last executing test programs: 5m14.658678486s ago: executing program 32 (id=2419): add_key(&(0x7f0000002880)='pkcs7_test\x00', 0x0, &(0x7f0000002840), 0x0, 0xfffffffffffffffc) 3m29.789767499s ago: executing program 33 (id=2838): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, 0x0, r0, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 1m46.221363321s ago: executing program 4 (id=3438): r0 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000680)}], 0x1) writev(r1, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0xa, 0x1, 0x2, 0x0, 0xfd}) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x4208, r5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1m45.67295058s ago: executing program 4 (id=3440): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) creat(&(0x7f0000000100)='./file0\x00', 0x2a) 1m45.425271924s ago: executing program 4 (id=3441): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x402, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket(0x1e, 0x4, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 1m45.175398157s ago: executing program 4 (id=3442): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x30e, &(0x7f0000000900)="$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") mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101040, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 1m44.659460906s ago: executing program 4 (id=3445): openat$cuse(0xffffffffffffff9c, 0x0, 0x2842, 0x0) close(0x3) 1m42.827807045s ago: executing program 4 (id=3452): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001400)=""/4115, 0x1013}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000000340)=""/176, 0xb0}], 0x3}, 0x40012022) 1m42.440332271s ago: executing program 34 (id=3452): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001400)=""/4115, 0x1013}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000000340)=""/176, 0xb0}], 0x3}, 0x40012022) 1m27.261080943s ago: executing program 0 (id=3524): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}], 0x2) 1m27.147469095s ago: executing program 0 (id=3525): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) 1m27.055522166s ago: executing program 0 (id=3526): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000100004000000000000000000000000000001400"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m27.037578167s ago: executing program 0 (id=3527): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000006c0)='./bus\x00', 0x2302000, 0x0, 0x9, 0x0, &(0x7f00000002c0)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x0, 0xe) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000400)=ANY=[]) 1m26.8297557s ago: executing program 0 (id=3528): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) creat(0x0, 0x2a) 1m25.407120253s ago: executing program 0 (id=3535): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m25.050669229s ago: executing program 35 (id=3535): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m9.038873684s ago: executing program 1 (id=3608): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1m5.847305515s ago: executing program 1 (id=3620): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x40040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000080)=0x2) 1m4.87648228s ago: executing program 6 (id=3626): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffff9e3, 0x5}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 1m4.705332143s ago: executing program 6 (id=3627): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00002aa000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r0, 0x0) syz_open_procfs(0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = timerfd_create(0x8, 0x80000) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x639) readv(r2, &(0x7f0000000180), 0x0) read$FUSE(r2, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x5, 0xfeff, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x1, r3, 0x0, 0x0, 'syz1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={0x0, 0x0, 0x36, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) 1m3.839432067s ago: executing program 1 (id=3628): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1m3.699235029s ago: executing program 6 (id=3630): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETA(r0, 0x5406, 0x0) 1m3.392445874s ago: executing program 6 (id=3632): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000006c0)='./bus\x00', 0x2302000, 0x0, 0x9, 0x0, &(0x7f00000002c0)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x0, 0xe) 1m3.186880897s ago: executing program 7 (id=3633): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) syz_emit_ethernet(0x65, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "410100", 0x2f, 0x11, 0x0, @empty, @local, {[], {0x0, 0xe22, 0x2f, 0x0, @gue={{0x2, 0x0, 0x1, 0x6, 0x0, @val=0x80}, "1af009b01b73f26b2d9960c2e499c95cb36405e2f05eccd7e55a8117bc17a7"}}}}}}}, 0x0) 1m3.04573375s ago: executing program 7 (id=3634): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x402, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket(0x1e, 0x4, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 1m2.915269342s ago: executing program 7 (id=3635): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, r0, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x2, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m2.897174772s ago: executing program 6 (id=3636): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x40040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000080)=0x2) 1m2.869404892s ago: executing program 7 (id=3637): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 1m2.526605488s ago: executing program 7 (id=3638): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 1m2.38996926s ago: executing program 6 (id=3640): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f00000008c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000340)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m1.826875549s ago: executing program 36 (id=3640): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f00000008c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000340)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m1.319407647s ago: executing program 7 (id=3643): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x402, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket(0x1e, 0x4, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 1m0.738664017s ago: executing program 37 (id=3643): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x402, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket(0x1e, 0x4, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 1m0.697739517s ago: executing program 1 (id=3646): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000006c0)='./bus\x00', 0x2302000, 0x0, 0x9, 0x0, &(0x7f00000002c0)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)=ANY=[]) 1m0.167371255s ago: executing program 1 (id=3648): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x40040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000080)=0x2) 58.500242992s ago: executing program 1 (id=3650): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 58.128948988s ago: executing program 38 (id=3650): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 50.180208804s ago: executing program 5 (id=3657): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$eJzs3V1sXGdaB/DnnWMndsqyU9qmXbpIsxSxaZoE56OtUVrkbIy1K0VtVMcLNyCP40kY1R67trNKK1gFCbgBQVCRVsAFuUHigovcIKEVQhE3iwRIEajSIpAItI1WQoBXsLBiJYzOzDv22BvXbr6cNL/fbvKfc+Y9M++Z9jlzpprnTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEV/46RNDh9NOzwIAuJ9eG39j6Kj3fwB4pJzx+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK2lKOKtSPHe2HKabC93DJxqti5cnBgdu/VmgylSVKJojy//DBw+cvTYiy+9PNzNj97+bvtMvD5+5kTt5Nzs/EJjcbExXZtoNc/OTTe2/Qh3uv1G+9svQG32zQvT584t1o4cOrru7ovVm7sf21s9Pvzsgee7YydGx8bGe8b09d/2s3+fdPceik+QXVHEFyPFNw5+K9UjohJ3XgtbHDvutcHoK+uvvRMTo2PtHZlp1ltL5Z2pkkf1RVR7Nhrp1sh9qMU7MhJxqfznVE54f7l74/P1hfrUTKN2ur6w1FxqzrVSpTPbcn+qUYnhFDEfEcvFTk+eB01/FPFqpLj5veU0FRFFtw5eeG38jaGjm2/Ydx8nucnTV4uI6/EQ1Cw8oHZHEb8dKd6dHIqzua7aZfNBxOfLfCXirTKvpbicl1N5gBiO+Lb3E3io9UURfxMp5tJymu7Wfvu88tSXa19qnZvrGds9r3zoPx/cT85NeIANRBFT7TP+5XT7/7ELAAAAAAAAAAAAALg/ivh6pLg6uy/NR29PabN1vnamPjXT+VZw97v/tbzVysrKSjV1spZzKOdIztM5J3PO57yU83LOKzmv5ryW83rOGzmXc0YlP3/OWs6hnCM5T+eczDmf81LOyzmvdLLb0bhyLa+/nvNGzuWcoe8JAAAAAAAAAAAAAAAAAACAu2wwiviNSPHvv/+V9u9KR/t36T99fPjkqU/1/mb8M1s8Tjn2UER8Pbb3m7y78m+Np0r5v7u/X8DWBqKIr+bf//vlnZ4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQKhEEb8SKb72neUUKSJGIiajkzeKnZ4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDanYp4NVL87O+OrK7ri4jU/n/HvvKvYzFS5HyizFdi5HA7KyMnyhyIOLQD8wdu3+Lb77xZn5lpLLjhhhturN7Y6SMTAAAAAAAAAAAAAAAAADzCUhF/Hyl+8veWUzUiLlZv7n5sb/X48LMHni+iaF8EIPWOf338zInaybnZ+YXG4mJjujbRap6dm25s9+kGTjVbFy5OjI7dk53Z0uA9nv/gwMm5+bcXmud/YemW9+8ZODG1uLRQP3vru2Mw+iKGetfsb094YnSsPemZZr3V3jRVNplgX0RtuzvDI29PKuJ/I8V7B78Zj+d1+fof/Z2lter/w19cW/rhvvW5+q9j+/jx6ePDJ/c8t53babsT3d8uvLIQxsZ7VvflWf5Qz7pqnte2HxseUWX9vxApfv6PitStoVz/P9BZKlbH/s9X12rq+IZctUP1/0TPuuP5qNXfFzGwNDvf/3TEwOLb7xxsztbPN843WseOvPzS8LGXXzz2Uv+uiIFzzZnG0Nqtbb92AAAAAAAAAAAAAAAAAHCv9KcivhApfunv/nK1bzz3/32qs7TW/9fb/7tvw+P0Xjdgs9u37PXboq+vV/mcKRXxVKR49s+eac83xR4973Cb9qQivlvW0/QX0+fyulz/ubP/1vV/aUOu2qH+38d71l3Kx4n/iBSP/8Ez8bme48TG7t5y3F9Eiqkf+WweF7vKcd3H6/REdxqDy7FfiRTvn14/tts3/cTa2MPb3S3YSWX9z0aKf/itv40fzevWX//j1vW/Z0Ou2qH6f7J3nyJi8e133qzPzDQWFrf9UsAjp6z/X48Uf/0n34zn8rqPuv5P9zo/+55bn4PdQTtU/0/1rKvmef3Yx3wtAAAAAAAAAAAA4GGxJxXxT5Hiz//0QDqY123n+7/TG3LVDn3/7+meddPrvv97725s+0UGAIAHRH8q4icixR9Pf5C6vbGb9v++stb/M7rxxL19Tv+D7T7/j3Wu/zH6/8vnTKmI/8t9vUNb9PX+eKT4tZ86kMelveW4ke50238PvDbXOnhiZmbubH2pPjXTqI3P1882ym33R4p//bfP5m0r7T7fbn90pzd4rSf4dyLFz33YHdvpCe72Uj65NvZwOfZgpPju++vHdvuunlobe6Qc+5uRYuy/bz1279rYo+XYf4wU//lurTt2Tzm2+3nu6bWxh87OzXzfRzYAAAAAAAAAAAAAAAAAAAB2Xn8qIkWKaz9zZbU3fv31v7rXAVh//a+N7tXv/1fvzm4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMhRRH/FSneG1tON4pyuWPgVLN14eLE6NitNxtMkaISRXt8+Wfg8JGjx1586eXhbn709nfbZ+L18TMnaifnZucXGouLjenaRKt5dm66se1HuL3ti03v2d9+AWqzb16YPndusXbk0NF1d1+s3tz92N7q8eFnDzzfHTsxOjY23jOmr3/bs99SunsPxSfIrijiryLFNw5+K/1zEVGJ266FVVscO+61wegr66+9ExOjY+0dmWnWW0vlnamSR/VFVHs2GunWyH2oxTsyEnEpIirlhPeXuzc+X1+oT800aqfrC0vNpeZcK1U6sy33pxqVGE4R8xGxvPnRikdUfxRxLVLc/N5y+pei84bWroMXXht/Y+jo5hv23cdJbvL01SLiejwENQsPqN1RxJOR4t3JoXi/6NRVu2w+iPh8ma9EvFXmtRSX83IqDxDDEd/2fgIPtb4o4nSkmEvL6YMi1377vPLUl2tfap2b6xnbPa986D8f3E/OTXiADUQRH7bP+JfTh97PAQAAAAAAAAAAAOABV8SrkeLq7L7U7g9d7Sltts7XztSnZjpf6+9+97+Wt1pZWVmppk7Wcg7lHMl5Oudkzvmcl3Jeznkl59Wc13Jez3mjnbvbjYnlclTy8+es5RzKOZLzdM7JnPM5L+W8nPNKzqs5r+W8nvNGzuWcH9H1DwAAAAAAAAAAAAAAAAAAd6QSRfxqpPjad5bTStH5fdnJ6OSN9X2uu3ZqjsC98f8BAAD//3zgG/w=") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) ftruncate(r0, 0x201f) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 49.757316042s ago: executing program 5 (id=3658): fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='AF', 0x2, 0x8be6) 49.559352265s ago: executing program 5 (id=3659): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x2, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 49.446382577s ago: executing program 5 (id=3660): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000006c0)='./bus\x00', 0x2302000, 0x0, 0x9, 0x0, &(0x7f00000002c0)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x0, 0xe) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000400)=ANY=[]) 49.21406856s ago: executing program 5 (id=3661): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x3, {0x2, 0xff, 0x4}, {0x2, 0x0, 0x2}, 0xff, 0xfe}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 47.935248371s ago: executing program 5 (id=3662): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x40040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0) 47.596940676s ago: executing program 39 (id=3662): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x40040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0) 19.001446162s ago: executing program 9 (id=3738): mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) 18.842246345s ago: executing program 9 (id=3739): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x6, 0x100000001}) 18.614703168s ago: executing program 9 (id=3742): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) pselect6(0x40, &(0x7f0000000000)={0x3, 0x56d, 0x4, 0x7, 0x4, 0x346c87cd, 0x8000000000000000, 0x3}, &(0x7f0000000040)={0xd, 0xffffffffffffff95, 0x80000000, 0xff, 0x7, 0x5, 0x49d, 0x5}, 0x0, 0x0, 0x0) 16.890394026s ago: executing program 9 (id=3759): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00002aa000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = timerfd_create(0x8, 0x80000) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) readv(r2, &(0x7f0000000180), 0x0) read$FUSE(r2, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x5, 0xfeff, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x1, r3, 0x0, 0x0, 'syz1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={0x0, 0x0, 0x36, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) 16.526504072s ago: executing program 9 (id=3763): openat$fb0(0xffffffffffffff9c, 0x0, 0x40102, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000000), 0x0, r1) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x6, 0x109880) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000080)=ANY=[]) 16.049776949s ago: executing program 9 (id=3769): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0xffff0000, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 14.296628918s ago: executing program 2 (id=3781): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x4, 0x0, [{0x7, 0x2, 0x5, 0x6, 0xf, 0xfffff65c, 0x4}, {0xa, 0xf9c, 0x9bc6e1988d73a6fa, 0x401, 0x4, 0x8, 0xe}, {0xc0000001, 0x9, 0x2, 0xe, 0x0, 0x5, 0x3}, {0x80000019, 0x1, 0x0, 0x1, 0x5, 0x1, 0xe4}]}) 13.877513244s ago: executing program 2 (id=3785): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000000c0)={[{@dax}]}, 0x1, 0x4fd, &(0x7f0000000a00)="$eJzs3c9vG1kdAPCvnV9ONrvJLnsAhNiyLBRU1UncbVT1AOWEEKqE6BGkNiRuFMWOo9gpTeih/R+QqMQJjvwBnHviT0Bw4wIHJH5EoKYSh0Eztls3tZu0Sew0/nyk0cybN/b3vTbznv1VMi+AoXUhIh5GxHhE3ImImdb5XGuLG80tve7p3oPl/b0Hy7lIklv/ymX16bnoeE3qvdZ7FiLix9+P+Fnu1bj1nd31pUqlvNUsTs41qptz9Z3dy2vVpdXyanmjVFpcWJy/duVq6cT6+kl1vHkwkjbw279ImzXdquvsx0lqdj2Z6Dw3GhE/PI1gAzDS6s/4oBvCW8lHxEcR8Wl2/8/ESPa/CQCcZ0kyE8lMZxkAOO/yWQ4sly+2cgHTkc8Xi80c3scxla/U6o1Ld2vbGyvNXNlsjOXvrlXK861c4WyM5dLyQnb8olw6UL4SER9GxC8nJrNycblWWRnkBx8AGGLvHZj//zvRnP8BgHOuMOgGAAB9Z/4HgOFj/geA4WP+B4DhY/4HgOFj/geA4WP+B4Ch8qObN9Mt2W89/3rl3s72eu3e5ZVyfb1Y3V4uLte2Nourtdpq9sye6mHvV6nVNhc+j+37s9/ZrDfm6ju7t6u17Y3G7ey53rfLY33pFQDwOh9+8uTPuYh4eH0y26JjLQdzNZxv+UE3ABiYkUE3ABgYq33B8DrGd3zpATgnuizR+5JCREwevHo2SZLTbRZwii5+Sf4fhlVH/t9vAcOQkf+H4dUr/3/ww8Bh+QHg3ZMkuaOu+R9HvRAAONvk+IEe3+8/au1/18oH/HTl4BWPT7NVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLa11/8tttYCn458vliMeD8iZmMsd3etUp6PiA8i4k8TYxNpeWHAbQYAjiv/91xr/a+LM59NH6wdzz2byPYR8fNf3/rV/aVGY+uP6fl/Pz/feNw6XxpE+wGAw7Tn6Wzf8UX+6d6D5fbWz/b843sRUWjG398bj/3n8UdjNNsXYiwipv6Ta5Wbch25i+N4+Cgivtit/7mYznIgzZVPD8ZPY7/f1/j5l+Lns7rmPv23+MIbR05mTqD58E57ko4/N7rdf/m4kO273/+FbIQ6vtb4l77V8n42Br6I3x7/RnqMfxeOGuPzP/yg+drJV+seRXx5NKIde79j/GnHz/WI/9kR4//lK1/9tFdd8puIi9E9fmesuUZ1c66+s3t5rbq0Wl4tb5RKiwuL89euXC3NZTnqud6zwT+vX/qgV13a/6ke8QuH9P8bR+z/b/935ydfe038b329W/x8fPya+Omc+M0jxl+a+n2hV10af6Vr/9t69//SEeP/9W+7rywbDgAMTn1nd32pUilv9fOg/UGir0EdnIOD9KfmDDSj68F3+xVrPN7oVUnyVrF6jRgnkXUDzoLmvZ6UtyLi2aAbAwAAAAAAAAAAAAAAdNWPv1gadB8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4v/4fAAD//7tDzrY=") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) 13.699748617s ago: executing program 8 (id=3786): add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='mode\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0xc048aeca, &(0x7f0000000100)) 13.452972611s ago: executing program 2 (id=3787): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00002aa000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = timerfd_create(0x8, 0x80000) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x639) readv(r2, 0x0, 0x0) read$FUSE(r2, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x5, 0xfeff, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x1, r3, 0x0, 0x0, 'syz1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={0x0, 0x0, 0x36, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) 13.404571942s ago: executing program 8 (id=3788): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x2, 0x0, 0x0, 0x9, 0x1, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz1\x00'}) 13.383412562s ago: executing program 3 (id=3789): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000280), 0x0) 13.143653976s ago: executing program 8 (id=3790): prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xc9ca]}, 0x8) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, &(0x7f0000000440)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r1}, 0x18) mlockall(0x2) mount$afs(0x0, 0x0, 0x0, 0x88, 0x0) 12.923612319s ago: executing program 3 (id=3791): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 12.696750113s ago: executing program 3 (id=3792): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000006c0)='./bus\x00', 0x2302000, 0x0, 0x9, 0x0, &(0x7f00000002c0)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x0, 0xe) 12.696121153s ago: executing program 8 (id=3793): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) 12.520721275s ago: executing program 3 (id=3794): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delqdisc={0x13c, 0x25, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x10, 0x8}, {0xffff, 0xd}}, [@TCA_STAB={0x4}, @qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40801}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x600}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 12.359409368s ago: executing program 2 (id=3795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000000c0)={[{@dax}]}, 0x1, 