last executing test programs: 37m5.782574467s ago: executing program 2 (id=411): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x88000) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r0, 0x54a6) 37m4.410012338s ago: executing program 2 (id=417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f0000000800)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a37e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731200f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e548355376ec821c05008685c055a367ea51b653eff6581710e72f1e7e4d9d1607d004d9ed64f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6611628606afadb04e0158f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x1506, &(0x7f0000002ac0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) 37m2.470176404s ago: executing program 2 (id=420): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x6, 0x0, &(0x7f00000017c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) 37m2.271129041s ago: executing program 2 (id=429): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='./mnt\x00', 0x840, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@delalloc}, {@nomblk_io_submit}, {@nojournal_checksum}]}, 0x1, 0x241, &(0x7f00000007c0)="$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") chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 37m0.04593306s ago: executing program 2 (id=423): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYRESDEC], 0x1, 0x253, &(0x7f00000002c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)) semop(r0, &(0x7f0000002480)=[{}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) getdents(r1, &(0x7f0000000140)=""/46, 0x2e) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mlockall(0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x4, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x3, 0x800, 0x0, 0xfffffffffffffffe, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x105, 0x0, 0xd721, 0x0, 0x9, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xad3]}) 36m59.589516527s ago: executing program 2 (id=425): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000140)) 36m59.196796349s ago: executing program 32 (id=425): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000140)) 34m56.038207829s ago: executing program 3 (id=690): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @local, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={&(0x7f0000004640)=@ipv4_getnexthop={0x20, 0x6a, 0x1, 0x70bd2a, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) 34m55.708557095s ago: executing program 3 (id=691): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 34m54.554996068s ago: executing program 3 (id=694): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="47000000010081", 0x7) syz_usb_connect$hid(0x1, 0x36, 0x0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, 0x0) fsopen(0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) 34m50.966023258s ago: executing program 3 (id=701): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x800000, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737fe0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf75592f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[], 0x78) 34m48.934511622s ago: executing program 3 (id=710): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) accept4(r0, 0x0, 0x0, 0x80000) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x211000, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYRES8, @ANYRESHEX, @ANYRESDEC=r0, @ANYRES8, @ANYRESDEC, @ANYRES8, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRES16=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES16], 0x5, 0x1514, &(0x7f0000002c80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r1, 0x1, 0x8, 0x2007ffc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, 0x0, 0x0, 0xfecc) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = io_uring_setup(0xad5, &(0x7f0000000100)) close(r5) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 34m48.455445291s ago: executing program 3 (id=713): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x7e3c, 0x4, 0x9, 0xfffffff9, 0xffff, 0xfffffffe, 0x7, 0x1, 0xfefffffd}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x7f}) 34m48.082592611s ago: executing program 33 (id=713): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x7e3c, 0x4, 0x9, 0xfffffff9, 0xffff, 0xfffffffe, 0x7, 0x1, 0xfefffffd}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x7f}) 30m58.975746329s ago: executing program 5 (id=1215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) inotify_rm_watch(0xffffffffffffffff, 0x0) 30m57.247039589s ago: executing program 5 (id=1217): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) accept4(r0, 0x0, 0x0, 0x80000) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x211000, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYRES8, @ANYRESHEX, @ANYRESDEC=r0, @ANYRES8, @ANYRESDEC, @ANYRES8, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRES16=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES16], 0x5, 0x1514, &(0x7f0000002c80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r1, 0x1, 0x8, 0x2007ffc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = io_uring_setup(0xad5, &(0x7f0000000100)) close(r4) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 30m55.87647021s ago: executing program 5 (id=1221): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x8, 0x1, 0x4, 0x68018a7, {{0x6, 0x4, 0x1, 0x4, 0x18, 0x67, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1, {[@noop]}}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708007b8af8ff00000000bfa200030000000000000000f8ffffffb703000008120000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000050000000950000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ca37f2", 0x20, 0x2c, 0x0, @remote, @local, {[], {{0x2100, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x37f1}]}}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r2, 0x0, 0x0) 30m55.532925758s ago: executing program 5 (id=1223): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000001c0)={[{}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8004, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4118d39c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 30m54.557716064s ago: executing program 5 (id=1226): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000480)={[{@hide}, {@dmode={'dmode', 0x3d, 0x9}}, {@overriderock}, {@utf8}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@mode={'mode', 0x3d, 0xc9}}, {@cruft}, {@map_off}, {@check_strict}, {@overriderock}, {@check_relaxed}, {@map_normal}, {@nocompress}, {@cruft}, {@session={'session', 0x3d, 0x2e}}, {@gid}, {@sbsector={'sbsector', 0x3d, 0x3}}]}, 0x1, 0xa3b, &(0x7f0000000d40)="$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") mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000540)='./file1\x00', 0x810410, &(0x7f0000000300)=ANY=[], 0x5, 0x1ea, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 30m52.12189629s ago: executing program 5 (id=1232): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x8, 0x1, 0x4, 0x68018a7, {{0x6, 0x4, 0x1, 0x4, 0x18, 0x67, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1, {[@noop]}}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708007b8af8ff00000000bfa200030000000000000000f8ffffffb703000008120000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000050000000950000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ca37f2", 0x20, 0x2c, 0x0, @remote, @local, {[], {{0x2100, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x37f1}]}}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r3, 0x0, 0x0) 30m51.538352277s ago: executing program 34 (id=1232): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x8, 0x1, 0x4, 0x68018a7, {{0x6, 0x4, 0x1, 0x4, 0x18, 0x67, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1, {[@noop]}}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708007b8af8ff00000000bfa200030000000000000000f8ffffffb703000008120000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000050000000950000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ca37f2", 0x20, 0x2c, 0x0, @remote, @local, {[], {{0x2100, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x37f1}]}}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r3, 0x0, 0x0) 13m23.767708402s ago: executing program 6 (id=3442): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setfsgid(0x0) 13m22.738063555s ago: executing program 6 (id=3445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m22.188306639s ago: executing program 6 (id=3448): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x224, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x40, 0xd8, 0x5b, 0xc7, 0x13b1, 0x11, 0x5c34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x212, 0x3, 0x4, 0x8, 0x0, 0x7, [{{0x9, 0x4, 0x88, 0x4, 0x8, 0xf7, 0xf9, 0x8a, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "d2cf"}, {0x5, 0x24, 0x0, 0x621c}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x5, 0x2}}], [{{0x9, 0x5, 0x9, 0x4, 0x20, 0x1, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0x4a, 0xa91}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x0, 0x1, 0xe}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0xf4, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x2}]}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x0, 0xaf, 0xb7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3e, 0x7ff}]}}, {{0x9, 0x5, 0xd, 0x3, 0x40, 0x24, 0x8, 0x8}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x7, 0x2, 0x1}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x7f, 0xf6, 0x7}}, {{0x9, 0x5, 0x80, 0x3, 0x1c4aa9c632bf544, 0xdf, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x5}]}}]}}, {{0x9, 0x4, 0x3, 0x8, 0x3, 0x53, 0xee, 0x97, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0xaf9}, [@feature_unit={0x9, 0x24, 0x6, 0x2, 0x2, 0x1, [0xa]}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x307, 0x2, 0x2, 0x8}]}, @uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x2, 0x5, 0x7, "", 'b<\n'}]}], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x9, 0x9, 0xc, [@generic={0xe8, 0x1, "04d5abb282c498eee79f09b457e4eb03957388a53a5c574e0d2a0367adc6eed3f8095563f68203dedc1d85075d9471e9f79e24b0cacc555124830dc45118f9298acb4b7bcb0f35151b48ed03cadbe732eca34d4619f4ac0a4685095d23926437e712f3d666ae08a116645d7d017d3af0cbe03150f04ed5c04d461a08315d4b5ac0f4c7e6672544168b344e4d92767f3a382ae2e6495880cefc1c75ed501d262da981d341ef27c54a07325088a55a2d21bde5ec9401992fa6cc4b0bd58534ef3211ea1d6d115a2608e80654ed291197d746403e53be28649bfa0c0c0ec571d3ff8374db2515d3"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0x6, 0x9, 0xfe}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x2, 0x7, 0xe}}]}}, {{0x9, 0x4, 0x51, 0xa, 0x1, 0xff, 0xff, 0xff, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0xb30, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x307, 0x3, 0x2, 0x4}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0x3}]}, @uac_as], [{{0x9, 0x5, 0x9, 0xc, 0x10, 0x6, 0x9, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x1}, @generic={0x21, 0x21, "3534b186851fc43cd1e61f3f18d36db088978c7f992b26ef3bbac46ba3223c"}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x406}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r2, 0x7, 0x0, 0x0) socket(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r6 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) write$P9_RSTATu(r6, 0x0, 0x5a) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000100)={0x6, 0x73, 0x2, 0xc9f, 0x59, "88bd91aa90758062b5fffd9272e301aa98af75"}) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) setns(r1, 0x24020000) 13m16.211368001s ago: executing program 6 (id=3455): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4002, &(0x7f0000000000)={[{@noquota}, {@noquota}]}, 0x3, 0xbc9, &(0x7f0000002380)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x2f00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) futex(&(0x7f0000000100), 0x8, 0x3fffff9, 0x0, &(0x7f00000001c0)=0x1, 0x0) futex(&(0x7f000000cffc)=0x4, 0x1, 0x4, 0x0, 0x0, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x2, 0x5002) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfdfffffd, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x5, 0xb, 0x3, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000006, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1002, 0xa2, 0x7, 0x953a, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x149, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x4, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0x226, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 13m14.551285615s ago: executing program 6 (id=3461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syslog(0x4, &(0x7f00000000c0)=""/196, 0xc4) syslog(0x4, &(0x7f00000002c0)=""/18, 0x12) r5 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000008, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r5, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13m9.65644929s ago: executing program 6 (id=3469): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4002, &(0x7f0000000000)={[{@noquota}, {@noquota}]}, 0x3, 0xbc9, &(0x7f0000002380)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x2f00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) futex(&(0x7f0000000100), 0x8, 0x3fffff9, 0x0, &(0x7f00000001c0)=0x1, 0x0) futex(&(0x7f000000cffc)=0x4, 0x1, 0x4, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfdfffffd, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x5, 0xb, 0x3, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000006, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1002, 0xa2, 0x7, 0x953a, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x149, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x4, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0x226, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 13m8.264920402s ago: executing program 35 (id=3469): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4002, &(0x7f0000000000)={[{@noquota}, {@noquota}]}, 0x3, 0xbc9, &(0x7f0000002380)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x2f00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) futex(&(0x7f0000000100), 0x8, 0x3fffff9, 0x0, &(0x7f00000001c0)=0x1, 0x0) futex(&(0x7f000000cffc)=0x4, 0x1, 0x4, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfdfffffd, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x5, 0xb, 0x3, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000006, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1002, 0xa2, 0x7, 0x953a, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x149, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x4, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0x226, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 31.327718717s ago: executing program 7 (id=5266): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$inet(0x2, 0x3, 0x3) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x1, &(0x7f0000000200)=0x8, 0x4) sendto$inet6(r6, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000001) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x8, 0xfffffff7, 0x238d117e660ceb5b, 0x401, 0x6, 0xe12, 0x2c0, 0x0, 0x0, 0x0, 0x27}}, 0x50) close_range(r5, 0xffffffffffffffff, 0x0) 28.767965533s ago: executing program 7 (id=5268): syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000d40)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRES16, @ANYRES8], 0x40, 0x2f6, &(0x7f0000000e40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fstatfs(r0, &(0x7f0000000040)=""/226) fstatfs(r0, 0x0) 28.469478807s ago: executing program 7 (id=5270): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) io_setup(0x2, 0x0) mlock(&(0x7f0000754000/0x3000)=nil, 0x3000) process_vm_writev(0x0, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xaa50]}, 0x8, 0x800) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x2000) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "00000000000000fbfcffff00", 0x4, 0xfffffff7, 0x4, 0x40000006}, 0x3c) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001200)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x1, 0x1, 0x2, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) 26.82509301s ago: executing program 7 (id=5273): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, 0x0) io_setup(0xb336, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6a, 0x0, &(0x7f0000000000)='GPL\x00', 0x202, 0xde, &(0x7f0000000340)=""/222, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) 20.255331489s ago: executing program 7 (id=5284): r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) bind$netlink(r2, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) close(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) shutdown(r3, 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x2, {0x0, 0x1}, {0x47, 0x4}, @cond=[{0x84, 0x3bf, 0x406, 0x0, 0x1, 0xd}, {0x0, 0x40a0, 0x1, 0x5, 0x800, 0x7}]}) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000100)={0x1, 0x3, 0x33, 0x0, 0xffffffff, 0xe7}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$evdev(r5, &(0x7f0000000400)=[{{}, 0x14, 0x1}], 0x18) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0xedb, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) 19.970074412s ago: executing program 7 (id=5286): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x4000}, 0x50) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="8b6bb8d12aef98b340c0a7d8020000001c9f2ec1fc34107b8cf12eea34b3e768c6fa00000000001b0000000000a2ded5bab318cc1a8138e144f0ad3f10478735135fb8587aa95d9d499bca6facf5f7aed285d2d5a12dc0fe2779aea4854e9a141f6ff284f0be5b682f217382c9ac4c3683f76a426fe263dbf774c3fa4705d3d1b9654033ca0a8cd4ea471bcd953e71580de1ad2257afac66fb45ba2889c2e0c22c8bf96c9255c8e98f5115a0f06f774925"], 0x0, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) connect$vsock_stream(r5, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x104000, 0x0) setsockopt$sock_int(r3, 0x1, 0x26, &(0x7f0000000040)=0x6, 0x4) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYBLOB="87ebf209e067e7d9257741ddd50ecb98c9761a85befb3daefd81d85fa351bf50ee39ba40b9c2f74bfe063d656e7992c3e6ecd70257c4225076e8525dac37510b85cb60126eb16ba2e2dd429ba0a728ba01a1148bd739c34e0817dfd16892c3fc53270987341c55a044a2ac5d2bf7f32ac67c345aee2a3227bb625c57906e2f79f324f352d3f098face0ddf3e0d84487f07ea3e031327a66f572637aca1efc2180db7340f16465e0d70a6ad3c0d677787589d63d62f7e66b2d68b9e01f337adad378c9d57910e8807d320f8256281d5dc637f7856bb529d0ef4b25707812cfbc705070476d9e83ff4095ac5106997a7255776b20be38373f89d94abd0839a3e211f3183", @ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="0b67726f75805642927df8fcde013b1d83fdda357606d1a039c0d81e912a39ee26868d1e31e5bbfafd00526c57577a194657612984d7aa077c17c76909011bf84bc30323eb877d450173a574b0f30045af63fcf05ff2efae1103a28eefc67faade3697513156108b26666dea6f3462e70691e53092d2d64bb40e7e9cd5c87afe941ba623adf7e5e9f264ee7d136ec30ffe2c00457935107357467d412ccb7222654e", @ANYRESDEC=0x0, @ANYBLOB=',audit,\x00']) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000100505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f01000000000000000000090581034000000000090582020000000000090503024002"], 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) 13.887021501s ago: executing program 1 (id=5297): syz_io_uring_setup(0x4d71, &(0x7f00000001c0)={0x0, 0xc20e, 0x400, 0x2, 0xbfd00000}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mq_open(&(0x7f00000007c0)='\r\x00elinu\xef\xe3elinux\x00\x86\xf6\x92\n#*\xac\x02\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a|\x9en\xbd\xeb\x14\x7f\xb9\x83\xfe\nf\xc26\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]G\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8S\\\xec\xa31_\v\x8a\xf2\x18\xa6\xb1\xbb\x8b9\x1e\xff\xf8\xcdX\xf7h\b\xaf\x01\x84\xd4\x06Ml(Bw=\x13\xa1&\xd3\xec\xa9\x8ba\x86\x9d\xf4\x11\n\x89z\xa5\xac\xcbh\xc2\x1b\xeay\xbf\x06\x80\xff\xdf\x93\xef\x7f\xb1\xaf\xa0\xae', 0x80, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x40008) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) 13.886145842s ago: executing program 4 (id=5298): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) io_setup(0x2, 0x0) mlock(&(0x7f0000754000/0x3000)=nil, 0x3000) process_vm_writev(0x0, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xaa50]}, 0x8, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x2000) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "00000000000000fbfcffff00", 0x4, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 10.532671512s ago: executing program 4 (id=5299): r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) bind$netlink(r2, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) close(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) shutdown(r3, 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x2, {0x0, 0x1}, {0x47, 0x4}, @cond=[{0x84, 0x3bf, 0x406, 0x0, 0x1, 0xd}, {0x0, 0x40a0, 0x1, 0x5, 0x800, 0x7}]}) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000100)={0x1, 0x3, 0x33, 0x0, 0xffffffff, 0xe7}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$evdev(r5, &(0x7f0000000400)=[{{}, 0x14, 0x1}], 0x18) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0xedb, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) 10.4339422s ago: executing program 1 (id=5301): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x468, 0x340, 0x11, 0x148, 0x340, 0x0, 0x428, 0x2a8, 0x2a8, 0x428, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x7}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) ioctl$TCSETS(r4, 0x40045431, 0x0) r6 = syz_open_pts(r4, 0x42000) ioctl$TIOCMBIC(r6, 0x5417, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000140), 0x2, 0x0) readv(r8, &(0x7f0000000200)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0xf7bb) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@security={'security\x00', 0x64, 0x4, 0x310, 0x100000c, 0x158, 0x0, 0xc0, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x8004, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) 7.872342356s ago: executing program 0 (id=5302): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) io_setup(0x2, 0x0) mlock(&(0x7f0000754000/0x3000)=nil, 0x3000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xaa50]}, 0x8, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x2000) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "00000000000000fbfcffff00", 0x4, 0xfffffff7, 0x4, 0x40000006}, 0x3c) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001200)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x1, 0x1, 0x2, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) 7.839097799s ago: executing program 4 (id=5303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r4 = socket(0x2, 0x3, 0x6) bind$inet(r4, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x48812, &(0x7f0000000000)={0x2, 0x1, @broadcast}, 0x10) 7.167670703s ago: executing program 1 (id=5304): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x468, 0x340, 0x11, 0x148, 0x340, 0x0, 0x428, 0x2a8, 0x2a8, 0x428, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x7}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) ioctl$TCSETS(r4, 0x40045431, 0x0) r6 = syz_open_pts(r4, 0x42000) ioctl$TIOCMBIC(r6, 0x5417, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000140), 0x2, 0x0) readv(r8, &(0x7f0000000200)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0xf7bb) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@security={'security\x00', 0x64, 0x4, 0x310, 0x100000c, 0x158, 0x0, 0xc0, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x8004, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, 0x0, 0x0) 6.510103956s ago: executing program 0 (id=5305): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 5.323074592s ago: executing program 0 (id=5306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$inet(0x2, 0x3, 0x3) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000001) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x8, 0xfffffff7, 0x238d117e660ceb5b, 0x401, 0x6, 0xe12, 0x2c0, 0x0, 0x0, 0x0, 0x27}}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.636755867s ago: executing program 36 (id=5286): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x4000}, 0x50) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="8b6bb8d12aef98b340c0a7d8020000001c9f2ec1fc34107b8cf12eea34b3e768c6fa00000000001b0000000000a2ded5bab318cc1a8138e144f0ad3f10478735135fb8587aa95d9d499bca6facf5f7aed285d2d5a12dc0fe2779aea4854e9a141f6ff284f0be5b682f217382c9ac4c3683f76a426fe263dbf774c3fa4705d3d1b9654033ca0a8cd4ea471bcd953e71580de1ad2257afac66fb45ba2889c2e0c22c8bf96c9255c8e98f5115a0f06f774925"], 0x0, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) connect$vsock_stream(r5, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x104000, 0x0) setsockopt$sock_int(r3, 0x1, 0x26, &(0x7f0000000040)=0x6, 0x4) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYBLOB="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", @ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="0b67726f75805642927df8fcde013b1d83fdda357606d1a039c0d81e912a39ee26868d1e31e5bbfafd00526c57577a194657612984d7aa077c17c76909011bf84bc30323eb877d450173a574b0f30045af63fcf05ff2efae1103a28eefc67faade3697513156108b26666dea6f3462e70691e53092d2d64bb40e7e9cd5c87afe941ba623adf7e5e9f264ee7d136ec30ffe2c00457935107357467d412ccb7222654e", @ANYRESDEC=0x0, @ANYBLOB=',audit,\x00']) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000100505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f01000000000000000000090581034000000000090582020000000000090503024002"], 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) 3.611549209s ago: executing program 0 (id=5308): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) io_setup(0x2, 0x0) mlock(&(0x7f0000754000/0x3000)=nil, 0x3000) process_vm_writev(0x0, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xaa50]}, 0x8, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x2000) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "00000000000000fbfcffff00", 0x4, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 3.610573039s ago: executing program 1 (id=5309): r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) bind$netlink(r2, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) close(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f00000001c0)) shutdown(r3, 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x2, {0x0, 0x1}, {0x47, 0x4}, @cond=[{0x84, 0x3bf, 0x406, 0x0, 0x1, 0xd}, {0x0, 0x40a0, 0x1, 0x5, 0x800, 