0] EXT4-fs (loop5): initial error at time 1772563625: ext4_orphan_get:1417 [ 1152.796753][ C0] EXT4-fs (loop5): last error at time 1772563625: ext4_orphan_get:1417 [ 1152.898801][T13893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1156.507675][T13637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.620524][T13654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1158.167673][T13916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2440'. [ 1159.254846][T10806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1159.270401][T10806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1159.330724][T10806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1159.377135][T10806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1159.398893][T10806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1161.520598][T10806] Bluetooth: hci0: command tx timeout [ 1163.131047][T13955] loop2: detected capacity change from 0 to 512 [ 1163.178381][T13955] EXT4-fs: Ignoring removed orlov option [ 1163.426377][T13955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1163.515033][T13955] ext4 filesystem being mounted at /506/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1163.603619][T13654] veth0_vlan: entered promiscuous mode [ 1163.610147][T10806] Bluetooth: hci0: command tx timeout [ 1163.686195][T13955] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.2443: corrupted inode contents [ 1163.729735][T13654] veth1_vlan: entered promiscuous mode [ 1163.758904][T13955] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #2: comm syz.2.2443: mark_inode_dirty error [ 1163.821183][T13955] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.2443: corrupted inode contents [ 1163.964712][T13960] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.2443: corrupted inode contents [ 1164.105400][T13960] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #2: comm syz.2.2443: mark_inode_dirty error [ 1164.225589][T13960] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.2443: corrupted inode contents [ 1164.274925][T13927] chnl_net:caif_netlink_parms(): no params data found [ 1164.334166][T13960] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.2443: mark_inode_dirty error [ 1164.376179][T13960] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.2443: corrupted inode contents [ 1164.415814][T13960] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #2: comm syz.2.2443: mark_inode_dirty error [ 1164.686240][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1164.707919][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1164.738087][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1164.761245][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1164.775318][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1164.967105][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.000401][T12049] bridge_slave_1: left allmulticast mode [ 1165.031264][T12049] bridge_slave_1: left promiscuous mode [ 1165.055118][T12049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.099351][T12049] bridge_slave_0: left allmulticast mode [ 1165.124808][T12049] bridge_slave_0: left promiscuous mode [ 1165.131627][T12049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.676445][T10806] Bluetooth: hci0: command tx timeout [ 1166.373695][T13646] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1166.575516][T12049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1166.584970][T13646] usb 3-1: Using ep0 maxpacket: 16 [ 1166.633882][T13646] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1166.667038][T12049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1166.699338][T13646] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.721593][T12049] bond0 (unregistering): Released all slaves [ 1166.743921][T13646] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1166.771669][T13646] usb 3-1: config 1 has no interface number 0 [ 1166.848600][T13646] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 1166.876230][T10806] Bluetooth: hci3: command tx timeout [ 1166.914974][T13646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.923267][T13646] usb 3-1: Product: syz [ 1166.951261][T13646] usb 3-1: Manufacturer: syz [ 1166.973728][T13646] usb 3-1: SerialNumber: syz [ 1167.509042][T12049] hsr_slave_0: left promiscuous mode [ 1167.617382][T12049] hsr_slave_1: left promiscuous mode [ 1167.667011][T12049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1167.743624][T12049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1167.763752][T10806] Bluetooth: hci0: command tx timeout [ 1167.801790][ T5775] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1167.855447][ T5775] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1167.870435][ T5775] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1167.890440][ T5775] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1167.908088][ T5775] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1168.104471][T13646] usb 3-1: USB disconnect, device number 54 [ 1168.255291][T13931] udevd[13931]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1168.779165][T12421] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1168.971774][ T5070] Bluetooth: hci3: command tx timeout [ 1169.177611][T13989] loop2: detected capacity change from 0 to 256 [ 1169.268067][T13989] exfat: Deprecated parameter 'utf8' [ 1169.374775][T13989] exfat: Deprecated parameter 'utf8' [ 1169.380581][T13989] exfat: Deprecated parameter 'utf8' [ 1169.782165][T13989] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1169.994779][ T5070] Bluetooth: hci5: command tx timeout [ 