0x4fd, &(0x7f0000000a00)="$eJzs3c9vG1kdAPCvnV9ONrvJLnsAhNiyLBRU1UncbVT1AOWEEKqE6BGkNiRuFMWOo9gpTeih/R+QqMQJjvwBnHviT0Bw4wIHJH5EoKYSh0Eztls3tZu0Sew0/nyk0cybN/b3vTbznv1VMi+AoXUhIh5GxHhE3ImImdb5XGuLG80tve7p3oPl/b0Hy7lIklv/ymX16bnoeE3qvdZ7FiLix9+P+Fnu1bj1nd31pUqlvNUsTs41qptz9Z3dy2vVpdXyanmjVFpcWJy/duVq6cT6+kl1vHkwkjbw279ImzXdquvsx0lqdj2Z6Dw3GhE/PI1gAzDS6s/4oBvCW8lHxEcR8Wl2/8/ESPa/CQCcZ0kyE8lMZxkAOO/yWQ4sly+2cgHTkc8Xi80c3scxla/U6o1Ld2vbGyvNXNlsjOXvrlXK861c4WyM5dLyQnb8olw6UL4SER9GxC8nJrNycblWWRnkBx8AGGLvHZj//zvRnP8BgHOuMOgGAAB9Z/4HgOFj/geA4WP+B4DhY/4HgOFj/geA4WP+B4Ch8qObN9Mt2W89/3rl3s72eu3e5ZVyfb1Y3V4uLte2Nourtdpq9sye6mHvV6nVNhc+j+37s9/ZrDfm6ju7t6u17Y3G7ey53rfLY33pFQDwOh9+8uTPuYh4eH0y26JjLQdzNZxv+UE3ABiYkUE3ABgYq33B8DrGd3zpATgnuizR+5JCREwevHo2SZLTbRZwii5+Sf4fhlVH/t9vAcOQkf+H4dUr/3/ww8Bh+QHg3ZMkuaOu+R9HvRAAONvk+IEe3+8/au1/18oH/HTl4BWPT7NVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLa11/8tttYCn458vliMeD8iZmMsd3etUp6PiA8i4k8TYxNpeWHAbQYAjiv/91xr/a+LM59NH6wdzz2byPYR8fNf3/rV/aVGY+uP6fl/Pz/feNw6XxpE+wGAw7Tn6Wzf8UX+6d6D5fbWz/b843sRUWjG398bj/3n8UdjNNsXYiwipv6Ta5Wbch25i+N4+Cgivtit/7mYznIgzZVPD8ZPY7/f1/j5l+Lns7rmPv23+MIbR05mTqD58E57ko4/N7rdf/m4kO273/+FbIQ6vtb4l77V8n42Br6I3x7/RnqMfxeOGuPzP/yg+drJV+seRXx5NKIde79j/GnHz/WI/9kR4//lK1/9tFdd8puIi9E9fmesuUZ1c66+s3t5rbq0Wl4tb5RKiwuL89euXC3NZTnqud6zwT+vX/qgV13a/6ke8QuH9P8bR+z/b/935ydfe038b329W/x8fPya+Omc+M0jxl+a+n2hV10af6Vr/9t69//SEeP/9W+7rywbDgAMTn1nd32pUilv9fOg/UGir0EdnIOD9KfmDDSj68F3+xVrPN7oVUnyVrF6jRgnkXUDzoLmvZ6UtyLi2aAbAwAAAAAAAAAAAAAAdNWPv1gadB8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4v/4fAAD//7tDzrY=") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}}, 0x0) 12.318607829s ago: executing program 3 (id=3796): add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='mode\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0xc048aeca, &(0x7f0000000100)) 12.201884501s ago: executing program 8 (id=3797): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd700001dcdf250700000008000300", @ANYRES32=r2, @ANYBLOB="1400040070696d367265673000000000000000000800050006000000080017"], 0x5c}}, 0x0) 12.059192763s ago: executing program 2 (id=3798): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0x138, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0xa, 0xe4}}, @filter_kind_options=@f_bpf={{0x8}, {0xfc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0xd4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0xa0, 0x1b, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 12.058883853s ago: executing program 3 (id=3799): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000000c0)={[{@dax}]}, 0x1, 0x4fd, &(0x7f0000000a00)="$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") 11.923704806s ago: executing program 8 (id=3800): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0xc14002, &(0x7f0000000300)=ANY=[], 0x0, 0x729, &(0x7f0000001340)="$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") futimesat(r1, &(0x7f0000000000)='./file1\x00', 0x0) 11.838544176s ago: executing program 2 (id=3801): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfd}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffff3}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) 0s ago: executing program 40 (id=3769): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0xffff0000, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) kernel console output (not intermixed with test programs): usb 5-1: USB disconnect, device number 9 [ 765.993766][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.023062][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.086000][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.102008][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.131305][T15275] fuse: Bad value for 'fd' [ 766.341516][T15281] loop0: detected capacity change from 0 to 164 [ 766.382458][T15281] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 766.441106][T15281] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 766.504861][T15281] Symlink component flag not implemented [ 766.510715][T15281] Symlink component flag not implemented [ 766.544319][T15281] Symlink component flag not implemented (7) [ 766.550844][T15281] Symlink component flag not implemented (116) [ 767.183255][T15294] loop0: detected capacity change from 0 to 8 [ 767.506529][T15302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2893'. [ 768.248881][T15317] fuse: Bad value for 'fd' [ 768.723871][T15331] loop1: detected capacity change from 0 to 8 [ 768.831066][T15334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2902'. [ 769.019064][ T50] Bluetooth: hci4: unexpected event for opcode 0x2019 [ 769.983551][T13078] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 770.023819][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 770.204286][T13078] usb 6-1: Using ep0 maxpacket: 8 [ 770.228601][T13078] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 770.256452][T13078] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.279842][T13078] usb 6-1: Product: syz [ 770.291593][T13078] usb 6-1: Manufacturer: syz [ 770.310367][T13078] usb 6-1: SerialNumber: syz [ 770.332819][T13078] usb 6-1: config 0 descriptor?? [ 770.334068][T15357] fuse: Bad value for 'fd' [ 770.568926][T13078] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 770.620506][T13078] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 770.667778][T13078] usb 6-1: USB disconnect, device number 2 [ 771.288876][T15373] loop1: detected capacity change from 0 to 8 [ 771.359064][T11698] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 772.174411][T15383] autofs4:pid:15383:autofs_fill_super: called with bogus options [ 772.705626][T12371] Bluetooth: hci4: unexpected event for opcode 0x2019 [ 773.233867][T15408] loop4: detected capacity change from 0 to 256 [ 773.274424][T15408] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 773.298671][T15408] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 773.400600][T15408] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 773.493513][T15408] netlink: 'syz.4.2921': attribute type 8 has an invalid length. [ 773.976682][T15418] loop0: detected capacity change from 0 to 8 [ 774.347197][T15420] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 774.411557][T15420] kvm: pic: non byte read [ 774.723836][T15420] kvm: pic: level sensitive irq not supported [ 774.724417][T15420] kvm: pic: non byte read [ 775.465078][T15443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2930'. [ 775.502181][T15443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2930'. [ 775.539099][T15443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2930'. [ 775.914603][T15454] syz_tun: entered allmulticast mode [ 775.950927][T15453] syz_tun: left allmulticast mode [ 776.531637][T15469] loop1: detected capacity change from 0 to 8 [ 776.722214][T15473] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 776.948376][ T8788] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 777.437217][T15490] syz_tun: entered allmulticast mode [ 777.455128][T15489] syz_tun: left allmulticast mode [ 778.688678][T15513] loop5: detected capacity change from 0 to 8 [ 779.593231][T15527] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 779.914346][T15537] overlayfs: failed to resolve './file0': -2 [ 780.446290][T15545] loop5: detected capacity change from 0 to 8 [ 781.218875][T15561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2967'. [ 781.614365][T15564] loop5: detected capacity change from 0 to 512 [ 781.653785][T15564] EXT4-fs: Ignoring removed i_version option [ 781.759094][T15564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 782.094710][T15569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2969'. [ 782.111170][T15066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.223928][T15571] loop4: detected capacity change from 0 to 164 [ 782.248439][T15571] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 782.280837][T15571] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 782.318375][T15571] Symlink component flag not implemented [ 782.348420][T15571] Symlink component flag not implemented [ 782.367525][T15571] Symlink component flag not implemented (7) [ 782.376774][T15571] Symlink component flag not implemented (116) [ 782.570811][T15581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2974'. [ 782.867473][T13079] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 782.937606][T15587] loop4: detected capacity change from 0 to 8 [ 783.027035][T13079] usb 6-1: device descriptor read/64, error -71 [ 783.308232][T13079] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 783.475763][T13079] usb 6-1: device descriptor read/64, error -71 [ 783.602138][T13079] usb usb6-port1: attempt power cycle [ 783.700066][T15592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2976'. [ 783.949439][T15595] loop0: detected capacity change from 0 to 512 [ 783.960421][T15595] EXT4-fs: Ignoring removed i_version option [ 783.980311][T15596] netlink: 'syz.1.2977': attribute type 6 has an invalid length. [ 783.992253][T15596] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2977'. [ 784.014596][T15595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.273430][T13079] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 784.353993][T13079] usb 6-1: device descriptor read/8, error -71 [ 784.398005][T13466] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.782307][T13079] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 784.859340][T15615] loop4: detected capacity change from 0 to 8 [ 785.263788][T15616] autofs4:pid:15616:autofs_fill_super: called with bogus options [ 785.383459][T12371] Bluetooth: hci2: command 0x0406 tx timeout [ 785.637643][T13079] usb 6-1: device descriptor read/8, error -71 [ 785.773617][T13079] usb usb6-port1: unable to enumerate USB device [ 785.965920][T15626] loop5: detected capacity change from 0 to 164 [ 785.980922][T15626] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 786.016930][T15626] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 786.046216][T15626] Symlink component flag not implemented [ 786.063240][T15626] Symlink component flag not implemented [ 786.072305][T15626] Symlink component flag not implemented (7) [ 786.092766][T15626] Symlink component flag not implemented (116) [ 786.253694][ T5895] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 786.653517][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 786.665506][ T5895] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 786.676074][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.743258][T15640] loop5: detected capacity change from 0 to 8 [ 786.792630][ T5895] usb 5-1: Product: syz [ 786.818529][ T5895] usb 5-1: Manufacturer: syz [ 786.860748][ T5895] usb 5-1: SerialNumber: syz [ 787.046103][ T5895] usb 5-1: config 0 descriptor?? [ 787.435547][ T5895] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 787.648586][ T5895] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 787.739100][ T5895] usb 5-1: USB disconnect, device number 10 [ 788.272959][T15661] loop4: detected capacity change from 0 to 164 [ 788.344036][T15661] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 788.406933][T15661] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 788.447871][T15661] Symlink component flag not implemented [ 788.458885][T15661] Symlink component flag not implemented [ 788.469021][T15668] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 788.504130][T15661] Symlink component flag not implemented (7) [ 788.531954][T15661] Symlink component flag not implemented (116) [ 789.420867][T15694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3007'. [ 789.468938][T15694] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3007'. [ 789.486623][T15695] loop5: detected capacity change from 0 to 8 [ 791.027685][T15709] autofs4:pid:15709:autofs_fill_super: called with bogus options [ 791.356014][T15707] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 791.524430][T15716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3012'. [ 791.709354][T15716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3012'. [ 791.840561][T15719] loop5: detected capacity change from 0 to 512 [ 791.885036][T15719] EXT4-fs: Ignoring removed i_version option [ 791.972417][T15719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 792.074098][T15723] loop4: detected capacity change from 0 to 1024 [ 792.085859][T15719] overlayfs: missing 'lowerdir' [ 792.116795][ T50] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 792.131301][ T50] Bluetooth: hci1: Injecting HCI hardware error event [ 792.144322][ T50] Bluetooth: hci1: hardware error 0x00 [ 792.225021][T15723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.327374][T15066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.839424][T15749] loop1: detected capacity change from 0 to 8 [ 792.863495][ T5895] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 792.909562][T13480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.713470][ T5895] usb 6-1: device descriptor read/64, error -71 [ 793.891248][T15758] loop0: detected capacity change from 0 to 1024 [ 794.019570][T15763] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 794.118718][T15758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.184039][ T5895] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 794.343796][ T5895] usb 6-1: device descriptor read/64, error -71 [ 794.351489][ T50] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 794.390267][T13466] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.437449][T15756] autofs4:pid:15756:autofs_fill_super: called with bogus options [ 794.464333][ T5895] usb usb6-port1: attempt power cycle [ 794.993759][ T5895] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 795.304653][ T5895] usb 6-1: device descriptor read/8, error -71 [ 795.486579][T15786] loop0: detected capacity change from 0 to 512 [ 795.502255][T15786] EXT4-fs: Ignoring removed i_version option [ 795.568910][T15786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 795.583470][ T5895] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 795.627512][ T5895] usb 6-1: device descriptor read/8, error -71 [ 795.696602][T15786] overlayfs: missing 'lowerdir' [ 795.764222][ T5895] usb usb6-port1: unable to enumerate USB device [ 795.856468][T13466] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.334815][T15809] loop1: detected capacity change from 0 to 8 [ 796.503490][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 797.736957][T15812] autofs4:pid:15812:autofs_fill_super: called with bogus options [ 798.701762][T15851] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 798.827346][T15855] loop4: detected capacity change from 0 to 512 [ 798.846518][T15855] EXT4-fs: Ignoring removed bh option [ 798.866546][T15855] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 798.902498][T15855] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 798.930693][T15855] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 798.941666][T15855] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 798.952979][T15855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 798.986435][T15855] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #12: block 32: comm syz.4.3044: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=2320, size=2048 fake=0 [ 799.560831][T13480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.647151][T15874] loop0: detected capacity change from 0 to 512 [ 799.674626][T15874] EXT4-fs: Ignoring removed i_version option [ 799.728391][T15874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 799.759557][T15874] overlayfs: missing 'workdir' [ 799.783681][T12371] Bluetooth: hci2: command 0x0406 tx timeout [ 800.194302][T13466] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.335270][T15879] autofs4:pid:15879:autofs_fill_super: called with bogus options [ 801.059210][T15907] loop5: detected capacity change from 0 to 512 [ 801.093892][T15907] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 801.368178][T15907] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #15: comm syz.5.3053: corrupted in-inode xattr: e_name out of bounds [ 801.682898][T15907] EXT4-fs (loop5): 1 truncate cleaned up [ 801.826105][T15907] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.951417][ T28] audit: type=1804 audit(1750376239.418:604): pid=15907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3053" name="/newroot/45/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 802.127877][T15066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.200842][T15924] loop4: detected capacity change from 0 to 164 [ 802.261117][T15924] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 802.345486][T15924] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 802.378302][T15924] Symlink component flag not implemented [ 802.413536][T15924] Symlink component flag not implemented [ 802.423496][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 802.454223][T15924] Symlink component flag not implemented (7) [ 802.461662][T15924] Symlink component flag not implemented (116) [ 802.560275][T15932] loop1: detected capacity change from 0 to 512 [ 802.609139][T15932] EXT4-fs: Ignoring removed i_version option [ 802.650307][T15932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.706577][T15932] overlayfs: missing 'workdir' [ 802.834210][T13097] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 802.862616][T12592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.003738][T13097] usb 6-1: device descriptor read/64, error -71 [ 803.150340][T15944] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 803.283594][T13097] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 803.453543][T13097] usb 6-1: device descriptor read/64, error -71 [ 803.579740][T15948] autofs4:pid:15948:autofs_fill_super: called with bogus options [ 803.593847][T13097] usb usb6-port1: attempt power cycle [ 804.123446][T13097] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 804.154642][T13097] usb 6-1: device descriptor read/8, error -71 [ 804.433496][T13097] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 804.484414][T13097] usb 6-1: device descriptor read/8, error -71 [ 804.613777][T13097] usb usb6-port1: unable to enumerate USB device [ 804.709717][T15975] loop1: detected capacity change from 0 to 512 [ 804.733200][T15975] EXT4-fs: Ignoring removed i_version option [ 804.758586][T15975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 804.786629][T15975] overlayfs: missing 'workdir' [ 804.853201][T12592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.020748][T15979] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 