last executing test programs: 10m0.969529151s ago: executing program 3 (id=3589): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000180), 0x19a, 0x200) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000080)={0x0, 0x4, 0x6, &(0x7f0000000000)={0x9, "59d23931c25cfe9acb03c8d13f47c044d3724a0000073e264faee28a7eb4d4ef47"}}) 9m59.329493539s ago: executing program 3 (id=3592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 9m57.123048933s ago: executing program 3 (id=3597): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuset.effective_mems\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528"], 0x200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0xe8}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{0x0}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc41879", 0x2c}, {&(0x7f0000000a80)}], 0x5, 0x4d9e, 0x8) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0xaaaaaaaaaaaab0d, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 9m49.456722144s ago: executing program 3 (id=3607): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f00000002c0)=""/151, 0x97) close_range(r0, 0xffffffffffffffff, 0x0) 9m47.555159859s ago: executing program 3 (id=3615): r0 = socket$igmp6(0xa, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x0, 0x1}, 0x0, 0x0, &(0x7f0000000000)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340), 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, 0x0, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000480)=[0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x9, r5, 0x0, 0x0, 0x5, 0x0, 0x1, r6}]) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000000), 0x1) syz_emit_ethernet(0x134, &(0x7f00000004c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0xfe, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x1, '\x00', @mcast1, [{0x19, 0x1c, "dc40258e0c8446379ef010233c3bea066337bdd582ff3bbe09fb423b2d9e0eacc4c3f5e876db58308580eb29a8b6e171adb4b2d0229c6f12470f28782edefb3f641ec5ea9633d61cf69870b5340453c0e3933f82c5a1d6c9d54a9e3f9dad71b28cd976d3a3202398397747afbfb4e60f458b92e86120609833a7d9c18177358ab5d6172467e799f28b470bca681ec9b32ace9584bfe2721d3d7369bacfb31eb3e0f7556b686a317923b250d7da3a6d91ad6d2f93b14579d0763618cb33a5bc90f691c472df335f0026072e300ef8553ca7381de67d95b9c34524a4fc63e59c0ffd7adc28"}]}}}}}}, 0x0) 9m45.08545306s ago: executing program 3 (id=3616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 9m29.404300292s ago: executing program 32 (id=3616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 28.35037201s ago: executing program 4 (id=5426): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$fuse(0x0, 0x0, 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) chdir(0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 26.738166443s ago: executing program 4 (id=5431): clock_adjtime(0x2, &(0x7f00000006c0)={0xb640, 0x101, 0x69, 0x8, 0x1, 0x63fa09b0, 0x7fffffff, 0x2, 0xfffffffffffffffd, 0x8, 0xffff, 0x3ff, 0x2, 0x101, 0x8, 0x81, 0xb7, 0x6b1, 0xfff, 0x9, 0xe, 0xe4d, 0x52, 0x2, 0xfa79, 0x5}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x2808009, &(0x7f0000001680)={[{@debug}, {@jqfmt_vfsv0}, {@mblk_io_submit}, {@debug}, {@test_dummy_encryption_v1}, {@nouid32}, {@delalloc}, {@nogrpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}]}, 0x1, 0xbd9, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) clock_gettime(0x6, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000380)={r3, r4+60000000}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, 0x0, 0xff2e) ioctl$TCSETS(r5, 0x40045431, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501) ioctl$USBDEVFS_RESETEP(r6, 0x80045503, &(0x7f0000000040)={0xb, 0x1}) 23.579762317s ago: executing program 4 (id=5436): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x20, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x5f]}}, 0x0, 0x28}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1c6) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) read$msr(r5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 21.470234238s ago: executing program 4 (id=5441): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x2, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000380)={0x5, r3, r2}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 21.217508866s ago: executing program 4 (id=5445): r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) rename(0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3ffffe, 0x14, "3eccd8000000000000000010000000040100"}) syz_usb_control_io$hid(r0, 0x0, 0x0) 17.815637859s ago: executing program 4 (id=5452): clock_adjtime(0x2, &(0x7f00000006c0)={0xb640, 0x101, 0x69, 0x8, 0x1, 0x63fa09b0, 0x7fffffff, 0x2, 0xfffffffffffffffd, 0x8, 0xffff, 0x3ff, 0x2, 0x101, 0x8, 0x81, 0xb7, 0x6b1, 0xfff, 0x9, 0xe, 0xe4d, 0x52, 0x2, 0xfa79, 0x5}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x2808009, &(0x7f0000001680)={[{@debug}, {@jqfmt_vfsv0}, {@mblk_io_submit}, {@debug}, {@test_dummy_encryption_v1}, {@nouid32}, {@delalloc}, {@nogrpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}]}, 0x1, 0xbd9, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) clock_gettime(0x6, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000380)={r3, r4+60000000}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, 0x0, 0xff2e) ioctl$TCSETS(r5, 0x40045431, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)={0xb, 0x1}) 10.689764886s ago: executing program 1 (id=5460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r7, r5, 0x11, 0x0, r7}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r4, r5, 0x11, 0x0, r4}, 0x11) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 10.301105888s ago: executing program 2 (id=5461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) 9.510843684s ago: executing program 1 (id=5462): socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1], 0x20) 9.362759169s ago: executing program 2 (id=5463): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x40642, 0xc9) pwrite64(r0, &(0x7f0000000140)="f9", 0x1, 0x8000c61) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x130) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x5, 0x100000001, 0x1}) 9.201351175s ago: executing program 1 (id=5464): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d00010000001009040000010300000009211000fd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000d000000000b00000000001344e29c261f000b01000000000000000000000a02000000000000000000ff0b040000000f000000000000850c00000000005100"], 0x0, 0x58}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0a00000004000000ff0f000003100000000000000ffed7c415252514261f50010deb10f47f207cff573e5c6cbbb7c2fff6d421071cd964fd44b8622480d5132ab38d0812eb0470b16405e42ffa514a5f1bad69505b8ba650e4c3314303f077b4373e", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_emit_ethernet(0x3d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000340), 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) 9.04601112s ago: executing program 0 (id=5465): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sndctrl(&(0x7f0000000340), 0x81, 0x202400) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.72759661s ago: executing program 0 (id=5466): socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1], 0x20) 8.577278386s ago: executing program 0 (id=5467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r7, r5, 0x11, 0x0, r7}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r4, r5, 0x11, 0x0, r4}, 0x11) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.643205057s ago: executing program 2 (id=5468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r7, r5, 0x11, 0x0, r7}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r4, r5, 0x11, 0x0, r4}, 0x11) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.007246298s ago: executing program 0 (id=5469): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x20, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x5f]}}, 0x0, 0x28}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1c6) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) read$msr(r5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 3.439783016s ago: executing program 1 (id=5470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r7, r5, 0x11, 0x0, r7}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r4, r5, 0x11, 0x0, r4}, 0x11) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.977818121s ago: executing program 2 (id=5471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_NUM={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) 2.839113996s ago: executing program 0 (id=5472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) 2.585300365s ago: executing program 0 (id=5473): socket$inet6(0xa, 0x3, 0xfe) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000e, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x408c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x9, 0x8, 0x0, 0x4, 0x2, 0x20}, 0xe) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) userfaultfd(0x80001) 2.523732667s ago: executing program 33 (id=5452): clock_adjtime(0x2, &(0x7f00000006c0)={0xb640, 0x101, 0x69, 0x8, 0x1, 0x63fa09b0, 0x7fffffff, 0x2, 0xfffffffffffffffd, 0x8, 0xffff, 0x3ff, 0x2, 0x101, 0x8, 0x81, 0xb7, 0x6b1, 0xfff, 0x9, 0xe, 0xe4d, 0x52, 0x2, 0xfa79, 0x5}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x2808009, &(0x7f0000001680)={[{@debug}, {@jqfmt_vfsv0}, {@mblk_io_submit}, {@debug}, {@test_dummy_encryption_v1}, {@nouid32}, {@delalloc}, {@nogrpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}]}, 0x1, 0xbd9, &(0x7f0000000400)="$eJzs3M1rHOcZAPBnRp+25a5cSql7sUopNpSuZReZ2hRqF5deeii014CFvDJC6w8kBUeyIKvkHwhJzoFcAklMgg/x2ZcEcs0lca4xOQRMUKwEQkgUZj8kWdqVLGtXo8i/H7ya92Nm3ufRSDvzwu4G8Mwayn6kEUcj4lISUaj3pxHRW631R1Rq+y0tzo99tzg/lsTy8v++TiKJiEeL82ONcyX17aF6oz8iPvlnEr9+eeO807Nzk6Plcmmq3j45c/XGyenZub9MXB29UrpSunbqzN9GTo+cGT470rZcv//i/N1v//DvLys/vPPj7W9eeyuJ8zFQH1ubRz3rHRuKoZXfyVrdETHahvPvBV31fNbmmXRvcVDa4aAAAGgpXfMM99soRFesPrwV4sNPcw0OAAAAaIvlrohlAAAAYJ9LrP8BAABgn2u8D+DR4vxYo+T7joTd9fBCRAzW8l+ql9pId1Sq2/7oiYiDj5JY+7HWpHbYjg1FxIPPz76flWjyOeROqyxExO+aXf+kmv9g/ZPQ6/NPI2K4DfMPrWv/kvI/34b5884fgGfTvQu1G9nG+1+68vwTTe5/3U3uXU8j7/tf4/lvacPz32r+XS2e//77hHPcevuNm63Gsvz/fvdf7zVKNn+23VFS2/BwIeL33c3yT1byT1rkf2mLcydRO0Xhp5ulVvvknf/ymxHHo3n+Dcnm3090cnyiXBqu/Ww6x8LHI++2mj/v/LPrf7BF/ptc//6s78ZjZ2r9pT7PXbx4Z0Nnffet80+/6k3+X6311nteGJ2ZmToV0Zv8Z2P/6c3zbezTOEeW/4k/bv7/3+zvP3tNqNT/NrJUFurbrP3Sujn/cfvWB63iaaz/8rz+l7d//at9rzzhHH/66NUT6/sa36+1dv2blWz+B0ltLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADWlEDESSFiMiqdbTtFiMOBQRv4mDafn69Myfx68/f+1yNhYxGD3p+ES5NBwRhVo7ydqnqvXV9ul17b9GxJGIeL1woNoujl0vX847eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFYcioiBSNJiRKQRsVRI02Ix76gAAACAthvMOwAAAACg46z/AQAAYP+z/gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDDjhy7dz+JiMq5A9WS6a2P9eQaGdBpad4BALnpyjsAIDfdeQcA5Gaba3yPC7APJVuM9zftzV49+joSDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB70/Gj9+4nEVE5d6BaMr31sZ6mRxzbxeiATkrzDgDITddmg927Fwew+576X/xwe+MAdl/zNT7wLEm2GO9f3afy+Ehfx2ICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYO8ZqJYkLUZEWq2nabEYcTgiBqMnGZ8ol4Yj4lcR8Vmhpy9r9+UdNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG03PTs3OVoul6aeppLs7HAVlVaVF/dGGLtbSfZGGLVK3q9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkYXp2bnK0XC5NTecdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJC36dm5ydFyuTT1BJU729l5TSXvHAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyM/PAQAA///E/w3d") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) clock_gettime(0x6, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000380)={r3, r4+60000000}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, 0x0, 0xff2e) ioctl$TCSETS(r5, 0x40045431, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)={0xb, 0x1}) 2.510453477s ago: executing program 2 (id=5475): socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1], 0x20) 1.721810943s ago: executing program 1 (id=5476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r7, r5, 0x11, 0x0, r7}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r4, r5, 0x11, 0x0, r4}, 0x11) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.52924288s ago: executing program 2 (id=5477): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x40642, 0xc9) pwrite64(r0, &(0x7f0000000140)="f9", 0x1, 0x8000c61) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x130) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x5, 0x100000001, 0x1}) 0s ago: executing program 1 (id=5478): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x20, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x5f]}}, 0x0, 0x28}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1c6) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) read$msr(r5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) kernel console output (not intermixed with test programs): 2-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b [ 1137.771905][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.814248][ T5837] pegasus 2-1:254.0: Missing or invalid endpoints [ 1137.815998][T15151] 0x0000fffffffd-0x00010000fffd : "" [ 1137.857614][ T5775] Bluetooth: hci2: command tx timeout [ 1137.961640][T15151] mtd: partition "" is out of reach -- disabled [ 1138.149826][T15151] ftl_cs: FTL header not found. [ 1138.663060][ T1126] hsr_slave_0: left promiscuous mode [ 1138.683083][ T1126] hsr_slave_1: left promiscuous mode [ 1138.761729][T10046] usb 2-1: USB disconnect, device number 22 [ 1138.876311][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1139.030393][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1139.132202][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1139.217611][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1139.288000][ T1126] bridge_slave_1: left allmulticast mode [ 1139.293702][ T1126] bridge_slave_1: left promiscuous mode [ 1139.373433][ T1126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.488763][ T1126] bridge_slave_0: left allmulticast mode [ 1139.494570][ T1126] bridge_slave_0: left promiscuous mode [ 1139.501068][ T1126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.560717][ T1126] veth1_macvtap: left promiscuous mode [ 1139.571765][ T1126] veth0_macvtap: left promiscuous mode [ 1140.372790][T15177] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 1141.555183][ T1126] team0 (unregistering): Port device team_slave_1 removed [ 1141.634863][ T1126] team0 (unregistering): Port device team_slave_0 removed [ 1141.694117][ T1126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1141.743267][ T1126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1142.255606][ T1126] bond0 (unregistering): Released all slaves [ 1142.364051][T15168] netlink: 'syz.1.2441': attribute type 6 has an invalid length. [ 1142.372425][T15168] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2441'. [ 1145.028518][T15212] netlink: 'syz.3.2452': attribute type 64 has an invalid length. [ 1145.054149][ T1126] IPVS: stop unused estimator thread 0... [ 1146.017452][T15224] netlink: 'syz.0.2455': attribute type 6 has an invalid length. [ 1146.025238][T15224] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2455'. [ 1146.034522][T15230] netlink: 'syz.3.2456': attribute type 64 has an invalid length. [ 1146.319964][T15070] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1146.401941][T15070] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1146.491020][T15070] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1146.520644][T15070] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1146.612870][T15239] netlink: 'syz.0.2457': attribute type 64 has an invalid length. [ 1147.895054][T15070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1148.331447][T15070] 8021q: adding VLAN 0 to HW filter on device team0 [ 1148.363638][T13191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.370803][T13191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.447338][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.454500][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.763907][T15264] netlink: 'syz.0.2464': attribute type 6 has an invalid length. [ 1148.772165][T15264] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2464'. [ 1149.216124][T15277] netlink: 'syz.0.2465': attribute type 64 has an invalid length. [ 1150.022535][T15070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.412843][T15290] netlink: 'syz.0.2466': attribute type 64 has an invalid length. [ 1150.597228][ T5775] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1150.798474][T15070] veth0_vlan: entered promiscuous mode [ 1150.878303][T15070] veth1_vlan: entered promiscuous mode [ 1150.931695][T15296] 0x0000fffffffd-0x00010000fffd : "" [ 1150.953462][T15070] veth0_macvtap: entered promiscuous mode [ 1150.959685][T15296] mtd: partition "" is out of reach -- disabled [ 1150.983095][T15070] veth1_macvtap: entered promiscuous mode [ 1151.006077][T15296] ftl_cs: FTL header not found. [ 1151.070057][T15070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.097214][T15070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.127299][T15070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.155796][T15070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.187271][T15070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.218086][T15070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.247486][T15070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.270976][T15070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.307227][T15070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.326968][T15070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.348414][T15070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.371712][T15070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.398946][T15070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.428543][T15070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.469065][T15070] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.492916][T15070] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.521004][T15070] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.763673][T15070] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.005200][ T5775] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1152.567699][T11066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.575538][T11066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.750591][T11066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.797489][T11066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.029836][T15328] netlink: 'syz.1.2473': attribute type 6 has an invalid length. [ 1153.037719][T15328] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2473'. [ 1154.871631][ T5775] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1155.051952][T15347] 0x0000fffffffd-0x00010000fffd : "" [ 1155.084563][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1155.093164][T15347] mtd: partition "" is out of reach -- disabled [ 1155.108850][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1155.118576][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1155.130715][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1155.139515][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1155.139887][T15347] ftl_cs: FTL header not found. [ 1155.153248][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1155.343770][ T49] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.412013][T15349] lo speed is unknown, defaulting to 1000 [ 1155.485336][ T49] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.551954][ T49] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.655483][ T49] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.019795][T15349] chnl_net:caif_netlink_parms(): no params data found [ 1156.594457][T15363] tipc: Started in network mode [ 1156.603951][T15363] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1156.622839][ T5773] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1156.623125][T15363] tipc: Enabled bearer , priority 10 [ 1157.232369][ T5773] Bluetooth: hci0: command tx timeout [ 1157.573144][T15349] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.611342][T15349] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.634668][T15349] bridge_slave_0: entered allmulticast mode [ 1157.665191][T15349] bridge_slave_0: entered promiscuous mode [ 1157.767727][ T27] tipc: Node number set to 10136234 [ 1157.783214][T15349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.798389][T15349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.828927][T15349] bridge_slave_1: entered allmulticast mode [ 1157.846701][T15349] bridge_slave_1: entered promiscuous mode [ 1158.408285][T15394] netlink: 'syz.3.2485': attribute type 64 has an invalid length. [ 1158.455635][ T49] bridge0: port 3(erspan0) entered disabled state [ 1158.508428][ T49] erspan0 (unregistering): left allmulticast mode [ 1158.603039][ T49] erspan0 (unregistering): left promiscuous mode [ 1158.635142][ T49] bridge0: port 3(erspan0) entered disabled state [ 1158.672695][T15349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.828749][T15400] comedi comedi3: pcl816: a I/O base address must be specified [ 1159.239995][T15349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.296967][ T5773] Bluetooth: hci0: command tx timeout [ 1159.340986][T15349] team0: Port device team_slave_0 added [ 1159.462598][T15349] team0: Port device team_slave_1 added [ 1159.521749][T15349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.556232][T15349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.687154][T15349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.744105][ T5773] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1159.793210][T15349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.861409][T15349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.006802][T15349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.288620][T15349] hsr_slave_0: entered promiscuous mode [ 1160.328439][T15349] hsr_slave_1: entered promiscuous mode [ 1160.342720][T15349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1160.382600][T15349] Cannot create hsr debugfs directory [ 1160.403282][ T49] hsr_slave_0: left promiscuous mode [ 1160.433567][ T49] hsr_slave_1: left promiscuous mode [ 1161.045487][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.053656][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.087691][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1161.124347][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.180125][ T49] bridge_slave_1: left allmulticast mode [ 1161.214105][ T49] bridge_slave_1: left promiscuous mode [ 1161.282975][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.332420][ T49] bridge_slave_0: left allmulticast mode [ 1161.377112][ T5773] Bluetooth: hci0: command tx timeout [ 1161.416268][ T49] bridge_slave_0: left promiscuous mode [ 1161.437599][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.552812][ T49] veth1_macvtap: left promiscuous mode [ 1161.570598][ T49] veth0_macvtap: left promiscuous mode [ 1162.867425][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1162.951394][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1163.027466][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1163.087772][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1163.464656][ T5773] Bluetooth: hci0: command tx timeout [ 1163.502054][ T49] bond0 (unregistering): Released all slaves [ 1163.644658][T15427] netlink: 'syz.1.2490': attribute type 64 has an invalid length. [ 1163.662306][ T787] lo speed is unknown, defaulting to 1000 [ 1164.778792][ T49] IPVS: stop unused estimator thread 0... [ 1165.111500][T15451] netlink: 'syz.2.2496': attribute type 6 has an invalid length. [ 1165.119294][T15451] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2496'. [ 1165.182063][ T5773] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1165.373549][T15459] netlink: 'syz.1.2495': attribute type 64 has an invalid length. [ 1165.954562][T15349] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1165.978259][T15349] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1166.001604][T15349] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1166.056382][T15349] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1166.351565][T15349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.407548][T15349] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.496045][ T5032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.503285][ T5032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.071528][ T5773] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1167.500934][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.515344][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.677261][T15487] ufs: You didn't specify the type of your ufs filesystem [ 1167.677261][T15487] [ 1167.677261][T15487] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1167.677261][T15487] [ 1167.677261][T15487] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1167.709360][T15487] ufs: ufstype=old is supported read-only [ 1167.717350][T15487] ufs: ufs_fill_super(): bad magic number [ 1168.069742][T10046] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1168.442100][T10046] usb 2-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b [ 1168.592929][T10046] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.960445][T10046] pegasus 2-1:254.0: Missing or invalid endpoints [ 1170.627413][T10046] usb 2-1: USB disconnect, device number 23 [ 1171.848008][T15508] tipc: Enabling of bearer rejected, already enabled [ 1171.957576][T15349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.002650][T15519] overlayfs: missing 'workdir' [ 1172.474255][T15349] veth0_vlan: entered promiscuous mode [ 1172.554608][T15349] veth1_vlan: entered promiscuous mode [ 1172.564289][T15521] comedi comedi3: pcl816: a I/O base address must be specified [ 1172.589517][T15523] netlink: 'syz.1.2509': attribute type 64 has an invalid length. [ 1172.715933][T15349] veth0_macvtap: entered promiscuous mode [ 1172.731564][T15349] veth1_macvtap: entered promiscuous mode [ 1172.784113][T15349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.815719][T15349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.834513][T15349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.884860][T15349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.954494][T15349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.986771][T15349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.148725][T15349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.242680][T15535] netlink: 'syz.1.2510': attribute type 64 has an invalid length. [ 1173.358736][ T5773] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1173.455619][T15349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.526269][T15349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.568481][T15349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.592606][T15349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.616523][T15349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.636895][T15349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.657474][T15349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.715079][T15349] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.749285][T15349] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.781774][T15349] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.807223][T15349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.994482][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.036092][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.148635][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.169472][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.860901][T15552] tipc: Started in network mode [ 1174.865807][T15552] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1174.873053][T15552] tipc: Enabled bearer , priority 10 [ 1175.582663][T15560] "syz.2.2514" (15560) uses obsolete ecb(arc4) skcipher [ 1175.876963][ T5987] tipc: Node number set to 10136234 [ 1176.548899][T15577] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1177.658763][T15588] netlink: 'syz.2.2519': attribute type 64 has an invalid length. [ 1179.272536][T15615] ufs: You didn't specify the type of your ufs filesystem [ 1179.272536][T15615] [ 1179.272536][T15615] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1179.272536][T15615] [ 1179.272536][T15615] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1179.304181][T15615] ufs: ufstype=old is supported read-only [ 1179.311104][T15615] ufs: ufs_fill_super(): bad magic number [ 1180.167067][ T5849] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1180.233043][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1180.256031][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1180.270209][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1180.284680][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1180.309193][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1180.322482][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1180.644598][ T5849] usb 3-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b [ 1180.804520][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.119963][ T5849] pegasus 3-1:254.0: Missing or invalid endpoints [ 1182.358922][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.417505][ T5775] Bluetooth: hci1: command tx timeout [ 1182.490977][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.642226][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.705256][T15635] netlink: 'syz.1.2525': attribute type 6 has an invalid length. [ 1182.713484][T15635] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2525'. [ 1182.761246][T10046] usb 3-1: USB disconnect, device number 18 [ 1182.910362][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.776635][T15614] chnl_net:caif_netlink_parms(): no params data found [ 1184.307949][T15614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.331416][T15614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.345378][T15614] bridge_slave_0: entered allmulticast mode [ 1184.353261][T15614] bridge_slave_0: entered promiscuous mode [ 1184.393098][T15614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.405851][T15614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.420685][T15614] bridge_slave_1: entered allmulticast mode [ 1184.431583][T15614] bridge_slave_1: entered promiscuous mode [ 1184.497173][ T5775] Bluetooth: hci1: command tx timeout [ 1184.575238][T15614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.613697][T15614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.652150][T15614] team0: Port device team_slave_0 added [ 1184.699239][T15614] team0: Port device team_slave_1 added [ 1184.777592][T15614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.785971][T15614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.822812][T15614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1184.930705][T15614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.948010][T15614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.986297][T15614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1185.070056][ T12] bridge0: port 3(erspan0) entered disabled state [ 1185.098976][ T12] erspan0 (unregistering): left allmulticast mode [ 1185.105452][ T12] erspan0 (unregistering): left promiscuous mode [ 1185.112210][ T12] bridge0: port 3(erspan0) entered disabled state [ 1185.134289][T15614] hsr_slave_0: entered promiscuous mode [ 1185.143218][T15614] hsr_slave_1: entered promiscuous mode [ 1185.149796][T15614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1185.158851][T15614] Cannot create hsr debugfs directory [ 1185.540840][ T12] hsr_slave_0: left promiscuous mode [ 1185.551761][ T12] hsr_slave_1: left promiscuous mode [ 1185.559569][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1185.571843][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1185.584090][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1185.597361][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1185.611160][ T12] bridge_slave_1: left allmulticast mode [ 1185.617388][ T12] bridge_slave_1: left promiscuous mode [ 1185.623214][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.635328][ T12] bridge_slave_0: left allmulticast mode [ 1185.641183][ T12] bridge_slave_0: left promiscuous mode [ 1185.647279][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.669475][ T12] veth1_macvtap: left promiscuous mode [ 1185.676070][ T12] veth0_macvtap: left promiscuous mode [ 1186.092109][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1186.135729][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1186.189758][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1186.273676][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1186.338812][T15687] overlayfs: missing 'workdir' [ 1186.600299][ T5775] Bluetooth: hci1: command tx timeout [ 1188.639063][T15705] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1188.667956][ T5775] Bluetooth: hci1: command tx timeout [ 1188.949253][ T5775] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1189.091656][ T12] bond0 (unregistering): Released all slaves [ 1189.316410][T15702] tipc: Started in network mode [ 1189.321365][T15702] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1189.328532][T15702] tipc: Enabled bearer , priority 10 [ 1189.335012][T15709] netlink: 'syz.2.2535': attribute type 6 has an invalid length. [ 1189.342849][T15709] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2535'. [ 1190.482950][T15614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1190.486097][ T12] IPVS: stop unused estimator thread 0... [ 1190.503955][ T5987] tipc: Node number set to 10136234 [ 1190.564278][T15614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1190.640132][T15614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1190.694693][T15614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1191.297653][T15614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.366646][T15728] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1191.393538][T15614] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.422135][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.429337][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1191.484341][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.491541][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.803697][T15614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1192.950375][T15614] veth0_vlan: entered promiscuous mode [ 1193.009233][T15614] veth1_vlan: entered promiscuous mode [ 1193.086720][T15614] veth0_macvtap: entered promiscuous mode [ 1193.156639][T15614] veth1_macvtap: entered promiscuous mode [ 1193.213407][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.258730][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.295780][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.328529][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.358500][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.397885][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.430739][T15614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1193.490033][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.520853][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.541224][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.597408][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.617462][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.650509][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.058615][T15614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1194.123057][T15759] tipc: Enabling of bearer rejected, already enabled [ 1194.141089][T15614] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.151720][T15614] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.197019][T15614] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.222985][T15614] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.401508][T15762] netlink: 'syz.2.2545': attribute type 6 has an invalid length. [ 1194.409355][T15762] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2545'. [ 1194.466944][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.496370][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.620215][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.635017][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.686515][ T5775] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1196.016979][T15784] netlink: 'syz.1.2550': attribute type 64 has an invalid length. [ 1198.252353][T15803] tipc: Started in network mode [ 1198.687012][T15803] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1198.717413][T15803] tipc: Enabled bearer , priority 10 [ 1199.838240][ T9647] tipc: Node number set to 10136234 [ 1202.227465][T15830] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1206.541577][T15869] tipc: Enabling of bearer rejected, already enabled [ 1210.526248][T15915] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1211.999389][T15924] tipc: Enabling of bearer rejected, already enabled [ 1212.412580][T15939] netlink: 'syz.1.2589': attribute type 64 has an invalid length. [ 1214.641279][T15952] netlink: 'syz.3.2593': attribute type 64 has an invalid length. [ 1215.822261][T15959] tipc: Enabling of bearer rejected, already enabled [ 1216.170223][T15963] netlink: 'syz.0.2596': attribute type 64 has an invalid length. [ 1218.514064][T15976] tipc: Enabling of bearer rejected, already enabled [ 1219.083459][T15982] NILFS (nullb0): couldn't find nilfs on the device [ 1220.243534][T15993] tipc: Enabling of bearer rejected, already enabled [ 1223.180148][T16026] netlink: 'syz.3.2612': attribute type 64 has an invalid length. [ 1223.482121][T16025] netlink: 'syz.2.2613': attribute type 6 has an invalid length. [ 1223.489974][T16025] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2613'. [ 1224.443245][T16036] "syz.3.2616" (16036) uses obsolete ecb(arc4) skcipher [ 1225.707117][ T5773] Bluetooth: hci4: command 0x0406 tx timeout [ 1227.359508][T16061] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1229.469881][T16075] netlink: 'syz.0.2628': attribute type 64 has an invalid length. [ 1230.209987][T16080] comedi comedi3: pcl816: a I/O base address must be specified [ 1230.503233][T16082] syz_tun: entered allmulticast mode [ 1231.117749][T16088] tipc: Enabling of bearer rejected, already enabled [ 1231.368835][T16078] syz_tun: left allmulticast mode [ 1232.474115][T16101] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1234.088690][T16114] netlink: 'syz.2.2642': attribute type 64 has an invalid length. [ 1234.589900][T16106] netlink: 'syz.1.2639': attribute type 64 has an invalid length. [ 1234.737107][T16116] netlink: 'syz.0.2641': attribute type 64 has an invalid length. [ 1235.253260][T16126] syz_tun: entered allmulticast mode [ 1235.316541][ T5775] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1236.134950][T16119] syz_tun: left allmulticast mode [ 1236.532208][ T5775] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1238.094459][T16151] tipc: Enabling of bearer rejected, already enabled [ 1242.330362][T16174] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1242.400666][T16188] NILFS (nullb0): couldn't find nilfs on the device [ 1244.016382][T16198] ufs: You didn't specify the type of your ufs filesystem [ 1244.016382][T16198] [ 1244.016382][T16198] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1244.016382][T16198] [ 1244.016382][T16198] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1244.047382][T16198] ufs: ufstype=old is supported read-only [ 1244.054135][T16198] ufs: ufs_fill_super(): bad magic number [ 1245.716890][ T5837] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1245.783079][T16201] tipc: Enabling of bearer rejected, already enabled [ 1246.643769][ T5837] usb 3-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b [ 1246.670136][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.725959][ T5837] pegasus 3-1:254.0: Missing or invalid endpoints [ 1247.704727][ T787] usb 3-1: USB disconnect, device number 19 [ 1248.447208][T16220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2672'. [ 1248.502208][T16220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2672'. [ 1248.756333][T16220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2672'. [ 1249.229888][T16234] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1251.067353][T16245] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2679'. [ 1251.316486][T16252] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1252.194305][T16258] syzkaller0: entered promiscuous mode [ 1252.200074][T16258] syzkaller0: entered allmulticast mode [ 1256.515496][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 1257.436151][T16295] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1257.828778][T16307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2695'. [ 1258.531747][T16310] netlink: 'syz.1.2696': attribute type 64 has an invalid length. [ 1261.018042][ T5775] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1261.601831][T16333] tipc: Enabling of bearer rejected, already enabled [ 1261.729794][T16335] kvm: pic: level sensitive irq not supported [ 1263.924850][T16361] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1264.331741][T16370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2714'. [ 1264.757242][ T5775] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1265.547922][T16376] tipc: Enabling of bearer rejected, already enabled [ 1266.184674][T16379] tipc: Enabling of bearer rejected, already enabled [ 1267.322774][T16396] Illegal XDP return value 4294967294 on prog (id 35) dev N/A, expect packet loss! [ 1267.976926][T16403] loop2: detected capacity change from 0 to 256 [ 1269.849978][ T5775] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1270.650276][T16434] tipc: Enabling of bearer rejected, already enabled [ 1274.177222][T16453] ======================================================= [ 1274.177222][T16453] WARNING: The mand mount option has been deprecated and [ 1274.177222][T16453] and is ignored by this kernel. Remove the mand [ 1274.177222][T16453] option from the mount to silence this warning. [ 1274.177222][T16453] ======================================================= [ 1278.262018][ T5775] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1280.766800][T16510] tipc: Enabling of bearer rejected, already enabled [ 1282.017044][ T5773] Bluetooth: hci0: command 0x0406 tx timeout [ 1288.221862][ T5775] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1290.985287][T16581] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1294.085265][ T5775] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1294.770231][ T9647] IPVS: starting estimator thread 0... [ 1294.965562][T16620] IPVS: using max 17 ests per chain, 40800 per kthread [ 1295.727128][T16626] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1296.445396][T16631] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1297.496880][ T27] IPVS: starting estimator thread 0... [ 1297.597073][T16640] IPVS: using max 21 ests per chain, 50400 per kthread [ 1300.486957][ T5773] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1300.836886][T16667] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1302.509181][ T5775] Bluetooth: hci1: command 0x0406 tx timeout [ 1305.515718][ T5773] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1315.629306][T16779] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1322.532111][T16819] syzkaller0: entered promiscuous mode [ 1322.542141][T16819] syzkaller0: entered allmulticast mode [ 1322.755783][T16824] loop2: detected capacity change from 0 to 512 [ 1322.930424][T16824] EXT4-fs: Ignoring removed bh option [ 1322.948723][T16824] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1323.624435][ T5761] IPVS: starting estimator thread 0... [ 1323.778919][T16824] EXT4-fs (loop2): 1 truncate cleaned up [ 1323.786539][T16824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1323.807363][T16827] IPVS: using max 27 ests per chain, 64800 per kthread [ 1324.790196][T15070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1325.665741][T16843] loop1: detected capacity change from 0 to 512 [ 1325.701465][T16843] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1325.732003][T16843] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1325.757236][T16843] EXT4-fs (loop1): 1 truncate cleaned up [ 1325.767482][T16843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1326.552701][T14781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1331.669536][ T5773] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1333.337173][ T5815] IPVS: starting estimator thread 0... [ 1333.509471][T16929] IPVS: using max 21 ests per chain, 50400 per kthread [ 1334.999113][ T5773] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1339.464701][T16973] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1339.772324][T16976] loop1: detected capacity change from 0 to 512 [ 1339.799773][T16976] EXT4-fs: Ignoring removed bh option [ 1340.688044][T16976] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1340.750167][T16976] EXT4-fs (loop1): 1 truncate cleaned up [ 1340.790102][T16976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1343.472420][T14781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1344.251741][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1347.450494][T17032] netlink: 'syz.0.2891': attribute type 64 has an invalid length. [ 1347.486273][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1347.494339][T17034] loop2: detected capacity change from 0 to 512 [ 1347.511619][T17036] loop3: detected capacity change from 0 to 512 [ 1347.520028][T17034] EXT4-fs: Ignoring removed bh option [ 1347.537935][T17034] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1347.549813][T17036] EXT4-fs: Ignoring removed bh option [ 1347.564739][T17036] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1347.590105][T17036] EXT4-fs (loop3): 1 truncate cleaned up [ 1347.608203][T17036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1347.653291][T17034] EXT4-fs (loop2): 1 truncate cleaned up [ 1347.696603][T17034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1351.619996][T15070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1351.639039][T15614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1353.781275][T17061] loop1: detected capacity change from 0 to 8192 [ 1357.490425][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1358.922866][T17109] loop1: detected capacity change from 0 to 512 [ 1358.938196][T17109] EXT4-fs: Ignoring removed bh option [ 1358.948466][T17109] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1358.981957][T17109] EXT4-fs (loop1): 1 truncate cleaned up [ 1359.004504][T17109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1360.042752][T14781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1360.575278][T17128] loop1: detected capacity change from 0 to 1024 [ 1360.620505][T17128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1360.679638][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 1360.679650][ T28] audit: type=1800 audit(1781983749.702:503): pid=17128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2920" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1360.750930][T14781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1360.822347][T17133] loop2: detected capacity change from 0 to 1024 [ 1360.903025][T17133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1361.021825][ T28] audit: type=1800 audit(1781983750.042:504): pid=17133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2921" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1362.055269][T15070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1362.181409][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1362.513374][ T5773] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1363.687705][T17162] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1364.552489][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1365.887305][T17180] netlink: 'syz.3.2932': attribute type 64 has an invalid length. [ 1365.935670][T17179] loop0: detected capacity change from 0 to 8192 [ 1367.724930][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1368.875414][T17205] loop0: detected capacity change from 0 to 512 [ 1369.318996][T17205] EXT4-fs: Ignoring removed bh option [ 1369.394593][T17205] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1369.443096][T17205] EXT4-fs (loop0): 1 truncate cleaned up [ 1369.482937][T17205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1370.446994][ T5773] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1371.862596][T17218] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1372.355083][T15349] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1375.774876][T17253] loop1: detected capacity change from 0 to 1024 [ 1376.228507][T17253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1376.288254][ T28] audit: type=1800 audit(1781983765.312:505): pid=17253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2955" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1376.481225][T14781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1378.171051][T17271] loop2: detected capacity change from 0 to 1024 [ 1378.222231][T17271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1378.252648][ T28] audit: type=1800 audit(1781983767.272:506): pid=17271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2960" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1378.388569][T15070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.104056][T17288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2966'. [ 1382.151478][T17307] loop1: detected capacity change from 0 to 512 [ 1382.167044][T17307] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1382.283876][T17307] EXT4-fs (loop1): 1 truncate cleaned up [ 1382.763919][T17307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1382.854370][ T5773] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1383.120878][T17320] loop0: detected capacity change from 0 to 512 [ 1383.147278][T17320] EXT4-fs: Ignoring removed bh option [ 1383.162773][T17320] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1383.204075][T14781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1383.232655][T17320] EXT4-fs (loop0): 1 truncate cleaned up [ 1383.271599][T17320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1386.454657][T15349] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1387.674384][T17333] loop1: detected capacity change from 0 to 8192 [ 1387.842510][T17345] syzkaller0: entered promiscuous mode [ 1387.857121][T17345] syzkaller0: entered allmulticast mode [ 1387.901952][ T5773] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1387.907619][ T5773] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1389.219096][T17362] loop0: detected capacity change from 0 to 512 [ 1389.427060][T17362] EXT4-fs: Ignoring removed bh option [ 1389.555082][T17362] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1389.983803][T17362] EXT4-fs (loop0): 1 truncate cleaned up [ 1389.991264][T17362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1392.453058][T15349] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1392.494230][T17379] netlink: 'syz.2.2987': attribute type 64 has an invalid length. [ 1393.799804][ T5773] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1393.964549][T17398] syzkaller0: entered promiscuous mode [ 1393.977932][T17398] syzkaller0: entered allmulticast mode [ 1394.402293][T17403] loop2: detected capacity change from 0 to 512 [ 1394.440206][T17403] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1394.529110][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1394.574264][T17403] EXT4-fs (loop2): 1 truncate cleaned up [ 1394.591380][T17403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1394.890691][T15070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.343108][T17447] loop0: detected capacity change from 0 to 512 [ 1399.363190][T17447] EXT4-fs: Ignoring removed bh option [ 1399.381890][T17447] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1399.400915][ T5773] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1399.429815][T17447] EXT4-fs (loop0): 1 truncate cleaned up [ 1399.433746][T17451] loop3: detected capacity change from 0 to 1024 [ 1399.448270][T17447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1399.561602][T17451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1399.917047][ T28] audit: type=1800 audit(1781983788.912:507): pid=17451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3008" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1399.999303][T15614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1401.703679][T15349] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1403.883359][T17496] loop1: detected capacity change from 0 to 512 [ 1403.902380][T17496] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1403.945597][T17496] EXT4-fs (loop1): 1 truncate cleaned up [ 1403.956458][T17496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1404.916956][ T5773] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1405.709341][T14781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1408.556453][T17542] loop2: detected capacity change from 0 to 512 [ 1408.823349][T17542] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1409.044840][T17542] EXT4-fs (loop2): 1 truncate cleaned up [ 1409.084569][T17548] loop1: detected capacity change from 0 to 512 [ 1409.090877][T17542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1409.131051][T17548] EXT4-fs: Ignoring removed bh option [ 1409.189503][T17548] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1409.273317][T17548] EXT4-fs (loop1): 1 truncate cleaned up [ 1409.300552][T17548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1409.340299][ T5773] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1409.471308][T15070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1411.350843][ T5773] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1411.552945][T14781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1414.252908][T17598] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1416.589431][T17619] netlink: 'syz.3.3053': attribute type 64 has an invalid length. [ 1417.421781][ T5773] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1422.143690][ T5773] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1422.653193][T17678] loop3: detected capacity change from 0 to 512 [ 1422.681572][T17678] EXT4-fs: Ignoring removed bh option [ 1422.853208][T17678] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1423.221301][T17678] EXT4-fs (loop3): 1 truncate cleaned up [ 1423.416297][T17678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1425.968713][T15614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1429.861409][ T5773] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1430.864925][T17711] Set syz1 is full, maxelem 65536 reached [ 1431.889952][T17733] syzkaller0: entered promiscuous mode [ 1431.905302][T17733] syzkaller0: entered allmulticast mode [ 1434.566918][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1437.188434][T17779] syzkaller0: entered promiscuous mode [ 1437.210967][T17779] syzkaller0: entered allmulticast mode [ 1437.330141][T17770] Set syz1 is full, maxelem 65536 reached [ 1438.792848][ T5773] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1440.310220][T17813] loop0: detected capacity change from 0 to 8192 [ 1442.799644][ T5773] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1442.840543][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1443.560442][T17846] NILFS (nullb0): couldn't find nilfs on the device [ 1444.240204][T17750] Set syz1 is full, maxelem 65536 reached [ 1444.984867][T17867] netlink: 'syz.2.3130': attribute type 64 has an invalid length. [ 1446.828598][ T5773] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1447.205631][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1448.390186][T17902] syzkaller0: entered promiscuous mode [ 1448.426914][T17902] syzkaller0: entered allmulticast mode [ 1450.552729][T17923] Set syz1 is full, maxelem 65536 reached [ 1450.898151][ T5773] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1451.244233][T17937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3143'. [ 1451.565834][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1451.607130][T17937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3143'. [ 1451.752225][T17948] syzkaller0: entered promiscuous mode [ 1451.760763][T17948] syzkaller0: entered allmulticast mode [ 1455.698847][ T5773] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1457.141797][T17998] loop0: detected capacity change from 0 to 512 [ 1457.166116][T17998] EXT4-fs: Ignoring removed bh option [ 1457.192703][T17998] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1457.264370][T17998] EXT4-fs (loop0): 1 truncate cleaned up [ 1457.283091][T17998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1459.329376][T15349] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.746503][T18045] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1463.821756][ T5773] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1468.264164][T18081] loop2: detected capacity change from 0 to 512 [ 1468.339055][T18081] EXT4-fs: Ignoring removed bh option [ 1468.377038][T18081] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1468.447205][T18081] EXT4-fs (loop2): 1 truncate cleaned up [ 1468.454251][T18081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1470.999737][T15070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1471.279660][ T5773] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1472.427512][T18114] loop1: detected capacity change from 0 to 512 [ 1472.455483][T18114] EXT4-fs: Ignoring removed bh option [ 1472.485509][T18114] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1472.906388][T18114] EXT4-fs (loop1): 1 truncate cleaned up [ 1473.005251][T18114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1475.051196][T14781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1475.216370][T18130] netlink: 'syz.3.3197': attribute type 64 has an invalid length. [ 1479.401651][T18156] loop3: detected capacity change from 0 to 8192 [ 1480.658118][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1484.764559][T18199] netlink: 'syz.0.3214': attribute type 64 has an invalid length. [ 1485.458578][T18197] Set syz1 is full, maxelem 65536 reached [ 1486.867130][T18206] loop3: detected capacity change from 0 to 8192 [ 1486.940057][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1490.082852][T18226] Set syz1 is full, maxelem 65536 reached [ 1491.913454][T18231] Set syz1 is full, maxelem 65536 reached [ 1492.259936][T18242] loop1: detected capacity change from 0 to 512 [ 1492.297553][T18242] EXT4-fs: Ignoring removed bh option [ 1492.336981][T18242] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1492.435129][T18242] EXT4-fs (loop1): 1 truncate cleaned up [ 1492.544770][T18242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1493.189839][ T5773] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1493.192423][T14781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1495.271314][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1496.359141][T18278] Set syz1 is full, maxelem 65536 reached [ 1497.342535][T18287] loop2: detected capacity change from 0 to 512 [ 1497.373241][T18287] EXT4-fs: Ignoring removed bh option [ 1497.397784][T18287] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1497.837927][T18287] EXT4-fs (loop2): 1 truncate cleaned up [ 1497.844881][T18287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1498.084444][T18293] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1500.105688][T15070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1502.404860][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1502.890778][T18318] Set syz1 is full, maxelem 65536 reached [ 1507.347473][ T5773] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1507.709492][T18366] Set syz1 is full, maxelem 65536 reached [ 1512.245820][T18400] Set syz1 is full, maxelem 65536 reached [ 1512.265621][ T5773] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1513.699499][T18424] loop1: detected capacity change from 0 to 2048 [ 1513.850447][T18424] loop1: detected capacity change from 0 to 512 [ 1513.884131][T18424] EXT4-fs: Ignoring removed bh option [ 1513.960821][T18424] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1513.986969][T18424] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 1514.013162][T18424] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3276: Corrupt directory, running e2fsck is recommended [ 1514.092036][T18424] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1514.164802][T18424] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.3276: corrupted in-inode xattr: e_name out of bounds [ 1514.224732][T18424] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.3276: couldn't read orphan inode 15 (err -117) [ 1514.266392][T18424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1515.228088][T14781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1516.046566][T18445] netlink: 'syz.0.3282': attribute type 64 has an invalid length. [ 1516.912247][T18448] Set syz1 is full, maxelem 65536 reached [ 1517.168264][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1519.500159][T18482] loop1: detected capacity change from 0 to 8192 [ 1521.298219][ T5773] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1521.301116][ T28] audit: type=1800 audit(1781983910.202:508): pid=18495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3293" name="file1" dev="loop1" ino=1048624 res=0 errno=0 [ 1521.304371][T18499] netlink: 'syz.0.3296': attribute type 64 has an invalid length. [ 1521.465938][T18484] Set syz1 is full, maxelem 65536 reached [ 1522.525101][T18510] loop2: detected capacity change from 0 to 2048 [ 1525.714413][T18535] Set syz1 is full, maxelem 65536 reached [ 1526.128791][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1526.724366][T18556] loop0: detected capacity change from 0 to 512 [ 1526.762127][T18556] EXT4-fs: Ignoring removed bh option [ 1526.776369][T18556] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1526.960780][T18556] EXT4-fs (loop0): 1 truncate cleaned up [ 1526.980095][T18556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1527.609652][T18564] netlink: 'syz.2.3314': attribute type 64 has an invalid length. [ 1528.798266][T15349] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1530.387671][T18577] Set syz1 is full, maxelem 65536 reached [ 1532.705868][T18596] loop3: detected capacity change from 0 to 512 [ 1532.733959][T18596] EXT4-fs: Ignoring removed bh option [ 1532.769537][T18596] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1532.813015][T18596] EXT4-fs (loop3): 1 truncate cleaned up [ 1532.820235][T18596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1534.993580][T15614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1535.074531][T18617] netlink: 'syz.2.3328': attribute type 64 has an invalid length. [ 1535.211244][T18618] loop0: detected capacity change from 0 to 2048 [ 1537.752997][T18616] Set syz1 is full, maxelem 65536 reached [ 1540.783131][T18658] Set syz1 is full, maxelem 65536 reached [ 1541.790560][T18671] netlink: 'syz.2.3348': attribute type 64 has an invalid length. [ 1544.391612][ T5773] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1544.595542][T18692] Set syz1 is full, maxelem 65536 reached [ 1545.076239][T18705] syzkaller0: entered promiscuous mode [ 1545.086140][T18705] syzkaller0: entered allmulticast mode [ 1548.889689][T18733] syz.1.3366 (18733) used greatest stack depth: 19112 bytes left [ 1549.570559][T18736] netlink: 'syz.1.3367': attribute type 64 has an invalid length. [ 1550.516267][T18744] loop3: detected capacity change from 0 to 8192 [ 1551.421179][ T28] audit: type=1800 audit(1781983940.442:509): pid=18750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3371" name="file1" dev="loop3" ino=1048626 res=0 errno=0 [ 1552.150268][T18762] syzkaller0: entered promiscuous mode [ 1552.156256][T18762] syzkaller0: entered allmulticast mode [ 1552.383477][T18764] loop1: detected capacity change from 0 to 2048 [ 1552.563384][T18764] loop1: detected capacity change from 0 to 512 [ 1552.594580][T18764] EXT4-fs: Ignoring removed bh option [ 1552.655740][T18764] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1552.715514][T18764] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 1552.750227][T18764] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3377: Corrupt directory, running e2fsck is recommended [ 1552.826175][T18764] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1552.861670][T18764] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.3377: corrupted in-inode xattr: e_name out of bounds [ 1552.910796][T18764] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.3377: couldn't read orphan inode 15 (err -117) [ 1552.987988][T18764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1553.934564][T14781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1554.115206][ T5773] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1556.902356][T18796] syz.3.3384 (18796) used greatest stack depth: 18984 bytes left [ 1557.675026][T18800] loop3: detected capacity change from 0 to 8192 [ 1561.512075][T18820] Set syz1 is full, maxelem 65536 reached [ 1564.559422][T18848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3400'. [ 1564.710834][T18849] syzkaller0: entered promiscuous mode [ 1564.722625][T18849] syzkaller0: entered allmulticast mode [ 1564.782638][T18848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3400'. [ 1565.121995][T18848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3400'. [ 1565.958472][ T5773] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1567.811049][T18870] loop2: detected capacity change from 0 to 2048 [ 1567.940277][T16847] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1568.612067][T18870] loop2: detected capacity change from 0 to 512 [ 1568.652236][T18870] EXT4-fs: Ignoring removed bh option [ 1568.746231][T18870] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1568.761218][T18870] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 1568.784264][T18870] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3406: Corrupt directory, running e2fsck is recommended [ 1568.817303][T18870] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1568.825600][T18870] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.3406: corrupted in-inode xattr: e_name out of bounds [ 1568.852915][T18870] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.3406: couldn't read orphan inode 15 (err -117) [ 1568.882267][T18870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1571.081957][T15070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1572.582306][T18888] netlink: 'syz.1.3410': attribute type 64 has an invalid length. [ 1573.665778][T18900] xt_hashlimit: size too large, truncated to 1048576 [ 1576.208406][T18912] xt_hashlimit: size too large, truncated to 1048576 [ 1579.192855][T18929] syzkaller0: entered promiscuous mode [ 1579.206757][T18929] syzkaller0: entered allmulticast mode [ 1579.362221][T18937] loop2: detected capacity change from 0 to 2048 [ 1584.244589][T18964] netlink: 'syz.3.3428': attribute type 64 has an invalid length. [ 1586.195053][T18986] syzkaller0: entered promiscuous mode [ 1586.200714][T18986] syzkaller0: entered allmulticast mode [ 1591.262965][T19020] xt_hashlimit: size too large, truncated to 1048576 [ 1595.455531][T19044] loop0: detected capacity change from 0 to 8192 [ 1597.179201][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1601.370979][T19083] loop1: detected capacity change from 0 to 32768 [ 1601.421921][T19083] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.3457 (19083) [ 1601.481719][T19103] netlink: 'syz.3.3460': attribute type 64 has an invalid length. [ 1601.502075][T19083] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1601.701998][T19083] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1602.452689][T19083] BTRFS info (device loop1): allowing degraded mounts [ 1602.469017][T19083] BTRFS info (device loop1): turning on flush-on-commit [ 1602.953056][T19083] BTRFS info (device loop1): max_inline at 0 [ 1602.985633][T19083] BTRFS info (device loop1): setting nodatasum [ 1603.046747][T19083] BTRFS info (device loop1): turning on sync discard [ 1603.053869][T19083] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1603.066266][T19083] BTRFS info (device loop1): trying to use backup root at mount time [ 1603.136867][T19083] BTRFS info (device loop1): using free space tree [ 1603.144555][T19083] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1603.146842][T19083] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1603.199112][T19083] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1603.234124][T19083] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1603.245830][T19083] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1603.257115][T19083] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1604.168418][T19083] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1604.186829][T19083] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1604.197866][T19083] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1604.208716][T19083] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1604.223697][T19083] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1604.335868][T19083] BTRFS