0x7}]}) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000100)={0x1, 0x3, 0x33, 0x0, 0xffffffff, 0xe7}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$evdev(r5, &(0x7f0000000400)=[{{}, 0x14, 0x1}], 0x18) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0xedb, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) 2.328496683s ago: executing program 0 (id=5310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.304988105s ago: executing program 4 (id=5311): r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) bind$netlink(r2, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) close(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f00000001c0)) shutdown(r3, 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x2, {0x0, 0x1}, {0x47, 0x4}, @cond=[{0x84, 0x3bf, 0x406, 0x0, 0x1, 0xd}, {0x0, 0x40a0, 0x1, 0x5, 0x800, 0x7}]}) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000100)={0x1, 0x3, 0x33, 0x0, 0xffffffff, 0xe7}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$evdev(r5, &(0x7f0000000400)=[{{}, 0x14, 0x1}], 0x18) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0xedb, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) 2.272013017s ago: executing program 1 (id=5312): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$inet(0x2, 0x3, 0x3) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) sendto$inet6(r6, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000001) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x8, 0xfffffff7, 0x238d117e660ceb5b, 0x401, 0x6, 0xe12, 0x2c0, 0x0, 0x0, 0x0, 0x27}}, 0x50) close_range(r5, 0xffffffffffffffff, 0x0) 1.961868482s ago: executing program 4 (id=5313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48812, &(0x7f0000000000)={0x2, 0x1, @broadcast}, 0x10) 1.190219544s ago: executing program 1 (id=5314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d530496d) write$binfmt_elf32(r3, &(0x7f00000002c0)=ANY=[], 0x78) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 882.545869ms ago: executing program 0 (id=5315): socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 0s ago: executing program 4 (id=5316): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2b1, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000024c0)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYBLOB="3cf27dec20b2fb057fd8c00bad4867799357d178c5b61664e431da0db71d44935622db4199f18ee695e2386c301106e1b6433ea837ae21e7999c3044611c35eaf8c8457f04376f37efbbdf9d5165a39f2f4b7b1be995296eb5bffb4a49953c7cbb2d7b3c29599b72f640ba26006cf1ccd02a28e2294eee2dbf76e4be8b7b120df93dee0607ccaee99ad1ef4bf37e585f0d5288ecd415f7fe62659c051ed613d4d5966c9345bbd11e2bc6f487e88b727f0b80f7fb0aff93f8a282c076df3509cef760fd651f84fe787d7a5a8e4274625526727c1ee3"], &(0x7f0000000380)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='block_bio_remap\x00', r1, 0x0, 0x1}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) tkill(0x0, 0x4000011) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r5, &(0x7f0000002240)=""/237, 0xed, 0x4eb) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000240)=0x5) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r8) kernel console output (not intermixed with test programs): 3713][T10154] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1508.859987][T10154] usb 2-1: invalid MIDI out EP 0 [ 1510.302008][T10154] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 1510.463847][T18345] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1510.466465][T19246] udevd[19246]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1510.629398][T19544] loop0: detected capacity change from 0 to 4096 [ 1511.970555][T19551] loop4: detected capacity change from 0 to 512 [ 1512.182267][T19551] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.3280: iget: bad i_size value: 38620345925642 [ 1512.202528][T19551] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3280: couldn't read orphan inode 15 (err -117) [ 1513.064676][T19551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1513.636290][T19568] fuse: Bad value for 'group_id' [ 1513.658161][T19568] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1513.756454][T18345] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1513.893428][ T2130] usb 2-1: USB disconnect, device number 32 [ 1513.962329][T10154] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1514.110842][T19575] fuse: Bad value for 'group_id' [ 1514.119398][T19575] fuse: Unknown parameter '0x0000000000000007‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1514.213287][T10154] usb 1-1: Using ep0 maxpacket: 16 [ 1514.300650][T10154] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1514.322538][T10154] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1514.333241][T10154] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1514.370752][T10154] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1514.415520][T10154] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1514.438834][ T5837] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1514.513604][T10154] usb 1-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1514.523194][ T2130] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1514.536586][T10154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1514.546664][T10154] usb 1-1: SerialNumber: syz [ 1514.565078][T19568] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1514.644490][T10154] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1514.701073][T10154] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 1514.714316][ T2130] usb 2-1: Using ep0 maxpacket: 16 [ 1514.726178][ T5837] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.761370][ T5837] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1514.800490][ T5837] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1514.851638][ T2130] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1514.880691][ T2130] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1514.894648][ T5837] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1514.923902][ T2130] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1514.956085][ T2130] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1514.993504][ T2130] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1515.018815][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.043220][ T23] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1515.059105][ T2130] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1515.082950][ T2130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1515.111640][ T2130] usb 2-1: SerialNumber: syz [ 1515.136558][T19575] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1515.171031][ T2130] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1515.180549][ T2130] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 1515.239902][ T5837] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1515.256616][ T23] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.282237][ T23] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1515.297834][ T23] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1515.313652][ T5837] usb 5-1: invalid MIDI out EP 0 [ 1515.378380][ T23] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1515.389731][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.641078][ T5837] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 1515.642877][ T23] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 1515.710679][ T23] usb 7-1: invalid MIDI out EP 0 [ 1516.040775][ T23] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 1516.910615][T16940] usb 1-1: USB disconnect, device number 86 [ 1518.883299][T16887] usb 5-1: USB disconnect, device number 30 [ 1519.007898][ T5837] usb 2-1: USB disconnect, device number 33 [ 1520.285535][T10154] usb 7-1: USB disconnect, device number 81 [ 1521.547023][T19629] fuse: Bad value for 'group_id' [ 1521.653286][T19631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3297'. [ 1521.983239][ T5844] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1522.116717][T19641] loop6: detected capacity change from 0 to 1024 [ 1522.203250][ T5844] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.246451][ T5844] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1522.281635][ T5844] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1522.319520][T19641] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1522.374155][ T5844] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1522.433367][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.751061][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 1523.200291][T18253] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1523.214688][ T5844] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1523.231147][ T5844] usb 2-1: invalid MIDI out EP 0 [ 1523.498648][ T5844] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 1524.153231][ T5844] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1524.435350][ T7790] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.723522][ T5844] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.851525][ T5844] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1524.940546][ T7790] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.006976][ T5844] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1525.104698][ T5844] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1525.107466][ T7790] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.133170][ T5844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.194747][ T5844] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 1525.202646][ T5844] usb 7-1: invalid MIDI out EP 0 [ 1525.686837][ T5844] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 1525.708727][ T7790] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.907777][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1525.928428][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1525.937639][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1525.952933][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1525.967854][ T23] usb 2-1: USB disconnect, device number 34 [ 1525.974706][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1525.982098][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1526.332826][T19672] chnl_net:caif_netlink_parms(): no params data found [ 1526.485097][T19677] loop1: detected capacity change from 0 to 4096 [ 1526.702024][T19677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1526.753593][T19672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.765975][T19672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.776413][T19672] bridge_slave_0: entered allmulticast mode [ 1526.789213][T19672] bridge_slave_0: entered promiscuous mode [ 1527.041058][T19672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.051671][T19672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.079600][T19672] bridge_slave_1: entered allmulticast mode [ 1527.620883][T18467] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1527.627019][T19672] bridge_slave_1: entered promiscuous mode [ 1527.868391][T19672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1527.965394][T19672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1528.063591][ T5797] Bluetooth: hci0: command tx timeout [ 1528.130183][T19672] team0: Port device team_slave_0 added [ 1528.144131][T19672] team0: Port device team_slave_1 added [ 1529.019291][T19693] fuse: Bad value for 'group_id' [ 1529.044391][ T5844] usb 7-1: USB disconnect, device number 82 [ 1529.163789][T19672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1529.170834][T19672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1529.210043][T19672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1529.405754][T19672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.412764][T19672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1529.438851][ C0] vkms_vblank_simulate: vblank timer overrun [ 1529.458631][T19672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.694924][T19672] hsr_slave_0: entered promiscuous mode [ 1529.717193][T19672] hsr_slave_1: entered promiscuous mode [ 1529.732529][T19672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1529.740277][T19672] Cannot create hsr debugfs directory [ 1529.827660][T19714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3324'. [ 1530.103749][ T5797] Bluetooth: hci0: command tx timeout [ 1530.608451][ T7790] hsr_slave_0: left promiscuous mode [ 1530.620836][ T7790] hsr_slave_1: left promiscuous mode [ 1530.627779][ T7790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1530.635754][ T7790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1530.644711][ T7790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1530.652376][ T7790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1530.661034][ T7790] bridge_slave_1: left allmulticast mode [ 1530.667692][ T7790] bridge_slave_1: left promiscuous mode [ 1530.678095][T19726] loop4: detected capacity change from 0 to 1024 [ 1530.684947][ T7790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.699242][ T7790] bridge_slave_0: left allmulticast mode [ 1530.719829][ T7790] bridge_slave_0: left promiscuous mode [ 1530.726604][ T7790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.742224][T19726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1530.778733][T19724] loop6: detected capacity change from 0 to 4096 [ 1530.811507][T19724] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1530.825677][ T7790] veth1_macvtap: left promiscuous mode [ 1530.831285][ T7790] veth0_macvtap: left promiscuous mode [ 1530.853895][ T7790] veth1_vlan: left promiscuous mode [ 1530.859442][ T7790] veth0_vlan: left promiscuous mode [ 1532.094850][T18345] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1532.200024][ T5797] Bluetooth: hci0: command tx timeout [ 1532.417937][T18253] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1532.680200][T19741] fuse: Bad value for 'group_id' [ 1532.688398][T19741] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1532.983427][ T23] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1533.886840][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 1533.961104][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1534.024031][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1534.063151][ T23] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1534.073052][ T23] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1534.112075][ T23] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1534.149468][ T23] usb 5-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1534.169059][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1534.193372][ T23] usb 5-1: SerialNumber: syz [ 1534.255326][T19741] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1534.268911][ T23] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1534.277021][ T5797] Bluetooth: hci0: command tx timeout [ 1534.294758][ T23] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 1534.955988][ T7790] team0 (unregistering): Port device team_slave_1 removed [ 1535.023257][ T23] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1535.088765][ T7790] team0 (unregistering): Port device team_slave_0 removed [ 1535.214459][ T7790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1535.267513][ T23] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.300712][ T23] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1535.313486][ T23] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1535.342045][ T23] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1535.361655][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.371464][ T7790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1535.396360][ T23] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 1535.429182][ T23] usb 7-1: invalid MIDI out EP 0 [ 1535.528966][ T23] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 1536.053913][ T2130] usb 5-1: USB disconnect, device number 31 [ 1536.663350][ T5844] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1536.906642][ T7790] bond0 (unregistering): Released all slaves [ 1536.923644][ T5844] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1536.960372][ T5844] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1537.006323][ T5844] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1537.069479][ T5844] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1537.099946][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.238910][ T5844] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1537.262998][ T5844] usb 5-1: invalid MIDI out EP 0 [ 1537.693594][ T5844] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 1538.102126][ T6782] usb 7-1: USB disconnect, device number 83 [ 1538.104898][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 1538.434752][ T7790] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.707790][ T7790] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.854828][ T7790] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.953016][ T7790] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.974910][T19672] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1538.987519][T19672] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1539.011665][T19672] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1539.042853][T19672] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1539.374511][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1539.404353][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1539.414441][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1539.440617][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1539.459247][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1539.468285][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1539.826594][T10154] usb 5-1: USB disconnect, device number 32 [ 1539.959036][T19672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1540.203837][T19672] 8021q: adding VLAN 0 to HW filter on device team0 [ 1540.485771][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.492941][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1540.531266][T10154] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1540.703686][ T7809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.710977][ T7809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1540.715738][T19810] loop6: detected capacity change from 0 to 512 [ 1540.811738][T19810] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.3344: iget: bad i_size value: 38620345925642 [ 1540.826580][T10154] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1540.837492][T10154] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1540.853301][T10154] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1540.866323][T10154] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1540.875542][T19810] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3344: couldn't read orphan inode 15 (err -117) [ 1540.893143][T10154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.974333][T19810] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1541.017152][T10154] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1541.040313][T10154] usb 5-1: invalid MIDI out EP 0 [ 1541.177517][T10154] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 1541.196945][T18500] udevd[18500]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1541.417369][T19781] chnl_net:caif_netlink_parms(): no params data found [ 1541.452654][T19672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1541.475540][T18253] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1541.543422][ T5797] Bluetooth: hci3: command tx timeout [ 1542.914693][T19781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.931924][T19781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.990007][T19781] bridge_slave_0: entered allmulticast mode [ 1543.035078][T19781] bridge_slave_0: entered promiscuous mode [ 1543.057857][T19781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.076708][T19781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.095567][T19781] bridge_slave_1: entered allmulticast mode [ 1543.115215][T19781] bridge_slave_1: entered promiscuous mode [ 1543.377442][T19781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1543.440049][ T7790] hsr_slave_0: left promiscuous mode [ 1543.468449][ T7790] hsr_slave_1: left promiscuous mode [ 1543.474710][ T7790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1543.499320][ T7790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1543.515527][ T7790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1543.534005][ T7790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1543.555949][ T7790] bridge_slave_1: left allmulticast mode [ 1543.561661][ T7790] bridge_slave_1: left promiscuous mode [ 1543.567754][ T7790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.586198][ T7790] bridge_slave_0: left allmulticast mode [ 1543.591907][ T7790] bridge_slave_0: left promiscuous mode [ 1543.613399][ T7790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.623186][ T5797] Bluetooth: hci3: command tx timeout [ 1543.644953][ T6782] usb 5-1: USB disconnect, device number 33 [ 1543.683002][ T7790] veth1_macvtap: left promiscuous mode [ 1543.689096][ T7790] veth0_macvtap: left promiscuous mode [ 1543.696525][ T7790] veth1_vlan: left promiscuous mode [ 1543.702833][ T7790] veth0_vlan: left promiscuous mode [ 1545.022527][ T7790] team0 (unregistering): Port device team_slave_1 removed [ 1545.078677][ T7790] team0 (unregistering): Port device team_slave_0 removed [ 1545.137942][ T7790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1545.196127][ T7790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1545.703438][ T5797] Bluetooth: hci3: command tx timeout [ 1545.834509][ T7790] bond0 (unregistering): Released all slaves [ 1545.944256][T19781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1546.005403][T19781] team0: Port device team_slave_0 added [ 1546.035871][T19672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1546.097125][T19781] team0: Port device team_slave_1 added [ 1546.215485][T19781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1546.222538][T19781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1546.328101][T19781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1546.344477][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.351010][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.390041][T19781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1546.412150][T19781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1546.438240][ C0] vkms_vblank_simulate: vblank timer overrun [ 1546.462766][T19781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1547.276680][T19781] hsr_slave_0: entered promiscuous mode [ 1547.314043][T19781] hsr_slave_1: entered promiscuous mode [ 1547.332344][T19672] veth0_vlan: entered promiscuous mode [ 1547.510062][T19672] veth1_vlan: entered promiscuous mode [ 1547.788166][ T5797] Bluetooth: hci3: command tx timeout [ 1547.799256][T19672] veth0_macvtap: entered promiscuous mode [ 1547.846773][T19672] veth1_macvtap: entered promiscuous mode [ 1547.963458][T19880] fuse: Bad value for 'group_id' [ 1548.007487][T19880] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1548.088557][T19672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.128647][T19672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.159386][T19672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1548.183751][T19672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.234961][T19672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1548.293200][T13677] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1548.397962][T19672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1548.562217][T19672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.572242][T19672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1548.596809][T19672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1548.611747][T19672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1548.641822][T19672] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.650815][T19672] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.719123][T19895] nfs: Unknown parameter '' [ 1548.773262][T13677] usb 5-1: Using ep0 maxpacket: 16 [ 1549.310715][T19672] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.328877][T19672] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.468193][T13677] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1549.520528][T13677] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1549.571134][T13677] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1549.604624][T13677] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1549.619854][T13677] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1549.691043][T13677] usb 5-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1549.741521][T13677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1549.760258][T13677] usb 5-1: SerialNumber: syz [ 1549.778502][T19880] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1549.812502][T13677] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1549.826152][T13677] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 1549.944767][ T7793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.964389][ T7793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1550.073602][ T5837] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1550.155283][T19781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1550.212942][ T7793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1550.221414][T19781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1550.232748][ T7793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1550.246240][T19781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1550.272559][T19781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1550.427319][ T5837] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1550.439702][ T5837] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1550.469321][ T5837] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1550.520735][ T5837] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1550.562430][ T5837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.616463][ T5837] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 1550.642953][ T5837] usb 7-1: invalid MIDI out EP 0 [ 1550.827278][T19781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1550.909405][ T5837] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 1551.067469][T19781] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.098017][ T7790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.105289][ T7790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1551.194364][ T23] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1551.261025][ T7790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.268354][ T7790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1551.506623][ T23] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.584733][ T23] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1551.614895][T19781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1551.690784][ T23] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1551.724096][ T23] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1551.757691][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.925600][ T23] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1551.959396][ T23] usb 1-1: invalid MIDI out EP 0 [ 1552.464581][ T23] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 1552.701670][T19781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1552.974433][T12501] usb 5-1: USB disconnect, device number 34 [ 1553.051132][T19781] veth0_vlan: entered promiscuous mode [ 1553.155102][ T23] usb 7-1: USB disconnect, device number 84 [ 1553.160843][T19781] veth1_vlan: entered promiscuous mode [ 1554.353278][T19781] veth0_macvtap: entered promiscuous mode [ 1554.377585][T19781] veth1_macvtap: entered promiscuous mode [ 1554.455573][T19781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1554.490956][T19781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.521304][T19781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1554.549137][T19781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.621154][T19781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1554.696463][T19781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.725134][T19781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1554.757138][T19781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1554.799773][T19781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.813218][ T5837] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1554.831077][T19781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1554.879941][T19781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.920797][T19781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1554.951828][T19781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.989374][T19781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1555.066447][T19781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.085871][ T5837] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1555.098729][T12501] usb 1-1: USB disconnect, device number 87 [ 1555.163270][T19781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.178828][ T5837] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1555.206346][T19781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.206672][ T5837] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1555.244619][T19781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.511595][T19965] loop4: detected capacity change from 0 to 512 [ 1555.963176][ T5837] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1556.041637][T19965] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1556.051369][ T5837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.299092][ T7788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1556.324785][T19965] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1556.341299][ T5837] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 1556.350999][ T7788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1556.362632][ T5837] usb 7-1: invalid MIDI out EP 0 [ 1556.374263][T19965] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.3372: bad orphan inode 131083 [ 1556.458243][T19965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1556.495742][ T7790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1556.577172][ T7790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1556.819410][T18571] udevd[18571]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1556.922733][ T5837] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 1556.962339][T18345] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1557.242862][T19973] loop1: detected capacity change from 0 to 4096 [ 1557.436663][T19973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1559.395857][T19781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1559.976493][T20001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3379'. [ 1560.307550][T20005] ubi31: attaching mtd0 [ 1560.325522][T20005] ubi31: scanning is finished [ 1560.325588][T20005] ubi31: empty MTD device detected [ 1560.918184][T20005] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1560.926649][T20005] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1560.934066][T20005] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1560.941140][T20005] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1560.948702][T20005] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1560.955724][T20005] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1560.963974][T20005] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1379088603 [ 1560.974118][T20005] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1560.986450][T20009] ubi31: background thread "ubi_bgt31d" started, PID 20009 [ 1562.852416][ T5837] usb 7-1: USB disconnect, device number 85 [ 1562.924149][T20022] loop6: detected capacity change from 0 to 512 [ 1562.945436][T20022] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1562.968144][T20022] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1563.093328][T20022] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.3383: bad orphan inode 131083 [ 1563.131603][T20022] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1563.939598][T18253] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1564.387187][T20039] 9pnet_fd: Insufficient options for proto=fd [ 1564.690096][T12501] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1564.992325][ T1122] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.017487][T12501] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.031168][T12501] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1565.149325][T12501] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1565.196476][T12501] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1565.208805][T12501] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.268436][ T1122] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.282350][T12501] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1565.302400][T12501] usb 2-1: invalid MIDI out EP 0 [ 1565.361200][T18571] udevd[18571]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 1565.381060][T19919] udevd[19919]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1565.415961][T18571] udevd[18571]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 1565.431152][T12501] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 1565.492609][T20043] fuse: Bad value for 'group_id' [ 1565.534938][T20043] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1565.556051][ T1122] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.758910][ T1122] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.933313][T12501] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1566.270962][T12501] usb 1-1: Using ep0 maxpacket: 16 [ 1566.310063][T12501] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1566.331247][T12501] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1567.322751][T12501] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1567.361437][T12501] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1567.387848][T12501] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1567.476274][T12501] usb 1-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1567.501305][T12501] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1567.527586][T12501] usb 1-1: SerialNumber: syz [ 1567.632776][T20043] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1567.755456][T12501] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1567.788658][T12501] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 1568.705401][T17622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1568.717701][T17622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1568.727321][T17622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1568.747553][T17622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1568.760867][T17622] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1568.768806][T17622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1568.971540][T16887] usb 2-1: USB disconnect, device number 35 [ 1569.320800][T10154] usb 1-1: USB disconnect, device number 88 [ 1569.672146][T20075] nfs: Unknown parameter '' [ 1571.236093][T17622] Bluetooth: hci1: command tx timeout [ 1572.674467][T20104] 9pnet_fd: Insufficient options for proto=fd [ 1572.953533][T20066] chnl_net:caif_netlink_parms(): no params data found [ 1573.141191][ T1122] hsr_slave_0: left promiscuous mode [ 1573.170416][ T1122] hsr_slave_1: left promiscuous mode [ 1573.219953][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1573.380674][T17622] Bluetooth: hci1: command tx timeout [ 1573.396691][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1573.524761][T10154] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1573.545902][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1573.570049][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1573.578379][ T1122] bridge_slave_1: left allmulticast mode [ 1573.585422][ T1122] bridge_slave_1: left promiscuous mode [ 1573.592353][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.606115][ T1122] bridge_slave_0: left allmulticast mode [ 1573.809970][ T1122] bridge_slave_0: left promiscuous mode [ 1573.844228][T10154] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.855968][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.883185][T10154] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1573.903169][T10154] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1573.943342][T10154] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1573.962735][T10154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.015887][T10154] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1574.034041][ T1122] veth1_macvtap: left promiscuous mode [ 1574.039584][ T1122] veth0_macvtap: left promiscuous mode [ 1574.074344][T10154] usb 1-1: invalid MIDI out EP 0 [ 1574.079661][ T1122] veth1_vlan: left promiscuous mode [ 1574.080982][T20122] loop1: detected capacity change from 0 to 4096 [ 1574.104540][ T1122] veth0_vlan: left promiscuous mode [ 1574.258231][T20122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1574.412209][T10154] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 1575.286668][T19781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.463237][T17622] Bluetooth: hci1: command tx timeout [ 1576.712247][ T23] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1577.212139][ T23] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1577.242125][ T23] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1577.269877][ T23] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1577.285525][ T23] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1577.297233][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.319016][ T23] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 1577.332030][ T23] usb 7-1: invalid MIDI out EP 0 [ 1577.381880][ T23] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 1577.460967][T18969] udevd[18969]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1577.585657][T17622] Bluetooth: hci1: command tx timeout [ 1578.600700][T10154] usb 1-1: USB disconnect, device number 89 [ 1579.006693][T20146] fuse: Bad value for 'group_id' [ 1579.047473][T20146] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1579.424345][T10154] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1579.515274][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 1579.673266][T10154] usb 2-1: Using ep0 maxpacket: 16 [ 1579.700015][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 1579.785615][T10154] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1579.803217][T10154] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1579.814188][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1579.845025][T10154] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1579.878932][T10154] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1579.923401][T10154] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1579.960862][T10154] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1579.992295][T10154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1580.022780][T10154] usb 2-1: SerialNumber: syz [ 1580.071053][T20146] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1580.114145][T10154] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1580.150108][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1580.178731][T10154] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 1580.210592][ T23] usb 7-1: USB disconnect, device number 86 [ 1584.765355][T12501] usb 2-1: USB disconnect, device number 36 [ 1585.135963][T20180] loop1: detected capacity change from 0 to 4096 [ 1586.020538][T20180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1586.332224][ T1122] bond0 (unregistering): Released all slaves [ 1587.014962][T19781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1587.340595][T20066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.369014][T20066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.381850][T20066] bridge_slave_0: entered allmulticast mode [ 1587.401730][T20066] bridge_slave_0: entered promiscuous mode [ 1588.080557][T20066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.142488][T20066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.193737][T20066] bridge_slave_1: entered allmulticast mode [ 1588.203635][T20066] bridge_slave_1: entered promiscuous mode [ 1588.526542][T20066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1588.977470][T20066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1589.343536][T20066] team0: Port device team_slave_0 added [ 1589.379845][T20066] team0: Port device team_slave_1 added [ 1590.457844][T20066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1590.465048][T20066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1590.514826][T20066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1590.575527][T20066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1590.598318][T20066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1590.643569][T20066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1590.765843][T20066] hsr_slave_0: entered promiscuous mode [ 1590.776735][T20066] hsr_slave_1: entered promiscuous mode [ 1590.786095][T20066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1590.796179][T20066] Cannot create hsr debugfs directory [ 1592.968489][T20253] loop6: detected capacity change from 0 to 4096 [ 1593.868817][T20253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1594.856680][T18253] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1594.936686][T20066] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1595.001767][T20267] fuse: Bad value for 'group_id' [ 1595.025742][T20066] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1595.078152][T20066] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1595.098361][T20066] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1595.118994][T20267] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1595.646861][T20285] ubi: mtd0 is already attached to ubi31 [ 1595.843314][ T5875] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1596.523722][ T5875] usb 2-1: Using ep0 maxpacket: 16 [ 1596.549683][ T5875] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1596.607407][ T5875] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1596.612796][T20066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1596.624828][ T5875] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1596.634753][ T5875] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1596.645524][ T5875] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1596.665763][ T5875] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1596.706491][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1596.731390][T20066] 8021q: adding VLAN 0 to HW filter on device team0 [ 1596.735414][ T5875] usb 2-1: SerialNumber: syz [ 1596.755925][T20267] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1596.766272][ T5875] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1596.781946][ T5875] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 1597.199840][ T7809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.207014][ T7809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1597.241416][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.248716][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1597.367441][T20066] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1597.378147][T20066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1598.081983][T20066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1598.340619][ T5875] usb 2-1: USB disconnect, device number 37 [ 1598.522863][T20314] syzkaller0: entered promiscuous mode [ 1598.537861][T20314] syzkaller0: entered allmulticast mode [ 1600.024820][T20324] fuse: Bad value for 'group_id' [ 1600.090678][T20324] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1600.405856][ T23] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1600.696460][T20332] loop0: detected capacity change from 0 to 4096 [ 1600.720756][T20066] veth0_vlan: entered promiscuous mode [ 1600.943412][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 1600.947064][T20066] veth1_vlan: entered promiscuous mode [ 1600.955821][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1600.977149][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1601.052338][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1601.062474][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1601.080808][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1601.567468][T20066] veth0_macvtap: entered promiscuous mode [ 1601.611629][T20066] veth1_macvtap: entered promiscuous mode [ 1601.699795][T20066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.753287][T20066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.803119][T20066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.883367][T20066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1601.923209][T20066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1601.963220][T20066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.011715][T20066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1602.062343][T20066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.094981][T20066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.139944][T20066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.150479][T20347] loop0: detected capacity change from 0 to 4096 [ 1602.195015][T20066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.223219][T20066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.243129][T20066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.275878][T20066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1602.312622][T20066] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.342209][T20066] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.353173][T19919] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1602.362701][T20066] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.403238][T20066] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.656385][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.693885][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1603.797321][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.806901][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1603.900197][ T23] usb 2-1: string descriptor 0 read error: -71 [ 1603.925141][ T23] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1603.954989][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1604.000719][ T23] usb 2-1: can't set config #1, error -71 [ 1604.042927][ T23] usb 2-1: USB disconnect, device number 38 [ 1606.083836][T20380] nfs: Unknown parameter '' [ 1606.200163][T20391] ubi: mtd0 is already attached to ubi31 [ 1607.717279][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.723776][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.143648][T20416] loop6: detected capacity change from 0 to 4096 [ 1610.473097][T20416] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1611.697809][T18253] EXT4-fs error (device loop6): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /133/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1611.787934][T18253] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1611.966071][T18253] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 1612.033905][T18253] EXT4-fs error (device loop6): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /133/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1612.076706][T18253] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1612.305217][T20452] ubi: mtd0 is already attached to ubi31 [ 1612.340949][T18253] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 1612.662706][T18253] EXT4-fs error (device loop6): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /133/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1612.813382][T18253] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1612.845846][T18253] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 1612.862439][T18253] EXT4-fs error (device loop6): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /133/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1612.892300][T18253] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1613.034197][T18253] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 1613.091350][T18253] EXT4-fs error (device loop6): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /133/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1613.176995][T18253] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1613.422056][T20461] ubi: mtd0 is already attached to ubi31 [ 1613.447918][T18253] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 1613.842909][T18253] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 1613.944766][T18253] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 1613.971627][T18253] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 1613.985462][T18253] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 1614.011150][T18253] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 1615.420671][T20475] Zero length message leads to an empty skb [ 1615.760716][T18253] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1616.580918][ T7788] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.733387][ T7788] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.992336][ T7788] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.165386][ T7788] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.359426][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1621.654949][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1621.863202][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1621.883431][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1621.891306][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1621.899225][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1624.054711][T17622] Bluetooth: hci2: command tx timeout [ 1625.015767][T20533] chnl_net:caif_netlink_parms(): no params data found [ 1626.103179][T17622] Bluetooth: hci2: command tx timeout [ 1627.183276][T20590] ubi: mtd0 is already attached to ubi31 [ 1628.183300][T17622] Bluetooth: hci2: command tx timeout [ 1628.372001][T20533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.421449][T20533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1628.443295][T20533] bridge_slave_0: entered allmulticast mode [ 1628.508088][T20533] bridge_slave_0: entered promiscuous mode [ 1628.559190][T20533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.587040][T20533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.624050][T20533] bridge_slave_1: entered allmulticast mode [ 1628.786453][T20533] bridge_slave_1: entered promiscuous mode [ 1629.613323][ T7788] hsr_slave_0: left promiscuous mode [ 1629.753197][ T7788] hsr_slave_1: left promiscuous mode [ 1629.783423][ T7788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1629.790955][ T7788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1629.812601][ T7788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1629.821030][ T7788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1629.853825][ T7788] bridge_slave_1: left allmulticast mode [ 1629.867687][ T7788] bridge_slave_1: left promiscuous mode [ 1629.886977][ T7788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.899361][ T7788] bridge_slave_0: left allmulticast mode [ 1629.923553][ T7788] bridge_slave_0: left promiscuous mode [ 1629.929395][ T7788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.984028][ T7788] veth1_macvtap: left promiscuous mode [ 1629.991843][ T7788] veth0_macvtap: left promiscuous mode [ 1629.998781][ T7788] veth1_vlan: left promiscuous mode [ 1630.013374][ T7788] veth0_vlan: left promiscuous mode [ 1630.263273][T17622] Bluetooth: hci2: command tx timeout [ 1632.650946][T20629] ubi: mtd0 is already attached to ubi31 [ 1633.539288][ T7788] team0 (unregistering): Port device team_slave_1 removed [ 1633.608046][ T7788] team0 (unregistering): Port device team_slave_0 removed [ 1633.668616][ T7788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1633.738751][ T7788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1634.456198][ T7788] bond0 (unregistering): Released all slaves [ 1634.565587][T20533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1634.598185][T20533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1634.691391][T20533] team0: Port device team_slave_0 added [ 1634.718313][T20533] team0: Port device team_slave_1 added [ 1634.786704][T20533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1634.795586][T20533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1634.833848][T20533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1634.856357][T20533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1634.869412][T20533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1634.916660][T20533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1635.145971][T20533] hsr_slave_0: entered promiscuous mode [ 1635.205461][T20533] hsr_slave_1: entered