805.171284][T15986] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3071'. [ 805.611113][T15991] autofs4:pid:15991:autofs_fill_super: called with bogus options [ 805.623414][T13078] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 805.623584][T12371] Bluetooth: hci2: command 0x0406 tx timeout [ 805.834822][T13078] usb 5-1: Using ep0 maxpacket: 8 [ 805.851460][T13078] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 805.864588][T13078] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.877346][T13078] usb 5-1: Product: syz [ 805.887321][T13078] usb 5-1: Manufacturer: syz [ 805.898074][T13078] usb 5-1: SerialNumber: syz [ 805.912120][T13078] usb 5-1: config 0 descriptor?? [ 806.134556][T13078] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 806.216232][T16002] loop5: detected capacity change from 0 to 512 [ 806.242748][T16002] EXT4-fs: Ignoring removed i_version option [ 806.281732][T16002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.328285][T16002] overlayfs: missing 'lowerdir' [ 806.346983][T13078] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 806.360724][ T50] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 806.386862][T13078] usb 5-1: USB disconnect, device number 11 [ 806.422062][T15066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.013524][T13078] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 807.223459][T13078] usb 6-1: device descriptor read/64, error -71 [ 807.513561][T13078] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 807.538617][T16030] loop1: detected capacity change from 0 to 512 [ 807.557044][T16030] EXT4-fs: Ignoring removed i_version option [ 807.652163][T16027] autofs4:pid:16027:autofs_fill_super: called with bogus options [ 807.673708][T13078] usb 6-1: device descriptor read/64, error -71 [ 807.700671][T16030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.703489][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 807.770182][T16030] overlayfs: missing 'lowerdir' [ 807.790806][T16037] netlink: 'syz.0.3089': attribute type 1 has an invalid length. [ 807.803202][T16037] netlink: 'syz.0.3089': attribute type 4 has an invalid length. [ 807.819466][T16037] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3089'. [ 807.820086][T13078] usb usb6-port1: attempt power cycle [ 807.882178][T12592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.263657][T13078] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 808.304442][T13078] usb 6-1: device descriptor read/8, error -71 [ 808.443452][T13079] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 808.584623][T13078] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 808.633615][T13079] usb 5-1: Using ep0 maxpacket: 8 [ 808.642395][T13078] usb 6-1: device descriptor read/8, error -71 [ 808.659011][T13079] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 808.669620][T13079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.680376][T13079] usb 5-1: Product: syz [ 808.684827][T13079] usb 5-1: Manufacturer: syz [ 808.691271][T13079] usb 5-1: SerialNumber: syz [ 808.699632][T13079] usb 5-1: config 0 descriptor?? [ 808.765462][T13078] usb usb6-port1: unable to enumerate USB device [ 808.889584][T16052] overlayfs: missing 'lowerdir' [ 808.911136][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.917680][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.933528][T13079] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 809.142552][T13079] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 809.156968][T13079] usb 5-1: USB disconnect, device number 12 [ 809.351649][T16061] loop1: detected capacity change from 0 to 512 [ 809.368444][T16061] EXT4-fs: Ignoring removed i_version option [ 809.388029][T16061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.456166][T16061] overlayfs: missing 'lowerdir' [ 809.506842][T12592] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.601647][T16065] netlink: 'syz.1.3099': attribute type 1 has an invalid length. [ 809.611200][T16065] netlink: 'syz.1.3099': attribute type 4 has an invalid length. [ 809.621249][T16065] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3099'. [ 809.826458][T12371] Bluetooth: hci2: command 0x0406 tx timeout [ 809.931494][T16067] autofs4:pid:16067:autofs_fill_super: called with bogus options [ 810.121791][T16076] overlayfs: missing 'lowerdir' [ 810.147556][T16077] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 810.668229][ T787] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 810.685817][T16086] netlink: 'syz.1.3108': attribute type 1 has an invalid length. [ 810.694750][T16086] netlink: 'syz.1.3108': attribute type 4 has an invalid length. [ 810.705437][T16086] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3108'. [ 810.796810][T16088] loop1: detected capacity change from 0 to 164 [ 810.809114][T16088] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 810.822792][T16088] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 810.836919][T16088] Symlink component flag not implemented [ 810.863616][T16088] Symlink component flag not implemented [ 810.870816][ T787] usb 5-1: config 0 has an invalid interface number: 95 but max is 0 [ 810.881445][T16088] Symlink component flag not implemented (7) [ 810.893586][ T787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.903412][T16088] Symlink component flag not implemented (116) [ 810.922430][ T787] usb 5-1: config 0 has no interface number 0 [ 810.950411][ T787] usb 5-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 811.008958][ T787] usb 5-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 811.027063][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.043242][ T787] usb 5-1: Product: syz [ 811.062874][ T787] usb 5-1: Manufacturer: syz [ 811.090061][ T787] usb 5-1: SerialNumber: syz [ 811.134918][ T787] usb 5-1: config 0 descriptor?? [ 811.142149][T16084] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 811.400352][T16099] overlayfs: missing 'lowerdir' [ 811.456265][ T787] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 811.473657][ T787] usb 5-1: MIDIStreaming interface descriptor not found [ 811.699664][ T787] usb 5-1: USB disconnect, device number 13 [ 811.711677][T16106] netlink: 'syz.5.3117': attribute type 1 has an invalid length. [ 811.785368][T16106] netlink: 'syz.5.3117': attribute type 4 has an invalid length. [ 811.830065][T16106] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3117'. [ 812.023724][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 813.013866][T13078] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 813.058618][T16127] netlink: 'syz.4.3126': attribute type 1 has an invalid length. [ 813.068144][T16127] netlink: 'syz.4.3126': attribute type 4 has an invalid length. [ 813.077300][T16127] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3126'. [ 813.224098][T13078] usb 6-1: Using ep0 maxpacket: 8 [ 813.257089][T13078] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 813.269609][T13078] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.304466][T13078] usb 6-1: Product: syz [ 813.322715][T13078] usb 6-1: Manufacturer: syz [ 813.351196][T13078] usb 6-1: SerialNumber: syz [ 813.416568][T13078] usb 6-1: config 0 descriptor?? [ 813.718368][T13078] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 813.936285][T13078] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 813.962760][T13078] usb 6-1: USB disconnect, device number 19 [ 814.085749][T16134] loop1: detected capacity change from 0 to 64 [ 814.232755][ T28] audit: type=1800 audit(1750376251.698:605): pid=16134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3129" name="file2" dev="loop1" ino=21 res=0 errno=0 [ 814.604603][T16146] netlink: 'syz.1.3135': attribute type 1 has an invalid length. [ 814.624729][T16146] netlink: 'syz.1.3135': attribute type 4 has an invalid length. [ 814.650756][T16146] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3135'. [ 815.885824][T16165] fuse: Unknown parameter 'grou00000000000000000000' [ 816.014201][T16170] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.3144'. [ 816.049136][T16173] loop0: detected capacity change from 0 to 164 [ 816.071506][T16173] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 816.090206][T16173] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 816.111669][T16170] netlink: 584 bytes leftover after parsing attributes in process `syz.1.3144'. [ 816.138780][T16173] Symlink component flag not implemented [ 816.148435][T16173] Symlink component flag not implemented [ 816.182277][T16173] Symlink component flag not implemented (7) [ 816.209382][T16173] Symlink component flag not implemented (116) [ 816.450464][T16182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3150'. [ 817.521329][T16204] loop0: detected capacity change from 0 to 164 [ 817.566450][T16204] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 817.585555][T16204] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 817.605303][T16204] Symlink component flag not implemented [ 817.612234][T16204] Symlink component flag not implemented [ 817.621855][T16204] Symlink component flag not implemented (7) [ 817.634328][T16204] Symlink component flag not implemented (116) [ 817.765272][T16208] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3161'. [ 817.853559][T13098] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 818.064281][T13098] usb 6-1: Using ep0 maxpacket: 16 [ 818.091804][T13098] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 818.112302][T13098] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 818.169337][T13098] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 818.180550][T13098] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.209184][T13098] usb 6-1: Product: syz [ 818.226063][T13098] usb 6-1: Manufacturer: syz [ 818.231282][T13098] usb 6-1: SerialNumber: syz [ 818.684657][T13098] usb 6-1: cannot find UAC_HEADER [ 818.752918][T13098] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 818.780908][T13098] usb 6-1: USB disconnect, device number 20 [ 818.818687][ T8788] udevd[8788]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 819.108769][T16229] loop0: detected capacity change from 0 to 164 [ 819.138688][T16232] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 819.160218][T16229] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 819.174524][T16229] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 819.196183][T16232] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 819.217559][T16229] Symlink component flag not implemented [ 819.227888][T16229] Symlink component flag not implemented [ 819.263594][T16229] Symlink component flag not implemented (7) [ 819.270416][T16229] Symlink component flag not implemented (116) [ 820.023383][T13078] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 820.148741][T16254] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 820.219098][T13078] usb 6-1: Using ep0 maxpacket: 8 [ 820.233155][T13078] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 820.248919][T13078] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.260965][T13078] usb 6-1: Product: syz [ 820.282840][T13078] usb 6-1: Manufacturer: syz [ 820.293448][T13078] usb 6-1: SerialNumber: syz [ 820.309988][T13078] usb 6-1: config 0 descriptor?? [ 820.534779][T13078] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 820.726895][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 820.735305][T13078] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 820.747216][T13078] usb 6-1: USB disconnect, device number 21 [ 820.756734][ T8788] udevd[8788]: setting owner of /dev/bus/usb/006/021 to uid=0, gid=0 failed: No such file or directory [ 821.273448][T13098] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 821.332560][T16261] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 821.359501][T16261] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 821.473788][T13098] usb 5-1: Using ep0 maxpacket: 8 [ 821.485220][T13098] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 821.521207][T16265] loop5: detected capacity change from 0 to 164 [ 821.535107][T13098] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 821.549758][T16265] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 821.555464][T13098] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 821.574585][T13098] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.603835][T16265] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 821.618480][T16265] Symlink component flag not implemented [ 821.626654][T16265] Symlink component flag not implemented [ 821.638931][T16265] Symlink component flag not implemented (7) [ 821.645953][T16265] Symlink component flag not implemented (116) [ 821.710254][T16268] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 821.968642][T16274] fuse: Unknown parameter 'group_i00000000000000000000' [ 822.059226][T16277] loop5: detected capacity change from 0 to 512 [ 822.074306][T16277] EXT4-fs: Ignoring removed bh option [ 822.093012][T16277] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 822.107135][T16277] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 822.136495][T16277] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 822.152344][T16277] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 822.170870][T16277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 822.272869][T15066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.521278][T16285] overlayfs: missing 'lowerdir' [ 822.659597][T16289] loop0: detected capacity change from 0 to 164 [ 822.680614][T16289] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 822.703156][T16289] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 822.724107][T16289] Symlink component flag not implemented [ 822.731260][T16289] Symlink component flag not implemented [ 822.773567][T16289] Symlink component flag not implemented (7) [ 822.782973][T16289] Symlink component flag not implemented (116) [ 822.913472][T13079] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 823.062864][T16295] fuse: Unknown parameter 'group_i00000000000000000000' [ 823.103377][T13079] usb 6-1: Using ep0 maxpacket: 8 [ 823.117620][T13079] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 823.143995][T13079] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.158390][T13079] usb 6-1: Product: syz [ 823.159223][T16298] loop0: detected capacity change from 0 to 512 [ 823.162949][T13079] usb 6-1: Manufacturer: syz [ 823.176744][T13079] usb 6-1: SerialNumber: syz [ 823.190130][T13079] usb 6-1: config 0 descriptor?? [ 823.205056][T16298] EXT4-fs: Ignoring removed bh option [ 823.224599][T16298] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 823.238666][T16298] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 823.260029][T16298] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 823.270795][T16298] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 823.300293][T16298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.380780][T13466] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.413375][T13079] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 823.632149][T13079] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 823.658093][T13079] usb 6-1: USB disconnect, device number 22 [ 823.701635][T16303] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 824.029683][T13079] usb 5-1: USB disconnect, device number 14 [ 824.240712][T16309] overlayfs: missing 'lowerdir' [ 824.667687][T16321] loop5: detected capacity change from 0 to 512 [ 824.704378][T16321] EXT4-fs: Ignoring removed bh option [ 824.730526][T16321] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 824.750612][T16321] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 824.822433][T16321] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 824.827222][T16324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3207'. [ 824.866401][T16321] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 824.882353][T16321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.954931][T15066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.122168][T16325] loop4: detected capacity change from 0 to 4096 [ 825.182977][T16330] loop5: detected capacity change from 0 to 2048 [ 825.271517][T16330] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 825.292971][T16330] UDF-fs: Scanning with blocksize 512 failed [ 825.343521][T16330] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 825.841500][T16335] overlayfs: missing 'lowerdir' [ 826.095067][T16347] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 826.160049][T16349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3216'. [ 826.203578][T13079] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 826.385929][T13079] usb 6-1: Using ep0 maxpacket: 8 [ 826.394901][T16356] syz.0.3219 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 826.412107][T13079] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 826.422245][T13079] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.440300][T13079] usb 6-1: Product: syz [ 826.452486][T13079] usb 6-1: Manufacturer: syz [ 826.457457][T13079] usb 6-1: SerialNumber: syz [ 826.477785][T13079] usb 6-1: config 0 descriptor?? [ 826.822783][T13079] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 826.904966][T13079] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 826.947467][T13079] usb 6-1: USB disconnect, device number 23 [ 827.336767][T16367] overlayfs: missing 'workdir' [ 827.712151][T16374] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3225'. [ 828.231989][T16388] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 828.803771][T16404] autofs4:pid:16404:autofs_fill_super: called with bogus options [ 830.067887][T16428] loop4: detected capacity change from 0 to 512 [ 830.107190][T16428] EXT4-fs (loop4): DAX unsupported by block device. [ 830.823923][T16439] autofs4:pid:16439:autofs_fill_super: called with bogus options [ 830.833460][T12371] Bluetooth: hci2: command 0x0406 tx timeout [ 831.167176][T16450] loop4: detected capacity change from 0 to 1024 [ 831.208255][T16450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 831.329292][T13480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.115291][T16464] loop5: detected capacity change from 0 to 4096 [ 832.214941][T16464] ntfs3: loop5: failed to replay log file. Can't mount rw! [ 832.909462][T12371] Bluetooth: hci2: command 0x0406 tx timeout [ 833.234985][T16486] fuse: Unknown parameter 'group_i00000000000000000000' [ 833.756748][T16501] loop1: detected capacity change from 0 to 64 [ 833.763787][T16500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3278'. [ 834.030630][T16505] fuse: Unknown parameter 'group_i00000000000000000000' [ 834.685022][ T5895] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 834.822813][T16529] fuse: Unknown parameter 'group_i00000000000000000000' [ 834.863889][ T5895] usb 5-1: device descriptor read/64, error -71 [ 835.131955][T16537] loop5: detected capacity change from 0 to 2048 [ 835.144410][ T5895] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 835.233072][T16537] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 835.282505][T16537] UDF-fs: Scanning with blocksize 512 failed [ 835.330081][ T5895] usb 5-1: device descriptor read/64, error -71 [ 835.352398][T16537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 835.475893][ T5895] usb usb5-port1: attempt power cycle [ 835.864452][T16549] fuse: Unknown parameter 'group_id00000000000000000000' [ 835.903436][ T5895] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 835.946353][ T5895] usb 5-1: device descriptor read/8, error -71 [ 836.253463][ T5895] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 836.314952][ T5895] usb 5-1: device descriptor read/8, error -71 [ 836.434242][ T5895] usb usb5-port1: unable to enumerate USB device [ 836.503556][ T787] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 836.693409][ T787] usb 6-1: Using ep0 maxpacket: 32 [ 836.704309][ T787] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 836.718316][ T787] usb 6-1: config 0 has no interface number 0 [ 836.732249][ T787] usb 6-1: config 0 interface 12 has no altsetting 0 [ 836.752640][ T787] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 836.764471][ T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.774019][ T787] usb 6-1: Product: syz [ 836.784191][ T787] usb 6-1: Manufacturer: syz [ 836.791762][ T787] usb 6-1: SerialNumber: syz [ 836.807013][ T787] usb 6-1: config 0 descriptor?? [ 836.819619][ T787] f81534 6-1:0.12: required endpoints missing [ 837.069545][ T787] usb 6-1: USB disconnect, device number 24 [ 837.751359][T16570] fuse: Unknown parameter 'group_id00000000000000000000' [ 838.367565][T16589] loop5: detected capacity change from 0 to 512 [ 838.383018][T16589] EXT4-fs (loop5): DAX unsupported by block device. [ 838.400763][T16591] fuse: Unknown parameter 'group_id00000000000000000000' [ 838.558766][T16595] fuse: Unknown parameter 'user_id00000000000000000000' [ 839.272337][T16618] fuse: Unknown parameter 'user_id00000000000000000000' [ 839.629820][T16633] nbd: must specify at least one socket [ 839.640237][T16630] loop5: detected capacity change from 0 to 2048 [ 839.676057][T16630] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 839.698078][T16630] UDF-fs: Scanning with blocksize 512 failed [ 839.752882][T16630] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 840.805492][T16663] loop5: detected capacity change from 0 to 4096 [ 840.833771][ T5895] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 841.023404][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 841.051103][ T5895] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 841.060631][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.069755][ T5895] usb 5-1: Product: syz [ 841.083387][ T5895] usb 5-1: Manufacturer: syz [ 841.088383][ T5895] usb 5-1: SerialNumber: syz [ 841.106741][ T5895] usb 5-1: config 0 descriptor?? [ 841.119997][ T5895] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 841.735333][T16677] loop5: detected capacity change from 0 to 2048 [ 841.801575][T16677] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 841.818188][T16677] UDF-fs: Scanning with blocksize 512 failed [ 841.861406][T16677] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 842.135781][T13079] usb 5-1: USB disconnect, device number 19 [ 842.533535][ T5895] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 842.713516][ T5895] usb 6-1: device descriptor read/64, error -71 [ 842.983716][ T5895] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 843.153630][ T5895] usb 6-1: device descriptor read/64, error -71 [ 843.284388][ T5895] usb usb6-port1: attempt power cycle [ 843.354029][T16697] loop4: detected capacity change from 0 to 4096 [ 843.694241][ T5895] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 843.765657][T16704] loop0: detected capacity change from 0 to 2048 [ 843.768166][ T5895] usb 6-1: device descriptor read/8, error -71 [ 843.834466][T16704] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 843.854661][T16704] UDF-fs: Scanning with blocksize 512 failed [ 843.896773][T16704] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 844.074829][ T5895] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 844.154324][ T5895] usb 6-1: device descriptor read/8, error -71 [ 844.200514][T16710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3370'. [ 844.283854][ T5895] usb usb6-port1: unable to enumerate USB device [ 845.305853][T16733] loop5: detected capacity change from 0 to 2048 [ 845.332970][T16733] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 845.351844][T16733] UDF-fs: Scanning with blocksize 512 failed [ 845.377161][T16733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 845.541110][T16725] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.551127][T16725] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.386951][T16725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.442003][T16725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.959478][T16725] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.970389][T16725] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.981667][T16725] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.993131][T16725] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.122147][T16725] ipvlan2: left promiscuous mode [ 847.434670][T16758] loop4: detected capacity change from 0 to 2048 [ 847.452313][T16760] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 847.472750][T16758] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 847.488920][T16758] UDF-fs: Scanning with blocksize 512 failed [ 847.556592][T16758] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 847.777919][T16766] loop4: detected capacity change from 0 to 512 [ 847.809913][T16766] EXT4-fs (loop4): DAX unsupported by block device. [ 847.817031][T13079] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 847.984188][T13079] usb 6-1: device descriptor read/64, error -71 [ 848.266851][T13079] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 848.443858][T13079] usb 6-1: device descriptor read/64, error -71 [ 848.460417][T16785] loop4: detected capacity change from 0 to 2048 [ 848.499640][T16787] loop0: detected capacity change from 0 to 512 [ 848.503018][T16785] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 848.532046][T16787] EXT4-fs (loop0): DAX unsupported by block device. [ 848.549272][T16785] UDF-fs: Scanning with blocksize 512 failed [ 848.593587][T13079] usb usb6-port1: attempt power cycle [ 848.611143][T16785] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 849.058008][T13079] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 849.106692][T13079] usb 6-1: device descriptor read/8, error -71 [ 849.170452][T16804] loop0: detected capacity change from 0 to 2048 [ 849.204884][T16804] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 849.232826][T16804] UDF-fs: Scanning with blocksize 512 failed [ 849.297972][T16804] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 849.396847][T13079] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 849.444460][T13079] usb 6-1: device descriptor read/8, error -71 [ 849.581038][T13079] usb usb6-port1: unable to enumerate USB device [ 850.178936][T16828] fuse: Unknown parameter 'fd0x0000000000000003' [ 850.480237][T16834] loop4: detected capacity change from 0 to 2048 [ 850.520771][T16834] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 850.539925][T16834] UDF-fs: Scanning with blocksize 512 failed [ 850.580687][T16834] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 852.138098][T16857] fuse: Unknown parameter 'fd0x0000000000000003' [ 852.230820][T16862] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3430'. [ 852.607139][T16870] loop4: detected capacity change from 0 to 2048 [ 852.639285][T16870] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 852.655612][T16870] UDF-fs: Scanning with blocksize 512 failed [ 852.675201][T16870] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 853.360058][T16877] loop0: detected capacity change from 0 to 4096 [ 853.424370][T16887] fuse: Unknown parameter 'fd0x0000000000000003' [ 853.985890][T16894] loop4: detected capacity change from 0 to 64 [ 854.296601][T16898] loop1: detected capacity change from 0 to 512 [ 854.343650][T16898] EXT4-fs (loop1): DAX unsupported by block device. [ 854.799741][T16900] loop1: detected capacity change from 0 to 2048 [ 854.872353][T16900] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 854.906167][T16900] UDF-fs: Scanning with blocksize 512 failed [ 854.951400][T16900] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 855.384495][T16854] syz_tun (unregistering): left allmulticast mode [ 856.642492][T16919] loop1: detected capacity change from 0 to 512 [ 856.665148][T16919] EXT4-fs (loop1): DAX unsupported by block device. [ 857.697242][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 857.715032][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 857.729473][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 857.738401][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 857.757733][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 857.770252][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 858.807961][T16941] chnl_net:caif_netlink_parms(): no params data found [ 859.440917][T16971] loop5: detected capacity change from 0 to 512 [ 859.453560][T16941] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.463676][T16941] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.471009][T16941] bridge_slave_0: entered allmulticast mode [ 859.482584][T16971] EXT4-fs (loop5): DAX unsupported by block device. [ 859.504343][T16941] bridge_slave_0: entered promiscuous mode [ 859.546728][T14634] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 859.594818][ T48] hsr_slave_0: left promiscuous mode [ 859.618074][ T48] hsr_slave_1: left promiscuous mode [ 859.643150][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.679447][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.710585][ T48] bridge_slave_1: left allmulticast mode [ 859.734137][ T48] bridge_slave_1: left promiscuous mode [ 859.739989][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.780602][ T48] bridge_slave_0: left allmulticast mode [ 859.794914][ T48] bridge_slave_0: left promiscuous mode [ 859.800865][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.869867][T12371] Bluetooth: hci2: command tx timeout [ 860.993445][T13078] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 861.153467][T13078] usb 6-1: device descriptor read/64, error -71 [ 861.287840][ T48] team0 (unregistering): Port device team_slave_1 removed [ 861.369249][ T48] team0 (unregistering): Port device team_slave_0 removed [ 861.425287][T13078] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 861.451025][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.518943][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.593647][T13078] usb 6-1: device descriptor read/64, error -71 [ 861.714741][T13078] usb usb6-port1: attempt power cycle [ 861.957841][T12371] Bluetooth: hci2: command tx timeout [ 862.133880][T13078] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 862.191700][T13078] usb 6-1: device descriptor read/8, error -71 [ 862.387375][ T48] bond0 (unregistering): Released all slaves [ 862.464857][T13078] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 862.497021][T16941] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.504943][T16941] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.514469][T16941] bridge_slave_1: entered allmulticast mode [ 862.521004][T13078] usb 6-1: device descriptor read/8, error -71 [ 862.522882][T16941] bridge_slave_1: entered promiscuous mode [ 862.563632][T16985] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3468'. [ 862.580056][T16998] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3471'. [ 862.593169][T17001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3471'. [ 862.606615][T17001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3471'. [ 862.658455][T13078] usb usb6-port1: unable to enumerate USB device [ 862.722295][T16941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.747776][T16941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.874936][T16941] team0: Port device team_slave_0 added [ 862.910082][T16941] team0: Port device team_slave_1 added [ 863.025875][T16941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.058419][T16941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.100629][T17013] loop1: detected capacity change from 0 to 512 [ 863.118395][T16941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.147904][T16941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.167056][T16941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.211475][T17013] EXT4-fs (loop1): DAX unsupported by block device. [ 863.265259][T16941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.451505][T16941] hsr_slave_0: entered promiscuous mode [ 863.473953][T16941] hsr_slave_1: entered promiscuous mode [ 863.484289][T16941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 863.499832][T16941] Cannot create hsr debugfs directory [ 864.033521][T12371] Bluetooth: hci2: command tx timeout [ 864.307296][T17038] sp0: Synchronizing with TNC [ 864.395176][T17042] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3480'. [ 864.602293][T17042] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3480'. [ 864.625548][T17042] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3480'. [ 864.860128][T17053] loop1: detected capacity change from 0 to 512 [ 864.876947][T17053] EXT4-fs (loop1): DAX unsupported by block device. [ 864.891222][T16941] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 864.916525][ T8788] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 865.001067][T16941] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 865.057895][T16941] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 865.081648][T16941] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 865.278202][T16941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.325463][T16941] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.342037][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.349379][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.376072][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.383430][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.543552][ T5848] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 865.742841][T16941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.757024][ T5848] usb 6-1: Using ep0 maxpacket: 8 [ 865.770118][ T5848] usb 6-1: no configurations [ 865.777665][ T5848] usb 6-1: can't read configurations, error -22 [ 865.936362][ T5848] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 866.103666][T12371] Bluetooth: hci2: command tx timeout [ 866.174862][ T5848] usb 6-1: Using ep0 maxpacket: 8 [ 866.182311][ T5848] usb 6-1: no configurations [ 866.203378][ T5848] usb 6-1: can't read configurations, error -22 [ 866.211542][ T5848] usb usb6-port1: attempt power cycle [ 866.401897][T16941] veth0_vlan: entered promiscuous mode [ 866.439200][T16941] veth1_vlan: entered promiscuous mode [ 866.507675][T16941] veth0_macvtap: entered promiscuous mode [ 866.530449][T16941] veth1_macvtap: entered promiscuous mode [ 866.565227][T16941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.577933][T16941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.590044][T16941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.602903][T16941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.613426][T16941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 866.625156][T16941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.638618][T16941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 866.647241][ T5848] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 866.676792][T16941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.688308][T16941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.708405][ T5848] usb 6-1: Using ep0 maxpacket: 8 [ 866.714931][T16941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.731468][ T5848] usb 6-1: no configurations [ 866.736929][ T5848] usb 6-1: can't read configurations, error -22 [ 866.744995][T16941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.760681][T16941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.773069][T16941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 866.791423][T16941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 866.818856][T16941] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.836844][T16941] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.849129][T16941] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.862367][T16941] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.903547][ T5848] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 866.935545][ T5848] usb 6-1: Using ep0 maxpacket: 8 [ 866.947136][ T5848] usb 6-1: no configurations [ 866.970438][ T5848] usb 6-1: can't read configurations, error -22 [ 866.992777][ T5848] usb usb6-port1: unable to enumerate USB device [ 866.999863][T17111] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3491'. [ 867.039141][T17112] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3491'. [ 867.051165][T17112] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3491'. [ 