error (device loop1): open_ctree failed: -12 [ 1604.946880][ T5761] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1605.136737][ T5761] usb 1-1: Using ep0 maxpacket: 32 [ 1605.184469][ T5761] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1605.623040][ T5761] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1605.636402][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1605.646891][ T5761] usb 1-1: Product: syz [ 1605.651467][ T5761] usb 1-1: Manufacturer: syz [ 1605.656180][ T5761] usb 1-1: SerialNumber: syz [ 1605.688969][ T5761] usb 1-1: config 0 descriptor?? [ 1605.715135][T19129] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1606.738785][ T5761] usb 1-1: USB disconnect, device number 19 [ 1607.704009][ T5987] kworker/dying (5987) used greatest stack depth: 15992 bytes left [ 1609.176948][T10046] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1609.390990][T10046] usb 3-1: Using ep0 maxpacket: 32 [ 1609.426836][T10046] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1609.462285][T10046] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1609.485160][T19165] loop1: detected capacity change from 0 to 32768 [ 1609.511058][T10046] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1609.520068][T19165] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.3473 (19165) [ 1609.558478][T19165] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1609.582784][T10046] usb 3-1: Product: syz [ 1609.589888][T19165] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1609.608584][T19165] BTRFS info (device loop1): allowing degraded mounts [ 1609.613269][T10046] usb 3-1: Manufacturer: syz [ 1609.626126][T19165] BTRFS info (device loop1): turning on flush-on-commit [ 1609.636273][T19165] BTRFS info (device loop1): max_inline at 0 [ 1609.642543][T10046] usb 3-1: SerialNumber: syz [ 1609.644174][T19165] BTRFS info (device loop1): setting nodatasum [ 1609.668415][T19165] BTRFS info (device loop1): turning on sync discard [ 1609.670770][T10046] usb 3-1: config 0 descriptor?? [ 1609.702608][T19165] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1609.714624][T19176] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1609.732729][T19165] BTRFS info (device loop1): trying to use backup root at mount time [ 1609.772239][T19165] BTRFS info (device loop1): using free space tree [ 1609.871552][T19209] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3480'. [ 1610.011802][T19165] BTRFS info (device loop1): enabling ssd optimizations [ 1610.556585][ T9647] usb 3-1: USB disconnect, device number 20 [ 1610.615678][ T28] audit: type=1800 audit(1781983999.632:510): pid=19165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3473" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 1610.742406][T14781] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1611.082454][ T5761] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1611.287030][ T5761] usb 1-1: Using ep0 maxpacket: 32 [ 1611.308467][ T5761] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1611.365681][ T5761] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1611.375155][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1611.384281][ T5761] usb 1-1: Product: syz [ 1611.398849][ T5761] usb 1-1: Manufacturer: syz [ 1611.412312][ T5761] usb 1-1: SerialNumber: syz [ 1611.455550][ T5761] usb 1-1: config 0 descriptor?? [ 1611.476741][T19215] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1611.807342][T19228] netlink: 'syz.2.3484': attribute type 64 has an invalid length. [ 1612.026242][ T5761] usb 1-1: USB disconnect, device number 20 [ 1616.287892][T19255] Set syz1 is full, maxelem 65536 reached [ 1617.396929][ T5761] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1617.590090][ T5761] usb 3-1: Using ep0 maxpacket: 32 [ 1617.598762][ T5761] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1617.648523][ T5761] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1617.709628][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1617.731213][ T5761] usb 3-1: Product: syz [ 1617.735454][ T5761] usb 3-1: Manufacturer: syz [ 1618.714211][ T5761] usb 3-1: SerialNumber: syz [ 1618.734161][ T5761] usb 3-1: config 0 descriptor?? [ 1619.708609][T19263] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1620.986964][T19284] usb 3-1: USB disconnect, device number 21 [ 1623.827200][ T5761] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1624.085733][ T5761] usb 3-1: Using ep0 maxpacket: 32 [ 1624.100140][ T5761] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1624.139683][ T5761] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1624.223254][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1624.649956][ T5761] usb 3-1: Product: syz [ 1624.655156][ T5761] usb 3-1: Manufacturer: syz [ 1624.663904][ T5761] usb 3-1: SerialNumber: syz [ 1624.696680][ T5761] usb 3-1: config 0 descriptor?? [ 1624.738212][T19307] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1624.798523][T19284] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1625.076825][T19284] usb 4-1: Using ep0 maxpacket: 32 [ 1625.159710][T19284] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1625.233579][T19284] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1625.260638][T19284] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1625.284083][T19284] usb 4-1: Product: syz [ 1625.292775][T19284] usb 4-1: Manufacturer: syz [ 1625.300019][T19284] usb 4-1: SerialNumber: syz [ 1625.311837][T19284] usb 4-1: config 0 descriptor?? [ 1625.318090][T19321] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1625.330846][T19284] chaoskey 4-1:0.0: Unable to register with hwrng [ 1625.349880][T19284] usb 3-1: USB disconnect, device number 22 [ 1625.529116][ T9647] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1625.549142][ T5761] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1625.591895][ T5849] usb 4-1: USB disconnect, device number 30 [ 1625.726783][ T9647] usb 2-1: Using ep0 maxpacket: 32 [ 1625.733424][ T9647] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1625.745980][ T9647] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1625.746764][ T5761] usb 1-1: Using ep0 maxpacket: 32 [ 1625.755331][ T9647] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1625.768891][ T9647] usb 2-1: Product: syz [ 1625.773075][ T9647] usb 2-1: Manufacturer: syz [ 1625.774099][ T5761] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1625.778071][ T9647] usb 2-1: SerialNumber: syz [ 1625.798055][ T9647] usb 2-1: config 0 descriptor?? [ 1625.803188][ T5761] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1625.804888][T19328] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1625.812348][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1625.829355][ T5761] usb 1-1: Product: syz [ 1625.833550][ T5761] usb 1-1: Manufacturer: syz [ 1625.838317][ T5761] usb 1-1: SerialNumber: syz [ 1625.846953][ T5761] usb 1-1: config 0 descriptor?? [ 1625.852850][T19331] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1625.865398][ T5761] chaoskey 1-1:0.0: Unable to register with hwrng [ 1626.413592][ T5761] usb 2-1: USB disconnect, device number 24 [ 1626.508914][T19224] usb 1-1: USB disconnect, device number 21 [ 1627.892814][ T5773] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1629.037666][T19378] netlink: 'syz.1.3521': attribute type 64 has an invalid length. [ 1629.105576][T19354] Set syz1 is full, maxelem 65536 reached [ 1630.512399][T19393] overlayfs: failed to resolve './bus': -2 [ 1632.418117][T19424] netlink: 'syz.3.3534': attribute type 64 has an invalid length. [ 1634.606731][T19224] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1634.796879][T19224] usb 1-1: Using ep0 maxpacket: 32 [ 1634.819285][T19224] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1634.833587][T19224] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1634.843543][T19224] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1634.852265][T19224] usb 1-1: Product: syz [ 1634.857058][T19224] usb 1-1: Manufacturer: syz [ 1634.861871][T19224] usb 1-1: SerialNumber: syz [ 1634.883448][T19224] usb 1-1: config 0 descriptor?? [ 1634.894466][T19432] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1635.172371][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1635.243173][ T9647] usb 1-1: USB disconnect, device number 22 [ 1636.439582][T19451] Set syz1 is full, maxelem 65536 reached [ 1636.603150][T19465] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3546'. [ 1637.558850][T19479] loop3: detected capacity change from 0 to 16 [ 1638.766100][T19483] netlink: 'syz.0.3551': attribute type 64 has an invalid length. [ 1639.165327][T19477] loop2: detected capacity change from 0 to 32768 [ 1639.248526][T19477] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3550 (19477) [ 1639.361907][T19477] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1639.376478][T19477] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1639.414826][T19477] BTRFS info (device loop2): allowing degraded mounts [ 1639.435840][T19477] BTRFS info (device loop2): turning on flush-on-commit [ 1639.489054][T19477] BTRFS info (device loop2): max_inline at 0 [ 1639.495117][T19477] BTRFS info (device loop2): setting nodatasum [ 1639.517537][T19477] BTRFS info (device loop2): turning on sync discard [ 1639.545472][T19477] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1639.584936][T19477] BTRFS info (device loop2): trying to use backup root at mount time [ 1639.614706][T19477] BTRFS info (device loop2): using free space tree [ 1640.226376][T19477] BTRFS info (device loop2): enabling ssd optimizations [ 1640.482818][T15070] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1640.560992][T19523] xt_hashlimit: size too large, truncated to 1048576 [ 1640.565077][T19491] Set syz1 is full, maxelem 65536 reached [ 1641.069631][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1641.116261][ T5773] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1643.210137][T19563] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3565'. [ 1644.224205][T19575] netlink: 'syz.2.3567': attribute type 64 has an invalid length. [ 1644.563735][ T5773] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1644.906084][ T5773] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1647.742695][T19619] loop1: detected capacity change from 0 to 2048 [ 1648.125761][T19624] loop1: detected capacity change from 0 to 512 [ 1648.136252][T19624] EXT4-fs: Ignoring removed bh option [ 1648.196866][T19624] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1648.216690][T19624] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 1648.227046][T19624] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3581: Corrupt directory, running e2fsck is recommended [ 1648.244100][T19624] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1648.253316][T19624] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.3581: corrupted in-inode xattr: e_name out of bounds [ 1648.267994][T19624] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.3581: couldn't read orphan inode 15 (err -117) [ 1648.302033][T19624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1648.342862][T19613] Set syz1 is full, maxelem 65536 reached [ 1648.606014][T19632] netlink: 'syz.0.3583': attribute type 64 has an invalid length. [ 1648.836726][ T9647] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1648.887626][ T5773] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1649.026880][ T9647] usb 3-1: Using ep0 maxpacket: 32 [ 1649.059877][ T9647] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1649.082918][ T9647] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1649.102039][ T9647] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1649.121941][ T9647] usb 3-1: Product: syz [ 1649.126411][ T9647] usb 3-1: Manufacturer: syz [ 1649.136003][ T9647] usb 3-1: SerialNumber: syz [ 1649.156571][ T9647] usb 3-1: config 0 descriptor?? [ 1649.166051][T19630] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1649.221010][T14781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1649.510554][ T9647] usb 3-1: USB disconnect, device number 23 [ 1650.617231][T19659] loop0: detected capacity change from 0 to 32768 [ 1651.595866][T19659] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.3588 (19659) [ 1651.632310][T19659] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1651.642507][T19659] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1651.651195][T19659] BTRFS info (device loop0): force clearing of disk cache [ 1651.658366][T19659] BTRFS info (device loop0): enabling auto defrag [ 1651.664786][T19659] BTRFS info (device loop0): enabling disk space caching [ 1651.671968][T19659] BTRFS info (device loop0): disk space caching is enabled [ 1652.226577][T19659] BTRFS info (device loop0): enabling ssd optimizations [ 1652.238591][T19659] BTRFS info (device loop0): rebuilding free space tree [ 1652.293537][T19659] BTRFS info (device loop0): disabling free space tree [ 1652.300827][T19659] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1652.310999][T19659] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1653.061263][T15349] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1653.062259][ T7876] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 1653.724921][T19696] syzkaller0: entered promiscuous mode [ 1653.751059][T19696] syzkaller0: entered allmulticast mode [ 1653.763307][T19679] Set syz1 is full, maxelem 65536 reached [ 1653.790629][T19699] netlink: 'syz.2.3596': attribute type 64 has an invalid length. [ 1654.079194][ T5773] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1655.500589][T19700] Set syz1 is full, maxelem 65536 reached [ 1655.947926][T19720] loop2: detected capacity change from 0 to 32768 [ 1656.038262][T19720] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1656.950268][ T28] audit: type=1800 audit(1781984045.842:511): pid=19724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3602" name="file1" dev="loop2" ino=17059 res=0 errno=0 [ 1657.466209][T15070] ocfs2: Unmounting device (7,2) on (node local) [ 1661.720007][T19735] Set syz1 is full, maxelem 65536 reached [ 1661.847710][ T9647] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1661.936776][ T5849] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1662.067012][ T9647] usb 1-1: Using ep0 maxpacket: 32 [ 1662.106141][ T9647] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1662.196797][ T5849] usb 4-1: Using ep0 maxpacket: 32 [ 1662.211768][ T5849] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1662.281260][ T9647] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1662.291605][ T5849] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1662.302708][ T9647] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1662.311006][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1662.324603][ T9647] usb 1-1: Product: syz [ 1662.329086][ T5849] usb 4-1: Product: syz [ 1662.333278][ T9647] usb 1-1: Manufacturer: syz [ 1662.340951][ T5849] usb 4-1: Manufacturer: syz [ 1662.345572][ T9647] usb 1-1: SerialNumber: syz [ 1662.350328][ T5849] usb 4-1: SerialNumber: syz [ 1662.361587][ T9647] usb 1-1: config 0 descriptor?? [ 1662.376272][T19738] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1662.387708][ T5849] usb 4-1: config 0 descriptor?? [ 1662.412924][T19740] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1662.447505][ T5849] chaoskey 4-1:0.0: Unable to register with hwrng [ 1662.743043][ T5849] usb 1-1: USB disconnect, device number 23 [ 1662.747966][T19752] loop1: detected capacity change from 0 to 2048 [ 1662.778360][T19752] loop1: detected capacity change from 0 to 512 [ 1662.781854][ T9647] usb 4-1: USB disconnect, device number 31 [ 1662.787789][T19752] EXT4-fs: Ignoring removed bh option [ 1662.829590][T19752] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1662.852848][T19752] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 1662.863184][T19752] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3612: Corrupt directory, running e2fsck is recommended [ 1662.882475][T19752] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1662.913196][T19752] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.3612: corrupted in-inode xattr: e_name out of bounds [ 1662.940501][T19752] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.3612: couldn't read orphan inode 15 (err -117) [ 1662.957655][T19752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1663.254911][T19754] loop2: detected capacity change from 0 to 32768 [ 1663.284362][T19754] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1663.331504][ T28] audit: type=1800 audit(1781984052.352:512): pid=19754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3611" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 1663.480621][T15070] ocfs2: Unmounting device (7,2) on (node local) [ 1663.735216][T19767] xt_hashlimit: size too large, truncated to 1048576 [ 1666.177828][T19756] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1666.320975][T19772] syzkaller0: entered promiscuous mode [ 1666.326486][T19772] syzkaller0: entered allmulticast mode [ 1666.454922][T14781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1666.537710][T19778] loop2: detected capacity change from 0 to 128 [ 1666.594792][T19778] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1666.733865][T19778] ext4 filesystem being mounted at /294/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1667.108265][T19776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1667.492584][T19788] loop0: detected capacity change from 0 to 32768 [ 1667.510482][T19791] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3622'. [ 1667.543697][T19788] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1667.998747][ T28] audit: type=1800 audit(1781984057.012:513): pid=19798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3620" name="file1" dev="loop0" ino=17059 res=0 errno=0 [ 1668.790821][T15349] ocfs2: Unmounting device (7,0) on (node local) [ 1669.906522][T19792] loop1: detected capacity change from 0 to 32768 [ 1670.094650][T19792] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1670.196931][T19792] XFS (loop1): Ending clean mount [ 1670.519145][T14781] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1670.598833][T19808] loop0: detected capacity change from 0 to 32768 [ 1670.707893][T19808] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1670.804750][T19808] XFS (loop0): Ending clean mount [ 1671.161966][T15349] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1676.798085][T19872] loop0: detected capacity change from 0 to 128 [ 1676.855219][T19872] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1676.927071][T19872] ext4 filesystem being mounted at /292/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1677.223962][T19872] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1677.680767][T19877] loop1: detected capacity change from 0 to 32768 [ 1678.551597][T19877] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1678.678674][T19877] XFS (loop1): Ending clean mount [ 1678.855296][T14781] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1680.529910][T19901] loop1: detected capacity change from 0 to 32768 [ 1680.809755][T19908] overlayfs: failed to clone upperpath [ 1681.158797][T19911] overlayfs: failed to clone upperpath [ 1681.419744][T19901] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1682.356721][ T28] audit: type=1800 audit(1781984070.972:514): pid=19925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3647" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 1682.589091][T14781] ocfs2: Unmounting device (7,1) on (node local) [ 1683.807325][T19935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1683.822863][T19935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1683.831031][T19935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1683.872212][T19935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1683.883310][T19935] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1683.892568][T19935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1685.154080][T19945] loop1: detected capacity change from 0 to 32768 [ 1685.209584][T19945] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1686.101151][T19935] Bluetooth: hci3: command tx timeout [ 1686.391862][ T28] audit: type=1800 audit(1781984075.392:515): pid=19961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3660" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 1687.096864][T14781] ocfs2: Unmounting device (7,1) on (node local) [ 1687.143589][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.422143][T19932] chnl_net:caif_netlink_parms(): no params data found [ 1688.083007][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.189148][T19935] Bluetooth: hci3: command tx timeout [ 1689.016868][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.564546][T19995] loop1: detected capacity change from 0 to 32768 [ 1690.911044][T19935] Bluetooth: hci3: command tx timeout [ 1691.773166][T19995] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3674 (19995) [ 1691.794826][T19995] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1691.805024][T19995] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1691.813666][T19995] BTRFS info (device loop1): force clearing of disk cache [ 1691.820837][T19995] BTRFS info (device loop1): enabling auto defrag [ 1691.827265][T19995] BTRFS info (device loop1): enabling disk space caching [ 1691.834268][T19995] BTRFS info (device loop1): disk space caching is enabled [ 1692.069464][T19995] BTRFS info (device loop1): enabling ssd optimizations [ 1692.078619][T19995] BTRFS info (device loop1): rebuilding free space tree [ 1692.294528][T19995] BTRFS info (device loop1): disabling free space tree [ 1692.301679][T19995] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1692.311431][T19995] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1692.657159][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.859497][T19932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.898306][T19932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.905564][T19932] bridge_slave_0: entered allmulticast mode [ 1692.946992][T19932] bridge_slave_0: entered promiscuous mode [ 1692.994512][T19935] Bluetooth: hci3: command tx timeout [ 1693.003597][T14781] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1693.030791][T13191] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 1693.125848][T19932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1693.177336][T19932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1693.184620][T19932] bridge_slave_1: entered allmulticast mode [ 1693.253473][T19932] bridge_slave_1: entered promiscuous mode [ 1693.402644][T19932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1694.340092][T19932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1694.535671][T19932] team0: Port device team_slave_0 added [ 1694.609201][T20043] loop1: detected capacity change from 0 to 128 [ 1694.650740][T19932] team0: Port device team_slave_1 added [ 1694.701916][T20043] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1694.752778][T20043] ext4 