1170.311551][T13985] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1170.322001][T13985] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1170.332206][T13985] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1170.368389][T13985] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1170.397410][T13985] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1170.704556][T12049] team0 (unregistering): Port device team_slave_1 removed [ 1170.854471][T12049] team0 (unregistering): Port device team_slave_0 removed [ 1171.037797][ T5070] Bluetooth: hci3: command tx timeout [ 1171.307534][T13998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2448'. [ 1172.074218][ T5070] Bluetooth: hci5: command tx timeout [ 1172.144394][ T5306] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1172.391868][ T5306] usb 3-1: Using ep0 maxpacket: 32 [ 1172.439868][ T5306] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1172.501793][ T5070] Bluetooth: hci4: command tx timeout [ 1172.507825][ T5306] usb 3-1: config 0 has no interface number 0 [ 1172.622347][ T5306] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1172.714461][ T5306] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1172.738546][ T5306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.783844][ T5306] usb 3-1: Product: syz [ 1172.788282][ T5306] usb 3-1: Manufacturer: syz [ 1172.813069][ T5306] usb 3-1: SerialNumber: syz [ 1172.833316][ T5306] usb 3-1: config 0 descriptor?? [ 1173.116661][ T5070] Bluetooth: hci3: command tx timeout [ 1173.386237][ T5306] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1173.434059][ T5306] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1173.479225][ T5306] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1173.523858][ T5306] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 1173.659098][T13927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.676166][T13927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.692207][T13927] bridge_slave_0: entered allmulticast mode [ 1173.704334][T13927] bridge_slave_0: entered promiscuous mode [ 1173.729887][T13927] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.742302][T13927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.752554][T13927] bridge_slave_1: entered allmulticast mode [ 1173.765355][T13927] bridge_slave_1: entered promiscuous mode [ 1174.079868][T13927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1174.158293][ T5070] Bluetooth: hci5: command tx timeout [ 1174.229986][T13927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1174.466948][T13927] team0: Port device team_slave_0 added [ 1174.486509][T13927] team0: Port device team_slave_1 added [ 1174.563838][ T5070] Bluetooth: hci4: command tx timeout [ 1174.774997][T13927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.782090][T13927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.821377][T13927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1175.015192][T14004] usb 3-1: USB disconnect, device number 55 [ 1175.257088][T14024] loop2: detected capacity change from 0 to 1024 [ 1175.324826][T13927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1175.332058][T13927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1175.376685][T13927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.418610][T14024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1175.441560][T14024] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1175.484817][T14024] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.2450: Freeing blocks not in datazone - block = 0, count = 16 [ 1175.551623][T13965] chnl_net:caif_netlink_parms(): no params data found [ 1175.677435][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1176.024171][T14030] loop2: detected capacity change from 0 to 256 [ 1176.138078][T14030] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 1176.239166][ T5070] Bluetooth: hci5: command tx timeout [ 1176.288077][T12049] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.524643][T12049] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.641891][ T5070] Bluetooth: hci4: command tx timeout [ 1177.202296][T12049] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.370264][T13927] hsr_slave_0: entered promiscuous mode [ 1177.395710][T14040] loop2: detected capacity change from 0 to 1024 [ 1177.410291][T13927] hsr_slave_1: entered promiscuous mode [ 1177.420550][T13927] debugfs: 'hsr0' already exists in 'hsr' [ 1177.443685][T13927] Cannot create hsr debugfs directory [ 1177.471972][T13983] chnl_net:caif_netlink_parms(): no params data found [ 1177.608830][T14040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1177.676287][T14040] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1177.791468][T12049] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.856171][T13992] chnl_net:caif_netlink_parms(): no params data found [ 1178.032166][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1178.717267][ T5070] Bluetooth: hci4: command tx timeout [ 1179.124227][T13965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.131830][T13965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.169954][T13965] bridge_slave_0: entered allmulticast mode [ 1179.188633][T13965] bridge_slave_0: entered promiscuous mode [ 1179.305309][T13965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.312924][T13965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.360979][T13965] bridge_slave_1: entered allmulticast mode [ 1179.407741][T13965] bridge_slave_1: entered promiscuous mode [ 1180.005193][T13965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1180.032641][T13965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.623947][T13983] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.631983][T13983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.647233][T13983] bridge_slave_0: entered allmulticast mode [ 1180.659032][T13983] bridge_slave_0: entered promiscuous