867.099715][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.114974][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.157676][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.178567][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.753744][T13078] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 867.963778][T13078] usb 7-1: Using ep0 maxpacket: 8 [ 867.998854][T13078] usb 7-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 868.026488][T13078] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.058174][T13078] usb 7-1: Product: syz [ 868.068260][T13078] usb 7-1: Manufacturer: syz [ 868.078765][T13078] usb 7-1: SerialNumber: syz [ 868.097383][T13078] usb 7-1: config 0 descriptor?? [ 868.111022][T17147] __nla_validate_parse: 1 callbacks suppressed [ 868.111037][T17147] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3499'. [ 868.129530][T13078] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 868.140637][T17147] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3499'. [ 868.151641][T17147] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3499'. [ 868.289747][T17151] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3500'. [ 868.933974][T13078] gspca_sonixj: reg_r err -71 [ 868.938933][T13078] sonixj: probe of 7-1:0.0 failed with error -71 [ 868.969739][T13078] usb 7-1: USB disconnect, device number 2 [ 869.634600][T17190] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3508'. [ 869.664297][T17190] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3508'. [ 869.674794][T17190] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3508'. [ 869.853427][T17196] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3509'. [ 870.017502][T17194] loop5: detected capacity change from 0 to 4096 [ 870.352723][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.359250][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.915772][T12371] Bluetooth: hci2: ACL packet too small [ 871.120100][T17221] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3517'. [ 871.140395][T17221] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3517'. [ 871.587618][T17240] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 871.605402][T17240] kvm: pic: non byte read [ 871.610408][T17240] kvm: pic: level sensitive irq not supported [ 871.610505][T17240] kvm: pic: non byte read [ 871.633184][T17240] kvm: pic: level sensitive irq not supported [ 871.634301][T17240] kvm: pic: non byte read [ 871.923437][ T5848] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 872.005116][T17252] loop0: detected capacity change from 0 to 512 [ 872.012800][T17252] EXT4-fs: Ignoring removed i_version option [ 872.051932][T17252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 872.114456][ T5848] usb 7-1: Using ep0 maxpacket: 8 [ 872.122442][ T5848] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.134574][ T5848] usb 7-1: config 0 has no interfaces? [ 872.147068][ T5848] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 872.157149][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.165992][ T5848] usb 7-1: Product: syz [ 872.171501][ T5848] usb 7-1: Manufacturer: syz [ 872.177831][ T5848] usb 7-1: SerialNumber: syz [ 872.190519][ T5848] usb 7-1: config 0 descriptor?? [ 872.251125][T13466] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz-executor: corrupted in-inode xattr: overlapping e_value [ 872.286015][T13466] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz-executor: corrupted in-inode xattr: overlapping e_value [ 872.526253][T14439] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.828213][ T5848] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 872.949801][ T5848] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz1] on aa:aa:aa:aa:aa:aa [ 873.202262][T17268] fido_id[17268]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 873.277468][T17270] capability: warning: `syz.5.3534' uses deprecated v2 capabilities in a way that may be insecure [ 873.311254][T17270] loop5: detected capacity change from 0 to 1024 [ 873.395406][T17270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 873.615121][T17270] overlayfs: upper fs does not support tmpfile. [ 873.718895][ T3006] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.742305][T15066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.876504][ T3006] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.027120][ T3006] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.143206][ T3006] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.324129][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 874.345441][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 874.362705][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 874.376547][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 874.392599][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 874.403835][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 874.518576][ T5871] usb 7-1: USB disconnect, device number 3 [ 875.149510][T17278] chnl_net:caif_netlink_parms(): no params data found [ 875.504553][ T5871] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 875.565062][T17278] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.578868][T17278] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.598423][T17278] bridge_slave_0: entered allmulticast mode [ 875.635428][T17278] bridge_slave_0: entered promiscuous mode [ 875.664406][T17278] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.685129][T17278] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.694164][ T5871] usb 7-1: Using ep0 maxpacket: 8 [ 875.700350][T17278] bridge_slave_1: entered allmulticast mode [ 875.710577][ T5871] usb 7-1: no configurations [ 875.718432][ T5871] usb 7-1: can't read configurations, error -22 [ 875.732350][T17278] bridge_slave_1: entered promiscuous mode [ 875.915578][ T5871] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 875.931158][T17278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.015743][T17278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.132165][ T5871] usb 7-1: Using ep0 maxpacket: 8 [ 876.163754][ T5871] usb 7-1: no configurations [ 876.168860][ T5871] usb 7-1: can't read configurations, error -22 [ 876.243128][ T5871] usb usb7-port1: attempt power cycle [ 876.437735][T17278] team0: Port device team_slave_0 added [ 876.503796][ T50] Bluetooth: hci0: command tx timeout [ 876.624744][T17278] team0: Port device team_slave_1 added [ 876.683403][ T5871] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 876.773165][ T5871] usb 7-1: Using ep0 maxpacket: 8 [ 876.780073][ T5871] usb 7-1: no configurations [ 876.793656][ T5871] usb 7-1: can't read configurations, error -22 [ 876.812254][T17278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.831067][T17278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.859552][ C0] vkms_vblank_simulate: vblank timer overrun [ 876.926132][T17278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.946955][T17278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.955277][T17278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.983472][ C0] vkms_vblank_simulate: vblank timer overrun [ 877.002497][ T5871] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 877.023767][T17278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.064357][ T5871] usb 7-1: Using ep0 maxpacket: 8 [ 877.071111][ T5871] usb 7-1: no configurations [ 877.089906][ T5871] usb 7-1: can't read configurations, error -22 [ 877.120614][ T5871] usb usb7-port1: unable to enumerate USB device [ 877.317044][T17278] hsr_slave_0: entered promiscuous mode [ 877.336438][T17278] hsr_slave_1: entered promiscuous mode [ 877.351300][T17278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 877.368695][T17278] Cannot create hsr debugfs directory [ 877.456118][ T3006] hsr_slave_0: left promiscuous mode [ 877.468028][T17337] loop1: detected capacity change from 0 to 512 [ 877.479677][ T3006] hsr_slave_1: left promiscuous mode [ 877.494468][ T3006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.503016][ T3006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.513413][T17337] EXT4-fs (loop1): DAX unsupported by block device. [ 877.534425][ T3006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.553806][ T3006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.575620][ T3006] bridge_slave_1: left allmulticast mode [ 877.584008][ T3006] bridge_slave_1: left promiscuous mode [ 877.589964][ T3006] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.625614][ T3006] bridge_slave_0: left allmulticast mode [ 877.631523][ T3006] bridge_slave_0: left promiscuous mode [ 877.667152][ T3006] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.763640][ T3006] veth1_macvtap: left promiscuous mode [ 877.769326][ T3006] veth0_macvtap: left promiscuous mode [ 877.784947][ T3006] veth1_vlan: left promiscuous mode [ 877.790680][ T3006] veth0_vlan: left promiscuous mode [ 878.583543][ T50] Bluetooth: hci0: command tx timeout [ 879.530781][T17371] loop1: detected capacity change from 0 to 512 [ 879.580408][T17371] EXT4-fs (loop1): DAX unsupported by block device. [ 879.715100][ T3006] team0 (unregistering): Port device team_slave_1 removed [ 879.892965][ T3006] team0 (unregistering): Port device team_slave_0 removed [ 879.911811][T17373] fuse: Unknown parameter 'user_id00000000000000000000' [ 880.213616][ T3006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 880.338619][ T3006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.663440][ T50] Bluetooth: hci0: command tx timeout [ 880.798946][T13078] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 880.983647][T13078] usb 6-1: Using ep0 maxpacket: 8 [ 881.000318][T13078] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.023462][T13078] usb 6-1: config 0 has no interfaces? [ 881.035799][T13078] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 881.050877][T13078] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.073347][T13078] usb 6-1: Product: syz [ 881.083601][T13078] usb 6-1: Manufacturer: syz [ 881.089707][T13078] usb 6-1: SerialNumber: syz [ 881.120748][T13078] usb 6-1: config 0 descriptor?? [ 881.421730][T17389] loop6: detected capacity change from 0 to 512 [ 881.523165][T17389] EXT4-fs (loop6): DAX unsupported by block device. [ 881.533445][T17391] fuse: Bad value for 'fd' [ 882.042338][ T3006] bond0 (unregistering): Released all slaves [ 882.743815][ T50] Bluetooth: hci0: command tx timeout [ 883.098957][T17278] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 883.119178][T17278] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 883.171750][T17278] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 883.204319][T17278] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 883.355707][T13079] usb 6-1: USB disconnect, device number 41 [ 883.514583][T17278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.599127][T17278] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.672364][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.679788][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.745803][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.753528][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.058246][T17444] fuse: Bad value for 'fd' [ 884.255034][T17452] loop6: detected capacity change from 0 to 512 [ 884.297736][T17452] EXT4-fs (loop6): DAX unsupported by block device. [ 884.400018][T17278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 885.322818][T17482] fuse: Bad value for 'fd' [ 885.365416][T17278] veth0_vlan: entered promiscuous mode [ 885.424651][T17278] veth1_vlan: entered promiscuous mode [ 885.585143][T17278] veth0_macvtap: entered promiscuous mode [ 885.690300][T17278] veth1_macvtap: entered promiscuous mode [ 885.826368][T17278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.923507][T17278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.973829][T17278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.015551][T17278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.059482][T17278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.087873][T17278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.123907][T17278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.226859][T17278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.494126][T17278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.579070][T17278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.628557][T17278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.658897][T17278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.700538][T17278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.735257][T17278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.826524][T17278] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.889016][T17278] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.909224][T17278] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.933343][T17278] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.025315][T17518] fuse: Unknown parameter '0x0000000000000003' [ 887.259699][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.282562][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.330524][T17524] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 887.361565][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.389802][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.814626][T17565] fuse: Unknown parameter '0x0000000000000003' [ 889.402316][T17587] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 891.404819][T17628] fuse: Unknown parameter '0x0000000000000003' [ 892.227407][T17652] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 892.613820][ T5895] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 892.822845][ T5895] usb 8-1: Using ep0 maxpacket: 8 [ 892.851332][ T5895] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.877370][ T5895] usb 8-1: config 0 has no interfaces? [ 892.894731][ T5895] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 892.911636][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.920259][ T5895] usb 8-1: Product: syz [ 892.929491][ T5895] usb 8-1: Manufacturer: syz [ 892.934729][ T5895] usb 8-1: SerialNumber: syz [ 892.944814][ T5895] usb 8-1: config 0 descriptor?? [ 894.017755][T17696] fuse: Bad value for 'fd' [ 894.488600][T17709] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 895.136697][ T5871] usb 8-1: USB disconnect, device number 2 [ 895.759792][T17735] loop6: detected capacity change from 0 to 512 [ 895.770803][T17735] EXT4-fs: Ignoring removed i_version option [ 895.856877][T17735] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 896.105475][T17748] fuse: Bad value for 'fd' [ 896.156590][T16941] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2244: inode #15: comm syz-executor: corrupted in-inode xattr: overlapping e_value [ 896.172722][T16941] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2244: inode #15: comm syz-executor: corrupted in-inode xattr: overlapping e_value [ 896.256379][T17752] loop7: detected capacity change from 0 to 1024 [ 896.321740][T17752] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 896.508053][T16941] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.520306][T17278] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 896.567980][T17278] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 896.759460][T17733] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.777198][T17762] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 896.791322][ T143] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.006698][ T143] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.241042][ T143] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.410137][ T143] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.061214][T12371] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 898.071707][T12371] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 898.091311][T12371] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 898.107111][T12371] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 898.145576][T12371] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 898.153131][T12371] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 898.388412][T17785] fuse: Bad value for 'fd' [ 898.441938][T17787] loop1: detected capacity change from 0 to 512 [ 898.465658][T17787] EXT4-fs: Ignoring removed i_version option [ 898.572166][T17787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.843127][T12592] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz-executor: corrupted in-inode xattr: overlapping e_value [ 898.875168][T12592] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz-executor: corrupted in-inode xattr: overlapping e_value [ 898.987021][T12371] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 898.997639][T12371] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 899.007799][T12371] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 899.016166][T12371] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 899.025621][T12371] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 899.033170][T12371] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 899.537332][T17509] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.830259][T17812] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 900.084964][T17509] syz_tun (unregistering): left allmulticast mode [ 900.105800][T17778] chnl_net:caif_netlink_parms(): no params data found [ 900.263960][ T50] Bluetooth: hci0: command tx timeout [ 900.389327][ T143] hsr_slave_0: left promiscuous mode [ 900.409288][ T143] hsr_slave_1: left promiscuous mode [ 900.446206][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 900.458392][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.483597][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.510878][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.526787][ T143] bridge_slave_1: left allmulticast mode [ 900.532558][ T143] bridge_slave_1: left promiscuous mode [ 900.544153][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.564348][ T143] bridge_slave_0: left allmulticast mode [ 900.570069][ T143] bridge_slave_0: left promiscuous mode [ 900.583932][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.667201][ T143] veth1_macvtap: left promiscuous mode [ 900.672840][ T143] veth0_macvtap: left promiscuous mode [ 900.678999][ T143] veth1_vlan: left promiscuous mode [ 900.684498][ T143] veth0_vlan: left promiscuous mode [ 901.091437][ T50] Bluetooth: hci2: command tx timeout [ 901.203353][T13079] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 901.275874][T12371] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 901.297828][T12371] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 901.318039][T12371] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 901.341274][T12371] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 901.362766][T12371] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 901.377287][T12371] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 901.428681][T13079] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.439816][T13079] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.449735][T13079] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 901.458930][T13079] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.470672][T13079] usb 6-1: config 0 descriptor?? [ 901.858304][ T143] team0 (unregistering): Port device team_slave_1 removed [ 901.939290][ T143] team0 (unregistering): Port device team_slave_0 removed [ 902.041277][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 902.133403][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.144512][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 902.152085][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 902.173774][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 902.182897][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 902.190937][T13079] usb 6-1: string descriptor 0 read error: -32 [ 902.200770][T13079] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 902.217238][T13079] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 902.233328][T13079] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 902.243212][T13079] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 902.251191][T13079] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 902.277696][T13079] usb 6-1: USB disconnect, device number 42 [ 902.355045][T12371] Bluetooth: hci0: command tx timeout [ 903.092456][ T143] bond0 (unregistering): Released all slaves [ 903.143657][T12371] Bluetooth: hci2: command tx timeout [ 903.373446][ T5820] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 903.385439][T17778] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.411522][T17778] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.422643][T17778] bridge_slave_0: entered allmulticast mode [ 903.431331][T17778] bridge_slave_0: entered promiscuous mode [ 903.450554][T17778] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.458116][T17778] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.465784][T12371] Bluetooth: hci3: command tx timeout [ 903.468549][T17778] bridge_slave_1: entered allmulticast mode [ 903.479262][T17778] bridge_slave_1: entered promiscuous mode [ 903.593554][ T5820] usb 6-1: Using ep0 maxpacket: 8 [ 903.606177][ T5820] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.652482][ T5820] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 903.674839][ T5820] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 903.691320][T17778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.711733][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.728188][T17778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.737903][ T5820] usb 6-1: Product: syz [ 903.767924][ T5820] usb 6-1: Manufacturer: syz [ 903.772615][ T5820] usb 6-1: SerialNumber: syz [ 903.794378][ T5820] usb 6-1: config 0 descriptor?? [ 903.828261][T17798] chnl_net:caif_netlink_parms(): no params data found [ 903.915964][T17778] team0: Port device team_slave_0 added [ 903.965267][T17778] team0: Port device team_slave_1 added [ 904.050943][T17778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.059098][T17778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.095597][T17778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.184290][T17778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.192031][T17778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.236737][T17778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.399328][T17798] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.414234][T17798] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.427844][T12371] Bluetooth: hci0: command tx timeout [ 904.436747][T17798] bridge_slave_0: entered allmulticast mode [ 904.444906][T17798] bridge_slave_0: entered promiscuous mode [ 904.492651][T17778] hsr_slave_0: entered promiscuous mode [ 904.503214][T17778] hsr_slave_1: entered promiscuous mode [ 904.518742][T17778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 904.526974][T17778] Cannot create hsr debugfs directory [ 904.575926][ T143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.598813][T17798] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.606820][T17798] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.615326][T17798] bridge_slave_1: entered allmulticast mode [ 904.622393][T17798] bridge_slave_1: entered promiscuous mode [ 904.629477][T17826] chnl_net:caif_netlink_parms(): no params data found [ 904.717418][ T143] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.757802][T17798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.812106][T17798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.852463][ T143] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.960667][T17798] team0: Port device team_slave_0 added [ 904.989624][ T143] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.030640][T17826] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.038054][T17826] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.046298][T17826] bridge_slave_0: entered allmulticast mode [ 905.054872][T17826] bridge_slave_0: entered promiscuous mode [ 905.067388][T17798] team0: Port device team_slave_1 added [ 905.119837][T17826] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.127384][T17826] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.135673][T17826] bridge_slave_1: entered allmulticast mode [ 905.154995][T17826] bridge_slave_1: entered promiscuous mode [ 905.174017][T17798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.181067][T17798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 905.207603][T17798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.226305][T17798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.235550][T12371] Bluetooth: hci2: command tx timeout [ 905.246244][T17798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 905.272867][T17798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.330738][T17826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.422320][T17826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.470613][T17826] team0: Port device team_slave_0 added [ 905.511683][T17798] hsr_slave_0: entered promiscuous mode [ 905.523320][T17798] hsr_slave_1: entered promiscuous mode [ 905.529729][T17798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 905.537693][T17798] Cannot create hsr debugfs directory [ 905.543623][T12371] Bluetooth: hci3: command tx timeout [ 905.622426][T17826] team0: Port device team_slave_1 added [ 905.786509][ T143] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.809910][T17826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.817130][T17826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 905.844142][T17826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.877286][T17778] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 905.897177][T17826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.905805][T17826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 905.933642][T17826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.948675][ T5871] usb 6-1: USB disconnect, device number 43 [ 906.020201][ T143] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.059891][T17778] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 906.098428][T17778] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 906.138494][ T143] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.171069][T17778] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 906.222432][ T143] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.251901][T17826] hsr_slave_0: entered promiscuous mode [ 906.259227][T17826] hsr_slave_1: entered promiscuous mode [ 906.266308][T17826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 906.274864][T17826] Cannot create hsr debugfs directory [ 906.514840][T12371] Bluetooth: hci0: command tx timeout [ 906.815548][T17798] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 906.848666][ T143] tipc: Left network mode [ 906.856046][T17798] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 907.295905][T17798] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 907.305696][T12371] Bluetooth: hci2: command tx timeout [ 907.542113][T17798] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 907.634096][T12371] Bluetooth: hci3: command tx timeout [ 907.772423][T17778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.921897][T17778] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.076055][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.083296][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.134266][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.141415][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.018349][T17921] loop5: detected capacity change from 0 to 2048 [ 909.047758][T17921] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 909.073118][T17921] UDF-fs: Scanning with blocksize 512 failed [ 909.120173][T17921] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 909.642965][T17930] loop5: detected capacity change from 0 to 512 [ 909.662495][T17930] EXT4-fs: Ignoring removed i_version option [ 909.705139][T17930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 909.713854][T12371] Bluetooth: hci3: command tx timeout [ 909.834102][T17798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.893076][T15066] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #15: comm syz-executor: corrupted in-inode xattr: overlapping e_value [ 909.974159][T15066] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #15: comm syz-executor: corrupted in-inode xattr: overlapping e_value [ 909.999087][T17798] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.055641][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.062831][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.256956][T17683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.287818][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.295013][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.745221][ T143] hsr_slave_0: left promiscuous mode [ 910.765934][ T143] hsr_slave_1: left promiscuous mode [ 910.778068][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 910.786184][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.815370][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 910.822903][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.854527][ T143] bridge_slave_1: left allmulticast mode [ 910.860267][ T143] bridge_slave_1: left promiscuous mode [ 910.893851][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.908885][ T143] bridge_slave_0: left allmulticast mode [ 910.915042][ T143] bridge_slave_0: left promiscuous mode [ 910.920883][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.984086][ T143] hsr_slave_0: left promiscuous mode [ 911.015470][ T143] hsr_slave_1: left promiscuous mode [ 911.035275][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 911.056108][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.071101][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 911.111366][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.121089][ T143] bridge_slave_1: left allmulticast mode [ 911.153462][ T143] bridge_slave_1: left promiscuous mode [ 911.159308][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.178664][ T143] bridge_slave_0: left allmulticast mode [ 911.188657][ T143] bridge_slave_0: left promiscuous mode [ 911.201339][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.348621][ T143] veth1_macvtap: left promiscuous mode [ 911.361095][ T143] veth0_macvtap: left promiscuous mode [ 911.369681][ T143] veth1_vlan: left promiscuous mode [ 911.383842][ T143] veth0_vlan: left promiscuous mode [ 911.391813][ T143] veth1_macvtap: left promiscuous mode [ 911.398656][ T143] veth0_macvtap: left promiscuous mode [ 911.404461][ T143] veth1_vlan: left promiscuous mode [ 911.410074][ T143] veth0_vlan: left promiscuous mode [ 911.881010][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 911.925088][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 911.939477][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 911.948152][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 911.973751][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 911.988418][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 912.532656][ T143] team0 (unregistering): Port device team_slave_1 removed [ 912.609283][ T143] team0 (unregistering): Port device team_slave_0 removed [ 912.679439][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.754171][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 913.586515][ T143] bond0 (unregistering): Released all slaves [ 914.119839][ T50] Bluetooth: hci1: command tx timeout [ 914.371473][ T143] team0 (unregistering): Port device team_slave_1 removed [ 914.449304][ T143] team0 (unregistering): Port device team_slave_0 removed [ 914.530432][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.606401][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 915.489595][ T143] bond0 (unregistering): Released all slaves [ 915.790468][T17778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.802031][T17826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 915.842776][T17826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 915.915547][T17826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 916.017155][T17826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 916.184015][ T50] Bluetooth: hci1: command tx timeout [ 916.542706][T17952] chnl_net:caif_netlink_parms(): no params data found [ 916.697961][T17798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.771336][T17826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.846238][T17952] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.853750][T17952] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.861038][T17952] bridge_slave_0: entered allmulticast mode [ 916.869701][T17952] bridge_slave_0: entered promiscuous mode [ 916.879201][T17952] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.887871][T17952] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.895607][T17952] bridge_slave_1: entered allmulticast mode [ 916.902651][T17952] bridge_slave_1: entered promiscuous mode [ 916.951993][T17778] veth0_vlan: entered promiscuous mode [ 916.994903][T17952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.076849][ T143] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.099913][T17952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.136110][T17778] veth1_vlan: entered promiscuous mode [ 917.192982][T17952] team0: Port device team_slave_0 added [ 917.208772][T17826] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.260808][ T143] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.284305][T17952] team0: Port device team_slave_1 added [ 917.355691][ T143] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.399775][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.406987][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.430482][T17952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.439587][T17952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.467275][T17952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.481428][T17952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.488588][T17952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.515539][T17952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.529506][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.536785][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.579768][ T143] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.700766][T17952] hsr_slave_0: entered promiscuous mode [ 917.708782][T17952] hsr_slave_1: entered promiscuous mode [ 917.716237][T17952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 917.725096][T17952] Cannot create hsr debugfs directory [ 917.758121][T17778] veth0_macvtap: entered promiscuous mode [ 917.813044][T17798] veth0_vlan: entered promiscuous mode [ 917.889575][T17778] veth1_macvtap: entered promiscuous mode [ 917.969736][T17798] veth1_vlan: entered promiscuous mode [ 918.182811][T17778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.207642][T17778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.220044][T17778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.263580][ T50] Bluetooth: hci1: command tx timeout [ 918.290423][T17778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.302753][T17778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.325207][T17778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.499987][T17778] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.511390][T17778] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.521466][T17778] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.534825][T17778] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.575190][T17798] veth0_macvtap: entered promiscuous mode [ 918.640286][T17798] veth1_macvtap: entered promiscuous mode [ 