filesystem being mounted at /341/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1694.811566][T19932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1694.843481][T19932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1694.918591][T19932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1694.978191][ T12] tipc: Disabling bearer [ 1694.986170][ T12] tipc: Left network mode [ 1695.044148][T19932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1695.055738][T20043] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1695.098780][T19932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1695.181543][T19932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1696.305932][T19932] hsr_slave_0: entered promiscuous mode [ 1696.318109][T19932] hsr_slave_1: entered promiscuous mode [ 1696.833563][T20076] overlayfs: failed to clone upperpath [ 1697.812248][T20088] overlayfs: failed to clone upperpath [ 1699.590258][T19932] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1699.770613][T19932] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1699.801677][T19932] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1699.882334][T19932] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1699.915435][T20112] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3700'. [ 1699.973812][T19935] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1700.134667][ T12] hsr_slave_0: left promiscuous mode [ 1700.183652][ T12] hsr_slave_1: left promiscuous mode [ 1700.203137][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1700.225557][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1700.253505][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1700.269762][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1700.365640][ T12] bridge_slave_1: left allmulticast mode [ 1700.403274][ T12] bridge_slave_1: left promiscuous mode [ 1700.448294][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.506757][ T12] bridge_slave_0: left allmulticast mode [ 1700.512471][ T12] bridge_slave_0: left promiscuous mode [ 1700.543148][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.614430][T20121] overlayfs: failed to clone upperpath [ 1701.287300][ T12] veth1_macvtap: left promiscuous mode [ 1701.293863][ T12] veth0_macvtap: left promiscuous mode [ 1701.323898][ T12] veth1_vlan: left promiscuous mode [ 1701.337111][ T12] veth0_vlan: left promiscuous mode [ 1702.024503][T20135] overlayfs: failed to clone upperpath [ 1703.462621][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1703.542675][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1703.626514][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1703.709447][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1703.773877][T19935] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1704.299967][T20150] overlayfs: failed to clone upperpath [ 1704.940392][ T12] bond0 (unregistering): Released all slaves [ 1705.229591][T19932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1705.330506][T19932] 8021q: adding VLAN 0 to HW filter on device team0 [ 1705.414619][T20161] overlayfs: failed to clone upperpath [ 1705.615959][T13191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1705.623195][T13191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1705.965943][T13191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1705.973165][T13191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1707.165473][T20179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3717'. [ 1707.251912][ T12] IPVS: stop unused estimator thread 0... [ 1707.429840][T20179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3717'. [ 1707.580013][T19932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1708.429147][T19932] veth0_vlan: entered promiscuous mode [ 1708.499876][T19932] veth1_vlan: entered promiscuous mode [ 1708.587411][T19932] veth0_macvtap: entered promiscuous mode [ 1708.615633][T19932] veth1_macvtap: entered promiscuous mode [ 1708.678085][T19932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1708.703283][T19932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1708.729821][T19932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1708.760466][T19932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1708.788411][T19932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1708.816952][T19932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1708.852613][T19932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1708.899177][T19932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1708.934206][T19932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1708.962670][T19932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1708.988405][T19932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.031832][T19932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1709.057224][T19932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.088265][T19932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1709.115666][T19932] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.138572][T19932] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.157035][T19932] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.177142][T19932] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.435903][T20221] overlayfs: failed to clone upperpath [ 1710.163605][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1710.232437][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1710.831735][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1710.872107][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1711.633271][T20244] loop4: detected capacity change from 0 to 32768 [ 1711.721339][T20244] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1713.220122][ T28] audit: type=1800 audit(1781984102.222:516): pid=20253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3650" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 1715.139345][T20261] overlayfs: failed to clone upperpath [ 1715.459673][T20264] overlayfs: failed to clone upperpath [ 1715.652573][T19932] ocfs2: Unmounting device (7,4) on (node local) [ 1716.551286][T20279] overlayfs: failed to clone upperpath [ 1717.503185][T20294] overlayfs: failed to clone upperpath [ 1720.330353][T20303] loop4: detected capacity change from 0 to 32768 [ 1720.394339][T20321] overlayfs: failed to clone upperpath [ 1720.932793][T20303] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1722.547385][T19932] ocfs2: Unmounting device (7,4) on (node local) [ 1726.650415][T20373] netlink: 'syz.1.3748': attribute type 1 has an invalid length. [ 1727.581505][T20377] loop4: detected capacity change from 0 to 4096 [ 1731.292072][T20402] overlayfs: failed to clone upperpath [ 1732.537546][T20418] overlayfs: failed to clone upperpath [ 1738.008898][T20438] overlayfs: failed to clone upperpath [ 1742.842650][T20465] loop4: detected capacity change from 0 to 4096 [ 1743.967652][T20484] overlayfs: failed to clone upperpath [ 1746.441473][T20498] loop4: detected capacity change from 0 to 4096 [ 1749.089898][T20523] loop4: detected capacity change from 0 to 4096 [ 1750.147257][T20523] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 1750.324449][T20520] ntfs3: loop4: failed to convert name for inode 1e. [ 1750.991594][T20548] loop4: detected capacity change from 0 to 32768 [ 1751.145007][T20548] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1752.886806][ T28] audit: type=1800 audit(1781984141.882:517): pid=20557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3783" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 1753.722557][T19932] ocfs2: Unmounting device (7,4) on (node local) [ 1765.089473][T20654] loop4: detected capacity change from 0 to 32768 [ 1765.170385][T20654] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1766.217656][ T28] audit: type=1800 audit(1781984154.672:518): pid=20662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3806" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 1766.390044][T19932] ocfs2: Unmounting device (7,4) on (node local) [ 1768.112056][T20691] loop4: detected capacity change from 0 to 4096 [ 1768.139953][T20691] ntfs3: Unknown parameter 'ÿ' [ 1768.374958][T20642] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1768.819178][T20691] loop4: detected capacity change from 0 to 2048 [ 1769.547608][T20691] UDF-fs: bad mount option "laótblock=00000000001000000002" or missing value [ 1769.882368][T20691] loop4: detected capacity change from 0 to 40427 [ 1769.893817][T20691] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1769.902656][T20691] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1769.919013][T20691] F2FS-fs (loop4): invalid crc value [ 1769.984862][T20691] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1770.067546][T20691] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1770.074862][T20691] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1770.458534][ T28] audit: type=1800 audit(1781984159.472:519): pid=20714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3815" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1772.743887][T20740] overlayfs: failed to clone upperpath [ 1774.821459][T20751] loop4: detected capacity change from 0 to 32768 [ 1774.852992][T20751] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.3820 (20751) [ 1775.146759][T20751] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1775.225383][T20751] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1775.253332][T20751] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1775.266228][T20751] BTRFS info (device loop4): use zstd compression, level 3 [ 1775.273658][T20751] BTRFS info (device loop4): using free space tree [ 1779.054480][T20751] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1779.057669][T20751] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1779.277361][T20751] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1779.326762][T20751] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1779.355040][T20751] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1779.376140][T20751] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1779.528349][T20751] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1779.546533][T20751] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1779.567406][T20751] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1780.282941][T20751] BTRFS error (device loop4): open_ctree failed: -12 [ 1781.113380][T20812] loop4: detected capacity change from 0 to 32768 [ 1781.425116][T20813] read_mapping_page failed! [ 1781.430488][T20813] ERROR: (device loop4): txCommit: [ 1781.430488][T20813] [ 1781.462471][ T28] audit: type=1800 audit(1781984170.382:520): pid=20812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3836" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 1782.063241][ T2914] read_mapping_page failed! [ 1782.113896][ T2914] ERROR: (device loop4): txCommit: [ 1782.113896][ T2914] [ 1782.207066][ T2914] jfs_write_inode: jfs_commit_inode failed! [ 1786.767180][T19935] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1786.813961][T20865] loop4: detected capacity change from 0 to 4096 [ 1787.857546][T20876] overlayfs: failed to clone upperpath [ 1789.655428][T20882] netlink: 804 bytes leftover after parsing attributes in process `syz.0.3852'. [ 1790.280491][T19935] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1791.049251][T20888] loop4: detected capacity change from 0 to 32768 [ 1791.144658][T20888] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1791.439667][T20888] XFS (loop4): Ending clean mount [ 1792.183016][T19932] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1792.924314][T19935] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1795.446766][T20988] netlink: 'syz.2.3876': attribute type 64 has an invalid length. [ 1796.022939][T20986] loop4: detected capacity change from 0 to 32768 [ 1796.102998][T19935] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1796.128944][T20986] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1796.238555][T21000] overlayfs: failed to clone upperpath [ 1796.968212][T19932] ocfs2: Unmounting device (7,4) on (node local) [ 1797.173258][T19935] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1797.322615][T21017] netlink: 'syz.0.3886': attribute type 64 has an invalid length. [ 1797.502739][T21020] loop4: detected capacity change from 0 to 4096 [ 1798.944368][T21033] overlayfs: failed to clone upperpath [ 1799.754070][T21029] loop4: detected capacity change from 0 to 32768 [ 1799.832585][T21029] JBD2: Ignoring recovery information on journal [ 1799.939250][T21029] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1800.307059][T19932] ocfs2: Unmounting device (7,4) on (node local) [ 1800.879653][T21055] loop4: detected capacity change from 0 to 4096 [ 1800.939778][T21055] ntfs3: Unknown parameter 'ÿ' [ 1802.702468][T21055] loop4: detected capacity change from 0 to 40427 [ 1802.716415][T21066] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1802.757131][T21055] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1802.766812][T21055] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1802.793075][T21055] F2FS-fs (loop4): invalid crc value [ 1802.843362][T21055] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1802.991965][T21055] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1803.006777][T21055] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1803.846778][ T28] audit: type=1800 audit(1781984192.772:521): pid=21079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3898" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1807.289608][T21108] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1809.210842][T21135] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1809.383066][ T5773] Bluetooth: hci3: command 0x0406 tx timeout [ 1809.928670][T19935] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1810.469889][T19935] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1812.135344][T21156] loop4: detected capacity change from 0 to 32768 [ 1812.465799][T21170] overlayfs: failed to clone upperpath [ 1815.045168][T21190] syzkaller0: entered promiscuous mode [ 1815.050928][T21190] syzkaller0: entered allmulticast mode [ 1818.003147][T21229] loop4: detected capacity change from 0 to 32768 [ 1818.055035][T21229] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1819.161643][T21245] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3960'. [ 1819.789162][T21244] netlink: 804 bytes leftover after parsing attributes in process `syz.0.3962'. [ 1819.798977][T19932] ocfs2: Unmounting device (7,4) on (node local) [ 1820.851889][T21261] overlayfs: failed to clone upperpath [ 1820.935160][T21268] netlink: 'syz.1.3970': attribute type 64 has an invalid length. [ 1821.367001][T21275] overlayfs: failed to clone upperpath [ 1822.449838][T21276] loop4: detected capacity change from 0 to 32768 [ 1822.501003][T21276] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1824.721334][T19932] ocfs2: Unmounting device (7,4) on (node local) [ 1826.133539][T21320] loop4: detected capacity change from 0 to 32768 [ 1826.776589][T21336] overlayfs: failed to clone upperpath [ 1827.921715][T21344] netlink: 'syz.2.3999': attribute type 64 has an invalid length. [ 1829.843452][T21364] tipc: Enabling of bearer rejected, failed to enable media [ 1830.313996][T21371] loop4: detected capacity change from 0 to 32768 [ 1830.672142][T21371] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1831.536450][T21383] netlink: 'syz.0.4012': attribute type 64 has an invalid length. [ 1831.587763][T21381] netlink: 804 bytes leftover after parsing attributes in process `syz.1.4011'. [ 1833.647351][T19932] ocfs2: Unmounting device (7,4) on (node local) [ 1833.805856][T21406] fuse: Bad value for 'fd' [ 1833.976887][T21408] netlink: 804 bytes leftover after parsing attributes in process `syz.1.4022'. [ 1834.060256][T21411] 9pnet_fd: Insufficient options for proto=fd [ 1834.125387][T21414] netlink: 'syz.2.4024': attribute type 64 has an invalid length. [ 1835.041753][T21436] loop4: detected capacity change from 0 to 4096 [ 1838.158525][T21440] netlink: 804 bytes leftover after parsing attributes in process `syz.2.4033'. [ 1839.117572][T21454] netlink: 'syz.1.4036': attribute type 64 has an invalid length. [ 1839.852302][T21447] netlink: 804 bytes leftover after parsing attributes in process `syz.0.4034'. [ 1840.617916][T21478] loop4: detected capacity change from 0 to 32768 [ 1840.639186][T21479] overlayfs: failed to clone upperpath [ 1841.028491][T21478] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1841.416001][T21486] netlink: 'syz.2.4048': attribute type 64 has an invalid length. [ 1842.221130][T19932] ocfs2: Unmounting device (7,4) on (node local) [ 1842.927291][T21511] loop4: detected capacity change from 0 to 32768 [ 1842.991487][T21511] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1843.031484][T21521] netlink: 'syz.1.4060': attribute type 64 has an invalid length. [ 1843.046987][T21511] XFS (loop4): Ending clean mount [ 1843.066293][T21511] XFS (loop4): Quotacheck needed: Please wait. [ 1843.358409][T21525] overlayfs: failed to clone upperpath [ 1843.941997][T21511] XFS (loop4): Quotacheck: Done. [ 1844.771454][T19932] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1846.341413][T21554] overlayfs: failed to clone upperpath [ 1848.684952][T21580] loop4: detected capacity change from 0 to 64 [ 1849.363816][T21588] overlayfs: failed to clone upperpath [ 1849.682989][T21592] loop4: detected capacity change from 0 to 4096 [ 1852.266947][T21621] overlayfs: failed to clone upperpath [ 1854.063885][T21629] overlayfs: failed to clone upperpath [ 1856.257292][T21646] loop4: detected capacity change from 0 to 4096 [ 1857.898951][T21642] netlink: 804 bytes leftover after parsing attributes in process `syz.1.4100'. [ 1858.197000][T21658] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1859.617631][T21674] overlayfs: failed to clone upperpath [ 1861.095028][T21663] loop4: detected capacity change from 0 to 32768 [ 1861.150104][T21663] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1861.634942][T21663] XFS (loop4): Ending clean mount [ 1861.937744][T19932] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1863.648788][T21728] overlayfs: failed to clone upperpath [ 1864.547306][T21731] loop4: detected capacity change from 0 to 4096 [ 1864.775963][T21735] netlink: 804 bytes leftover after parsing attributes in process `syz.0.4132'. [ 1865.054675][T21742] overlayfs: failed to clone upperpath [ 1866.028994][T21748] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1868.779277][T21767] loop4: detected capacity change from 0 to 4096 [ 1872.294558][T21767] ntfs3: loop4: Failed to read $AttrDef (-4). [ 1872.524960][T21774] netlink: 804 bytes leftover after parsing attributes in process `syz.2.4145'. [ 1872.868603][T21785] overlayfs: failed to clone upperpath [ 1875.402162][T21812] overlayfs: failed to clone upperpath [ 1876.051290][T21805] netlink: 804 bytes leftover after parsing attributes in process `syz.0.4156'. [ 1876.066843][T21811] tipc: Started in network mode [ 1876.071746][T21811] tipc: Node identity 464e4f7e1de6, cluster identity 4711 [ 1876.090932][T21811] tipc: Enabled bearer , priority 0 [ 1876.133855][T21814] syzkaller0: entered promiscuous mode [ 1876.151494][T21814] syzkaller0: entered allmulticast mode [ 1876.262756][T21814] tipc: Resetting bearer [ 1876.339484][T21810] tipc: Resetting bearer [ 1876.421091][T21810] tipc: Disabling bearer [ 1877.066354][T21822] loop4: detected capacity change from 0 to 32768 [ 1877.197916][T21822] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1877.295687][T21822] XFS (loop4): Ending clean mount [ 1877.331585][T21822] XFS (loop4): Quotacheck needed: Please wait. [ 1877.862221][T21822] XFS (loop4): Quotacheck: Done. [ 1879.741222][T19932] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1881.404298][T21861] overlayfs: failed to clone upperpath [ 1884.940774][T21895] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4181'. [ 1885.309405][T21899] loop4: detected capacity change from 0 to 4096 [ 1885.503736][T21907] overlayfs: failed to clone upperpath [ 1886.708641][T21919] loop4: detected capacity change from 0 to 64 [ 1887.502427][T21926] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4192'. [ 1888.012981][T21928] loop4: detected capacity change from 0 to 32768 [ 1888.261334][T21928] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1888.370378][T21944] overlayfs: failed to clone upperpath [ 1888.973683][T21928] XFS (loop4): Ending clean mount [ 1888.982053][T21928] XFS (loop4): Quotacheck needed: Please wait. [ 1889.080184][T21928] XFS (loop4): Quotacheck: Done. [ 1889.122184][T21947] netlink: 804 bytes leftover after parsing attributes in process `syz.0.4196'. [ 1890.803423][T19932] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1890.803505][T21966] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4201'. [ 1891.923412][T21977] overlayfs: failed to clone upperpath [ 1892.818532][T21973] loop4: detected capacity change from 0 to 32768 [ 1893.062101][T21973] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 1893.113836][T21973] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1893.238866][T21973] XFS (loop4): Ending clean mount [ 1893.276427][T21973] XFS (loop4): Quotacheck needed: Please wait. [ 1893.384947][T21973] XFS (loop4): Quotacheck: Done. [ 1894.096136][T19932] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1894.200970][T22004] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4212'. [ 1894.610367][T22008] overlayfs: failed to clone upperpath [ 1896.246632][T22021] loop4: detected capacity change from 0 to 32768 [ 1896.722663][T22019] netlink: 804 bytes leftover after parsing attributes in process `syz.1.4216'. [ 1897.410459][T22021] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1897.461649][T22021] XFS (loop4): Ending clean mount [ 1897.475292][T22021] XFS (loop4): Quotacheck needed: Please wait. [ 1897.571988][T22021] XFS (loop4): Quotacheck: Done. [ 1899.426302][T19932] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1900.707804][T22055] loop4: detected capacity change from 0 to 64 [ 1901.371796][T22059] overlayfs: failed to clone upperpath [ 1902.906490][T22077] loop4: detected capacity change from 0 to 4096 [ 1905.765563][T22085] loop4: detected capacity change from 0 to 32768 [ 1905.876723][T22085] (syz.4.4233,22085,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1905.934045][T22085] (syz.4.4233,22085,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1906.056802][T22085] JBD2: Ignoring recovery information on journal [ 1906.143742][T22097] overlayfs: failed to clone upperpath [ 1906.334458][T22085] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1906.920624][T22102] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4238'. [ 1908.151639][T19932] ocfs2: Unmounting device (7,4) on (node local) [ 1909.586689][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1909.957842][ T27] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1909.976899][ T27] usb 5-1: can't read configurations, error -61 [ 1910.146743][ T27] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1910.430939][T22128] netlink: 804 bytes leftover after parsing attributes in process `syz.2.4248'. [ 1910.690306][ T27] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1910.702683][ T27] usb 5-1: can't read configurations, error -61 [ 1910.717350][ T27] usb usb5-port1: attempt power cycle [ 1911.115905][T22138] netlink: 804 bytes leftover after parsing attributes in process `syz.2.4252'. [ 1911.156633][ T27] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1911.230798][ T27] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1911.256713][ T27] usb 5-1: can't read configurations, error -61 [ 1911.804427][ T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1911.872449][ T27] usb 5-1: device descriptor read/8, error -71 [ 1912.206859][ T27] usb usb5-port1: unable to enumerate USB device [ 1912.879944][T22147] loop4: detected capacity change from 0 to 32768 [ 1912.902915][T22147] (syz.4.4256,22147,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1912.940721][T22147] (syz.4.4256,22147,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1913.032451][T22147] JBD2: Ignoring recovery information on journal [ 1913.150051][T22147] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1913.520815][T19932] ocfs2: Unmounting device (7,4) on (node local) [ 1917.180879][T22201] loop4: detected capacity change from 0 to 32768 [ 1917.230832][T22201] (syz.4.4274,22201,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1917.271989][T22201] (syz.4.4274,22201,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1917.322021][T22201] JBD2: Ignoring recovery information on journal [ 1917.407914][T22201] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1917.531380][T22209] overlayfs: failed to clone upperpath [ 1917.817526][T19932] ocfs2: Unmounting device (7,4) on (node local) [ 1919.071351][T22213] loop4: detected capacity change from 0 to 32768 [ 1919.111752][T22213] (syz.4.4278,22213,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1919.252656][T22213] (syz.4.4278,22213,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1919.662954][T22213] JBD2: Ignoring recovery information on journal [ 1919.841556][T22213] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1922.094108][T19932] ocfs2: Unmounting device (7,4) on (node local) [ 1922.663655][T22255] loop4: detected capacity change from 0 to 64 [ 1923.819648][T22264] loop4: detected capacity change from 0 to 32768 [ 1923.867184][T22264] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1923.914879][T22270] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4298'. [ 1924.680511][T19932] ocfs2: Unmounting device (7,4) on (node local) [ 1925.526203][T22289] loop4: detected capacity change from 0 to 32768 [ 1925.622559][T22299] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4307'. [ 1925.673717][T22289] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1925.780320][T22289] XFS (loop4): Ending clean mount [ 1925.872699][T22289] XFS (loop4): Quotacheck needed: Please wait. [ 1926.812998][T22289] XFS (loop4): Quotacheck: Done. [ 1929.027564][T19932] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1929.057396][T22321] netlink: 'syz.0.4314': attribute type 64 has an invalid length. [ 1929.184387][T22329] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4318'. [ 1931.830786][T22346] loop4: detected capacity change from 0 to 4096 [ 1931.932580][T22355] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4328'. [ 1931.953603][T22357] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4329'. [ 1932.117921][T22354] netlink: 'syz.2.4327': attribute type 64 has an invalid length. [ 1932.789346][T22377] loop4: detected capacity change from 0 to 512 [ 1932.829788][T22379] overlayfs: failed to clone upperpath [ 1933.337580][T22377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1933.367773][T22384] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4339'. [ 1933.412428][T22377] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1933.566045][T22386] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4340'. [ 1933.609900][T22389] netlink: 804 bytes leftover after parsing attributes in process `syz.4.4338'. [ 1933.627183][T22388] netlink: 'syz.2.4341': attribute type 64 has an invalid length. [ 1934.630477][T22409] overlayfs: failed to clone upperpath [ 1935.194956][T22412] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4351'. [ 1935.230497][T22414] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4350'. [ 1935.723556][T19932] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1937.707649][T22437] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4361'. [ 1937.778203][T22439] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4362'. [ 1938.527195][T22459] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4371'. [ 1938.538740][T22457] netlink: 804 bytes leftover after parsing attributes in process `syz.1.4370'. [ 1938.723195][T22461] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4372'. [ 1939.317615][T22477] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4380'. [ 1939.917332][T22486] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4382'. [ 1940.451351][T22499] overlayfs: failed to clone upperpath [ 1941.655441][T22506] loop4: detected capacity change from 0 to 32768 [ 1941.943709][T22506] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1942.106101][T22506] XFS (loop4): Ending clean mount [ 1942.146394][T22506] XFS (loop4): Quotacheck needed: Please wait. [ 1942.207140][T22506] XFS (loop4): Quotacheck: Done. [ 1943.281163][T22531] overlayfs: failed to clone upperpath [ 1943.393789][T19932] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1947.176206][T22541] netlink: 804 bytes leftover after parsing attributes in process `syz.2.4403'. [ 1947.419369][T22544] loop4: detected capacity change from 0 to 32768 [ 1947.483383][T22544] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1947.569687][T22552] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4405'. [ 1948.338904][T22563] overlayfs: failed to clone upperpath [ 1948.627931][T19932] ocfs2: Unmounting device (7,4) on (node local) [ 1949.925783][T22583] loop4: detected capacity change from 0 to 32768 [ 1949.990676][T22583] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1950.202212][T22583] XFS (loop4): Ending clean mount [ 1950.229525][T22583] XFS (loop4): Quotacheck needed: Please wait. [ 1950.352235][T22583] XFS (loop4): Quotacheck: Done. [ 1950.998859][T19932] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1951.174889][T22618] overlayfs: failed to clone upperpath [ 1951.540151][T22620] loop4: detected capacity change from 0 to 64 [ 1951.948530][T22625] loop4: detected capacity change from 0 to 4096 [ 1953.467715][T22638] loop4: detected capacity change from 0 to 4096 [ 1953.475857][T22638] ntfs3: Unknown parameter 'ÿ' [ 1954.312894][T22650] overlayfs: failed to clone upperpath [ 1954.660700][T22638] loop4: detected capacity change from 0 to 40427 [ 1954.672714][T22638] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1954.681020][T22638] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1954.694289][T22638] F2FS-fs (loop4): invalid crc value [ 1954.716243][T22638] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1954.768964][T22638] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1954.776066][T22638] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1955.195747][ T28] audit: type=1800 audit(1781984344.182:522): pid=22658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4436" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1957.035250][T22666] loop4: detected capacity change from 0 to 32768 [ 1957.226931][T22666] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1957.282465][T22666] XFS (loop4): Ending clean mount [ 1957.291575][T22666] XFS (loop4): Quotacheck needed: Please wait. [ 1957.370412][T22666] XFS (loop4): Quotacheck: Done. [ 1958.384781][T19932] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1959.126678][T22685] loop4: detected capacity change from 0 to 4096 [ 1961.227822][T22696] loop4: detected capacity change from 0 to 4096 [ 1962.652281][T22691] capability: warning: `syz.0.4450' uses 32-bit capabilities (legacy support in use) [ 1962.739645][T22707] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4456'. [ 1962.977384][T22711] netlink: 804 bytes leftover after parsing attributes in process `syz.1.4458'. [ 1963.208771][T22705] loop4: detected capacity change from 0 to 32768 [ 1963.276904][T22705] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1963.396795][T22705] XFS (loop4): Ending clean mount [ 1963.427203][T22705] XFS (loop4): Quotacheck needed: Please wait. [ 1963.636868][T22705] XFS (loop4): Quotacheck: Done. [ 1964.143175][T19932] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1964.680960][T22736] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4466'. [ 1964.936309][T22742] netlink: 'syz.4.4464': attribute type 64 has an invalid length. [ 1970.594474][T22765] loop4: detected capacity change from 0 to 512 [ 1971.182181][T22769] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4475'. [ 1972.292631][T22778] overlayfs: failed to clone upperpath [ 1972.387189][T22780] loop4: detected capacity change from 0 to 512 [ 1973.594243][T22787] loop4: detected capacity change from 0 to 32768 [ 1973.634613][T22787] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1973.662328][T22787] XFS (loop4): Ending clean mount [ 1973.671798][T22787] XFS (loop4): Quotacheck needed: Please wait. [ 1973.809771][T22787] XFS (loop4): Quotacheck: Done. [ 1974.973527][T19932] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1975.011981][T22812] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4488'. [ 1977.056311][T22836] netlink: 'syz.4.4497': attribute type 64 has an invalid length. [ 1978.091665][T22840] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4499'. [ 1978.445690][T22848] loop4: detected capacity change from 0 to 512 [ 1981.804321][T22872] loop4: detected capacity change from 0 to 32768 [ 1982.079372][T22872] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 1982.113982][T22872] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1982.215291][T22872] XFS (loop4): Ending clean mount [ 1982.250527][T22872] XFS (loop4): Quotacheck needed: Please wait. [ 1982.353041][T22872] XFS (loop4): Quotacheck: Done. [ 1982.590230][T19932] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1987.032003][T22937] netlink: 'syz.2.4531': attribute type 64 has an invalid length. [ 1987.882451][T22941] loop4: detected capacity change from 0 to 32768 [ 1988.142702][T22941] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1988.272506][T22941] XFS (loop4): Ending clean mount [ 1988.295009][T22941] XFS (loop4): Quotacheck needed: Please wait. [ 1988.390616][T22941] XFS (loop4): Quotacheck: Done. [ 1988.535570][T19932] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1988.842991][T22979] overlayfs: failed to clone upperpath [ 1990.190181][T22995] loop4: detected capacity change from 0 to 512 [ 1990.288575][T22995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1990.314822][T22995] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1990.327796][T22997] netlink: 804 bytes leftover after parsing attributes in process `syz.0.4550'. [ 1990.437917][T23001] netlink: 804 bytes leftover after parsing attributes in process `syz.4.4541'. [ 1991.078492][T23000] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 95 vs 96 free clusters [ 1993.994618][T19932] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1999.508359][T23089] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4580'. [ 2001.791842][T23112] loop4: detected capacity change from 0 to 2048 [ 2001.908350][T23112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2001.970514][T23112] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2002.027711][T23123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2002.039519][T23123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2002.079765][T23123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2002.092980][T23125] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4594'. [ 2002.106816][T23123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2002.116101][T23123] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2002.124474][ T28] audit: type=1800 audit(1781984391.142:523): pid=23112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4591" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 2002.147746][T23123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2002.167082][ T28] audit: type=1804 audit(1781984391.182:524): pid=23112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4591" name="/newroot/152/file0/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 2002.238427][T19932] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2002.332497][T13191] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2003.029964][T13191] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2003.055118][T23132] loop4: detected capacity change from 0 to 4096 [ 2004.259726][T19935] Bluetooth: hci1: command tx timeout [ 2004.362453][T13191] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2004.668483][T13191] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.260561][T23120] chnl_net:caif_netlink_parms(): no params data found [ 2005.458879][T23163] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4604'. [ 2005.578310][T23120] bridge0: port 1(bridge_slave_0) entered blocking state [ 2005.780648][T23120] bridge0: port 1(bridge_slave_0) entered disabled state [ 2005.788134][T23120] bridge_slave_0: entered allmulticast mode [ 2005.795173][T23120] bridge_slave_0: entered promiscuous mode [ 2005.865240][T23120] bridge0: port 2(bridge_slave_1) entered blocking state [ 2005.896319][T23120] bridge0: port 2(bridge_slave_1) entered disabled state [ 2005.913538][T23120] bridge_slave_1: entered allmulticast mode [ 2005.928149][T23120] bridge_slave_1: entered promiscuous mode [ 2005.941016][T23172] loop4: detected capacity change from 0 to 2048 [ 2005.985876][T23172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2006.033595][T23172] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2006.045711][T23120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2006.084624][T23120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2006.104311][T13191] tipc: Disabling bearer [ 2006.123780][T13191] tipc: Left network mode [ 2006.133526][ T28] audit: type=1800 audit(1781984395.152:525): pid=23172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4607" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 2006.169976][ T28] audit: type=1804 audit(1781984395.192:526): pid=23172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4607" name="/newroot/155/file0/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 2006.188206][T23120] team0: Port device team_slave_0 added [ 2006.379558][T19935] Bluetooth: hci1: command tx timeout [ 2006.388805][T19932] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2006.447037][T23120] team0: Port device team_slave_1 added [ 2006.690486][T23188] loop4: detected capacity change from 0 to 32768 [ 2006.772946][T23188] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 2006.849543][T23120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2006.923908][T23188] XFS (loop4): Ending clean mount [ 2007.121112][T23120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2007.586791][T23120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2007.600328][T23188] XFS (loop4): Quotacheck needed: Please wait. [ 2007.788944][T23188] XFS (loop4): Quotacheck: Done. [ 2007.807168][T23120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2007.857082][T23120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2007.931522][T23214] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4614'. [ 2007.940975][T23120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2008.152269][T23209] netlink: 'syz.0.4613': attribute type 64 has an invalid length. [ 2008.416614][T19935] Bluetooth: hci1: command tx timeout [ 2008.920471][T23120] hsr_slave_0: entered promiscuous mode [ 2008.999117][T23120] hsr_slave_1: entered promiscuous mode [ 2009.027932][T23120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2009.035523][T23120] Cannot create hsr debugfs directory [ 2009.056844][T19932] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 2009.590412][T23235] loop4: detected capacity change from 0 to 512 [ 2010.199931][T23248] netlink: 'syz.0.4624': attribute type 64 has an invalid length. [ 2010.283796][T23251] netlink: 804 bytes leftover after parsing attributes in process `syz.2.4625'. [ 2010.497716][T19935] Bluetooth: hci1: command tx timeout [ 2010.560265][T13191] hsr_slave_0: left promiscuous mode [ 2010.620749][T13191] hsr_slave_1: left promiscuous mode [ 2010.635126][T13191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2010.663249][T13191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2010.688092][T13191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2010.704617][T13191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2010.739882][T13191] bridge_slave_1: left allmulticast mode [ 2010.757512][T13191] bridge_slave_1: left promiscuous mode [ 2010.768986][T13191] bridge0: port 2(bridge_slave_1) entered disabled state [ 2010.799573][T13191] bridge_slave_0: left allmulticast mode [ 2010.805260][T13191] bridge_slave_0: left promiscuous mode [ 2010.815616][T13191] bridge0: port 1(bridge_slave_0) entered disabled state [ 2010.895247][T13191] veth1_macvtap: left promiscuous mode [ 2010.922873][T13191] veth0_macvtap: left promiscuous mode [ 2010.943521][T13191] veth1_vlan: left promiscuous mode [ 2010.953835][T13191] veth0_vlan: left promiscuous mode [ 2011.480529][T23273] loop4: detected capacity change from 0 to 8 [ 2013.222067][T23292] loop4: detected capacity change from 0 to 4096 [ 2013.223198][T13191] team0 (unregistering): Port device team_slave_1 removed [ 2013.247808][T23292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2013.313143][T13191] team0 (unregistering): Port device team_slave_0 removed [ 2013.841473][T13191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2013.968679][T13191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2014.004147][T19932] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2015.398766][T13191] bond0 (unregistering): Released all slaves [ 2015.497740][T23311] netlink: 804 bytes leftover after parsing attributes in process `syz.2.4644'. [ 2015.684589][T23277] netlink: 'syz.0.4633': attribute type 64 has an invalid length. [ 2017.201072][T13191] IPVS: stop unused estimator thread 0... [ 2017.251434][T23120] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2017.280290][T23120] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2017.302450][T23120] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2017.363064][T23120] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2017.768513][T23120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2017.819538][T23120] 8021q: adding VLAN 0 to HW filter on device team0 [ 2017.842348][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 2017.849540][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2017.979189][T23120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2018.036539][T23120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2018.588156][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 2018.595367][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2018.696617][T23350] netlink: 'syz.0.4654': attribute type 64 has an invalid length. [ 2019.393180][T23120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2019.600196][T23120] veth0_vlan: entered promiscuous mode [ 2019.781052][T23120] veth1_vlan: entered promiscuous mode [ 2020.074086][T23120] veth0_macvtap: entered promiscuous mode [ 2020.130000][T23120] veth1_macvtap: entered promiscuous mode [ 2020.303434][T23120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2020.624804][T23120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.930808][T23120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2020.974308][T23120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2020.996257][T23120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2021.068876][T23120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2021.117285][T23120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2021.302360][T23120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2021.334019][T23120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2021.345461][T23120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2021.362000][T23120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2021.372679][T23120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2021.394831][T23120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2021.433115][T23120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2021.456237][T23120] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.488577][T23120] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.503899][T23120] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.515265][T23120] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2021.543758][T23404] netlink: 'syz.4.4664': attribute type 64 has an invalid length. [ 2021.985339][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2021.998374][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2022.161512][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2022.188374][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2025.204434][T23464] loop4: detected capacity change from 0 to 512 [ 2025.935638][T23470] tipc: Enabling of bearer rejected, failed to enable media [ 2026.144099][T23477] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4678'. [ 2026.792009][T23480] loop4: detected capacity change from 0 to 4096 [ 2027.420578][T23494] netlink: 'syz.2.4681': attribute type 64 has an invalid length. [ 2028.181987][T23508] loop1: detected capacity change from 0 to 2048 [ 2028.334764][T23512] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2028.952421][T23512] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 2028.979526][T23512] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 2029.033009][T23512] Remounting filesystem read-only [ 2029.041067][ T49] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 2029.058094][ T49] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2029.067596][ T49] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2029.077796][ T49] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 2029.078587][T23523] netlink: 'syz.0.4692': attribute type 64 has an invalid length. [ 2029.085177][ T49] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 2029.125268][T23120] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 2029.183600][T23120] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 2029.243191][T23120] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 2029.278435][T23120] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2029.294763][T23120] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2029.311431][T23120] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2029.342130][T23120] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 