promiscuous mode [ 1635.463429][T20533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1635.480462][T20533] Cannot create hsr debugfs directory [ 1636.428670][T20665] fuse: Bad value for 'group_id' [ 1636.467351][T20533] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1636.491702][T20665] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1636.507888][T20533] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1636.526586][T20533] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1636.548878][T20533] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1636.922348][T20670] ubi: mtd0 is already attached to ubi31 [ 1637.793608][T13677] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1638.165775][T13677] usb 1-1: Using ep0 maxpacket: 16 [ 1638.361109][T13677] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1638.547633][T13677] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1638.896388][T13677] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1639.106102][T20682] ubi: mtd0 is already attached to ubi31 [ 1639.707934][T13677] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1639.872237][T13677] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1639.992893][T20533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1640.042586][T20533] 8021q: adding VLAN 0 to HW filter on device team0 [ 1640.097204][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.104455][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1640.162780][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.170152][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1641.053538][T13677] usb 1-1: string descriptor 0 read error: -71 [ 1641.114751][T13677] usb 1-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1641.187457][T13677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1641.260607][T13677] usb 1-1: can't set config #1, error -71 [ 1641.290724][T13677] usb 1-1: USB disconnect, device number 90 [ 1641.768285][T20533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1642.557153][T20717] ubi: mtd0 is already attached to ubi31 [ 1644.354555][T20533] veth0_vlan: entered promiscuous mode [ 1644.447191][T20533] veth1_vlan: entered promiscuous mode [ 1644.618886][T20533] veth0_macvtap: entered promiscuous mode [ 1644.651984][T20533] veth1_macvtap: entered promiscuous mode [ 1644.743812][T20533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1644.771728][T20533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.801133][T20533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1644.812107][T20533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.822307][T20533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1644.838160][T20533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.851154][T20533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1644.892256][T20533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1644.913350][T20533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.933563][T20533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1644.953066][T20533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.974510][T20533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1644.992779][T20533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.021987][T20533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1645.047702][T20533] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.085957][T20533] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.121859][T20533] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.140936][T20533] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.437278][ T7788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1645.468609][ T7788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1645.912454][T20763] ubi: mtd0 is already attached to ubi31 [ 1646.717860][T19359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1646.794676][T19359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1647.069964][T20771] fuse: Bad value for 'group_id' [ 1647.081902][T20771] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1647.593465][ T5837] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1647.873259][ T5837] usb 2-1: Using ep0 maxpacket: 16 [ 1648.052285][ T5837] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.133192][ T5837] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1648.245769][ T5837] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1648.358172][ T5837] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1648.762464][ T5837] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1649.082320][ T5837] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1649.115729][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1649.133303][ T5837] usb 2-1: SerialNumber: syz [ 1649.174825][T20771] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1649.234644][ T5837] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1649.273647][ T5837] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 1649.866802][T20799] ubi: mtd0 is already attached to ubi31 [ 1650.870480][ T23] usb 2-1: USB disconnect, device number 39 [ 1650.983909][T20790] Bluetooth: hci0: command 0x0406 tx timeout [ 1654.373757][T20840] ubi: mtd0 is already attached to ubi31 [ 1656.754010][T20863] ubi: mtd0 is already attached to ubi31 [ 1657.082911][T20866] fuse: Bad value for 'group_id' [ 1657.096747][T20866] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1657.405148][T20868] loop1: detected capacity change from 0 to 40427 [ 1657.431443][T20868] F2FS-fs (loop1): invalid crc value [ 1657.438776][T20868] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1657.476883][T20868] F2FS-fs (loop1): Start checkpoint disabled! [ 1657.507963][T20868] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1657.573154][T10154] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1657.763134][T10154] usb 8-1: Using ep0 maxpacket: 16 [ 1657.772150][T10154] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1657.788679][T10154] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1657.798644][T10154] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1657.814130][T10154] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1657.824526][T10154] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1657.940993][T10154] usb 8-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1658.054911][T20877] syz.1.3528: attempt to access beyond end of device [ 1658.054911][T20877] loop1: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 1658.139753][ T28] audit: type=1800 audit(1756655473.120:109): pid=20877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3528" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1658.204590][T10154] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1658.292861][T10154] usb 8-1: SerialNumber: syz [ 1658.580192][T20866] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1658.591382][T10154] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 1658.611165][T10154] cdc_acm: probe of 8-1:1.0 failed with error -12 [ 1660.053778][ T7809] kworker/u4:20: attempt to access beyond end of device [ 1660.053778][ T7809] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1660.072499][ T7809] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1660.079979][ T7809] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1661.093153][T20897] ubi: mtd0 is already attached to ubi31 [ 1662.068312][T20904] loop0: detected capacity change from 0 to 4096 [ 1662.260477][T20522] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1663.078889][T10154] usb 8-1: USB disconnect, device number 2 [ 1663.362315][T20921] loop4: detected capacity change from 0 to 512 [ 1663.389271][T20921] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1663.424791][T20921] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1663.565674][T20921] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.3536: bad orphan inode 131083 [ 1663.724470][T20921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1665.096978][T20066] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1665.307682][T20942] ubi: mtd0 is already attached to ubi31 [ 1666.767583][T20955] ubi: mtd0 is already attached to ubi31 [ 1666.879126][T20790] Bluetooth: hci3: command 0x0406 tx timeout [ 1668.630926][T20979] fuse: Bad value for 'group_id' [ 1668.661542][T20979] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1668.963140][ T6782] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1669.149309][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.155780][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.164470][ T6782] usb 2-1: Using ep0 maxpacket: 16 [ 1669.268185][ T6782] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1669.323525][ T6782] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1669.358910][ T6782] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1669.583829][ T6782] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1669.595448][ T6782] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1669.612566][ T6782] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1669.629114][ T6782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1670.515603][ T6782] usb 2-1: SerialNumber: syz [ 1670.566901][T20979] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1670.620388][ T6782] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1670.641757][ T6782] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 1671.344899][T20999] ubi: mtd0 is already attached to ubi31 [ 1673.256117][T10154] usb 2-1: USB disconnect, device number 40 [ 1674.212747][T21023] ubi: mtd0 is already attached to ubi31 [ 1675.315594][T21033] ubi: mtd0 is already attached to ubi31 [ 1677.441602][T21029] ubi: mtd0 is already attached to ubi31 [ 1678.671466][T21050] ubi: mtd0 is already attached to ubi31 [ 1680.802020][T21084] ubi: mtd0 is already attached to ubi31 [ 1683.441671][T21090] loop1: detected capacity change from 0 to 40427 [ 1683.576324][T21090] F2FS-fs (loop1): invalid crc value [ 1683.615583][T21090] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1683.649721][T21090] F2FS-fs (loop1): Start checkpoint disabled! [ 1683.676318][T21090] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1683.821036][ T28] audit: type=1800 audit(1756655498.980:110): pid=21112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3558" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1683.932274][T21112] syz.1.3558: attempt to access beyond end of device [ 1683.932274][T21112] loop1: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 1684.391146][ T58] kworker/u4:4: attempt to access beyond end of device [ 1684.391146][ T58] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1684.406377][ T58] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1684.413774][ T58] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1684.770160][T21127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3561'. [ 1684.884712][T21126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3560'. [ 1687.276331][T21148] ubi: mtd0 is already attached to ubi31 [ 1688.978285][T21164] ubi: mtd0 is already attached to ubi31 [ 1689.981249][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.290106][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.488506][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.618352][T21174] loop1: detected capacity change from 0 to 4096 [ 1690.839379][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.095913][T20790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1692.125654][T20790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1692.180344][T20790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1692.199076][T20790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1692.206934][T20790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1692.215593][T20790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1692.503925][T17622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1692.514197][T17622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1692.522212][T17622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1692.531456][T17622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1692.539240][T17622] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1692.546871][T17622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1694.033366][T21212] ubi: mtd0 is already attached to ubi31 [ 1694.693275][T20790] Bluetooth: hci0: command tx timeout [ 1694.699892][T20790] Bluetooth: hci1: command tx timeout [ 1695.945015][T21227] ubi: mtd0 is already attached to ubi31 [ 1696.743498][T20790] Bluetooth: hci1: command tx timeout [ 1696.749300][T17622] Bluetooth: hci0: command tx timeout [ 1696.878416][T21190] chnl_net:caif_netlink_parms(): no params data found [ 1697.349251][T21190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.356973][T21190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.365263][T21190] bridge_slave_0: entered allmulticast mode [ 1697.374508][T21190] bridge_slave_0: entered promiscuous mode [ 1697.405589][ T58] hsr_slave_0: left promiscuous mode [ 1697.411955][ T58] hsr_slave_1: left promiscuous mode [ 1697.419480][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1697.429949][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1697.439891][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1697.453813][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1697.461987][ T58] bridge_slave_1: left allmulticast mode [ 1697.473403][ T58] bridge_slave_1: left promiscuous mode [ 1697.480126][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.502818][ T58] bridge_slave_0: left allmulticast mode [ 1697.512601][ T58] bridge_slave_0: left promiscuous mode [ 1697.518888][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.553405][ T58] veth1_macvtap: left promiscuous mode [ 1697.559153][ T58] veth0_macvtap: left promiscuous mode [ 1697.565026][ T58] veth1_vlan: left promiscuous mode [ 1697.570434][ T58] veth0_vlan: left promiscuous mode [ 1698.893125][T20790] Bluetooth: hci1: command tx timeout [ 1698.896390][T17622] Bluetooth: hci0: command tx timeout [ 1699.468159][T21266] ubi: mtd0 is already attached to ubi31 [ 1700.571355][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1700.650532][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1700.762389][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1700.889366][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1701.011288][T17622] Bluetooth: hci1: command tx timeout [ 1701.034086][T20790] Bluetooth: hci0: command tx timeout [ 1701.863492][ T23] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1701.876967][ T58] bond0 (unregistering): Released all slaves [ 1702.007892][T21190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.016664][T21190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.024683][T21190] bridge_slave_1: entered allmulticast mode [ 1702.032218][T21190] bridge_slave_1: entered promiscuous mode [ 1702.082892][T21193] chnl_net:caif_netlink_parms(): no params data found [ 1702.331058][ T23] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.361403][T21190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1702.408774][T21190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1702.515056][ T23] usb 8-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1702.539213][ T23] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1702.548796][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.589411][ T23] usb 8-1: Quirk or no altest; falling back to MIDI 1.0 [ 1702.738966][T21190] team0: Port device team_slave_0 added [ 1702.822121][ T23] snd-usb-audio: probe of 8-1:27.0 failed with error -2 [ 1702.861139][T21190] team0: Port device team_slave_1 added [ 1702.917392][T21193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.926576][T21193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.934549][T21193] bridge_slave_0: entered allmulticast mode [ 1702.946107][T21193] bridge_slave_0: entered promiscuous mode [ 1702.958179][T21193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.967057][T21193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.976323][T21193] bridge_slave_1: entered allmulticast mode [ 1702.987537][T21193] bridge_slave_1: entered promiscuous mode [ 1703.028474][T21190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1703.036345][T21190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1703.085258][T21190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1703.204092][T21190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1703.216917][T21190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1703.247510][T21190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1703.278244][T21193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1703.290605][T21193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1703.355966][T21193] team0: Port device team_slave_0 added [ 1703.630624][T21193] team0: Port device team_slave_1 added [ 1703.689656][T21190] hsr_slave_0: entered promiscuous mode [ 1703.721336][T21190] hsr_slave_1: entered promiscuous mode [ 1703.740679][T21190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1703.763992][T21190] Cannot create hsr debugfs directory [ 1703.794931][T21193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1703.801912][T21193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1703.862916][T21193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1703.932465][T21193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1703.947877][T21193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1704.005585][T21193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1704.093552][ T58] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.283263][ T58] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.553857][ T58] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.682081][ T5875] usb 8-1: USB disconnect, device number 3 [ 1704.771457][T21193] hsr_slave_0: entered promiscuous mode [ 1704.805463][T21193] hsr_slave_1: entered promiscuous mode [ 1704.824329][T21193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1704.832927][T21193] Cannot create hsr debugfs directory [ 1704.908605][T21305] fuse: Bad value for 'group_id' [ 1704.980861][T21305] fuse: Unknown parameter '0x0000000000000006‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1705.019265][ T58] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.353409][ T5837] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1705.587964][ T5837] usb 8-1: Using ep0 maxpacket: 16 [ 1705.622508][ T5837] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.643211][ T5837] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1705.653417][ T5837] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1705.663537][ T5837] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1705.673482][ T5837] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1705.775529][ T5837] usb 8-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1705.804395][T20790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1705.815600][T20790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1705.819734][ T5837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1705.825982][T20790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1705.839182][T20790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1705.868156][ T5837] usb 8-1: SerialNumber: syz [ 1705.884716][T20790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1705.897311][T20790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1705.904106][T21305] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1705.983379][ T5837] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 1705.992394][ T5837] cdc_acm: probe of 8-1:1.0 failed with error -12 [ 1706.247071][ T23] usb 8-1: USB disconnect, device number 4 [ 1706.578590][T21314] chnl_net:caif_netlink_parms(): no params data found [ 1706.891502][T21314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1706.903945][T21314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.911278][T21314] bridge_slave_0: entered allmulticast mode [ 1706.924631][T21314] bridge_slave_0: entered promiscuous mode [ 1706.949649][T21314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.967991][T21314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.988736][T21314] bridge_slave_1: entered allmulticast mode [ 1707.004916][T21314] bridge_slave_1: entered promiscuous mode [ 1707.199954][ T58] hsr_slave_0: left promiscuous mode [ 1707.231151][ T58] hsr_slave_1: left promiscuous mode [ 1707.239587][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1707.247499][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1707.276436][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1707.310008][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1707.331740][ T58] bridge_slave_1: left allmulticast mode [ 1707.348695][ T58] bridge_slave_1: left promiscuous mode [ 1707.357107][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1707.368189][ T58] bridge_slave_0: left allmulticast mode [ 1707.375515][ T58] bridge_slave_0: left promiscuous mode [ 1707.381353][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1707.418163][ T58] veth1_macvtap: left promiscuous mode [ 1707.425361][ T58] veth0_macvtap: left promiscuous mode [ 1707.431204][ T58] veth1_vlan: left promiscuous mode [ 1707.439106][ T58] veth0_vlan: left promiscuous mode [ 1707.946111][T20790] Bluetooth: hci3: command tx timeout [ 1708.469043][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1708.560248][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1708.629361][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1708.693599][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1709.388500][ T58] bond0 (unregistering): Released all slaves [ 1709.489221][T21314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1709.576313][T21350] tipc: Enabling of bearer rejected, failed to enable media [ 1709.601096][T21314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1709.681896][T21314] team0: Port device team_slave_0 added [ 1709.746396][T21314] team0: Port device team_slave_1 added [ 1709.924632][T21314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1709.931655][T21314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1709.974504][T21314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1709.993894][T21314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1710.002416][T21314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1710.038211][T21314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1710.054081][T20790] Bluetooth: hci3: command tx timeout [ 1710.485744][T21370] ubi: mtd0 is already attached to ubi31 [ 1711.276894][T21314] hsr_slave_0: entered promiscuous mode [ 1711.293673][T21314] hsr_slave_1: entered promiscuous mode [ 1711.321675][T21314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1711.331561][T21314] Cannot create hsr debugfs directory [ 1711.588873][T21193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1711.652827][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.700077][T21193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1711.711892][T21193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1711.776599][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.794258][T21193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1711.902546][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.997890][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.017698][T21190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1712.029778][T21190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1712.044554][T21190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1712.059784][T21190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1712.104130][T20790] Bluetooth: hci3: command tx timeout [ 1712.396498][T21193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1712.642589][T21193] 8021q: adding VLAN 0 to HW filter on device team0 [ 1712.751643][T19359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.758918][T19359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1712.810363][T19359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1712.817612][T19359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1712.869010][T21190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1712.990787][T21190] 8021q: adding VLAN 0 to HW filter on device team0 [ 1713.076669][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1713.083972][ T7793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1713.244306][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1713.251538][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1714.118035][T21190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1714.149240][T21190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1714.184126][T20790] Bluetooth: hci3: command tx timeout [ 1714.575592][T21193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1714.594610][ T58] hsr_slave_0: left promiscuous mode [ 1714.607787][ T58] hsr_slave_1: left promiscuous mode [ 1714.626212][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1714.641403][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1714.670540][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1714.680615][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1714.691365][ T58] bridge_slave_1: left allmulticast mode [ 1714.702868][ T58] bridge_slave_1: left promiscuous mode [ 1714.711267][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1714.738833][ T58] bridge_slave_0: left allmulticast mode [ 1714.746509][ T58] bridge_slave_0: left promiscuous mode [ 1714.752508][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1714.861855][ T58] veth1_macvtap: left promiscuous mode [ 1714.881814][ T58] veth0_macvtap: left promiscuous mode [ 1714.888852][ T58] veth1_vlan: left promiscuous mode [ 1714.895831][ T58] veth0_vlan: left promiscuous mode [ 1715.393298][ T23] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1715.747668][ T23] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.780324][ T23] usb 8-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1715.795223][ T23] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1715.804518][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.842828][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1715.857974][ T23] usb 8-1: Quirk or no altest; falling back to MIDI 1.0 [ 1715.915530][ T23] snd-usb-audio: probe of 8-1:27.0 failed with error -2 [ 1715.976150][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1716.092235][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1716.208761][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1717.063397][ T58] bond0 (unregistering): Released all slaves [ 1717.380901][T21314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1717.424279][T21314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1717.482945][T21314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1717.496700][T21314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1717.558696][T21193] veth0_vlan: entered promiscuous mode [ 1717.592005][T21190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1717.661720][T21193] veth1_vlan: entered promiscuous mode [ 1717.844495][T21193] veth0_macvtap: entered promiscuous mode [ 1717.873654][T21193] veth1_macvtap: entered promiscuous mode [ 1717.949601][T21314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1717.961499][T21193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1717.975752][T21193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.988194][T21193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1718.017501][T21193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1718.028791][T21193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.041713][T21193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1718.071244][T21314] 8021q: adding VLAN 0 to HW filter on device team0 [ 1718.111622][T21193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.128469][T21193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.139850][T21193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.150780][T16887] usb 8-1: USB disconnect, device number 5 [ 1718.173303][T21193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.212910][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1718.220192][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1718.371162][T21314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1718.387024][T21314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1718.404562][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1718.411782][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1718.538272][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1718.789447][T21467] ubi: mtd0 is already attached to ubi31 [ 1719.418460][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1719.509888][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1719.532846][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1719.583258][T21190] veth0_vlan: entered promiscuous mode [ 1719.621930][T21190] veth1_vlan: entered promiscuous mode [ 1719.736980][T21314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1719.782947][T21190] veth0_macvtap: entered promiscuous mode [ 1719.815675][T21190] veth1_macvtap: entered promiscuous mode [ 1719.871312][T21190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1719.882483][T21190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.894701][T21190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1719.905693][T21190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.918536][T21190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1719.933815][T21314] veth0_vlan: entered promiscuous mode [ 1719.950169][T21190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1719.966420][T21190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.977127][T21190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1719.988445][T21190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.000603][T21190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1720.019930][T21190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.029978][T21190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.040263][T21190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.049444][T21190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.077636][T21314] veth1_vlan: entered promiscuous mode [ 1720.207017][T21314] veth0_macvtap: entered promiscuous mode [ 1720.242570][T21314] veth1_macvtap: entered promiscuous mode [ 1720.252504][ T7790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1720.267356][ T7790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1720.315105][T21314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1720.326441][T21314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.337517][T21314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1720.350487][T21314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.360780][T21314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1720.371898][T21314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.388769][T21314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1720.407691][ T7793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1720.416811][T21314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1720.425497][ T7793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1720.429056][T21314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.447819][T21314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1720.459788][T21314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.472283][T21314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1720.483628][T21314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1720.497965][T21314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1720.498283][T21472] loop0: detected capacity change from 0 to 32768 [ 1720.541662][T21314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.551709][T21314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.569193][T21314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.578434][T21314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.602127][T20522] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1720.908539][ T7790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1720.947997][ T7790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.094632][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.393254][T21479] ubi: mtd0 is already attached to ubi31 [ 1721.986073][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1724.927631][T21509] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3598'. [ 1725.982194][T21518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3599'. [ 1726.563205][ T5875] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1726.885521][ T5875] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1726.970517][ T5875] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1727.028674][T21531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3602'. [ 1727.096793][ T5875] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1727.111327][ T5875] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1727.122102][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.161316][ T5875] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1727.286114][ T5875] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 1728.159814][T19359] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.530387][T19359] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.790770][T19359] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.897248][T17622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1729.926188][T17622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1729.935246][T17622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1729.950592][T17622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1729.967633][T17622] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1729.976254][T17622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1730.033680][T19359] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.289590][ T23] usb 1-1: USB disconnect, device number 91 [ 1730.595562][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.602007][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.104247][T17622] Bluetooth: hci2: command tx timeout [ 1732.318886][T21542] chnl_net:caif_netlink_parms(): no params data found [ 1733.860261][T21542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.897890][T21570] fuse: Bad value for 'group_id' [ 1733.905089][T21542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.912355][T21542] bridge_slave_0: entered allmulticast mode [ 1733.954659][T21542] bridge_slave_0: entered promiscuous mode [ 1734.142664][T21570] fuse: Unknown parameter '0x0000000000000006‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1734.187432][T17622] Bluetooth: hci2: command tx timeout [ 1735.237323][T21542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1735.247735][T21542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.255872][T21542] bridge_slave_1: entered allmulticast mode [ 1735.263947][T21542] bridge_slave_1: entered promiscuous mode [ 1735.434954][T21542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1735.444364][T16940] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1735.515587][T21542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1735.620484][T21542] team0: Port device team_slave_0 added [ 1735.681296][T16940] usb 2-1: Using ep0 maxpacket: 16 [ 1735.709426][T21542] team0: Port device team_slave_1 added [ 1735.721516][T16940] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1735.793057][T16940] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1735.841569][T16940] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1735.896232][T16940] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1735.982291][T16940] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1736.055156][T21542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1736.062490][T21542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1736.085124][T16940] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1736.103540][T21542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1736.117383][T16940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1736.175597][T16940] usb 2-1: SerialNumber: syz [ 1736.176278][T21542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1736.196697][T21542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1736.231115][T21542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1736.264009][T21582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1736.271250][T17622] Bluetooth: hci2: command tx timeout [ 1736.342078][T19359] hsr_slave_0: left promiscuous mode [ 1736.350280][T19359] hsr_slave_1: left promiscuous mode [ 1736.359148][T19359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1736.366896][T19359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1736.377333][T19359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1736.391552][T19359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1736.391687][T16940] usb 2-1: can't set config #1, error -71 [ 1736.429558][T16940] usb 2-1: USB disconnect, device number 41 [ 1736.449818][T19359] bridge_slave_1: left allmulticast mode [ 1736.485083][T19359] bridge_slave_1: left promiscuous mode [ 1736.496278][T19359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.542568][T19359] bridge_slave_0: left allmulticast mode [ 1736.550621][T19359] bridge_slave_0: left promiscuous mode [ 1736.563309][T19359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.636976][T19359] veth1_macvtap: left promiscuous mode [ 1736.651271][T19359] veth0_macvtap: left promiscuous mode [ 1736.670227][T19359] veth1_vlan: left promiscuous mode [ 1736.683501][T19359] veth0_vlan: left promiscuous mode [ 1737.088200][T21609] fuse: Bad value for 'group_id' [ 1737.659930][T21609] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1738.640466][T17622] Bluetooth: hci2: command tx timeout [ 1738.745319][ T23] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1738.953258][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 1738.988704][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1739.004062][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1739.014037][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1739.038301][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1739.058565][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1739.135161][ T23] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1739.157492][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1739.171086][ T23] usb 2-1: SerialNumber: syz [ 1739.206178][T21610] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1739.229126][ T23] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1739.238542][ T23] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 1742.201525][T20969] usb 2-1: USB disconnect, device number 42 [ 1742.359124][T19359] team0 (unregistering): Port device team_slave_1 removed [ 1742.598439][T19359] team0 (unregistering): Port device team_slave_0 removed [ 1743.576324][T19359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1743.678500][T19359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1743.920308][T21642] fuse: Bad value for 'group_id' [ 1743.985702][T21642] fuse: Unknown parameter '0x0000000000000006‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1744.293886][ T23] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1744.485540][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 1744.511958][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1744.534726][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1744.550621][ T23] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1744.560864][ T23] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1744.620623][ T23] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1744.642764][ T23] usb 5-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1744.652525][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1744.667697][ T23] usb 5-1: SerialNumber: syz [ 1744.686326][T21642] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1744.697729][ T23] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1744.708093][ T23] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 1744.985401][ T23] usb 5-1: USB disconnect, device number 35 [ 1745.170718][T19359] bond0 (unregistering): Released all slaves [ 1745.570557][T21542] hsr_slave_0: entered promiscuous mode [ 1745.577534][T21542] hsr_slave_1: entered promiscuous mode [ 1746.734013][T21657] ubi: mtd0 is already attached to ubi31 [ 1748.260857][T21542] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1748.328026][T21542] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1748.352590][T21542] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1748.380622][T21542] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1748.494899][T16940] libceph: connect (1)[c::]:6789 error -101 [ 1748.511919][T16940] libceph: mon0 (1)[c::]:6789 connect error [ 1748.527716][T16940] libceph: connect (1)[c::]:6789 error -101 [ 1748.538711][T16940] libceph: mon0 (1)[c::]:6789 connect error [ 1748.662883][T21542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1748.711256][T21542] 8021q: adding VLAN 0 to HW filter on device team0 [ 1748.730802][T19359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.738054][T19359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1748.761147][T20791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.768672][T20791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1748.914543][T20969] libceph: connect (1)[c::]:6789 error -101 [ 1748.920708][T20969] libceph: mon0 (1)[c::]:6789 connect error [ 1749.546706][T20969] libceph: connect (1)[c::]:6789 error -101 [ 1749.552923][T20969] libceph: mon0 (1)[c::]:6789 connect error [ 1749.593454][T21692] ceph: No mds server is up or the cluster is laggy [ 1750.535386][T21542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1751.808149][T16887] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1752.555971][T21748] ubi: mtd0 is already attached to ubi31 [ 1753.046908][T16887] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1753.078128][T16887] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1753.113204][T16887] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1753.134120][T16887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.194349][T16887] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1753.293289][T16887] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 1753.394895][T20522] udevd[20522]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1754.726700][T21542] veth0_vlan: entered promiscuous mode [ 1755.001596][T21542] veth1_vlan: entered promiscuous mode [ 1755.131933][T21542] veth0_macvtap: entered promiscuous mode [ 1755.186013][T21542] veth1_macvtap: entered promiscuous mode [ 1755.837355][T21542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1755.873303][T21542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1755.883975][T21542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1755.895611][T21542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1755.905594][T21542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1755.916464][T21542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1755.928668][T21542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1755.940954][T21542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1755.993236][T21542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.063218][T21542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1756.115500][T21542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.175526][T21542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1756.239960][T21542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1756.277964][T21542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1756.309812][T21542] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.338716][T21542] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.372230][T21542] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.394255][T21542] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.695549][T19359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1756.718144][T19359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1756.759833][T16940] usb 1-1: USB disconnect, device number 92 [ 1756.828656][ T7788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1756.870974][ T7788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1758.278520][T21800] fuse: Bad value for 'group_id' [ 1758.294482][T21800] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1758.683222][ T23] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1758.931884][T21817] ubi: mtd0 is already attached to ubi31 [ 1759.691407][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 1759.954292][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1759.971255][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1759.988361][ T23] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1760.013262][ T23] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1760.023743][ T23] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1761.221523][ T23] usb 5-1: string descriptor 0 read error: -71 [ 1761.228484][ T23] usb 5-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1761.237937][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1761.250344][ T23] usb 5-1: can't set config #1, error -71 [ 1761.270127][ T23] usb 5-1: USB disconnect, device number 36 [ 1762.042302][T21474] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1762.233396][T21474] usb 5-1: Using ep0 maxpacket: 8 [ 1762.264996][T21474] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1762.290296][T21474] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1762.309471][T21474] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1762.337834][T21474] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1762.377560][T21474] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1762.388142][T21474] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.640233][T21855] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1762.682103][T21474] usb 5-1: GET_CAPABILITIES returned 0 [ 1762.696664][T21474] usbtmc 5-1:16.0: can't read capabilities [ 1762.903476][T21474] usb 5-1: USB disconnect, device number 37 [ 1762.993390][T10154] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1763.183046][T10154] usb 2-1: Using ep0 maxpacket: 16 [ 1763.198434][T10154] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1763.238226][T10154] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1763.259412][T10154] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1763.259445][T10154] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1763.259461][T10154] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1763.261036][T10154] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1763.261063][T10154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1763.261078][T10154] usb 2-1: SerialNumber: syz [ 1763.272218][T21855] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1763.274887][T10154] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1763.371185][T10154] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 1764.023334][ T6782] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1764.245916][ T6782] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1764.299582][ T6782] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1764.345843][ T6782] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1764.403185][ T6782] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1764.430074][ T6782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.461907][ T6782] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1764.542418][ T6782] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 1764.866790][T21868] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3660'. [ 1765.929459][T10154] usb 2-1: USB disconnect, device number 43 [ 1768.875164][T21885] ubi: mtd0 is already attached to ubi31 [ 1769.403892][T21474] usb 1-1: USB disconnect, device number 93 [ 1769.635096][T21896] fuse: Bad value for 'group_id' [ 1769.643675][T21896] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1769.792574][ T48] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.933095][T21474] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1770.075378][ T48] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.163157][T21474] usb 1-1: Using ep0 maxpacket: 16 [ 1770.177889][T21474] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1770.200639][T21474] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1770.211515][T21474] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1770.221705][T21474] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1770.233047][T21474] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1770.245477][ T48] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.363417][T21474] usb 1-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1770.380704][T21474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1770.393351][T21474] usb 1-1: SerialNumber: syz [ 1770.419831][T21896] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1770.500792][T21474] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1770.524013][T21474] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 1770.588964][ T48] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.810926][T21901] fuse: Bad value for 'group_id' [ 1770.819255][T21901] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1770.929374][T20790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1770.939257][T20790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1770.948478][T20790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1770.966635][T20790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1770.975085][T20790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1770.982844][T20790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1771.139689][ T6782] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1771.343285][ T6782] usb 2-1: Using ep0 maxpacket: 16 [ 1771.420660][ T6782] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1771.486272][ T6782] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1771.583910][ T6782] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1771.648997][ T6782] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1771.668882][ T6782] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1771.817960][ T6782] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1771.895717][ T6782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1771.983190][ T6782] usb 2-1: SerialNumber: syz [ 1772.070090][T21901] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1772.093660][ T6782] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1772.171554][ T6782] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 1772.939774][T21902] chnl_net:caif_netlink_parms(): no params data found [ 1773.064011][T20790] Bluetooth: hci2: command tx timeout [ 1773.453201][ T6782] usb 1-1: USB disconnect, device number 94 [ 1773.865967][T21902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1773.909895][T21902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.948942][T21902] bridge_slave_0: entered allmulticast mode [ 1773.987905][T21934] fuse: Bad value for 'group_id' [ 1773.995552][T21902] bridge_slave_0: entered promiscuous mode [ 1774.036862][T21902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1774.045092][T21902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.062346][T21902] bridge_slave_1: entered allmulticast mode [ 1774.082556][T21902] bridge_slave_1: entered promiscuous mode [ 1774.242704][ T48] hsr_slave_0: left promiscuous mode [ 1774.258869][ T48] hsr_slave_1: left promiscuous mode [ 1774.278153][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1774.331985][T21934] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1774.353109][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1774.397468][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1774.433278][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1774.497135][ T48] bridge_slave_1: left allmulticast mode [ 1774.545236][ T48] bridge_slave_1: left promiscuous mode [ 1774.551103][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.565368][ T6782] usb 2-1: USB disconnect, device number 44 [ 1774.645988][ T48] bridge_slave_0: left allmulticast mode [ 1774.651670][ T48] bridge_slave_0: left promiscuous mode [ 1774.662535][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.773319][T10154] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1774.929942][T16887] libceph: connect (1)[c::]:6789 error -101 [ 1774.943162][T16887] libceph: mon0 (1)[c::]:6789 connect error [ 1775.033153][T10154] usb 1-1: Using ep0 maxpacket: 16 [ 1775.071169][ T48] veth1_macvtap: left promiscuous mode [ 1775.093967][T10154] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1775.128032][ T48] veth0_macvtap: left promiscuous mode [ 1775.143199][T20790] Bluetooth: hci2: command tx