mode [ 1180.764063][T13965] team0: Port device team_slave_0 added [ 1180.860629][T13983] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.869332][T13983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.911407][T13983] bridge_slave_1: entered allmulticast mode [ 1180.927400][T13983] bridge_slave_1: entered promiscuous mode [ 1181.109745][T13965] team0: Port device team_slave_1 added [ 1181.260394][T13983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.276434][T13992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.287051][T13992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.302985][T13992] bridge_slave_0: entered allmulticast mode [ 1181.320804][T13992] bridge_slave_0: entered promiscuous mode [ 1181.468837][T13983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.529923][T13992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.538915][T13992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.547452][T13992] bridge_slave_1: entered allmulticast mode [ 1181.558282][T13992] bridge_slave_1: entered promiscuous mode [ 1181.640018][T13965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.654737][T13965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.683842][T13965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.989428][T13965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.005720][T13965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.058245][T13965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.121418][T13983] team0: Port device team_slave_0 added [ 1182.415235][T13983] team0: Port device team_slave_1 added [ 1182.458102][T13992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1182.503834][T14067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2455'. [ 1182.698914][T13992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1183.918567][T12049] bridge_slave_1: left allmulticast mode [ 1183.930963][T12049] bridge_slave_1: left promiscuous mode [ 1183.940167][T12049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.964060][T12049] bridge_slave_0: left allmulticast mode [ 1183.969943][T12049] bridge_slave_0: left promiscuous mode [ 1183.984727][T12049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.015800][T12049] bridge_slave_1: left allmulticast mode [ 1184.021790][T12049] bridge_slave_1: left promiscuous mode [ 1184.030811][T12049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.051832][T12049] bridge_slave_0: left allmulticast mode [ 1184.063394][T12049] bridge_slave_0: left promiscuous mode [ 1184.072466][T12049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.097419][T12049] bridge_slave_1: left allmulticast mode [ 1184.104413][T12049] bridge_slave_1: left promiscuous mode [ 1184.111101][T12049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.139155][T12049] bridge_slave_0: left allmulticast mode [ 1184.145701][T12049] bridge_slave_0: left promiscuous mode [ 1184.152383][T12049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.416779][T12049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1185.435732][T12049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1185.458545][T12049] bond0 (unregistering): Released all slaves [ 1185.845019][T12049] team0: Port device bond0 removed [ 1185.903880][T12049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1185.937168][T12049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1185.956586][T12049] bond0 (unregistering): Released all slaves [ 1186.391973][T12049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1186.424476][T12049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1186.441677][T12049] bond0 (unregistering): Released all slaves [ 1186.671693][T13992] team0: Port device team_slave_0 added [ 1187.017957][T13983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1187.030516][T13983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1187.075432][T13983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1187.112675][T13992] team0: Port device team_slave_1 added [ 1187.160256][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.168864][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.226256][T13965] hsr_slave_0: entered promiscuous mode [ 1187.241501][T13965] hsr_slave_1: entered promiscuous mode [ 1187.257160][T13965] debugfs: 'hsr0' already exists in 'hsr' [ 1187.263109][T13965] Cannot create hsr debugfs directory [ 1187.276664][T13983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1187.293172][T13983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1187.331986][T13983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1187.940899][T14080] loop2: detected capacity change from 0 to 2048 [ 1187.957421][T14080] ext4: Unknown parameter 'dont_hash' [ 1188.080911][T13992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.095665][T13992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.126572][T13992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.331931][T13992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1188.356529][T13992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.380248][T14082] loop2: detected capacity change from 0 to 256 [ 1188.395907][T13992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1188.426256][T14082] exfat: Bad value for 'gid' [ 1188.431353][T14082] exfat: Bad value for 'gid' [ 1188.517956][T13983] hsr_slave_0: entered promiscuous mode [ 1188.529155][T13983] hsr_slave_1: entered promiscuous mode [ 1188.540455][T13983] debugfs: 'hsr0' already exists in 'hsr' [ 1188.549437][T13983] Cannot create hsr debugfs directory [ 1188.772283][T12049] hsr_slave_0: left promiscuous mode [ 1188.796750][T12049] hsr_slave_1: left promiscuous mode [ 