2029.362123][T23120] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 2029.384894][T23120] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2029.408462][T23120] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2029.454874][T23120] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2029.477037][T23120] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 2029.484271][T23120] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 2029.510472][T23120] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 2029.526603][T23120] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 2029.554380][T23120] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2029.576868][T23120] NILFS (loop1): discard dirty page: offset=229376, ino=3 [ 2029.604991][T23120] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2029.629568][T23120] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2029.665509][T23120] NILFS (loop1): discard dirty block: blocknr=50, size=1024 [ 2029.690543][T23120] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2030.261334][T23123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2030.271605][T23123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2030.280122][T23123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2030.289065][T23123] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2030.296628][T23123] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2030.304087][T23123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2030.873963][T13191] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2031.083597][T13191] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2031.566742][T13191] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2031.732629][T13191] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2031.760460][T23537] chnl_net:caif_netlink_parms(): no params data found [ 2032.058521][T23537] bridge0: port 1(bridge_slave_0) entered blocking state [ 2032.065893][T23537] bridge0: port 1(bridge_slave_0) entered disabled state [ 2032.089496][T23537] bridge_slave_0: entered allmulticast mode [ 2032.098009][T23537] bridge_slave_0: entered promiscuous mode [ 2032.128878][T23537] bridge0: port 2(bridge_slave_1) entered blocking state [ 2032.136117][T23537] bridge0: port 2(bridge_slave_1) entered disabled state [ 2032.156744][T23537] bridge_slave_1: entered allmulticast mode [ 2032.164066][T23537] bridge_slave_1: entered promiscuous mode [ 2032.198001][T23567] fuse: Bad value for 'fd' [ 2032.305219][T23537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2032.371436][T23537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2032.394062][T23571] tipc: Enabling of bearer rejected, failed to enable media [ 2032.416883][T19935] Bluetooth: hci2: command tx timeout [ 2032.432785][T13191] tipc: Disabling bearer [ 2032.460249][T13191] tipc: Left network mode [ 2032.489396][T23537] team0: Port device team_slave_0 added [ 2032.569222][T23537] team0: Port device team_slave_1 added [ 2032.905520][T23537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2032.922586][T23537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2032.954998][T23537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2033.000637][T23537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2033.013019][T23537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2033.042045][T23537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2033.182673][T23537] hsr_slave_0: entered promiscuous mode [ 2033.202832][T23537] hsr_slave_1: entered promiscuous mode [ 2033.216251][T23537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2033.229396][T23537] Cannot create hsr debugfs directory [ 2034.133886][T13191] hsr_slave_0: left promiscuous mode [ 2034.146901][T19284] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2034.148780][T13191] hsr_slave_1: left promiscuous mode [ 2034.164297][T13191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2034.173327][T13191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2034.195427][T13191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2034.203350][T13191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2034.328539][T13191] bridge_slave_1: left allmulticast mode [ 2034.334243][T13191] bridge_slave_1: left promiscuous mode [ 2034.340887][T13191] bridge0: port 2(bridge_slave_1) entered disabled state [ 2034.349957][T13191] bridge_slave_0: left allmulticast mode [ 2034.351744][T19284] usb 2-1: Using ep0 maxpacket: 16 [ 2034.355600][T13191] bridge_slave_0: left promiscuous mode [ 2034.355773][T13191] bridge0: port 1(bridge_slave_0) entered disabled state [ 2034.393591][T19284] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2034.420978][T19284] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2034.442406][T13191] veth1_macvtap: left promiscuous mode [ 2034.449961][T19284] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2034.456034][T13191] veth0_macvtap: left promiscuous mode [ 2034.477703][T23626] fuse: Unknown parameter 'fd0x0000000000000003' [ 2034.478599][T19284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2034.484309][T13191] veth1_vlan: left promiscuous mode [ 2034.497166][T19935] Bluetooth: hci2: command tx timeout [ 2034.519686][T19284] usb 2-1: config 0 descriptor?? [ 2034.523560][T13191] veth0_vlan: left promiscuous mode [ 2034.659966][T23632] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4717'. [ 2035.575471][T19284] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 2036.388273][T23610] input: syz1 as /devices/virtual/input/input5 [ 2036.576978][T19935] Bluetooth: hci2: command tx timeout [ 2036.876299][T23657] overlayfs: failed to clone lowerpath [ 2037.660789][T19284] usb 2-1: USB disconnect, device number 25 [ 2038.706521][T19935] Bluetooth: hci2: command tx timeout [ 2038.926331][T13191] team0 (unregistering): Port device team_slave_1 removed [ 2039.095830][T13191] team0 (unregistering): Port device team_slave_0 removed [ 2039.148595][T13191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2039.274587][T13191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2040.093103][T13191] bond0 (unregistering): Released all slaves [ 2040.453000][T23695] tipc: Enabling of bearer rejected, failed to enable media [ 2040.941297][T23537] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2041.187795][T23537] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2041.194687][T23717] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 2041.211493][T23537] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2041.295480][T23537] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2041.485714][T13191] IPVS: stop unused estimator thread 0... [ 2041.781998][T23537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2041.862088][T23537] 8021q: adding VLAN 0 to HW filter on device team0 [ 2041.902641][ T7876] bridge0: port 1(bridge_slave_0) entered blocking state [ 2041.909878][ T7876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2041.973294][ T7876] bridge0: port 2(bridge_slave_1) entered blocking state [ 2041.980509][ T7876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2042.162964][T23537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2042.817598][T23537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2042.936203][T23537] veth0_vlan: entered promiscuous mode [ 2042.971227][T23537] veth1_vlan: entered promiscuous mode [ 2043.041717][T23537] veth0_macvtap: entered promiscuous mode [ 2043.063258][T23537] veth1_macvtap: entered promiscuous mode [ 2043.125024][T23537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2043.156383][T23537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2043.171236][T23537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2043.196666][T23537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2043.226061][T23537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2043.257964][T23537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2043.287760][T23537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2043.328722][T23537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2043.376181][T23537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2043.396660][T23537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2043.417922][T23537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2043.452965][T23537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2043.465898][T23537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2043.489560][T23537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2043.533864][T23537] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2043.563438][T23537] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2043.572547][T23537] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2043.583819][T23537] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2043.768293][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2043.794575][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2043.953365][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2044.009933][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2045.715831][T23123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2045.726775][T23123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2045.736183][T23123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2045.757365][T23123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2045.773114][T23123] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2045.780630][T23123] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2046.104466][T23814] loop2: detected capacity change from 0 to 4096 [ 2046.386313][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2047.078828][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2047.160312][T23802] loop1: detected capacity change from 0 to 32768 [ 2047.289469][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2047.290752][T23802] (syz.1.4754,23802,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2047.333049][T23802] (syz.1.4754,23802,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2047.588429][T23802] JBD2: Ignoring recovery information on journal [ 2047.867347][T23123] Bluetooth: hci0: command tx timeout [ 2047.935950][T23802] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 2047.939128][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2048.370225][T23120] ocfs2: Unmounting device (7,1) on (node local) [ 2048.450272][T23807] chnl_net:caif_netlink_parms(): no params data found [ 2048.653205][ T12] tipc: Disabling bearer [ 2048.781355][ T12] tipc: Left network mode [ 2049.818892][T23807] bridge0: port 1(bridge_slave_0) entered blocking state [ 2049.835166][T23807] bridge0: port 1(bridge_slave_0) entered disabled state [ 2049.855576][T23807] bridge_slave_0: entered allmulticast mode [ 2049.888216][T23807] bridge_slave_0: entered promiscuous mode [ 2049.936669][T23123] Bluetooth: hci0: command tx timeout [ 2050.052059][T23807] bridge0: port 2(bridge_slave_1) entered blocking state [ 2050.075960][T23807] bridge0: port 2(bridge_slave_1) entered disabled state [ 2050.096194][T23807] bridge_slave_1: entered allmulticast mode [ 2050.114409][T23807] bridge_slave_1: entered promiscuous mode [ 2050.256378][T23807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2050.304562][T22547] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2050.328790][T23807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2050.386409][T23807] team0: Port device team_slave_0 added [ 2050.461749][T23807] team0: Port device team_slave_1 added [ 2050.509163][T22547] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2050.536228][T22547] usb 3-1: can't read configurations, error -61 [ 2050.560801][T23807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2050.574612][T23807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2050.648953][T23807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2050.690200][T23807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2050.706653][T22547] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2050.743866][T23807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2050.772495][T23807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2050.910153][T23807] hsr_slave_0: entered promiscuous mode [ 2050.925087][T23807] hsr_slave_1: entered promiscuous mode [ 2050.933456][T23807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2050.945319][T23807] Cannot create hsr debugfs directory [ 2050.974823][T22547] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2050.983855][T22547] usb 3-1: can't read configurations, error -61 [ 2051.001242][T22547] usb usb3-port1: attempt power cycle [ 2051.392013][ T12] hsr_slave_0: left promiscuous mode [ 2051.399239][ T12] hsr_slave_1: left promiscuous mode [ 2051.438321][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2051.456360][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2051.476711][T22547] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2051.489021][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2051.511241][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2051.529077][T22547] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2051.540725][ T12] bridge_slave_1: left allmulticast mode [ 2051.546400][ T12] bridge_slave_1: left promiscuous mode [ 2051.552166][T22547] usb 3-1: can't read configurations, error -61 [ 2051.577323][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2051.598638][ T12] bridge_slave_0: left allmulticast mode [ 2051.614751][ T12] bridge_slave_0: left promiscuous mode [ 2051.635176][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2051.727302][ T12] veth1_macvtap: left promiscuous mode [ 2051.732869][ T12] veth0_macvtap: left promiscuous mode [ 2051.738693][T22547] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2051.758948][ T12] veth1_vlan: left promiscuous mode [ 2051.772040][ T12] veth0_vlan: left promiscuous mode [ 2051.810166][T22547] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2051.864325][T22547] usb 3-1: can't read configurations, error -61 [ 2051.882034][T22547] usb usb3-port1: unable to enumerate USB device [ 2052.016986][T23123] Bluetooth: hci0: command tx timeout [ 2052.565223][T23892] loop1: detected capacity change from 0 to 4096 [ 2052.864084][T23892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2054.027759][T23908] overlayfs: failed to clone lowerpath [ 2054.146712][T23123] Bluetooth: hci0: command tx timeout [ 2054.306243][T23120] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2054.979462][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2055.157595][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2055.291433][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2055.433080][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2055.811147][T23913] loop1: detected capacity change from 0 to 32768 [ 2055.872816][T23913] (syz.1.4782,23913,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2056.358628][T23913] (syz.1.4782,23913,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2056.958972][T23913] JBD2: Ignoring recovery information on journal [ 2057.172366][T23913] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 2057.508052][ T12] bond0 (unregistering): Released all slaves [ 2057.585546][T23120] ocfs2: Unmounting device (7,1) on (node local) [ 2058.067942][T23935] netlink: 'syz.2.4781': attribute type 64 has an invalid length. [ 2059.188623][ T12] IPVS: stop unused estimator thread 0... [ 2059.449608][T23807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2059.498911][T23807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2059.552156][T23807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2059.591883][T23807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2059.971385][T23807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2060.021041][T23807] 8021q: adding VLAN 0 to HW filter on device team0 [ 2060.064703][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 2060.071865][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2060.127879][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 2060.135092][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2060.228005][T23807] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2060.246495][T23807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2060.264794][T23958] loop2: detected capacity change from 0 to 4096 [ 2060.302726][T23958] ntfs3: Unknown parameter 'ÿ' [ 2060.641520][T23952] loop1: detected capacity change from 0 to 32768 [ 2060.836031][T23952] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 2060.905148][T23958] loop2: detected capacity change from 0 to 40427 [ 2060.918449][T23807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2060.927185][T23958] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 2060.934952][T23958] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2060.945015][T23958] F2FS-fs (loop2): invalid crc value [ 2060.991305][T23958] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2061.078960][T23958] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 2061.086103][T23958] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2061.144229][T23807] veth0_vlan: entered promiscuous mode [ 2061.175748][T23807] veth1_vlan: entered promiscuous mode [ 2061.232379][T23952] XFS (loop1): Ending clean mount [ 2061.365194][T23807] veth0_macvtap: entered promiscuous mode [ 2061.405194][T23807] veth1_macvtap: entered promiscuous mode [ 2061.470483][ T28] audit: type=1800 audit(1781984450.472:527): pid=23988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4785" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 2061.897293][T23807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2061.954092][T23807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2062.004717][T23807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2062.056571][T23807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2062.076547][T23807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2062.087191][T23807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2062.098276][T23120] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 2062.109847][T23807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2062.196388][T23807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2062.270194][T23807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2062.301968][T23807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2062.346603][T23807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2062.419098][T23807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2062.429709][T23807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2062.441143][T23807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2062.490469][T23807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2062.532843][T23807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2062.601702][T23807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2062.616518][T23807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2062.891071][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2062.927352][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2062.988990][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2063.017369][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2063.269337][T24006] overlayfs: failed to clone upperpath [ 2064.048210][T24016] netlink: 804 bytes leftover after parsing attributes in process `syz.4.4791'. [ 2064.119666][T23998] loop1: detected capacity change from 0 to 32768 [ 2064.158930][T24018] loop0: detected capacity change from 0 to 4096 [ 2064.237550][T23998] (syz.1.4786,23998,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2064.289074][T24018] ntfs3: loop0: Failed to initialize $Secure::$SDH (-22). [ 2064.296287][T24018] ntfs3: loop0: Failed to initialize $Secure (-22). [ 2064.366817][T23998] (syz.1.4786,23998,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2064.373494][T24023] loop2: detected capacity change from 0 to 4096 [ 2064.442744][T24023] ntfs3: Unknown parameter 'ÿ' [ 2064.485700][T23998] JBD2: Ignoring recovery information on journal [ 2064.589664][T23998] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 2064.677126][ T9236] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2065.122027][T24023] loop2: detected capacity change from 0 to 40427 [ 2065.152384][T24023] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 2065.160291][T24023] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2065.690352][ T9236] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2065.705566][T24023] F2FS-fs (loop2): invalid crc value [ 2065.714027][T24023] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2065.779085][ T9236] usb 1-1: can't read configurations, error -61 [ 2066.208342][T23120] ocfs2: Unmounting device (7,1) on (node local) [ 2066.409189][T24023] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 2066.416282][T24023] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2066.696050][ T9236] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2066.742736][ T28] audit: type=1800 audit(1781984455.712:528): pid=24053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4793" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 2067.428619][T24058] netlink: 804 bytes leftover after parsing attributes in process `syz.4.4796'. [ 2070.750531][T24093] loop0: detected capacity change from 0 to 32768 [ 2070.783352][T24093] (syz.0.4804,24093,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2070.800385][T24093] (syz.0.4804,24093,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2070.840488][T24093] JBD2: Ignoring recovery information on journal [ 2071.103892][T24093] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 2071.286604][T19744] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2071.476531][T19744] usb 2-1: Using ep0 maxpacket: 8 [ 2071.492644][T19744] usb 2-1: config index 0 descriptor too short (expected 8192, got 27) [ 2071.523896][T19744] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2071.539175][T23807] ocfs2: Unmounting device (7,0) on (node local) [ 2071.545664][T19744] usb 2-1: config 0 has no interfaces? [ 2071.553929][T19744] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2071.603884][T19744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2071.640702][T19744] usb 2-1: config 0 descriptor?? [ 2071.992330][T19744] usb 2-1: USB disconnect, device number 26 [ 2074.147069][T19744] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2074.356603][T19744] usb 3-1: Using ep0 maxpacket: 8 [ 2074.414942][T19744] usb 3-1: config index 0 descriptor too short (expected 8192, got 27) [ 2074.446586][T19744] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2074.508618][T19744] usb 3-1: config 0 has no interfaces? [ 2074.522824][T19744] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2074.551405][T19744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2074.592477][T19744] usb 3-1: config 0 descriptor?? [ 2074.652068][T24049] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2074.867026][T24049] usb 1-1: Using ep0 maxpacket: 8 [ 2074.874129][T24049] usb 1-1: config index 0 descriptor too short (expected 8192, got 