timeout [ 1775.163815][ T48] veth1_vlan: left promiscuous mode [ 1775.169218][T10154] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1775.203777][ T48] veth0_vlan: left promiscuous mode [ 1775.217288][T10154] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1775.236283][T16887] libceph: connect (1)[c::]:6789 error -101 [ 1775.242523][T16887] libceph: mon0 (1)[c::]:6789 connect error [ 1775.286015][T10154] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1775.341996][T10154] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1775.419829][T10154] usb 1-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1775.481209][T10154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1775.500059][T10154] usb 1-1: SerialNumber: syz [ 1775.582575][T21934] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1775.597607][T10154] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1775.622355][T21944] ceph: No mds server is up or the cluster is laggy [ 1775.624272][T10154] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 1776.504712][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1776.577573][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1776.642620][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1776.730154][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1777.223220][T20790] Bluetooth: hci2: command tx timeout [ 1777.456195][ T48] bond0 (unregistering): Released all slaves [ 1777.599907][T21902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1777.645054][T21902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1777.747013][T21902] team0: Port device team_slave_0 added [ 1777.768451][T21902] team0: Port device team_slave_1 added [ 1777.887571][T21902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1777.934228][T21902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1777.973910][ T6782] usb 1-1: USB disconnect, device number 95 [ 1778.002323][T21902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1778.055638][T21902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1778.062674][T21902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1778.624634][T21902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1779.057271][T21902] hsr_slave_0: entered promiscuous mode [ 1779.080770][T21902] hsr_slave_1: entered promiscuous mode [ 1779.368626][T20790] Bluetooth: hci2: command tx timeout [ 1779.705196][T21986] ubi: mtd0 is already attached to ubi31 [ 1785.395455][T21902] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1785.432689][T22021] fuse: Bad value for 'group_id' [ 1785.444328][T22021] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1785.500107][T22025] fuse: Bad value for 'group_id' [ 1785.514664][T22025] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1785.547573][T21902] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1785.561824][T21902] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1785.612540][T21902] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1785.723162][T10154] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1785.803946][T21474] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1785.913137][T10154] usb 1-1: Using ep0 maxpacket: 16 [ 1785.945422][T10154] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1786.077967][T21474] usb 2-1: Using ep0 maxpacket: 16 [ 1786.096801][T10154] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1786.178378][T21474] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1786.200912][T10154] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1786.225606][T21474] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1786.237359][T10154] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1786.242247][T21902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1786.269934][T21474] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1786.333480][T21902] 8021q: adding VLAN 0 to HW filter on device team0 [ 1786.342431][T10154] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1786.359694][T21474] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1786.369933][T21474] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1786.381563][T20393] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.390136][T20393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1786.400422][T10154] usb 1-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1786.435822][T10154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1786.449552][T21474] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1786.462858][T10154] usb 1-1: SerialNumber: syz [ 1786.471762][T21474] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1786.486679][T20393] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.493900][T20393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1786.601664][T22021] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1786.694596][T21474] usb 2-1: SerialNumber: syz [ 1786.755669][T10154] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1786.920655][T22025] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1786.934728][T10154] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 1787.024953][T21474] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1787.049593][T21474] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 1787.360174][T21902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1787.962556][T21902] veth0_vlan: entered promiscuous mode [ 1788.009887][T21902] veth1_vlan: entered promiscuous mode [ 1788.072550][T21902] veth0_macvtap: entered promiscuous mode [ 1788.104150][T21902] veth1_macvtap: entered promiscuous mode [ 1788.156882][T21902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1788.184077][T21902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1788.202195][T21902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1788.226386][T21902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1788.252012][T21902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1788.277304][T21902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1788.313466][T21902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1788.336299][T21902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1788.358820][T21902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1788.406201][T21902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1788.464715][T21902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1788.489592][T21902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1788.528666][T21902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1788.595382][T21902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1788.689601][T21902] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.736412][T21902] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.753038][T21902] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.761799][T21902] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.083241][ T5837] usb 1-1: USB disconnect, device number 96 [ 1789.116691][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.160123][T16887] usb 2-1: USB disconnect, device number 45 [ 1789.166290][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1789.350247][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.415733][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1790.989474][T22103] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3667'. [ 1791.725254][T22111] ubi: mtd0 is already attached to ubi31 [ 1792.035519][T22102] fuse: Bad value for 'group_id' [ 1792.041153][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.047718][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.067636][T22102] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1792.443237][ T6782] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1792.683398][ T6782] usb 5-1: Using ep0 maxpacket: 16 [ 1792.731287][ T6782] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1792.873116][ T6782] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1793.001517][ T6782] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1793.100911][ T6782] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1793.169789][ T6782] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1793.366375][ T6782] usb 5-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1793.403071][ T6782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1793.411139][ T6782] usb 5-1: SerialNumber: syz [ 1793.476458][T22102] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1793.522912][ T6782] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1793.532346][ T6782] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 1793.547801][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.738718][ T5837] usb 5-1: USB disconnect, device number 38 [ 1793.827916][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.024774][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.229625][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.801413][T22143] ubi: mtd0 is already attached to ubi31 [ 1796.041066][T17622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1796.054915][T17622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1796.075256][T17622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1796.084141][T17622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1796.091972][T17622] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1796.099724][T17622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1796.552597][T22151] chnl_net:caif_netlink_parms(): no params data found [ 1796.689742][T22151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.697609][T22151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.705690][T22151] bridge_slave_0: entered allmulticast mode [ 1796.716653][T22151] bridge_slave_0: entered promiscuous mode [ 1796.737443][T22151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.745042][T22151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.752404][T22151] bridge_slave_1: entered allmulticast mode [ 1796.760735][T22151] bridge_slave_1: entered promiscuous mode [ 1796.823846][T22151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1796.838662][T22151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1796.886332][T22151] team0: Port device team_slave_0 added [ 1796.912790][T22151] team0: Port device team_slave_1 added [ 1796.944878][ T12] hsr_slave_0: left promiscuous mode [ 1796.950842][ T12] hsr_slave_1: left promiscuous mode [ 1796.957111][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1796.964606][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1796.972484][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1796.982040][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1796.991260][ T12] bridge_slave_1: left allmulticast mode [ 1796.997143][ T12] bridge_slave_1: left promiscuous mode [ 1797.003158][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.012383][ T12] bridge_slave_0: left allmulticast mode [ 1797.018250][ T12] bridge_slave_0: left promiscuous mode [ 1797.025256][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.058607][ T12] veth1_macvtap: left promiscuous mode [ 1797.065241][ T12] veth0_macvtap: left promiscuous mode [ 1797.070902][ T12] veth1_vlan: left promiscuous mode [ 1797.076650][ T12] veth0_vlan: left promiscuous mode [ 1797.848109][T22179] ubi: mtd0 is already attached to ubi31 [ 1798.645070][T20790] Bluetooth: hci2: command tx timeout [ 1798.941158][T22177] fuse: Bad value for 'group_id' [ 1798.950787][T22177] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1799.297362][ T5837] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1799.560342][ T5837] usb 5-1: Using ep0 maxpacket: 16 [ 1799.578080][ T5837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1799.612076][ T5837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1799.637061][ T5837] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1799.674756][ T5837] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1799.747394][ T5837] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1799.794111][ T5837] usb 5-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1799.831575][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1799.865297][ T5837] usb 5-1: SerialNumber: syz [ 1799.889850][T22177] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1799.920185][ T5837] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1799.930750][ T5837] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 1800.010017][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1800.071528][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1800.145375][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1800.242163][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1800.677933][T20790] Bluetooth: hci2: command tx timeout [ 1800.975922][T22187] fuse: Bad value for 'group_id' [ 1801.025313][T22187] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1801.323402][T16887] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1801.894993][T16940] usb 5-1: USB disconnect, device number 39 [ 1802.113246][T16887] usb 1-1: Using ep0 maxpacket: 16 [ 1803.457675][T17622] Bluetooth: hci2: command tx timeout [ 1803.620026][ T12] bond0 (unregistering): Released all slaves [ 1805.667376][T20790] Bluetooth: hci2: command tx timeout [ 1806.995230][T22214] ubi: mtd0 is already attached to ubi31 [ 1807.591785][T22151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1807.673143][T22151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1807.721354][T22151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1807.738867][T22151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1807.757938][T22151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1807.872382][T22219] fuse: Bad value for 'group_id' [ 1807.890600][T22219] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1807.927891][T22151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1808.183483][ T23] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1808.285844][T22151] hsr_slave_0: entered promiscuous mode [ 1808.302038][T22151] hsr_slave_1: entered promiscuous mode [ 1808.393080][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 1808.426555][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1808.450317][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1808.468411][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1808.486090][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1808.504810][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1808.577603][ T23] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1808.639255][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1808.653444][ T23] usb 2-1: SerialNumber: syz [ 1808.676932][T16887] usb 1-1: unable to read config index 0 descriptor/all [ 1808.700347][T16887] usb 1-1: can't read configurations, error -110 [ 1808.714416][T22219] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1808.740378][ T23] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1808.753340][ T23] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 1808.893091][T16887] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1809.043195][T16887] usb 1-1: device descriptor read/64, error -32 [ 1809.175520][T16887] usb usb1-port1: attempt power cycle [ 1809.613201][T16887] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1809.794561][T16887] usb 1-1: device descriptor read/8, error -32 [ 1812.146961][ T23] usb 2-1: USB disconnect, device number 46 [ 1813.623159][T22248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3715'. [ 1813.650123][T22151] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1813.688306][T22151] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1813.766743][T22151] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1813.863190][T22151] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1814.345697][T22151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1814.392503][T22151] 8021q: adding VLAN 0 to HW filter on device team0 [ 1814.430862][ T7788] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.438146][ T7788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1814.501803][ T7788] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.509273][ T7788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1814.903651][T20790] Bluetooth: hci0: command 0x0406 tx timeout [ 1815.289358][T22151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1816.045815][T22293] ubi: mtd0 is already attached to ubi31 [ 1818.458293][T22151] veth0_vlan: entered promiscuous mode [ 1818.596026][T22151] veth1_vlan: entered promiscuous mode [ 1818.869845][T22151] veth0_macvtap: entered promiscuous mode [ 1819.206103][T22151] veth1_macvtap: entered promiscuous mode [ 1819.641475][T22151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1819.652186][T22151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.662227][T22151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1819.673709][T22151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.684284][T22151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1819.695097][T22151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.710066][T22151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1819.730893][T20790] Bluetooth: hci1: command 0x0406 tx timeout [ 1819.760811][T22151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1819.804345][T22151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.863097][T22151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1819.903215][T22151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.943483][T22151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1819.970019][T22151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.999701][T22151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1820.035510][T22151] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.046762][T22151] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.056083][T22151] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.065969][T22151] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1821.123646][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1821.144414][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1821.223432][ T7790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1821.231330][ T7790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1823.933473][T22347] ubi: mtd0 is already attached to ubi31 [ 1830.002255][T20790] Bluetooth: hci3: command 0x0406 tx timeout [ 1832.961742][T22411] ubi: mtd0 is already attached to ubi31 [ 1851.385246][T10154] libceph: connect (1)[c::]:6789 error -101 [ 1851.401755][T10154] libceph: mon0 (1)[c::]:6789 connect error [ 1851.532640][T22540] ceph: No mds server is up or the cluster is laggy [ 1852.585713][T22551] fuse: Bad value for 'group_id' [ 1852.635379][T22551] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1852.973046][ T6782] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1853.473816][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.480321][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.843021][ T6782] usb 1-1: Using ep0 maxpacket: 16 [ 1853.852542][ T6782] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1853.903083][ T6782] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1853.963220][ T6782] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1854.030184][ T6782] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1854.041524][ T6782] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1854.077342][ T6782] usb 1-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1854.266256][ T6782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1854.275468][ T6782] usb 1-1: SerialNumber: syz [ 1857.943392][ T6782] usb 1-1: can't set config #1, error -71 [ 1857.983588][ T6782] usb 1-1: USB disconnect, device number 101 [ 1858.034787][T16887] libceph: connect (1)[c::]:6789 error -101 [ 1858.043822][T16887] libceph: mon0 (1)[c::]:6789 connect error [ 1858.096082][T22583] ceph: No mds server is up or the cluster is laggy [ 1858.347774][T16887] libceph: connect (1)[c::]:6789 error -101 [ 1859.135534][T16887] libceph: mon0 (1)[c::]:6789 connect error [ 1859.493833][T22591] ceph: No mds server is up or the cluster is laggy [ 1859.501037][ T6782] libceph: connect (1)[c::]:6789 error -101 [ 1859.526471][ T6782] libceph: mon0 (1)[c::]:6789 connect error [ 1862.387316][T22623] ubi: mtd0 is already attached to ubi31 [ 1862.850356][T22625] overlayfs: failed to resolve './file1': -2 [ 1862.867645][T22625] overlayfs: failed to resolve './file1': -2 [ 1863.230320][T22629] fuse: Bad value for 'group_id' [ 1863.267875][T22629] fuse: Unknown parameter '0x0000000000000006‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1863.724134][ T6782] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1864.381770][ T6782] usb 1-1: Using ep0 maxpacket: 16 [ 1864.670488][ T6782] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1865.859375][ T6782] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1865.873021][ T6782] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1865.882817][ T6782] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1865.923664][ T6782] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1866.170988][ T6782] usb 1-1: string descriptor 0 read error: -71 [ 1866.179664][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1866.190983][T22640] ceph: No mds server is up or the cluster is laggy [ 1866.197977][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1866.215282][ T6782] usb 1-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1866.299598][ T6782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1866.573966][ T6782] usb 1-1: can't set config #1, error -71 [ 1866.581648][ T6782] usb 1-1: USB disconnect, device number 102 [ 1869.159014][T22656] fuse: Bad value for 'group_id' [ 1869.216020][T22656] fuse: Unknown parameter '0x0000000000000006‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1869.923017][ T6782] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1870.268362][ T6782] usb 5-1: Using ep0 maxpacket: 16 [ 1870.334371][ T6782] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1870.367488][ T6782] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1870.441955][T22673] ubi: mtd0 is already attached to ubi31 [ 1870.464772][ T6782] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1870.475466][ T6782] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1870.486223][ T6782] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1870.544548][ T6782] usb 5-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1870.690035][ T6782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1870.700060][ T6782] usb 5-1: SerialNumber: syz [ 1871.422164][ T6782] usb 5-1: can't set config #1, error -71 [ 1871.474670][ T6782] usb 5-1: USB disconnect, device number 40 [ 1871.524005][T16887] libceph: connect (1)[c::]:6789 error -101 [ 1871.551968][T22675] ceph: No mds server is up or the cluster is laggy [ 1871.559724][T16887] libceph: mon0 (1)[c::]:6789 connect error [ 1872.829710][T22686] fuse: Bad value for 'group_id' [ 1872.839161][T22686] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1873.179126][T16887] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1873.284775][T22690] loop0: detected capacity change from 0 to 256 [ 1873.373049][T16887] usb 5-1: Using ep0 maxpacket: 16 [ 1873.381168][T16887] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1873.403685][T16887] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1873.426564][T16887] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1873.449670][T16887] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1873.465624][T20522] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1873.509711][T16887] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1873.892551][T16887] usb 5-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1873.901895][T16887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1873.910153][T16887] usb 5-1: SerialNumber: syz [ 1874.193836][T22686] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1874.259385][T16887] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1874.289028][T16887] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 1877.890246][ T23] usb 5-1: USB disconnect, device number 41 [ 1877.960730][T22717] ubi: mtd0 is already attached to ubi31 [ 1878.356979][T22724] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1880.474138][T21474] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 1880.702613][T21474] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1881.039677][T21474] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.184354][T21474] usb 2-1: config 0 descriptor?? [ 1881.679244][T22756] fuse: Bad value for 'group_id' [ 1881.688413][T22756] fuse: Unknown parameter '0x0000000000000006‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1881.776054][T22761] ubi: mtd0 is already attached to ubi31 [ 1881.880755][T22759] fuse: Bad value for 'group_id' [ 1881.930892][T22759] fuse: Unknown parameter '0x0000000000000008‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1881.963221][T16940] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1882.163060][T16940] usb 5-1: Using ep0 maxpacket: 16 [ 1882.176587][T16940] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1882.193229][T16940] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1882.205411][T16940] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1882.221226][T16940] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1882.223336][T12501] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1882.233738][T21474] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1882.250744][T21474] asix: probe of 2-1:0.0 failed with error -71 [ 1882.257105][T16940] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1882.285096][T21474] usb 2-1: USB disconnect, device number 47 [ 1882.318092][T16940] usb 5-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1882.337139][T16940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1882.380815][T16940] usb 5-1: SerialNumber: syz [ 1882.417617][T22756] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1882.455603][T16940] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1882.473154][T12501] usb 8-1: Using ep0 maxpacket: 16 [ 1882.480393][T16940] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 1882.487873][T12501] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1882.730049][T12501] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1882.840502][T12501] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1883.023867][T12501] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1883.231288][T12501] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1883.295128][T12501] usb 