1188.805764][T12049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1188.817205][T12049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1188.826816][T14084] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1188.839739][T14084] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 1188.882404][T12049] hsr_slave_0: left promiscuous mode [ 1188.915971][T12049] hsr_slave_1: left promiscuous mode [ 1188.934898][T12049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1188.942512][T12049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1188.960404][T12049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1188.968665][T12049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1189.018791][T12049] hsr_slave_0: left promiscuous mode [ 1189.043760][T12049] hsr_slave_1: left promiscuous mode [ 1189.057929][T12049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1189.089179][T12049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1189.204218][T12049] veth1_vlan: left promiscuous mode [ 1189.234661][T12049] veth0_vlan: left promiscuous mode [ 1189.242346][T12049] veth1_macvtap: left promiscuous mode [ 1189.250325][T12049] veth0_macvtap: left promiscuous mode [ 1189.262462][T12049] veth1_vlan: left promiscuous mode [ 1189.270826][T12049] veth0_vlan: left promiscuous mode [ 1191.427315][T12049] team0 (unregistering): Port device team_slave_1 removed [ 1191.520055][T12049] team0 (unregistering): Port device team_slave_0 removed [ 1192.582830][T14090] loop2: detected capacity change from 0 to 512 [ 1192.733067][T14090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1192.747138][T14090] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1192.755364][T12049] team0 (unregistering): Port device team_slave_1 removed [ 1192.824167][T12049] team0 (unregistering): Port device team_slave_0 removed [ 1193.836729][ T29] audit: type=1800 audit(1772563666.070:171): pid=14094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2463" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1194.103313][T12049] team0 (unregistering): Port device team_slave_1 removed [ 1194.175676][T12049] team0 (unregistering): Port device team_slave_0 removed [ 1194.882640][T13927] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1195.174100][T13992] hsr_slave_0: entered promiscuous mode [ 1195.186966][T13992] hsr_slave_1: entered promiscuous mode [ 1195.201550][T13927] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1195.318898][T13927] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1195.559324][T13927] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1197.782844][T13965] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1197.849176][T13965] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1197.900072][T13965] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1197.980182][T13965] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1198.303258][T13927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1198.511369][T13927] 8021q: adding VLAN 0 to HW filter on device team0 [ 1198.700653][ T9453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.708309][ T9453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1198.870299][ T7621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.878207][ T7621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1198.982232][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1199.099651][T13983] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1199.264173][T13983] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1199.546391][T14112] loop2: detected capacity change from 0 to 1024 [ 1199.586708][T13983] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1199.630972][T14112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1199.712367][T14112] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.2464: Allocating blocks 385-513 which overlap fs metadata [ 1199.879483][T13983] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1199.886352][T14112] EXT4-fs (loop2): shut down requested (0) [ 1199.940968][ T57] EXT4-fs (loop2): pa ffff888122de4380: logic 16, phys. 129, len 24 [ 1199.949500][ T57] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 1200.168701][T13927] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1200.227583][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1200.453851][T13992] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1200.654332][T13992] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1200.929747][T13992] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1201.038936][T13992] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1201.619346][T13965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1202.249353][T14128] input: syz0 as /devices/virtual/input/input16 [ 1202.450249][T13992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1202.585114][T13965] 8021q: adding VLAN 0 to HW filter on device team0 [ 1202.749555][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.757322][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1202.942114][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.949900][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1202.966809][T14131] loop2: detected capacity change from 0 to 512 [ 1202.982677][T14131] EXT4-fs: Ignoring removed orlov option [ 1203.043033][T14131] EXT4-fs: Ignoring removed mblk_io_submit option [ 1203.077390][T13992] 8021q: adding VLAN 0 to HW filter on device team0 [ 1203.143979][T14131] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.2467: corrupted in-inode xattr: e_value size too large [ 1203.190858][T14131] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1203.193594][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1203.209575][ C1] EXT4-fs (loop2): initial error at time 1772563675: ext4_iget_extra_inode:5025: inode 15 [ 1203.220128][ C1] EXT4-fs (loop2): last error at time 1772563675: ext4_iget_extra_inode:5025: inode 15 [ 1203.245550][T14131] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2467: couldn't read orphan inode 15 (err -117) [ 1203.284371][T14131] loop2: lost filesystem error report for type 5 error -117 [ 1203.306143][T14131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1203.422721][T12076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.430538][T12076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1203.476131][T12076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.483938][T12076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1203.971161][T13927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1204.175656][T13983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1205.542398][T13992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1205.717817][T13983] 8021q: adding VLAN 0 to HW filter on device team0 [ 1206.142045][ T9430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.149793][ T9430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1206.410764][ T9430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.418585][ T9430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1206.880207][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.262821][T13983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1207.421962][T14148] loop2: detected capacity change from 0 to 256 [ 1207.589937][T14148] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1207.667767][T14148] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1207.909334][T14148] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1208.002415][T14148] exFAT-fs (loop2): failed to load alloc-bitmap [ 1208.038598][T14148] exFAT-fs (loop2): failed to recognize exfat type [ 1208.327710][T13965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1208.834378][T13927] veth0_vlan: entered promiscuous mode [ 1208.851468][T14156] loop2: detected capacity change from 0 to 128 [ 1208.953162][T13992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1209.001200][T14156] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1209.165830][T14156] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1209.265514][T13927] veth1_vlan: entered promiscuous mode [ 1209.700915][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1209.776160][T13983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1209.939570][T13927] veth0_macvtap: entered promiscuous mode [ 1210.065003][T13927] veth1_macvtap: entered promiscuous mode [ 1210.572320][T13927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1210.689595][T13927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1211.011958][ T9453] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.085088][ T9453] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.144307][ T9453] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.239190][ T9453] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.036224][T13965] veth0_vlan: entered promiscuous mode [ 1212.300006][T13965] veth1_vlan: entered promiscuous mode [ 1212.865388][T13992] veth0_vlan: entered promiscuous mode [ 1213.085226][T13965] veth0_macvtap: entered promiscuous mode [ 1213.281358][T13992] veth1_vlan: entered promiscuous mode [ 1213.329944][T13965] veth1_macvtap: entered promiscuous mode [ 1213.531761][T13983] veth0_vlan: entered promiscuous mode [ 1213.820897][T13983] veth1_vlan: entered promiscuous mode [ 1214.182085][T13965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1214.271064][T13965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1214.539397][T12076] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.564197][T12076] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.609912][T12062] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.642682][T12062] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.694699][T13992] veth0_macvtap: entered promiscuous mode [ 1214.842463][T13992] veth1_macvtap: entered promiscuous mode [ 1215.059169][T13983] veth0_macvtap: entered promiscuous mode [ 1215.237681][T13992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1215.266582][T13983] veth1_macvtap: entered promiscuous mode [ 1215.545251][T13992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1215.779597][ T9430] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.813924][ T9430] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.886022][T13983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1215.990205][T13983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1216.033940][ T9430] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.298798][T12036] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.366771][T12036] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.462117][T12036] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.559888][T12072] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.393806][T12072] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.974382][T13985] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1220.988647][T13985] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1220.998927][T13985] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1221.015018][T13985] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1221.056240][T13985] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1222.769674][T14235] overlayfs: failed to resolve './file0': -2 [ 1222.888225][T14235] loop2: detected capacity change from 0 to 512 [ 1223.204174][T13985] Bluetooth: hci1: command tx timeout [ 1223.591482][T14235] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 1223.609664][T14235] EXT4-fs (loop2): 1 truncate cleaned up [ 1223.618214][T14235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1224.980894][ T9460] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.284124][T13985] Bluetooth: hci1: command tx timeout [ 1225.815258][ T9460] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.380209][ T9460] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.919947][ T9460] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.353948][T13985] Bluetooth: hci1: command tx timeout [ 1229.106405][ T5070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1229.136174][ T5070] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1229.175014][ T5070] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1229.271704][ T5070] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1229.289666][ T5070] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1229.454590][ T5070] Bluetooth: hci1: command tx timeout [ 1231.383795][ T5070] Bluetooth: hci0: command tx timeout [ 1231.754438][ T9460] bridge_slave_1: left allmulticast mode [ 1231.760344][ T9460] bridge_slave_1: left promiscuous mode [ 1231.796258][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1231.825124][ T9460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.910848][ T9460] bridge_slave_0: left allmulticast mode [ 1231.960006][ T9460] bridge_slave_0: left promiscuous mode [ 1231.974402][ T9460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.349307][T13985] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1232.383784][T13985] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1232.398271][T13985] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1232.435815][T13985] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1232.478024][T13985] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1232.743835][T13286] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1232.946307][T13286] usb 3-1: Using ep0 maxpacket: 32 [ 1232.989354][T13286] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1233.014519][T13286] usb 3-1: config 0 has no interface number 0 [ 1233.020921][T13286] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1233.031054][T13985] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1233.060434][T13985] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1233.071977][T13985] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1233.109746][T13985] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1233.131261][T13286] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1233.141570][T13985] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1233.152184][T13286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.181207][T13286] usb 3-1: Product: syz [ 1233.186780][T13286] usb 3-1: Manufacturer: syz [ 1233.191617][T13286] usb 3-1: SerialNumber: syz [ 1233.251556][T13286] usb 3-1: config 0 descriptor?? [ 1233.436426][ T5070] Bluetooth: hci0: command tx timeout [ 1233.773071][ T9460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1233.815782][ T9460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1233.892241][ T9460] bond0 (unregistering): Released all slaves [ 1234.414110][T13286] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1234.470066][T13286] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1234.516158][T13286] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1234.559124][ T5070] Bluetooth: hci6: command tx timeout [ 1234.584074][T13286] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1234.607804][T13286] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1234.675729][T13286] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1234.707449][T13286] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1234.716643][ T9460] hsr_slave_0: left promiscuous mode [ 1234.728485][ T9460] hsr_slave_1: left promiscuous mode [ 1234.757210][ T9460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1234.769001][T13286] usb 3-1: USB disconnect, device number 56 [ 1234.796057][ T9460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.829946][ T9460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1234.852827][ T9460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1234.899162][ T9460] veth1_macvtap: left promiscuous mode [ 1234.910648][ T9460] veth0_macvtap: left promiscuous mode [ 1234.918737][ T9460] veth1_vlan: left promiscuous mode [ 1234.926388][ T9460] veth0_vlan: left promiscuous mode [ 1235.274292][ T5070] Bluetooth: hci7: command tx timeout [ 1235.515426][ T5070] Bluetooth: hci0: command tx timeout [ 1236.174789][ T9460] team0 (unregistering): Port device team_slave_1 removed [ 1236.235407][ T9460] team0 (unregistering): Port device team_slave_0 removed [ 1236.633964][ T5070] Bluetooth: hci6: command tx timeout [ 1237.164212][T14225] chnl_net:caif_netlink_parms(): no params data found [ 1237.353808][ T5070] Bluetooth: hci7: command tx timeout [ 1237.449727][T14268] loop2: detected capacity change from 0 to 40427 [ 1237.467200][T14268] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 1237.483785][T14268] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1237.551175][T14268] F2FS-fs (loop2): invalid crc value [ 1237.593740][ T5070] Bluetooth: hci0: command tx timeout [ 1238.459097][T14268] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1238.479970][T14268] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1238.487607][T14268] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1238.723919][ T5070] Bluetooth: hci6: command tx timeout [ 1238.824605][ T9460] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.869188][T14225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.880682][T14225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.890781][T14225] bridge_slave_0: entered allmulticast mode [ 1238.927210][T14225] bridge_slave_0: entered promiscuous mode [ 1238.980968][T14225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.996369][T14225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.011447][T14225] bridge_slave_1: entered allmulticast mode [ 1239.043244][T14225] bridge_slave_1: entered promiscuous mode [ 1239.389555][T14225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1239.434627][ T5070] Bluetooth: hci7: command tx timeout [ 1239.500942][ T9460] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.631054][T14225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.794380][ T9460] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.889423][ T9460] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.438379][T14225] team0: Port device team_slave_0 added [ 1240.661028][T14225] team0: Port device team_slave_1 added [ 1240.793928][ T5070] Bluetooth: hci6: command tx timeout [ 1241.082426][T14258] chnl_net:caif_netlink_parms(): no params data found [ 1241.156472][T14249] chnl_net:caif_netlink_parms(): no params data found [ 1241.189620][T14225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1241.201084][T14225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.250415][T14225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1241.526912][ T5070] Bluetooth: hci7: command tx timeout [ 1241.581018][T14225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1241.604013][T14225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.664179][T14225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.827413][T14262] chnl_net:caif_netlink_parms(): no params data found [ 1244.590087][ T9460] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.749179][T14225] hsr_slave_0: entered promiscuous mode [ 1244.797160][T14225] hsr_slave_1: entered promiscuous mode [ 1244.861179][T14225] debugfs: 'hsr0' already exists in 'hsr' [ 1244.889274][T14225] Cannot create hsr debugfs directory [ 1245.070477][ T9460] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.503025][ T9460] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.702082][T14353] overlayfs: failed to resolve './file0': -2 [ 1246.558514][T14353] loop2: detected capacity change from 0 to 512 [ 1246.760642][T14353] EXT4-fs (loop2): 1 truncate cleaned up [ 1246.783648][T14353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1247.935790][ T9460] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.427328][T14258] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.449499][T14258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.489746][T14258] bridge_slave_0: entered allmulticast mode [ 1248.534686][T14258] bridge_slave_0: entered promiscuous mode [ 1248.597530][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.615087][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1248.661800][T14258] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.685770][T14258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.704619][T14258] bridge_slave_1: entered allmulticast mode [ 1248.735849][T14258] bridge_slave_1: entered promiscuous mode [ 1248.817489][T14249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.832997][T14249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.844276][T14249] bridge_slave_0: entered allmulticast mode [ 1248.861216][T14249] bridge_slave_0: entered promiscuous mode [ 1249.144785][T14249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.152826][T14249] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.168167][T14249] bridge_slave_1: entered allmulticast mode [ 1249.180233][T14249] bridge_slave_1: entered promiscuous mode [ 1249.303279][T14262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.311192][T14262] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.333041][T14262] bridge_slave_0: entered allmulticast mode [ 1249.350902][T14262] bridge_slave_0: entered promiscuous mode [ 1249.654365][T14262] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.661969][T14262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.700988][T14262] bridge_slave_1: entered allmulticast mode [ 1249.742592][T14262] bridge_slave_1: entered promiscuous mode [ 1249.941688][T14258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.137782][T14249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.198029][T14249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.421006][T14258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.149796][T14262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.237060][T14262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.917084][T14258] team0: Port device team_slave_0 added [ 1252.026721][T14249] team0: Port device team_slave_0 added [ 1252.149551][T14262] team0: Port device team_slave_0 added [ 1252.265247][T14258] team0: Port device team_slave_1 added [ 1252.422517][T14249] team0: Port device team_slave_1 added [ 1252.661286][ T9460] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.760677][T14262] team0: Port device team_slave_1 added [ 1253.227374][ T9460] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.860291][ T9460] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.931760][T14262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1253.948883][T14262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1254.044126][T14262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1254.085088][T14258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1254.092337][T14258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1254.183601][T14258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1254.224598][T14258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1254.231768][T14258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1254.287273][T14258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1254.352155][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.381185][T14249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1254.418974][T14249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1254.451095][T14249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1254.480967][T14249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1254.508791][T14249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1254.614617][T14249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1254.666451][ T5130] ===================================================== [ 1254.674357][ T5130] BUG: KMSAN: uninit-value in from_kgid_munged+0x582/0xc40 [ 1254.682029][ T5130] from_kgid_munged+0x582/0xc40 [ 1254.687401][ T5130] __scm_recv_common+0x2a6/0x910 [ 1254.692832][ T5130] scm_recv_unix+0x5e/0x580 [ 1254.697952][ T5130] __unix_dgram_recvmsg+0x14d6/0x1730 [ 1254.704051][ T5130] unix_dgram_recvmsg+0x115/0x180 [ 1254.709288][ T5130] sock_recvmsg+0x2d9/0x380 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1254.717628][ T5130] ____sys_recvmsg+0x193/0x620 [ 1254.722605][ T5130] ___sys_recvmsg+0x20b/0x850 [ 1254.728761][ T5130] __x64_sys_recvmsg+0x20e/0x3d0 [ 1254.734060][ T5130] x64_sys_call+0x35cc/0x3ea0 [ 1254.739012][ T5130] do_syscall_64+0x134/0xf80 [ 1254.744196][ T5130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.755933][ T5130] [ 1254.758374][ T5130] Local variable scm created at: [ 1254.763819][ T5130] __unix_dgram_recvmsg+0x4d/0x1730 [ 1254.769367][ T5130] unix_dgram_recvmsg+0x115/0x180 [ 1254.774796][ T5130] [ 1254.777235][ T5130] CPU: 0 UID: 0 PID: 5130 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 1254.786639][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1254.797024][ T5130] ===================================================== [ 1254.804397][ T5130] Disabling lock debugging due to kernel taint [ 1254.843350][ T5130] Kernel panic - not syncing: kmsan.panic set ... [ 1254.849997][ T5130] CPU: 0 UID: 0 PID: 5130 Comm: udevd Tainted: G B syzkaller #0 PREEMPT(full) [ 1254.860658][ T5130] Tainted: [B]=BAD_PAGE [ 1254.864931][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1254.875140][ T5130] Call Trace: [ 1254.878541][ T5130] [ 1254.881589][ T5130] __dump_stack+0x26/0x30 [ 1254.886145][ T5130] dump_stack_lvl+0x50/0x1c0 [ 1254.890947][ T5130] ? dump_stack+0x12/0x25 [ 1254.895503][ T5130] dump_stack+0x1e/0x25 [ 1254.899878][ T5130] vpanic+0x7b4/0x1430 [ 1254.904214][ T5130] panic+0x15d/0x160 [ 1254.908489][ T5130] kmsan_report+0x31a/0x320 [ 1254.913310][ T5130] ? kmsan_get_metadata+0xf1/0x160 [ 1254.918666][ T5130] ? __msan_warning+0x1b/0x30 [ 1254.923583][ T5130] ? from_kgid_munged+0x582/0xc40 [ 1254.928847][ T5130] ? __scm_recv_common+0x2a6/0x910 [ 1254.934166][ T5130] ? scm_recv_unix+0x5e/0x580 [ 1254.939027][ T5130] ? __unix_dgram_recvmsg+0x14d6/0x1730 [ 1254.944839][ T5130] ? unix_dgram_recvmsg+0x115/0x180 [ 1254.950251][ T5130] ? sock_recvmsg+0x2d9/0x380 [ 1254.955146][ T5130] ? ____sys_recvmsg+0x193/0x620 [ 1254.960282][ T5130] ? ___sys_recvmsg+0x20b/0x850 [ 1254.965414][ T5130] ? __x64_sys_recvmsg+0x20e/0x3d0 [ 1254.970802][ T5130] ? x64_sys_call+0x35cc/0x3ea0 [ 1254.976006][ T5130] ? do_syscall_64+0x134/0xf80 [ 1254.981003][ T5130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.987386][ T5130] ? update_load_avg+0x14eb/0x25d0 [ 1254.992874][ T5130] ? kmsan_get_metadata+0xf1/0x160 [ 1254.998257][ T5130] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1255.004860][ T5130] ? kmsan_get_metadata+0xf1/0x160 [ 1255.010320][ T5130] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1255.016429][ T5130] ? preempt_schedule_irq+0x79/0xa0 [ 1255.021939][ T5130] ? raw_irqentry_exit_cond_resched+0x5d/0x80 [ 1255.028350][ T5130] ? irqentry_exit+0x8f/0x6c0 [ 1255.033282][ T5130] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1255.039963][ T5130] ? kmsan_get_metadata+0xf1/0x160 [ 1255.045445][ T5130] __msan_warning+0x1b/0x30 [ 1255.050191][ T5130] from_kgid_munged+0x582/0xc40 [ 1255.055334][ T5130] __scm_recv_common+0x2a6/0x910 [ 1255.060505][ T5130] scm_recv_unix+0x5e/0x580 [ 1255.065289][ T5130] ? kmsan_get_metadata+0xf1/0x160 [ 1255.070665][ T5130] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1255.076777][ T5130] __unix_dgram_recvmsg+0x14d6/0x1730 [ 1255.082500][ T5130] unix_dgram_recvmsg+0x115/0x180 [ 1255.087754][ T5130] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1255.093511][ T5130] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1255.099280][ T5130] sock_recvmsg+0x2d9/0x380 [ 1255.104007][ T5130] ____sys_recvmsg+0x193/0x620 [ 1255.109041][ T5130] ? should_fail_ex+0x45/0x8c0 [ 1255.114162][ T5130] ___sys_recvmsg+0x20b/0x850 [ 1255.119091][ T5130] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1255.125277][ T5130] ? kmsan_get_metadata+0xf1/0x160 [ 1255.130677][ T5130] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1255.136766][ T5130] __x64_sys_recvmsg+0x20e/0x3d0 [ 1255.142022][ T5130] ? kmsan_get_metadata+0xf1/0x160 [ 1255.147420][ T5130] x64_sys_call+0x35cc/0x3ea0 [ 1255.152354][ T5130] do_syscall_64+0x134/0xf80 [ 1255.157134][ T5130] ? clear_bhb_loop+0x50/0xa0 [ 1255.162111][ T5130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.168225][ T5130] RIP: 0033:0x7fad7eea7407 [ 1255.172830][ T5130] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1255.192686][ T5130] RSP: 002b:00007fff1af63c90 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 1255.201345][ T5130] RAX: ffffffffffffffda RBX: 00007fad7f634880 RCX: 00007fad7eea7407 [ 1255.209503][ T5130] RDX: 0000000000000040 RSI: 00007fff1af63db0 RDI: 0000000000000009 [ 1255.217734][ T5130] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1255.225856][ T5130] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1255.233997][ T5130] R13: 00005589935f6100 R14: 0000000000000000 R15: 0000000000000000 [ 1255.242187][ T5130] [ 1255.245761][ T5130] Kernel Offset: disabled [ 1255.250237][ T5130] Rebooting in 86400 seconds..