918.663675][T17826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.756224][T17798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.780374][T17798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.796615][T17798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.807538][T17798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.819376][T17798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.875774][T17798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.886666][T17798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.897635][T17798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.909799][T17798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.922361][T17798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.989860][T17798] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.999633][T17798] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.012645][T17798] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.021931][T17798] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.036811][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.050118][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.120820][T17826] veth0_vlan: entered promiscuous mode [ 919.200441][T17826] veth1_vlan: entered promiscuous mode [ 919.212664][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.231354][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.407551][T17826] veth0_macvtap: entered promiscuous mode [ 919.435325][T17826] veth1_macvtap: entered promiscuous mode [ 919.452809][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.477577][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.519503][T17826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.563502][T17826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.582204][T17826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.594828][T17826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.604773][T17826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.615706][T17826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.628703][T17826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 920.012334][T17826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.052563][T17826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.085485][T17826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.125979][T17826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.162342][T17826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.202717][T17826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.250436][T17826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 920.343764][ T50] Bluetooth: hci1: command tx timeout [ 920.497105][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.510430][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.589344][ T143] hsr_slave_0: left promiscuous mode [ 920.600568][ T143] hsr_slave_1: left promiscuous mode [ 920.619989][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 920.636259][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 920.677293][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 920.689100][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.701721][ T143] bridge_slave_1: left allmulticast mode [ 920.701869][T18001] loop8: detected capacity change from 0 to 2048 [ 920.711664][ T143] bridge_slave_1: left promiscuous mode [ 920.743292][T18001] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 920.752954][T18001] UDF-fs: Scanning with blocksize 512 failed [ 920.755341][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.779017][T18001] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 920.792355][ T143] bridge_slave_0: left allmulticast mode [ 920.816706][ T143] bridge_slave_0: left promiscuous mode [ 920.845596][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.924690][ T143] veth1_macvtap: left promiscuous mode [ 920.930322][ T143] veth0_macvtap: left promiscuous mode [ 920.947849][ T143] veth1_vlan: left promiscuous mode [ 920.958074][ T143] veth0_vlan: left promiscuous mode [ 921.032780][T18005] loop8: detected capacity change from 0 to 512 [ 921.047448][T18005] EXT4-fs: Ignoring removed i_version option [ 921.085263][T18005] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 921.192049][T17778] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.516240][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802628dc00: rx timeout, send abort [ 921.922334][ T143] team0 (unregistering): Port device team_slave_1 removed [ 922.005637][ T143] team0 (unregistering): Port device team_slave_0 removed [ 922.016345][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028556000: rx timeout, send abort [ 922.040494][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802628dc00: abort rx timeout. Force session deactivation [ 922.121787][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.245678][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.524680][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028556000: abort rx timeout. Force session deactivation [ 924.553420][ T5871] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 924.596813][ T143] bond0 (unregistering): Released all slaves [ 924.743719][ T5871] usb 9-1: Using ep0 maxpacket: 8 [ 924.751383][ T5871] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.776094][ T5871] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 924.789172][ T5871] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 924.805778][ T5871] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.820639][ T5871] usb 9-1: Product: syz [ 924.827089][ T5871] usb 9-1: Manufacturer: syz [ 924.838623][ T5871] usb 9-1: SerialNumber: syz [ 924.853144][ T5871] usb 9-1: config 0 descriptor?? [ 924.859261][T17826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.878319][T17826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.890881][T17826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.899874][T17826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.431639][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.452934][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.518603][T18023] loop9: detected capacity change from 0 to 2048 [ 925.581806][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.594329][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.618213][T18023] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 925.628348][T18023] UDF-fs: Scanning with blocksize 512 failed [ 925.765006][T18023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 925.986663][T17952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 926.059077][T17952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 926.090810][T17952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 926.125862][T17952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 926.170848][T18033] loop9: detected capacity change from 0 to 512 [ 926.208322][T18033] EXT4-fs: Ignoring removed i_version option [ 926.275157][T18033] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 927.255570][T17952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.770052][ T5848] usb 9-1: USB disconnect, device number 2 [ 928.054830][T17952] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.079164][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.086624][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.115113][T17798] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.206093][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.213450][ T2916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.450750][T18054] __nla_validate_parse: 5 callbacks suppressed [ 928.450768][T18054] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3678'. [ 928.555906][T18058] loop3: detected capacity change from 0 to 2048 [ 928.602085][T18058] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 928.624058][ T5831] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 928.626232][T18058] UDF-fs: Scanning with blocksize 512 failed [ 928.692263][T18058] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 928.751847][T17952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.824451][ T5831] usb 10-1: Using ep0 maxpacket: 32 [ 928.835493][ T5831] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 928.861344][ T5831] usb 10-1: config 0 has no interface number 0 [ 928.883612][ T5831] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 928.912429][ T5831] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.928222][T17952] veth0_vlan: entered promiscuous mode [ 928.934351][ T5831] usb 10-1: Product: syz [ 928.940817][ T5831] usb 10-1: Manufacturer: syz [ 928.968018][ T5831] usb 10-1: SerialNumber: syz [ 928.995108][ T5831] usb 10-1: config 0 descriptor?? [ 929.001727][T17952] veth1_vlan: entered promiscuous mode [ 929.011619][ T5831] smsc95xx v2.0.0 [ 929.109518][T17952] veth0_macvtap: entered promiscuous mode [ 929.139741][T17952] veth1_macvtap: entered promiscuous mode [ 929.256287][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 929.293503][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.329791][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 929.367689][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.390327][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 929.408445][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.425130][T17952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 929.449052][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.467697][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.485646][ T5831] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 929.501797][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.516088][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.533390][ T5831] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 929.542778][T17952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.578890][T17952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.588236][T18075] loop3: detected capacity change from 0 to 512 [ 929.611231][T18075] EXT4-fs: Ignoring removed i_version option [ 929.620120][T17952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.671181][T17952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.690065][T18075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 929.713495][T17952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.742972][T17952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.764390][T17952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.905763][T17826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.015349][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.052011][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.173121][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.186604][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.538175][T18097] loop2: detected capacity change from 0 to 512 [ 931.587531][T18097] EXT4-fs: Ignoring removed i_version option [ 931.954497][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.962439][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.226649][ T5831] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 932.293652][ T5831] smsc95xx: probe of 10-1:0.67 failed with error -71 [ 932.427809][ T5831] usb 10-1: USB disconnect, device number 2 [ 932.457436][T18097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 932.543568][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 932.648033][T17952] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.674696][T18104] loop8: detected capacity change from 0 to 2048 [ 932.777320][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 932.791076][T18104] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 932.848556][T18104] UDF-fs: Scanning with blocksize 512 failed [ 932.871867][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 932.878778][T18104] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 932.888203][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 932.920795][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.956110][ T9] usb 4-1: Product: syz [ 932.969117][ T9] usb 4-1: Manufacturer: syz [ 932.978619][ T9] usb 4-1: SerialNumber: syz [ 933.008824][ T9] usb 4-1: config 0 descriptor?? [ 933.216324][ T5831] usb 4-1: USB disconnect, device number 20 [ 933.330360][T18115] loop9: detected capacity change from 0 to 512 [ 933.369833][T18115] EXT4-fs (loop9): DAX unsupported by block device. [ 933.420603][T18115] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.3689'. [ 933.437477][T18124] loop3: detected capacity change from 0 to 512 [ 933.499550][T18124] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 933.583961][T18124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 933.656438][T18124] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 933.946013][T18138] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3695'. [ 933.982717][T17826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.983888][T18148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3697'. [ 935.023417][T18148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3697'. [ 935.181460][T18150] loop8: detected capacity change from 0 to 2048 [ 935.264105][T18150] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 935.295572][T18150] UDF-fs: Scanning with blocksize 512 failed [ 935.385834][T18150] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 935.494872][T18165] loop9: detected capacity change from 0 to 512 [ 935.529042][T18165] EXT4-fs (loop9): DAX unsupported by block device. [ 935.552727][T18165] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.3702'. [ 935.768762][ T5848] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 935.983555][ T5848] usb 3-1: Using ep0 maxpacket: 8 [ 935.995577][ T5848] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 936.015609][ T5848] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 936.033325][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.049608][ T5848] usb 3-1: Product: syz [ 936.072605][T18181] loop8: detected capacity change from 0 to 512 [ 936.091135][ T5848] usb 3-1: Manufacturer: syz [ 936.096855][ T5848] usb 3-1: SerialNumber: syz [ 936.138605][ T5848] usb 3-1: config 0 descriptor?? [ 936.181875][T18181] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 936.207569][T18181] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 936.232609][T18188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3708'. [ 936.506423][T18197] loop3: detected capacity change from 0 to 512 [ 936.538612][T17778] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.568766][T18197] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.3709: casefold flag without casefold feature [ 936.595084][T18197] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3709: couldn't read orphan inode 15 (err -117) [ 936.617578][T18197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 936.769880][T17826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.979347][T18212] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3711'. [ 937.038162][T18215] loop9: detected capacity change from 0 to 512 [ 937.080783][T18215] EXT4-fs (loop9): DAX unsupported by block device. [ 937.146405][T18215] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.3712'. [ 937.369656][T18223] loop9: detected capacity change from 0 to 2048 [ 937.411808][T18223] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 937.449052][T18223] UDF-fs: Scanning with blocksize 512 failed [ 937.498209][T18223] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 937.806719][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3718'. [ 938.157242][T18248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3721'. [ 938.364152][ T9] usb 3-1: USB disconnect, device number 22 [ 938.450682][T18255] loop3: detected capacity change from 0 to 512 [ 938.492511][T18255] EXT4-fs (loop3): DAX unsupported by block device. [ 938.505006][T18258] loop9: detected capacity change from 0 to 512 [ 938.519023][T18258] EXT4-fs: Ignoring removed i_version option [ 938.544084][T18255] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3722'. [ 938.617888][T18258] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 938.756551][T17798] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.970224][T18275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3728'. [ 938.986279][T18274] loop9: detected capacity change from 0 to 2048 [ 939.030775][T18274] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 939.064942][T18274] UDF-fs: Scanning with blocksize 512 failed [ 939.108717][T18274] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 939.266735][T18284] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3730'. [ 939.483644][ T5831] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 939.686375][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.707906][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.738658][T18298] loop9: detected capacity change from 0 to 512 [ 939.745351][ T5831] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 939.773031][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.785965][T18298] EXT4-fs (loop9): DAX unsupported by block device. [ 939.804917][ T5831] usb 3-1: config 0 descriptor?? [ 939.843777][T18298] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.3734'. [ 939.949898][T18302] loop8: detected capacity change from 0 to 512 [ 939.990930][T18302] EXT4-fs: Ignoring removed i_version option [ 940.123154][T18302] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 940.252204][ T5831] usbhid 3-1:0.0: can't add hid device: -71 [ 940.259359][ T5831] usbhid: probe of 3-1:0.0 failed with error -71 [ 940.322991][ T5831] usb 3-1: USB disconnect, device number 23 [ 940.358103][T17778] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.462769][T18315] loop3: detected capacity change from 0 to 2048 [ 940.510872][T18315] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 940.529055][T18315] UDF-fs: Scanning with blocksize 512 failed [ 940.610745][T18315] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 940.803863][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 941.054995][T18332] loop2: detected capacity change from 0 to 512 [ 941.063528][ T9] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 941.099674][T18332] EXT4-fs (loop2): DAX unsupported by block device. [ 941.103288][ T9] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 941.133176][ T9] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 941.142862][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.180168][T18332] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3746'. [ 941.199044][T18319] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 941.220429][ T9] usb 10-1: Quirk or no altest; falling back to MIDI 1.0 [ 