8-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1883.440870][T12501] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1883.456611][T12501] usb 8-1: SerialNumber: syz [ 1883.661134][T22759] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1883.673547][T12501] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 1883.684113][T12501] cdc_acm: probe of 8-1:1.0 failed with error -12 [ 1884.820198][T12501] usb 8-1: USB disconnect, device number 6 [ 1886.048677][T22770] loop1: detected capacity change from 0 to 32768 [ 1886.073082][T22770] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.3840 (22770) [ 1886.107874][T16887] usb 5-1: USB disconnect, device number 42 [ 1886.145624][T22770] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1886.183538][T22770] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1886.215512][T22770] BTRFS info (device loop1): using free space tree [ 1886.522441][T22770] BTRFS info (device loop1): enabling ssd optimizations [ 1886.613806][T22770] BTRFS info (device loop1): auto enabling async discard [ 1886.953542][T22799] fuse: Bad value for 'group_id' [ 1887.002034][T22799] fuse: Unknown parameter '0x0000000000000006‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1887.173884][T22803] overlayfs: workdir and upperdir must reside under the same mount [ 1887.219309][T22806] overlayfs: workdir and upperdir must reside under the same mount [ 1887.562718][T22810] ubi: mtd0 is already attached to ubi31 [ 1887.585284][ T23] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1887.619685][T21314] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1887.895496][ T23] usb 8-1: Using ep0 maxpacket: 16 [ 1888.046085][ T23] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1888.152380][ T23] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1888.437060][T22812] loop0: detected capacity change from 0 to 40427 [ 1888.449421][ T23] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1888.461586][ T23] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1888.479071][ T23] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1888.634230][ T23] usb 8-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1888.637799][T20522] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1888.676948][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1888.708698][ T23] usb 8-1: SerialNumber: syz [ 1889.082143][T22801] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1889.128687][ T23] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 1889.407655][ T23] cdc_acm: probe of 8-1:1.0 failed with error -12 [ 1889.502383][T16940] usb 8-1: USB disconnect, device number 7 [ 1889.946985][ T5837] usb 1-1: new low-speed USB device number 103 using dummy_hcd [ 1890.436636][ T5837] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1890.467768][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1890.485481][ T5837] usb 1-1: config 0 descriptor?? [ 1890.579313][T22830] fuse: Bad value for 'fd' [ 1890.593526][T22830] fuse: Unknown parameter '0x0000000000000006‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1890.883558][T16940] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1891.074514][T16940] usb 8-1: Using ep0 maxpacket: 16 [ 1891.087732][T16940] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1891.106671][T16940] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1891.131552][ T5837] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1891.145840][T16940] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1891.157989][ T5837] asix: probe of 1-1:0.0 failed with error -32 [ 1891.164654][T16940] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1891.181642][ T5837] usb 1-1: USB disconnect, device number 103 [ 1891.189132][T16940] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1891.235967][T16940] usb 8-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1891.247476][T16940] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1891.258789][T16940] usb 8-1: SerialNumber: syz [ 1891.287614][T22830] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1891.298117][T16940] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 1891.308368][T16940] cdc_acm: probe of 8-1:1.0 failed with error -12 [ 1892.172179][T22841] fuse: Bad value for 'group_id' [ 1892.191143][T22841] fuse: Unknown parameter '0x0000000000000006‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1892.483146][ T5837] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1892.673616][ T5837] usb 2-1: Using ep0 maxpacket: 16 [ 1892.711856][ T5837] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1892.780687][ T5837] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1892.836898][ T5837] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1892.853670][ T5837] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1892.870337][ T5837] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1892.962102][ T5837] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1893.014697][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1893.022807][ T5837] usb 2-1: SerialNumber: syz [ 1893.057544][T22841] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1893.094339][ T5837] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1893.110410][ T5837] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 1893.507861][T16940] usb 8-1: USB disconnect, device number 8 [ 1893.773519][T22849] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1893.885225][T12501] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 1893.935624][T22853] loop0: detected capacity change from 0 to 256 [ 1893.989009][T20522] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1894.105849][T12501] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1894.128784][T12501] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.225143][T12501] usb 5-1: config 0 descriptor?? [ 1895.289266][T22864] ubi: mtd0 is already attached to ubi31 [ 1895.412830][T22862] fuse: Bad value for 'fd' [ 1895.421586][T22862] fuse: Unknown parameter '0x0000000000000006‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1895.546457][T16887] usb 2-1: USB disconnect, device number 48 [ 1895.568311][T12501] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1895.594967][T12501] asix: probe of 5-1:0.0 failed with error -71 [ 1895.647743][T12501] usb 5-1: USB disconnect, device number 43 [ 1895.723158][T16940] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1895.943022][T16940] usb 8-1: Using ep0 maxpacket: 16 [ 1895.952198][T16940] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1895.967221][T16940] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1895.986197][T16940] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1896.019094][T16940] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1896.029683][T16940] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1896.048416][T16940] usb 8-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1896.059006][T16940] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1896.068295][T16940] usb 8-1: SerialNumber: syz [ 1896.089721][T22862] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1896.100807][T16940] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 1896.110899][T16940] cdc_acm: probe of 8-1:1.0 failed with error -12 [ 1898.710586][T22885] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1898.732298][T22885] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1899.106947][T22894] loop4: detected capacity change from 0 to 8 [ 1899.350261][ T5837] usb 8-1: USB disconnect, device number 9 [ 1901.179211][T22906] overlayfs: failed to resolve './file1': -2 [ 1901.404228][T22913] overlayfs: failed to resolve './file1': -2 [ 1901.453593][T22912] Bluetooth: MGMT ver 1.22 [ 1902.990523][T22926] loop7: detected capacity change from 0 to 1024 [ 1903.000122][T22923] fuse: Unknown parameter '0x0000000000000006‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1903.092725][T22926] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1903.199875][ T28] audit: type=1800 audit(1756655718.360:111): pid=22926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3882" name="bus" dev="loop7" ino=861 res=0 errno=0 [ 1903.303057][ T6782] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1903.513866][ T6782] usb 1-1: Using ep0 maxpacket: 16 [ 1903.604491][ T6782] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1903.632324][ T6782] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1903.660557][ T6782] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1903.672968][ T6782] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1903.730688][ T6782] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1903.752864][ T6782] usb 1-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1903.762997][ T6782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1903.831850][ T6782] usb 1-1: SerialNumber: syz [ 1903.875384][T22923] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1903.922439][ T6782] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1903.960141][ T6782] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 1905.458534][T22943] loop7: detected capacity change from 0 to 256 [ 1905.578837][T22943] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 1906.397677][T22949] overlayfs: failed to resolve './file1': -2 [ 1906.644815][T22951] overlay: Unknown parameter '\' [ 1906.697991][T20969] usb 1-1: USB disconnect, device number 104 [ 1908.578907][T22947] loop7: detected capacity change from 0 to 32768 [ 1908.610649][T22947] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.3891 (22947) [ 1908.637394][T22967] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1908.695335][T22947] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1908.706655][T22967] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1908.729799][T22947] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 1908.776775][T22947] BTRFS info (device loop7): using free space tree [ 1909.043943][T22947] BTRFS info (device loop7): enabling ssd optimizations [ 1909.056906][T22947] BTRFS info (device loop7): auto enabling async discard [ 1910.211613][T22151] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1911.681255][T23016] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1911.717205][T23016] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1913.123036][T23031] hub 1-0:1.0: USB hub found [ 1913.132034][T23031] hub 1-0:1.0: 1 port detected [ 1915.004163][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.132025][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1917.513281][ T6782] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1917.753092][ T6782] usb 8-1: Using ep0 maxpacket: 8 [ 1917.794478][ T6782] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1917.851522][ T6782] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1917.871793][ T6782] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1917.892201][ T6782] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1917.933505][ T6782] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1917.961748][ T6782] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1918.312518][ T6782] usb 8-1: GET_CAPABILITIES returned 0 [ 1918.337276][ T6782] usbtmc 8-1:16.0: can't read capabilities [ 1918.428072][T23062] loop4: detected capacity change from 0 to 32768 [ 1918.443162][T23062] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3925 (23062) [ 1918.500742][T23072] loop1: detected capacity change from 0 to 256 [ 1918.547499][T12501] usb 8-1: USB disconnect, device number 10 [ 1918.570582][T23062] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1918.599762][T23072] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 1918.609151][T23062] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1918.623811][T23062] BTRFS info (device loop4): using free space tree [ 1918.728153][T23062] BTRFS info (device loop4): enabling ssd optimizations [ 1918.758681][T23062] BTRFS info (device loop4): auto enabling async discard [ 1918.952487][T21190] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1922.113058][T20790] Bluetooth: hci2: command 0x0406 tx timeout [ 1923.560225][T23122] loop7: detected capacity change from 0 to 256 [ 1923.579073][T23122] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 1924.228935][T23128] loop0: detected capacity change from 0 to 64 [ 1924.742760][T23136] hub 1-0:1.0: USB hub found [ 1924.750048][T23136] hub 1-0:1.0: 1 port detected [ 1925.266708][T23135] loop4: detected capacity change from 0 to 1024 [ 1925.502505][T23135] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1925.860933][ T28] audit: type=1800 audit(1756655741.020:112): pid=23135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3943" name="bus" dev="loop4" ino=861 res=0 errno=0 [ 1929.075629][T23154] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1929.804507][T23154] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1932.133042][ T5837] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1932.333042][ T5837] usb 2-1: Using ep0 maxpacket: 8 [ 1932.350284][ T5837] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1932.383304][ T5837] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1932.396655][ T5837] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1932.425037][ T5837] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1932.438261][ T5837] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1932.447525][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.680828][ T5837] usb 2-1: GET_CAPABILITIES returned 0 [ 1932.701455][ T5837] usbtmc 2-1:16.0: can't read capabilities [ 1933.090939][ T23] usb 2-1: USB disconnect, device number 49 [ 1934.923322][T23201] loop7: detected capacity change from 0 to 64 [ 1942.309949][T23257] hub 1-0:1.0: USB hub found [ 1942.323198][T23257] hub 1-0:1.0: 1 port detected [ 1945.637674][T23280] overlayfs: failed to resolve './file0': -2 [ 1946.969454][T23291] ubi: mtd0 is already attached to ubi31 [ 1949.063331][T23318] loop7: detected capacity change from 0 to 64 [ 1949.962717][T23318] hfs: request for non-existent node 131072 in B*Tree [ 1950.431320][T23328] loop4: detected capacity change from 0 to 64 [ 1952.126154][T23338] ubi: mtd0 is already attached to ubi31 [ 1955.456004][T23360] loop4: detected capacity change from 0 to 2048 [ 1955.738519][T23363] loop1: detected capacity change from 0 to 40427 [ 1955.965487][T23363] F2FS-fs (loop1): invalid crc value [ 1955.976514][T23363] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1956.281795][T23363] F2FS-fs (loop1): Start checkpoint disabled! [ 1956.853073][T23363] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1956.894550][T23360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1956.933406][T23360] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1957.045277][ T28] audit: type=1800 audit(1756656028.215:113): pid=23374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4017" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1957.152094][T23374] syz.1.4017: attempt to access beyond end of device [ 1957.152094][T23374] loop1: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 1958.134942][T21190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1958.339462][T20393] kworker/u4:5: attempt to access beyond end of device [ 1958.339462][T20393] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1958.391121][T20393] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1958.418795][T20393] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1961.225177][T23416] fuse: Unknown parameter '0x0000000000000006‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 1961.628262][T12501] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1962.051912][T23426] loop4: detected capacity change from 0 to 8 [ 1962.173394][T12501] usb 2-1: Using ep0 maxpacket: 16 [ 1962.192184][T12501] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1962.220839][T12501] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1962.234053][T12501] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1962.246804][T12501] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1962.269122][T12501] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1962.499610][T12501] usb 2-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 1962.640377][T12501] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1962.668535][T12501] usb 2-1: SerialNumber: syz [ 1962.759304][T23416] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1962.784366][T12501] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1962.836525][T12501] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 1964.834269][T23443] overlayfs: failed to resolve './file0': -2 [ 1966.978103][T21474] usb 2-1: USB disconnect, device number 50 [ 1970.763865][T23496] loop1: detected capacity change from 0 to 40427 [ 1970.812291][T23496] F2FS-fs (loop1): invalid crc value [ 1970.827296][T23496] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1970.863111][T23496] F2FS-fs (loop1): Start checkpoint disabled! [ 1970.874515][T23496] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1971.406997][ T28] audit: type=1800 audit(1756656042.575:114): pid=23503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4056" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1971.483803][T23503] syz.1.4056: attempt to access beyond end of device [ 1971.483803][T23503] loop1: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 1972.423850][ T7790] kworker/u4:14: attempt to access beyond end of device [ 1972.423850][ T7790] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1972.460713][ T7790] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1972.596733][ T7790] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1973.165730][T23514] loop4: detected capacity change from 0 to 40427 [ 1973.242325][T23514] F2FS-fs (loop4): invalid crc value [ 1973.268663][T23514] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1973.333336][T23514] F2FS-fs (loop4): Start checkpoint disabled! [ 1973.350657][T23514] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1973.497742][ T28] audit: type=1800 audit(1756656044.665:115): pid=23522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4062" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1973.589243][T23522] syz.4.4062: attempt to access beyond end of device [ 1973.589243][T23522] loop4: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 1974.464218][ T58] kworker/u4:4: attempt to access beyond end of device [ 1974.464218][ T58] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1974.508089][ T58] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1974.528544][ T58] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1974.550728][T23535] overlayfs: failed to clone upperpath [ 1976.353851][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.360328][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.362754][T23548] overlayfs: failed to clone upperpath [ 1977.477517][T23553] loop1: detected capacity change from 0 to 40427 [ 1977.562835][T23553] F2FS-fs (loop1): invalid crc value [ 1977.737735][T23553] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1977.853757][T23563] fuse: Bad value for 'fd' [ 1978.654762][T23553] F2FS-fs (loop1): Start checkpoint disabled! [ 1978.685309][T23553] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1980.255564][T23575] syz.1.4071: attempt to access beyond end of device [ 1980.255564][T23575] loop1: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 1980.516863][ T28] audit: type=1800 audit(1756656051.345:116): pid=23575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4071" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1980.862064][ T12] kworker/u4:1: attempt to access beyond end of device [ 1980.862064][ T12] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1980.910521][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1980.919796][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1981.008722][T23581] ubi31: detaching mtd0 [ 1981.025687][T23581] ubi31: mtd0 is detached [ 1981.176585][T23585] overlayfs: failed to clone upperpath [ 1987.719947][T23643] loop4: detected capacity change from 0 to 1024 [ 1987.778035][T23643] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1987.857781][ T28] audit: type=1800 audit(1756656315.024:117): pid=23643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4098" name="bus" dev="loop4" ino=861 res=0 errno=0 [ 1988.703923][T23656] overlayfs: failed to clone upperpath [ 1992.509037][T23676] loop1: detected capacity change from 0 to 40427 [ 1992.541132][T23676] F2FS-fs (loop1): invalid crc value [ 1992.553363][T23676] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1992.589139][T23676] F2FS-fs (loop1): Start checkpoint disabled! [ 1992.605931][T23676] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1992.917835][T23674] loop4: detected capacity change from 0 to 32768 [ 1992.931736][T23674] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.4109 (23674) [ 1993.988606][ T28] audit: type=1800 audit(1756656321.104:118): pid=23680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4113" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1994.048471][T23674] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1994.101845][T23674] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1994.163926][T23680] syz.1.4113: attempt to access beyond end of device [ 1994.163926][T23680] loop1: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 1994.245900][T23674] BTRFS info (device loop4): using free space tree [ 1994.406122][T23674] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1994.494289][T23674] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1994.549032][T23674] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1994.560629][T23674] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1994.584874][T23674] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1994.596285][T23674] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1994.606403][T23674] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1994.632107][T23674] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1994.635445][T23699] overlayfs: failed to clone upperpath [ 1994.642294][T23674] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1994.658024][T23674] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1994.668972][T23674] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1994.681490][T23674] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1994.759927][T23674] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1994.830617][T23674] BTRFS error (device loop4): open_ctree failed: -12 [ 1994.888889][T20393] kworker/u4:5: attempt to access beyond end of device [ 1994.888889][T20393] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1994.917202][T20393] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1994.933099][T20393] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1998.520545][T23744] loop1: detected capacity change from 0 to 40427 [ 1998.541881][T23744] F2FS-fs (loop1): invalid crc value [ 1998.552315][T23744] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1998.590760][T23744] F2FS-fs (loop1): Start checkpoint disabled! [ 1998.603058][T23744] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1998.740171][ T28] audit: type=1800 audit(1756656325.904:119): pid=23747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4128" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1998.834232][T23747] syz.1.4128: attempt to access beyond end of device [ 1998.834232][T23747] loop1: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 1999.461793][ T7809] kworker/u4:20: attempt to access beyond end of device [ 1999.461793][ T7809] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1999.476396][ T7809] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1999.484393][ T7809] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2002.020297][T23772] loop1: detected capacity change from 0 to 40427 [ 2002.076712][T23772] F2FS-fs (loop1): invalid crc value [ 2002.094149][T23772] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2002.236751][ T6782] libceph: connect (1)[c::]:6789 error -101 [ 2002.246406][ T6782] libceph: mon0 (1)[c::]:6789 connect error [ 2002.274739][T23777] ceph: No mds server is up or the cluster is laggy [ 2002.309282][T23772] F2FS-fs (loop1): Start checkpoint disabled! [ 2002.365620][T23772] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2002.859556][ T28] audit: type=1800 audit(1756656330.014:120): pid=23785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4132" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 2002.939391][T23788] fuse: Bad value for 'fd' [ 2002.998606][T23788] fuse: Unknown parameter '0x0000000000000005‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 2003.072343][T19359] kworker/u4:2: attempt to access beyond end of device [ 2003.072343][T19359] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 2003.086659][T19359] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2003.093974][T19359] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2014.394496][T23919] overlayfs: failed to resolve './file1': -2 [ 2015.272015][ T23] libceph: connect (1)[c::]:6789 error -101 [ 2015.286949][T23924] ceph: No mds server is up or the cluster is laggy [ 2015.299073][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 2016.904309][T23940] loop1: detected capacity change from 0 to 40427 [ 2017.009749][T23940] F2FS-fs (loop1): invalid crc value [ 2017.018672][T23940] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2017.053081][T23940] F2FS-fs (loop1): Start checkpoint disabled! [ 2017.060905][T23940] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2017.251834][ T28] audit: type=1800 audit(1756656344.394:121): pid=23945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4198" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 2017.335058][T23945] syz.1.4198: attempt to access beyond end of device [ 2017.335058][T23945] loop1: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 2018.834039][ T12] kworker/u4:1: attempt to access beyond end of device [ 2018.834039][ T12] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 2018.887714][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2018.912468][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2019.883047][T20969] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2020.073996][T20969] usb 5-1: Using ep0 maxpacket: 8 [ 2020.082209][T20969] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2020.098163][T20969] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2020.133459][T20969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.377754][T23989] loop1: detected capacity change from 0 to 64 [ 2022.904487][T23988] hfs: request for non-existent node 131072 in B*Tree [ 2022.921831][ T23] usb 5-1: USB disconnect, device number 44 [ 2025.580668][ T23] libceph: connect (1)[c::]:6789 error -101 [ 2025.590982][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 2025.601335][T24030] ceph: No mds server is up or the cluster is laggy [ 2025.619137][ T23] libceph: connect (1)[c::]:6789 error -101 [ 2025.632801][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 2025.902257][ T23] libceph: connect (1)[c::]:6789 error -101 [ 2025.909547][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 2025.944531][T24038] fuse: Bad value for 'fd' [ 2026.089892][T24038] fuse: Unknown parameter '0x0000000000000007‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 2028.028351][T24076] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2029.835954][ T23] libceph: connect (1)[c::]:6789 error -101 [ 2029.843571][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 2029.850397][T24098] ceph: No mds server is up or the cluster is laggy [ 2031.206525][T24118] overlayfs: missing 'lowerdir' [ 2033.817107][T24148] loop4: detected capacity change from 0 to 1024 [ 2033.861941][T24148] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2033.924034][ T28] audit: type=1800 audit(1756656873.087:122): pid=24148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4274" name="bus" dev="loop4" ino=861 res=0 errno=0 [ 2034.015831][T24150] fuse: Bad value for 'fd' [ 2034.032605][T24150] fuse: Unknown parameter '0x0000000000000007‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 2034.597342][T24156] overlayfs: missing 'lowerdir' [ 2036.218093][T24180] fuse: Bad value for 'fd' [ 2036.250089][T24180] fuse: Unknown parameter '0x0000000000000005‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 2037.801154][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.995589][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.101973][T24198] overlayfs: missing 'lowerdir' [ 2038.476775][T24200] loop4: detected capacity change from 0 to 40427 [ 2038.523135][T24200] F2FS-fs (loop4): invalid crc value [ 2038.543647][T24200] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2038.579598][T24200] F2FS-fs (loop4): Start checkpoint disabled! [ 2038.593650][T24200] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 2038.740352][ T28] audit: type=1800 audit(1756656877.897:123): pid=24205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4293" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 2039.360465][ T58] kworker/u4:4: attempt to access beyond end of device [ 2039.360465][ T58] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 2039.392971][ T58] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 2039.428115][ T58] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 2040.143278][T24218] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2045.682583][T24257] overlay: Unknown parameter '\' [ 2047.106408][T24278] hub 1-0:1.0: USB hub found [ 2047.112349][T24278] hub 1-0:1.0: 1 port detected [ 2047.149098][T24278] loop4: detected capacity change from 0 to 64 [ 2049.550120][T24283] loop4: detected capacity change from 0 to 40427 [ 2049.569828][T24283] F2FS-fs (loop4): invalid crc value [ 2049.586854][T24283] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2049.709583][T24283] F2FS-fs (loop4): Start checkpoint disabled! [ 2049.730793][T24283] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 2049.943303][ T28] audit: type=1800 audit(1756656889.037:124): pid=24286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4321" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 2050.039948][T24286] syz.4.4321: attempt to access beyond end of device [ 2050.039948][T24286] loop4: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 2050.546609][T19359] kworker/u4:2: attempt to access beyond end of device [ 2050.546609][T19359] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 2050.768104][T19359] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 2050.823940][T19359] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 2053.284316][T24337] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2061.221477][T24412] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2065.166958][T24447] loop4: detected capacity change from 0 to 40427 [ 2065.644063][T24447] F2FS-fs (loop4): invalid crc value [ 2065.714891][T24447] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2065.762405][T24447] F2FS-fs (loop4): Start checkpoint disabled! [ 2066.008582][T24447] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 2066.581833][ T28] audit: type=1800 audit(1756657417.743:125): pid=24461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4383" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 2066.691266][T24461] syz.4.4383: attempt to access beyond end of device [ 2066.691266][T24461] loop4: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 2067.188981][T20791] kworker/u4:6: attempt to access beyond end of device [ 2067.188981][T20791] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 2067.207961][T20791] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 2067.216656][T20791] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 2069.380132][T24486] loop4: detected capacity change from 0 to 40427 [ 2069.399233][T24486] F2FS-fs (loop4): invalid crc value [ 2069.411174][T24486] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2069.450626][T24486] F2FS-fs (loop4): Start checkpoint disabled! [ 2069.459681][T24486] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 2069.626482][ T28] audit: type=1800 audit(1756657420.793:126): pid=24491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4389" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 2069.704390][T24491] syz.4.4389: attempt to access beyond end of device [ 2069.704390][T24491] loop4: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 2070.225740][T20791] kworker/u4:6: attempt to access beyond end of device [ 2070.225740][T20791] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 2070.250921][T20791] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 2070.263119][T20791] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 2073.764089][T24534] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2075.024120][T24544] loop4: detected capacity change from 0 to 40427 [ 2075.108899][T24544] F2FS-fs (loop4): invalid crc value [ 2075.118239][T24544] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2075.155446][T24544] F2FS-fs (loop4): Start checkpoint disabled! [ 2075.172025][T24544] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 2075.344865][ T28] audit: type=1800 audit(1756657426.513:127): pid=24551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4418" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 2075.431813][T24551] syz.4.4418: attempt to access beyond end of device [ 2075.431813][T24551] loop4: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 2077.111438][ T1122] kworker/u4:8: attempt to access beyond end of device [ 2077.111438][ T1122] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 2077.135091][ T1122] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 2077.179860][ T1122] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 2078.639272][T24589] fuse: Bad value for 'fd' [ 2083.493367][T24639] fuse: Bad value for 'fd' [ 2083.501468][T24639] fuse: Unknown parameter '0x0000000000000005‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 2088.191059][T17622] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 2088.397283][T24709] overlay: Unknown parameter '\' [ 2093.554278][T17622] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 2094.584902][T24781] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4506'. [ 2094.631341][T24784] loop4: detected capacity change from 0 to 8 [ 2099.230559][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.241300][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2101.318114][T24845] loop4: detected capacity change from 0 to 40427 [ 2102.198112][T24845] F2FS-fs (loop4): invalid crc value [ 2102.240923][T24845] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2102.303466][T24845] F2FS-fs (loop4): Start checkpoint disabled! [ 2102.528463][T24845] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 2102.828960][T24860] syz.4.4532: attempt to access beyond end of device [ 2102.828960][T24860] loop4: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 2103.143226][ T28] audit: type=1800 audit(1756657453.933:128): pid=24860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4532" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 2103.484732][ T7793] kworker/u4:15: attempt to access beyond end of device [ 2103.484732][ T7793] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 2103.536649][ T7793] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 2103.563471][ T7793] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 2107.900418][T24904] loop4: detected capacity change from 0 to 8 [ 2112.284943][T24949] fuse: Bad value for 'fd' [ 2114.593310][T24985] tipc: Started in network mode [ 2114.598430][T24985] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 2114.627529][T24985] tipc: Enabled bearer , priority 10 [ 2115.765120][ T23] tipc: Node number set to 4269801488 [ 2116.046125][T25010] fuse: Bad value for 'fd' [ 2116.059158][T25010] fuse: Unknown parameter '0x0000000000000005‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 2121.229319][T25055] bridge0: port 3(syz_tun) entered blocking state [ 2121.248970][T25055] bridge0: port 3(syz_tun) entered disabled state [ 2121.279594][T25055] syz_tun: entered allmulticast mode [ 2121.342721][T25055] syz_tun: entered promiscuous mode [ 2121.367560][T25055] bridge0: port 3(syz_tun) entered blocking state [ 2121.374682][T25055] bridge0: port 3(syz_tun) entered forwarding state [ 2121.824933][T25072] fuse: Bad value for 'group_id' [ 2121.834611][T25072] fuse: Unknown parameter '0x0000000000000006‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 2122.133095][T21474] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2122.205845][T25082] raw_sendmsg: syz.0.4619 forgot to set AF_INET. Fix it! [ 2122.343306][T21474] usb 5-1: Using ep0 maxpacket: 16 [ 2123.600075][T21474] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2123.620971][T21474] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2123.642315][T21474] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2123.678741][T21474] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 2123.692020][T21474] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2123.753965][T21474] usb 5-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 2123.792936][T21474] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2123.854832][T21474] usb 5-1: SerialNumber: syz [ 2123.908551][T25072] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2123.926491][T21474] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 2123.945306][T21474] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 2125.851178][T21474] usb 5-1: USB disconnect, device number 45 [ 2126.866071][T25125] loop4: detected capacity change from 0 to 64 [ 2126.962116][T25124] hfs: request for non-existent node 131072 in B*Tree [ 2129.823767][T25153] netlink: 'syz.0.4646': attribute type 4 has an invalid length. [ 2130.325904][T17622] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 2132.474067][T25181] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 2135.663863][T17622] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 2136.339420][T17622] Bluetooth: hci1: Injecting HCI hardware error event [ 2136.350109][T17622] Bluetooth: hci1: hardware error 0x00 [ 2136.645430][T25217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4664'. [ 2138.528226][T17622] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2139.010936][T25246] fuse: Bad value for 'fd' [ 2140.128266][T25246] fuse: Unknown parameter '0x0000000000000005‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 2140.239740][T25252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4677'. [ 2140.704414][T25252] bridge0: port 3(syz_tun) entered disabled state [ 2140.874393][T25252] syz_tun (unregistering): left allmulticast mode [ 2140.901231][T25252] syz_tun (unregistering): left promiscuous mode [ 2140.961692][T25252] bridge0: port 3(syz_tun) entered disabled state [ 2144.408007][T25284] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4690'. [ 2145.129289][T25303] fuse: Bad value for 'fd' [ 2145.144861][T25303] fuse: Unknown parameter '0x0000000000000005‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 2150.223886][T25330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4700'. [ 2151.865212][T25336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4702'. [ 2151.896783][T25336] veth0_macvtap: left promiscuous mode [ 2153.463609][T25353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4708'. [ 2153.490623][T25353] veth0_macvtap: left promiscuous mode [ 2153.562073][T25355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4711'. [ 2153.585538][T25355] veth0_macvtap: left promiscuous mode [ 2156.309939][T25375] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4713'. [ 2160.131122][T25406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4719'. [ 2160.673996][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.680379][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.748115][T25410] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4722'. [ 2164.834093][T25437] netlink: 'syz.0.4729': attribute type 4 has an invalid length. [ 2164.877123][T25440] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.4730'. [ 2165.227042][T25447] fuse: Bad value for 'fd' [ 2168.758775][T25476] fuse: Bad value for 'fd' [ 2169.648188][T25482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4743'. [ 2176.398329][T25542] fuse: Bad value for 'fd' [ 2180.681197][T25580] fuse: Bad value for 'fd' [ 2187.539660][T25647] tipc: Started in network mode [ 2187.545074][T25647] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 2187.557634][T25647] tipc: Enabled bearer , priority 10 [ 2189.775298][T16887] tipc: Node number set to 4269801488 [ 2190.345012][T25656] netlink: 'syz.4.4792': attribute type 4 has an invalid length. [ 2194.328522][T25686] netlink: 'syz.7.4800': attribute type 4 has an invalid length. [ 2195.448444][T25700] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4804'. [ 2198.818828][T25749] 9pnet_fd: Insufficient options for proto=fd [ 2200.021293][T25757] fuse: Bad value for 'fd' [ 2202.434814][T25793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4833'. [ 2204.153276][T25803] tipc: Enabling of bearer rejected, already enabled [ 2207.049994][T25838] fuse: Bad value for 'fd' [ 2207.451442][T25842] netlink: 'syz.7.4848': attribute type 4 has an invalid length. [ 2207.618177][T25850] 9pnet: p9_errstr2errno: server reported unknown error [ 2208.205402][T25870] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4860'. [ 2213.350790][T25945] fuse: Bad value for 'fd' [ 2213.378073][T25945] fuse: Unknown parameter '0x0000000000000005‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 2218.346763][T26042] netlink: 'syz.7.4923': attribute type 4 has an invalid length. [ 2218.478776][T26046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4924'. [ 2222.227920][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.355749][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2241.289516][T26241] fuse: Bad value for 'fd' [ 2241.344660][T26241] fuse: Unknown parameter '0x0000000000000005‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 2251.599110][T26307] overlay: Unknown parameter '\' [ 2257.550005][T26379] fuse: Bad value for 'fd' [ 2257.561569][T26379] fuse: Unknown parameter '0x0000000000000005‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 2259.608597][T26389] overlay: Unknown parameter '\' [ 2261.644844][T26404] overlay: Unknown parameter '\' [ 2263.473422][T26424] overlay: Unknown parameter '\' [ 2271.348586][T26465] overlay: Unknown parameter '\' [ 2274.876017][T26491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5038'. [ 2279.765983][T26534] overlay: Unknown parameter '\' [ 2280.750430][T26538] fuse: Unknown parameter '0xffffffffffffffff' [ 2280.961149][T26538] fuse: Unknown parameter '0x0000000000000005‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 2283.003737][T26556] fuse: Bad value for 'fd' [ 2283.023180][T26556] fuse: Unknown parameter '0x0000000000000005‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 2283.594085][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.601089][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2290.982435][T26605] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.5066'. [ 2290.994868][T26609] overlay: Unknown parameter '\' [ 2293.049288][T26629] overlay: Unknown parameter '\' [ 2296.234116][T26654] fuse: Bad value for 'fd' [ 2296.248487][T26654] fuse: Unknown parameter '0x0000000000000005‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 2296.329726][T26657] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 2296.504231][T26657] fuse: Unknown parameter '0x0000000000000005‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 2307.514115][T26732] netlink: 'syz.1.5100': attribute type 72 has an invalid length. [ 2307.543436][T26732] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.5100'. [ 2310.447927][T26764] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.5113'. [ 2313.214676][T26794] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.5124'. [ 2323.326969][T26876] fuse: Bad value for 'fd' [ 2327.671034][T26918] fuse: Bad value for 'fd' [ 2329.231167][T26936] fuse: Bad value for 'fd' [ 2332.453842][T26963] fuse: Bad value for 'fd' [ 2340.386944][T27032] lo: entered allmulticast mode [ 2345.074006][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.080383][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2347.889828][T27086] overlay: Unknown parameter '\' [ 2350.293970][T27108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5218'. [ 2355.011731][T27145] fuse: Bad value for 'fd' [ 2355.073675][T27145] fuse: Unknown parameter '0x0000000000000005‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 2372.287133][T27250] fuse: Bad value for 'fd' [ 2373.120407][T27257] fuse: Bad value for 'fd' [ 2373.269178][T27257] fuse: Unknown parameter '0x0000000000000005‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 2384.942161][T27336] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 2386.200245][T27345] fuse: Bad value for 'fd' [ 2387.216317][T27349] fuse: Bad value for 'fd' [ 2387.232283][T27349] fuse: Unknown parameter '0x0000000000000005‡ëò àgçÙ%wAÝÕ˘Év…¾û' [ 2396.420906][T27402] fuse: Bad value for 'fd' [ 2397.903281][T27401] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 2399.893209][T27416] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 2405.538584][T25207] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2405.636088][T25207] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2406.042901][T25207] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2406.057524][T25207] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2406.103559][T25207] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2406.111163][T25207] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2406.430337][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.436867][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2408.283066][T25207] Bluetooth: hci4: command tx timeout [ 2410.604709][T25207] Bluetooth: hci4: command tx timeout [ 2414.595014][T25207] Bluetooth: hci4: command tx timeout [ 2415.210644][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2415.282088][T27445] chnl_net:caif_netlink_parms(): no params data found [ 2415.321486][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2415.400377][T27445] bridge0: port 1(bridge_slave_0) entered blocking state [ 2415.407956][T27445] bridge0: port 1(bridge_slave_0) entered disabled state [ 2415.416276][T27445] bridge_slave_0: entered allmulticast mode [ 2415.423854][T27445] bridge_slave_0: entered promiscuous mode [ 2415.454782][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2415.468451][T27445] bridge0: port 2(bridge_slave_1) entered blocking state [ 2415.475897][T27445] bridge0: port 2(bridge_slave_1) entered disabled state [ 2415.483243][T27445] bridge_slave_1: entered allmulticast mode [ 2415.490290][T27445] bridge_slave_1: entered promiscuous mode [ 2415.537668][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2415.569154][T27445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2415.581960][T27445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2415.629814][T27445] team0: Port device team_slave_0 added [ 2415.645370][T27445] team0: Port device team_slave_1 added [ 2415.678207][T27445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2415.685299][T27445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2415.711984][T27445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2415.725359][T27445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2415.732432][T27445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2415.759470][T27445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2415.898486][T27445] hsr_slave_0: entered promiscuous mode [ 2415.905822][T27445] hsr_slave_1: entered promiscuous mode [ 2415.913587][T27445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2415.921223][T27445] Cannot create hsr debugfs directory [ 2416.445734][T27445] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2416.465441][T27445] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2416.484051][T27445] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2416.520891][T27445] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2416.662938][T17622] Bluetooth: hci4: command tx timeout [ 2416.718328][T27445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2416.797544][T27445] 8021q: adding VLAN 0 to HW filter on device team0 [ 2416.830960][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 2416.838152][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2416.859791][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 2416.867017][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2417.171947][ T12] hsr_slave_0: left promiscuous mode [ 2417.182406][ T12] hsr_slave_1: left promiscuous mode [ 2417.196292][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2417.206678][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2417.218648][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2417.233322][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2417.241601][ T12] bridge_slave_1: left allmulticast mode [ 2417.254398][ T12] bridge_slave_1: left promiscuous mode [ 2417.260238][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2417.277600][ T12] bridge_slave_0: left allmulticast mode [ 2417.289510][ T12] bridge_slave_0: left promiscuous mode [ 2417.296967][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2417.356315][ T12] veth1_macvtap: left promiscuous mode [ 2417.361920][ T12] veth0_macvtap: left promiscuous mode [ 2417.375353][ T12] veth1_vlan: left promiscuous mode [ 2417.382400][ T12] veth0_vlan: left promiscuous mode [ 2418.172644][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2418.247745][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2418.311989][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2418.375225][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2419.068668][ T12] bond0 (unregistering): Released all slaves [ 2419.389472][T27445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2419.887310][T27445] veth0_vlan: entered promiscuous mode [ 2419.912761][T27445] veth1_vlan: entered promiscuous mode [ 2419.988876][T27445] veth0_macvtap: entered promiscuous mode [ 2420.005860][T27445] veth1_macvtap: entered promiscuous mode [ 2420.040758][T27445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2420.054474][T27445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2420.065170][T27445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2420.075913][T27445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2420.085859][T27445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2420.096492][T27445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2420.108751][T27445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2420.124415][T27445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2420.137392][T27445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2420.148618][T27445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2420.160316][T27445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2420.170496][T27445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2420.181172][T27445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2420.192655][T27445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2420.215835][T27445] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2420.225028][T27445] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2420.234513][T27445] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2420.243549][T27445] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2420.376258][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2420.390216][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2420.419898][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2420.429896][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2420.581451][T27571] loop8: detected capacity change from 0 to 1024 [ 2420.629672][T27571] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2420.911337][T27576] tap0: tun_chr_ioctl cmd 2147767520 [ 2421.247920][T27445] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2467.868538][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.875114][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.310739][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.318839][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2531.382821][T27830] Bluetooth: hci4: command 0x0406 tx timeout [ 2590.748172][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.754630][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.190617][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.197135][ T1286] ieee802154 phy1 wpan1: encryption failed: -22