941.237218][T18338] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 941.479428][T17922] usb 10-1: USB disconnect, device number 3 [ 942.222440][T18368] loop3: detected capacity change from 0 to 512 [ 942.283367][T18368] EXT4-fs (loop3): DAX unsupported by block device. [ 942.290702][T18370] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 943.294469][T18403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3772'. [ 943.488769][T18413] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 943.727548][T18416] loop2: detected capacity change from 0 to 512 [ 943.748063][T18416] EXT4-fs (loop2): DAX unsupported by block device. [ 944.078029][T18425] loop2: detected capacity change from 0 to 512 [ 944.118323][T18425] EXT4-fs: Ignoring removed i_version option [ 944.241434][T18425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 944.249090][T18430] loop8: detected capacity change from 0 to 64 [ 944.719217][T17952] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.213701][T18453] loop3: detected capacity change from 0 to 2048 [ 945.291377][T18453] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 945.323518][T18453] UDF-fs: Scanning with blocksize 512 failed [ 945.354256][T18457] loop2: detected capacity change from 0 to 512 [ 945.395670][T18457] EXT4-fs (loop2): DAX unsupported by block device. [ 945.412089][T18453] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 945.746151][T18466] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 945.784825][T18467] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 946.685041][T18492] loop2: detected capacity change from 0 to 512 [ 946.722581][T18492] EXT4-fs (loop2): DAX unsupported by block device. [ 947.120689][T18503] loop3: detected capacity change from 0 to 512 [ 947.226753][T18503] EXT4-fs (loop3): DAX unsupported by block device. [ 947.278837][T18507] loop8: detected capacity change from 0 to 164 [ 958.942974][ C1] hrtimer: interrupt took 11634083525 ns [ 1063.993197][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1064.000237][ C0] rcu: 1-...!: (1 ticks this GP) idle=63dc/1/0x4000000000000000 softirq=95709/95709 fqs=0 [ 1064.012413][ C0] rcu: (detected by 0, t=10505 jiffies, g=126877, q=508 ncpus=2) [ 1064.020281][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1064.025636][ C1] NMI backtrace for cpu 1 [ 1064.025668][ C1] CPU: 1 PID: 18509 Comm: syz.2.3801 Not tainted 6.6.94-syzkaller #0 [ 1064.025685][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1064.025699][ C1] RIP: 0010:check_preemption_disabled+0x37/0x110 [ 1064.025729][ C1] Code: 04 25 28 00 00 00 48 89 44 24 08 65 8b 05 6d 6d 9d 75 65 8b 0d 62 6d 9d 75 f7 c1 ff ff ff 7f 74 1f 65 48 8b 0c 25 28 00 00 00 <48> 3b 4c 24 08 0f 85 c4 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d c3 [ 1064.025744][ C1] RSP: 0018:ffffc900001f0b28 EFLAGS: 00000002 [ 1064.025759][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: cdb748694e6d2500 [ 1064.025771][ C1] RDX: 0000000000000000 RSI: ffffffff8afc68e0 RDI: ffffffff8afc68a0 [ 1064.025782][ C1] RBP: ffffc900001f0c88 R08: ffffffff8e49ab2f R09: 1ffffffff1c93565 [ 1064.025794][ C1] R10: dffffc0000000000 R11: fffffbfff1c93566 R12: 1ffff9200003e17c [ 1064.025806][ C1] R13: ffff8880b8f2b958 R14: 0000000000000001 R15: dffffc0000000000 [ 1064.025817][ C1] FS: 00007f77bf52b6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1064.025831][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1064.025842][ C1] CR2: 000056163f182048 CR3: 000000002c90b000 CR4: 00000000003506e0 [ 1064.025857][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1064.025866][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1064.025876][ C1] Call Trace: [ 1064.025884][ C1] [ 1064.025898][ C1] rcu_is_watching+0x15/0xb0 [ 1064.025923][ C1] lock_acquire+0xcb/0x410 [ 1064.025941][ C1] ? advance_sched+0x9f9/0xc80 [ 1064.025966][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1064.025986][ C1] ? advance_sched+0x9f9/0xc80 [ 1064.026006][ C1] ? advance_sched+0x9f9/0xc80 [ 1064.026030][ C1] _raw_spin_lock_irq+0xa3/0xe0 [ 1064.026056][ C1] ? __hrtimer_run_queues+0x5e3/0xc40 [ 1064.026074][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1064.026105][ C1] __hrtimer_run_queues+0x5e3/0xc40 [ 1064.026126][ C1] ? taprio_dequeue_from_txq+0x8f0/0x8f0 [ 1064.026153][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1064.026181][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 1064.026213][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 1064.026236][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1064.026256][ C1] [ 1064.026261][ C1] [ 1064.026267][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1064.026285][ C1] RIP: 0010:lockdep_unregister_key+0x4e6/0x580 [ 1064.026304][ C1] Code: 54 d3 90 48 c7 c6 80 a3 67 81 e8 35 09 08 00 e8 f0 1b 08 00 e9 67 fc ff ff e8 76 94 fe 08 41 f7 c4 00 02 00 00 74 d1 fb 84 db <75> d0 eb e1 0f 0b 31 db eb a1 0f 0b e9 fd fe ff ff e8 54 93 fe 08 [ 1064.026317][ C1] RSP: 0018:ffffc90004faede0 EFLAGS: 00000246 [ 1064.026332][ C1] RAX: cdb748694e6d2500 RBX: 0000000000000000 RCX: cdb748694e6d2500 [ 1064.026344][ C1] RDX: 0000000000000001 RSI: ffffffff8aaabfa0 RDI: ffffffff8afc6900 [ 1064.026355][ C1] RBP: ffffc90004faeeb0 R08: ffffffff90d37c8f R09: 1ffffffff21a6f91 [ 1064.026367][ C1] R10: dffffc0000000000 R11: fffffbfff21a6f92 R12: 0000000000000a02 [ 1064.026379][ C1] R13: ffffffff907982b0 R14: ffff88807ebc6a99 R15: 1ffff920009f5dc0 [ 1064.026403][ C1] ? lockdep_reset_lock+0x320/0x320 [ 1064.026430][ C1] __qdisc_destroy+0x128/0x3c0 [ 1064.026452][ C1] taprio_attach+0x25e/0x380 [ 1064.026477][ C1] ? taprio_change+0x5100/0x5100 [ 1064.026498][ C1] qdisc_graft+0x1169/0x1570 [ 1064.026528][ C1] ? qdisc_create+0xbb1/0x1050 [ 1064.026552][ C1] ? qdisc_create+0x1050/0x1050 [ 1064.026578][ C1] ? qdisc_notify+0x370/0x370 [ 1064.026605][ C1] tc_modify_qdisc+0xe54/0x1be0 [ 1064.026639][ C1] ? qdisc_offload_query_caps+0x150/0x150 [ 1064.026682][ C1] ? qdisc_offload_query_caps+0x150/0x150 [ 1064.026707][ C1] rtnetlink_rcv_msg+0x7c7/0xf10 [ 1064.026728][ C1] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 1064.026746][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1064.026765][ C1] ? rtnetlink_bind+0x80/0x80 [ 1064.026787][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1064.026805][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 1064.026829][ C1] ? lock_chain_count+0x20/0x20 [ 1064.026849][ C1] ? __local_bh_enable_ip+0x12e/0x1c0 [ 1064.026865][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1064.026883][ C1] ? __local_bh_enable_ip+0x12e/0x1c0 [ 1064.026899][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1064.026919][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 1064.026941][ C1] ? __dev_queue_xmit+0x1449/0x35a0 [ 1064.026970][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 1064.026997][ C1] ? ref_tracker_free+0x634/0x7d0 [ 1064.027016][ C1] ? __copy_skb_header+0xa7/0x550 [ 1064.027038][ C1] netlink_rcv_skb+0x216/0x480 [ 1064.027065][ C1] ? rtnetlink_bind+0x80/0x80 [ 1064.027083][ C1] ? netlink_ack+0x1110/0x1110 [ 1064.027115][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 1064.027136][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1064.027164][ C1] netlink_unicast+0x750/0x8c0 [ 1064.027194][ C1] netlink_sendmsg+0x8c1/0xbe0 [ 1064.027225][ C1] ? netlink_getsockopt+0x580/0x580 [ 1064.027252][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 1064.027276][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1064.027301][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 1064.027322][ C1] ? netlink_getsockopt+0x580/0x580 [ 1064.027347][ C1] ____sys_sendmsg+0x5bf/0x950 [ 1064.027369][ C1] ? __asan_memset+0x22/0x40 [ 1064.027394][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 1064.027410][ C1] ? __import_iovec+0x5f2/0x860 [ 1064.027432][ C1] ? import_iovec+0x73/0xa0 [ 1064.027450][ C1] ___sys_sendmsg+0x220/0x290 [ 1064.027469][ C1] ? __sys_sendmsg+0x270/0x270 [ 1064.027513][ C1] __se_sys_sendmsg+0x1a5/0x270 [ 1064.027531][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 1064.027557][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1064.027577][ C1] do_syscall_64+0x55/0xb0 [ 1064.027600][ C1] ? clear_bhb_loop+0x40/0x90 [ 1064.027616][ C1] ? clear_bhb_loop+0x40/0x90 [ 1064.027633][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1064.027663][ C1] RIP: 0033:0x7f77be78e929 [ 1064.027684][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1064.027697][ C1] RSP: 002b:00007f77bf52b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1064.027713][ C1] RAX: ffffffffffffffda RBX: 00007f77be9b5fa0 RCX: 00007f77be78e929 [ 1064.027725][ C1] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 1064.027735][ C1] RBP: 00007f77be810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1064.027745][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1064.027754][ C1] R13: 0000000000000000 R14: 00007f77be9b5fa0 R15: 00007ffd0d896fc8 [ 1064.027774][ C1] [ 1064.028630][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10504 jiffies! g126877 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1064.682410][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=58547 [ 1064.690330][ C0] rcu: rcu_preempt kthread starved for 10505 jiffies! g126877 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1064.701951][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1064.711955][ C0] rcu: RCU grace-period kthread stack dump: [ 1064.717870][ C0] task:rcu_preempt state:I stack:26728 pid:17 ppid:2 flags:0x00004000 [ 1064.727118][ C0] Call Trace: [ 1064.730430][ C0] [ 1064.733402][ C0] __schedule+0x14e2/0x4580 [ 1064.737998][ C0] ? _raw_spin_unlock_irqrestore+0x40/0x110 [ 1064.743957][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1064.749901][ C0] ? asan.module_dtor+0x20/0x20 [ 1064.754800][ C0] ? enqueue_timer+0x4ab/0x530 [ 1064.759607][ C0] ? __mod_timer+0x984/0xdb0 [ 1064.764249][ C0] schedule+0xbd/0x170 [ 1064.768367][ C0] schedule_timeout+0x160/0x280 [ 1064.773271][ C0] ? console_conditional_schedule+0x40/0x40 [ 1064.779219][ C0] ? update_process_times+0x1b0/0x1b0 [ 1064.784648][ C0] ? prepare_to_swait_event+0x339/0x360 [ 1064.790243][ C0] rcu_gp_fqs_loop+0x302/0x1560 [ 1064.795129][ C0] ? rcu_gp_init+0x110e/0x1510 [ 1064.799946][ C0] ? rcu_gp_kthread+0x380/0x380 [ 1064.804845][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1064.810861][ C0] ? rcu_gp_init+0x1510/0x1510 [ 1064.815669][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 1064.820556][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1064.825801][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1064.831042][ C0] rcu_gp_kthread+0x99/0x380 [ 1064.835683][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1064.840842][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 1064.845825][ C0] ? __kthread_parkme+0x162/0x1c0 [ 1064.850901][ C0] kthread+0x2fa/0x390 [ 1064.855006][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1064.860167][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1064.864795][ C0] ret_from_fork+0x48/0x80 [ 1064.869247][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1064.873875][ C0] ret_from_fork_asm+0x11/0x20 [ 1064.878691][ C0] [ 1064.881757][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1064.888125][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1064.893368][ C1] NMI backtrace for cpu 1 [ 1064.893379][ C1] CPU: 1 PID: 18509 Comm: syz.2.3801 Not tainted 6.6.94-syzkaller #0 [ 1064.893395][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1064.893406][ C1] RIP: 0010:__lock_acquire+0x210/0x7c80 [ 1064.893432][ C1] Code: 00 00 48 89 5c 24 40 8b 5d 30 44 8b 7d 20 48 c7 c0 e0 d3 6e 90 49 29 c5 49 c1 fd 04 48 b9 c5 4e ec c4 4e ec c4 4e 49 0f af cd <41> 89 cd 85 db 0f 85 2c 01 00 00 83 7c 24 60 00 0f 84 21 01 00 00 [ 1064.893446][ C1] RSP: 0018:ffffc900001f0880 EFLAGS: 00000803 [ 1064.893460][ C1] RAX: ffffffff906ed3e0 RBX: 0000000000000000 RCX: 0000000000000001 [ 1064.893472][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9705a058 [ 1064.893482][ C1] RBP: ffffc900001f0ac8 R08: dffffc0000000000 R09: 0000000000000001 [ 1064.893494][ C1] R10: dffffc0000000000 R11: fffffbfff1c93566 R12: 0000000000000001 [ 1064.893506][ C1] R13: 000000000000000d R14: ffffffff9705a060 R15: 0000000000000000 [ 1064.893516][ C1] FS: 00007f77bf52b6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1064.893530][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1064.893541][ C1] CR2: 000056163f182048 CR3: 000000002c90b000 CR4: 00000000003506e0 [ 1064.893556][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1064.893565][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1064.893581][ C1] Call Trace: [ 1064.893589][ C1] [ 1064.893608][ C1] ? verify_lock_unused+0x140/0x140 [ 1064.893627][ C1] ? verify_lock_unused+0x140/0x140 [ 1064.893652][ C1] ? debug_objects_fill_pool+0x73/0x6b0 [ 1064.893682][ C1] lock_acquire+0x197/0x410 [ 1064.893699][ C1] ? debug_object_deactivate+0x67/0x350 [ 1064.893728][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 1064.893746][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1064.893770][ C1] _raw_spin_lock_irqsave+0xa8/0xf0 [ 1064.893797][ C1] ? debug_object_deactivate+0x67/0x350 [ 1064.893822][ C1] ? _raw_spin_lock+0x40/0x40 [ 1064.893845][ C1] ? advance_sched+0x9f9/0xc80 [ 1064.893871][ C1] debug_object_deactivate+0x67/0x350 [ 1064.893900][ C1] debug_deactivate+0x1d/0x1d0 [ 1064.893919][ C1] __hrtimer_run_queues+0x2bf/0xc40 [ 1064.893939][ C1] ? taprio_dequeue_from_txq+0x8f0/0x8f0 [ 1064.893966][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1064.893987][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 1064.894016][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 1064.894038][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1064.894058][ C1] [ 1064.894062][ C1] [ 1064.894069][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1064.894086][ C1] RIP: 0010:lockdep_unregister_key+0x4e6/0x580 [ 1064.894106][ C1] Code: 54 d3 90 48 c7 c6 80 a3 67 81 e8 35 09 08 00 e8 f0 1b 08 00 e9 67 fc ff ff e8 76 94 fe 08 41 f7 c4 00 02 00 00 74 d1 fb 84 db <75> d0 eb e1 0f 0b 31 db eb a1 0f 0b e9 fd fe ff ff e8 54 93 fe 08 [ 1064.894119][ C1] RSP: 0018:ffffc90004faede0 EFLAGS: 00000246 [ 1064.894132][ C1] RAX: cdb748694e6d2500 RBX: 0000000000000000 RCX: cdb748694e6d2500 [ 1064.894143][ C1] RDX: 0000000000000001 RSI: ffffffff8aaabfa0 RDI: ffffffff8afc6900 [ 1064.894155][ C1] RBP: ffffc90004faeeb0 R08: ffffffff90d37c8f R09: 1ffffffff21a6f91 [ 1064.894166][ C1] R10: dffffc0000000000 R11: fffffbfff21a6f92 R12: 0000000000000a02 [ 1064.894177][ C1] R13: ffffffff907982b0 R14: ffff88807ebc6a99 R15: 1ffff920009f5dc0 [ 1064.894200][ C1] ? lockdep_reset_lock+0x320/0x320 [ 1064.894224][ C1] __qdisc_destroy+0x128/0x3c0 [ 1064.894246][ C1] taprio_attach+0x25e/0x380 [ 1064.894270][ C1] ? taprio_change+0x5100/0x5100 [ 1064.894290][ C1] qdisc_graft+0x1169/0x1570 [ 1064.894318][ C1] ? qdisc_create+0xbb1/0x1050 [ 1064.894343][ C1] ? qdisc_create+0x1050/0x1050 [ 1064.894368][ C1] ? qdisc_notify+0x370/0x370 [ 1064.894394][ C1] tc_modify_qdisc+0xe54/0x1be0 [ 1064.894426][ C1] ? qdisc_offload_query_caps+0x150/0x150 [ 1064.894460][ C1] ? qdisc_offload_query_caps+0x150/0x150 [ 1064.894485][ C1] rtnetlink_rcv_msg+0x7c7/0xf10 [ 1064.894504][ C1] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 1064.894523][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1064.894541][ C1] ? rtnetlink_bind+0x80/0x80 [ 1064.894561][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1064.894585][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 1064.894609][ C1] ? lock_chain_count+0x20/0x20 [ 1064.894627][ C1] ? __local_bh_enable_ip+0x12e/0x1c0 [ 1064.894644][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1064.894662][ C1] ? __local_bh_enable_ip+0x12e/0x1c0 [ 1064.894681][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1064.894700][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 1064.894721][ C1] ? __dev_queue_xmit+0x1449/0x35a0 [ 1064.894749][ C1] ? __dev_queue_xmit+0x245/0x35a0 [ 1064.894775][ C1] ? ref_tracker_free+0x634/0x7d0 [ 1064.894795][ C1] ? __copy_skb_header+0xa7/0x550 [ 1064.894816][ C1] netlink_rcv_skb+0x216/0x480 [ 1064.894843][ C1] ? rtnetlink_bind+0x80/0x80 [ 1064.894861][ C1] ? netlink_ack+0x1110/0x1110 [ 1064.894891][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 1064.894912][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1064.894940][ C1] netlink_unicast+0x750/0x8c0 [ 1064.894969][ C1] netlink_sendmsg+0x8c1/0xbe0 [ 1064.894999][ C1] ? netlink_getsockopt+0x580/0x580 [ 1064.895026][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 1064.895049][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1064.895073][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 1064.895094][ C1] ? netlink_getsockopt+0x580/0x580 [ 1064.895119][ C1] ____sys_sendmsg+0x5bf/0x950 [ 1064.895140][ C1] ? __asan_memset+0x22/0x40 [ 1064.895166][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 1064.895181][ C1] ? __import_iovec+0x5f2/0x860 [ 1064.895202][ C1] ? import_iovec+0x73/0xa0 [ 1064.895219][ C1] ___sys_sendmsg+0x220/0x290 [ 1064.895238][ C1] ? __sys_sendmsg+0x270/0x270 [ 1064.895275][ C1] __se_sys_sendmsg+0x1a5/0x270 [ 1064.895294][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 1064.895318][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1064.895338][ C1] do_syscall_64+0x55/0xb0 [ 1064.895362][ C1] ? clear_bhb_loop+0x40/0x90 [ 1064.895377][ C1] ? clear_bhb_loop+0x40/0x90 [ 1064.895393][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1064.895420][ C1] RIP: 0033:0x7f77be78e929 [ 1064.895435][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1064.895449][ C1] RSP: 002b:00007f77bf52b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1064.895464][ C1] RAX: ffffffffffffffda RBX: 00007f77be9b5fa0 RCX: 00007f77be78e929 [ 1064.895476][ C1] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 1064.895487][ C1] RBP: 00007f77be810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1064.895497][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1064.895506][ C1] R13: 0000000000000000 R14: 00007f77be9b5fa0 R15: 00007ffd0d896fc8 [ 1064.895524][ C1]