27) [ 2074.886537][T24049] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2074.901963][T24049] usb 1-1: config 0 has no interfaces? [ 2074.907738][T24049] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2074.918317][ T9236] usb 3-1: USB disconnect, device number 28 [ 2074.931027][T24049] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2074.955145][T24049] usb 1-1: config 0 descriptor?? [ 2075.102958][T19224] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2075.271398][T23771] usb 1-1: USB disconnect, device number 26 [ 2075.346553][T19224] usb 2-1: Using ep0 maxpacket: 8 [ 2075.353701][T19224] usb 2-1: config index 0 descriptor too short (expected 8192, got 27) [ 2075.363703][T19224] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2075.374177][T19224] usb 2-1: config 0 has no interfaces? [ 2075.384096][T19224] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2075.397139][T19224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2075.415139][T19224] usb 2-1: config 0 descriptor?? [ 2076.294676][T23771] usb 2-1: USB disconnect, device number 27 [ 2077.029733][T24193] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 2077.687359][T23771] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2077.725628][T24210] loop2: detected capacity change from 0 to 4096 [ 2077.946765][T23771] usb 1-1: Using ep0 maxpacket: 8 [ 2078.034951][T23771] usb 1-1: config index 0 descriptor too short (expected 8192, got 27) [ 2078.045533][T23771] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2078.591451][T23771] usb 1-1: config 0 has no interfaces? [ 2078.627178][T23771] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2078.651973][T23771] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2078.679166][T23771] usb 1-1: config 0 descriptor?? [ 2078.994886][ T9236] usb 1-1: USB disconnect, device number 27 [ 2079.126815][T23771] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2079.186636][T19284] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 2079.316536][T23771] usb 3-1: Using ep0 maxpacket: 8 [ 2079.324379][T23771] usb 3-1: config index 0 descriptor too short (expected 8192, got 27) [ 2079.348116][T23771] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2079.378341][T23771] usb 3-1: config 0 has no interfaces? [ 2079.385148][T23771] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2079.385278][T19284] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 2079.406880][T23771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2079.418068][T23771] usb 3-1: config 0 descriptor?? [ 2079.427258][T19284] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2079.449528][T19284] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2079.459788][T19284] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2079.469065][T19284] usb 2-1: Product: syz [ 2079.473439][T19284] usb 2-1: Manufacturer: syz [ 2079.478910][T19284] usb 2-1: SerialNumber: syz [ 2079.486104][T19284] usb 2-1: config 0 descriptor?? [ 2079.505453][T19284] usb 2-1: selecting invalid altsetting 0 [ 2079.769821][T19284] usb 3-1: USB disconnect, device number 29 [ 2079.823355][T24222] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2079.850955][T24222] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2079.863491][T24222] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 2079.879887][T19224] usb 2-1: USB disconnect, device number 28 [ 2080.146719][ T9236] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2080.356586][ T9236] usb 1-1: Using ep0 maxpacket: 8 [ 2080.363980][ T9236] usb 1-1: config index 0 descriptor too short (expected 8192, got 27) [ 2080.375472][ T9236] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2080.386515][ T9236] usb 1-1: config 0 has no interfaces? [ 2080.392186][ T9236] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2080.401866][ T9236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2080.417312][ T9236] usb 1-1: config 0 descriptor?? [ 2080.514893][T24232] netlink: 'syz.2.4842': attribute type 64 has an invalid length. [ 2080.653942][ T9236] usb 1-1: USB disconnect, device number 28 [ 2083.178506][T24269] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 2083.529414][T24275] netlink: 'syz.2.4858': attribute type 64 has an invalid length. [ 2085.810410][T24310] loop2: detected capacity change from 0 to 4096 [ 2086.066527][ T9236] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 2086.272379][ T9236] usb 2-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 2086.303592][ T9236] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2086.328315][ T9236] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2086.349719][ T9236] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2086.423133][ T9236] usb 2-1: Product: syz [ 2086.436898][ T9236] usb 2-1: Manufacturer: syz [ 2086.452039][ T9236] usb 2-1: SerialNumber: syz [ 2086.469258][ T9236] usb 2-1: config 0 descriptor?? [ 2086.601604][ T9236] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 2086.770517][T23121] udevd[23121]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2086.813981][T24324] netlink: 'syz.0.4873': attribute type 64 has an invalid length. [ 2087.034403][ T9236] usb 2-1: USB disconnect, device number 29 [ 2090.046526][T19284] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 2090.362243][T19284] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x7 has an invalid bInterval 0, changing to 4 [ 2090.383502][T19284] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2090.442330][T19284] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2090.456561][T19284] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2090.491821][T24370] netlink: 'syz.2.4887': attribute type 64 has an invalid length. [ 2090.495399][T19284] usb 1-1: Product: syz [ 2090.514127][T19284] usb 1-1: Manufacturer: syz [ 2090.519226][T19284] usb 1-1: SerialNumber: syz [ 2090.542130][T19284] usb 1-1: config 0 descriptor?? [ 2090.567635][T19284] usb 1-1: selecting invalid altsetting 0 [ 2090.902770][T24347] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2090.935584][T24347] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2090.959316][T24347] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2090.968415][T24347] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2090.969255][T19284] usb 1-1: USB disconnect, device number 29 [ 2090.984280][T24347] usb 1-1: cannot submit urb 0, error -19: no device [ 2090.993753][T24347] usb 1-1: cannot submit urb 0, error -19: no device [ 2091.016398][T24347] usb 1-1: cannot submit urb 0, error -19: no device [ 2091.035455][T24347] usb 1-1: cannot submit urb 0, error -19: no device [ 2091.044209][T24347] usb 1-1: cannot submit urb 0, error -19: no device [ 2091.527223][T24368] loop1: detected capacity change from 0 to 32768 [ 2091.584299][T24368] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2091.699485][T24368] XFS (loop1): Ending clean mount [ 2091.979174][T23120] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2092.079787][T24392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4893'. [ 2094.161394][T24409] loop0: detected capacity change from 0 to 4096 [ 2094.703279][T24431] overlayfs: failed to clone upperpath [ 2097.932959][T24476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4921'. [ 2099.820186][T24505] loop2: detected capacity change from 0 to 4096 [ 2100.216688][T19284] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2100.236722][T24518] overlayfs: failed to clone upperpath [ 2100.479040][T19284] usb 2-1: Using ep0 maxpacket: 8 [ 2100.575824][T19284] usb 2-1: config index 0 descriptor too short (expected 8192, got 27) [ 2100.722726][T19284] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2100.794322][T19284] usb 2-1: config 0 has no interfaces? [ 2100.824668][T19284] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2100.877816][T19284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.899929][T19284] usb 2-1: config 0 descriptor?? [ 2101.351403][T24049] usb 2-1: USB disconnect, device number 30 [ 2101.911131][T19744] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2102.145720][T24553] overlayfs: failed to clone upperpath [ 2102.214116][T19744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2102.279318][T19744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2102.397225][T19744] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2102.459390][T19744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2102.610840][T19744] usb 1-1: config 0 descriptor?? [ 2103.039046][T19744] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 2103.070809][T19744] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 2103.101913][T19744] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 2103.119293][T19744] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 2103.141917][T19744] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 2103.216214][T19744] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 2103.230202][T19744] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 2103.444344][T19744] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 2105.556379][T19744] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 2105.578778][T19744] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 2105.598352][T19744] pyra: probe of 0003:1E7D:2CF6.0002 failed with error -71 [ 2105.616883][T19744] usb 1-1: USB disconnect, device number 30 [ 2107.805410][T24639] loop1: detected capacity change from 0 to 4096 [ 2107.840771][T24643] netlink: 'syz.4.4976': attribute type 64 has an invalid length. [ 2108.805313][T24665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4982'. [ 2108.956901][T23996] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 2109.138579][T23996] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x5 has an invalid bInterval 0, changing to 4 [ 2109.156558][ T5761] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2109.176498][T23996] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2109.195148][T23996] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2109.216518][T23996] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2109.233495][T23996] usb 1-1: Product: syz [ 2109.246879][T23996] usb 1-1: Manufacturer: syz [ 2109.252292][T23996] usb 1-1: SerialNumber: syz [ 2109.269280][T23996] usb 1-1: config 0 descriptor?? [ 2109.291615][T23996] usb 1-1: selecting invalid altsetting 0 [ 2109.346646][ T5761] usb 3-1: Using ep0 maxpacket: 8 [ 2109.366483][ T5761] usb 3-1: config index 0 descriptor too short (expected 8192, got 27) [ 2109.396508][ T5761] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2109.434016][ T5761] usb 3-1: config 0 has no interfaces? [ 2109.454217][ T5761] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2109.493719][ T5761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2109.543280][ T5761] usb 3-1: config 0 descriptor?? [ 2109.579278][T24684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4988'. [ 2109.613003][T24661] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2109.631495][T24661] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2109.646801][T24661] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 2109.662697][ T5761] usb 1-1: USB disconnect, device number 31 [ 2109.669626][T24661] usb 1-1: cannot submit urb 0, error -19: no device [ 2109.676884][T24661] usb 1-1: cannot submit urb 0, error -19: no device [ 2109.840774][T24049] usb 3-1: USB disconnect, device number 30 [ 2111.406538][T19284] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2111.623752][T19284] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2111.694292][T24720] loop1: detected capacity change from 0 to 4096 [ 2111.733083][T19284] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2111.778971][T19284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2111.957814][T19284] usb 3-1: Product: syz [ 2111.973188][T19284] usb 3-1: Manufacturer: syz [ 2111.992724][T19284] usb 3-1: SerialNumber: syz [ 2112.270444][T24726] fuse: Unknown parameter 'grou00000000000000000000' [ 2112.334347][T19284] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2112.641068][ C1] usblp0: nonzero write bulk status received: -71 [ 2112.641709][T19284] usb 3-1: USB disconnect, device number 31 [ 2112.708415][T19284] usblp0: removed [ 2115.466694][ T5761] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2115.670002][ T5761] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2115.694533][ T5761] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2115.710293][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2115.719028][ T5761] usb 2-1: Product: syz [ 2115.723519][ T5761] usb 2-1: Manufacturer: syz [ 2115.728443][ T5761] usb 2-1: SerialNumber: syz [ 2115.775317][T24764] 0: reclassify loop, rule prio 0, protocol 700 [ 2115.907214][T19284] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2115.982170][ T5761] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2116.126592][T19284] usb 3-1: Using ep0 maxpacket: 8 [ 2116.222296][T19284] usb 3-1: config index 0 descriptor too short (expected 8192, got 27) [ 2116.232124][T19284] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2116.256503][ C0] usblp0: nonzero write bulk status received: -71 [ 2116.263923][T23996] usb 2-1: USB disconnect, device number 31 [ 2116.295112][T23996] usblp0: removed [ 2116.306537][T19284] usb 3-1: config 0 has no interfaces? [ 2116.338658][T19284] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2116.356454][T19284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2116.380504][T19284] usb 3-1: config 0 descriptor?? [ 2116.643212][T23996] usb 3-1: USB disconnect, device number 32 [ 2117.896573][T19284] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2118.060590][T24785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5019'. [ 2118.116546][T19284] usb 3-1: Using ep0 maxpacket: 8 [ 2118.130808][T19284] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2118.142681][T19284] usb 3-1: config 4 interface 0 has no altsetting 0 [ 2118.168133][T19284] usb 3-1: string descriptor 0 read error: -22 [ 2118.196677][T19284] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2118.235218][T19284] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2118.291783][T24790] fuse: Unknown parameter 'group_i00000000000000000000' [ 2118.297245][T19284] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2118.407207][T19284] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2118.444888][T19284] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2118.462623][T19284] usb 3-1: media controller created [ 2118.591281][T19284] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2119.080952][T24801] ip6_tunnel: non-ECT from fe80:0020:0000:0000:0000:0000:0000:00bb with DS=0x1a [ 2119.629523][T19284] zl10353_read_register: readreg error (reg=127, ret==0) [ 2119.696539][T19744] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2119.751755][T19284] usb 3-1: USB disconnect, device number 33 [ 2119.916565][T19744] usb 2-1: Using ep0 maxpacket: 8 [ 2119.924497][T19744] usb 2-1: config 0 has no interfaces? [ 2119.936571][T19744] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2119.948264][T19744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2119.960600][T19744] usb 2-1: config 0 descriptor?? [ 2120.198739][T19284] usb 2-1: USB disconnect, device number 32 [ 2120.392599][T24816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5029'. [ 2120.981740][T24829] ip6_tunnel: non-ECT from fe80:0020:0000:0000:0000:0000:0000:00bb with DS=0x1a [ 2121.533004][T24846] loop2: detected capacity change from 0 to 7 [ 2121.557931][T24846] Dev loop2: unable to read RDB block 7 [ 2121.581826][T24846] loop2: unable to read partition table [ 2121.595569][T24846] loop2: partition table beyond EOD, truncated [ 2121.615573][T24846] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2122.076391][T24859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5043'. [ 2122.387681][T24865] fuse: Unknown parameter 'user00000000000000000000' [ 2122.926505][ T9236] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2123.236353][ T9236] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2123.454603][ T9236] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2123.594860][ T9236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2123.610598][ T9236] usb 2-1: Product: syz [ 2123.621462][ T9236] usb 2-1: Manufacturer: syz [ 2123.626204][ T9236] usb 2-1: SerialNumber: syz [ 2123.866018][ T9236] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2124.175660][T19284] usb 2-1: USB disconnect, device number 33 [ 2124.188369][T19284] usblp0: removed [ 2125.058788][T24900] syz_tun: entered allmulticast mode [ 2125.159275][T24900] dvmrp8: entered allmulticast mode [ 2125.168893][T19284] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 2125.389269][T19284] usb 1-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 2125.418899][T19284] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2125.434166][T19284] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2125.457650][T19284] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2125.500421][T19284] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2125.526831][T19284] usb 1-1: Product: syz [ 2125.531056][T19284] usb 1-1: Manufacturer: syz [ 2125.548874][T19284] usb 1-1: SerialNumber: syz [ 2125.559279][T19284] usb 1-1: config 0 descriptor?? [ 2125.850796][T19284] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 2125.871311][T19284] usb 1-1: USB disconnect, device number 32 [ 2125.901545][T23121] udevd[23121]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2125.952092][T24897] syz_tun: left allmulticast mode [ 2126.356684][ T9236] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2126.537462][ T9236] usb 3-1: Using ep0 maxpacket: 8 [ 2126.545188][ T9236] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2126.554948][ T9236] usb 3-1: config 4 interface 0 has no altsetting 0 [ 2126.566272][ T9236] usb 3-1: string descriptor 0 read error: -22 [ 2126.574160][ T9236] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2126.583976][ T9236] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2126.592555][T24049] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2126.617955][ T9236] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2126.643134][ T9236] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2126.660566][ T9236] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2126.667892][ T9236] usb 3-1: media controller created [ 2126.695833][ T9236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2126.812140][T24049] usb 2-1: Using ep0 maxpacket: 8 [ 2126.817367][T24891] Bluetooth: hci1: command 0x0406 tx timeout [ 2126.833148][T24049] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2126.841528][T24049] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2126.851403][T24049] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2126.861364][T24049] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2126.871962][T24049] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2126.885029][T24049] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2126.894182][T24049] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2127.171574][ T5849] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2127.335014][T24049] usb 2-1: usb_control_msg returned -71 [ 2127.348700][T24049] usbtmc 2-1:16.0: can't read capabilities [ 2127.356759][ T5849] usb 1-1: Using ep0 maxpacket: 8 [ 2127.365520][T24049] usb 2-1: USB disconnect, device number 34 [ 2127.374577][ T5849] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2127.387053][ T5849] usb 1-1: config 4 interface 0 has no altsetting 0 [ 2127.398456][ T5849] usb 1-1: string descriptor 0 read error: -22 [ 2127.405087][ T5849] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2127.414647][ T5849] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2127.431345][ T5849] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2127.470415][ T5849] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2127.502510][ T5849] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2127.510789][ T5849] usb 1-1: media controller created [ 2127.534586][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2127.778274][ T9236] zl10353_read_register: readreg error (reg=127, ret==0) [ 2127.783778][ T5849] zl10353_read_register: readreg error (reg=127, ret==0) [ 2127.852787][ T5849] usb 1-1: USB disconnect, device number 33 [ 2127.876339][ T9236] usb 3-1: USB disconnect, device number 34 [ 2128.284923][T24959] loop1: detected capacity change from 0 to 4096 [ 2129.861421][T24991] syz_tun: entered allmulticast mode [ 2129.878124][T24991] dvmrp8: entered allmulticast mode [ 2130.455562][T25003] fuse: Unknown parameter 'user_id00000000000000000000' [ 2130.848137][T24988] syz_tun: left allmulticast mode [ 2132.622657][T25038] loop0: detected capacity change from 0 to 4096 [ 2133.525533][T24049] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2133.567626][T25065] netlink: 'syz.0.5118': attribute type 64 has an invalid length. [ 2133.792014][T24049] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2134.080523][T24049] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2134.121071][T24049] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2134.184076][T24049] usb 2-1: Product: syz [ 2134.204136][T24049] usb 2-1: Manufacturer: syz [ 2134.222178][T24049] usb 2-1: SerialNumber: syz [ 2134.665071][T24049] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2135.113089][T25091] kvm: pic: non byte write [ 2135.167211][ C1] usblp0: nonzero write bulk status received: -71 [ 2135.199122][ T9236] usb 2-1: USB disconnect, device number 35 [ 2135.215087][ T9236] usblp0: removed [ 2136.796680][ T9236] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2136.988654][ T9236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2137.036319][ T9236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2137.062006][ T9236] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2137.089902][ T9236] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2137.108268][ T9236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2137.142663][ T9236] usb 3-1: config 0 descriptor?? [ 2137.591578][ T9236] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 2137.609866][ T9236] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 2137.622133][ T9236] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 2137.630771][ T9236] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 2137.638569][ T9236] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 2137.646156][ T9236] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 2137.657840][ T9236] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 2137.687400][ T9236] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2137.884881][T25142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5144'. [ 2137.963952][ T9236] usb 3-1: USB disconnect, device number 35 [ 2138.926091][T25155] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2139.038768][T25159] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2139.693256][T25161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5150'. [ 2139.920414][T25170] netlink: 'syz.2.5152': attribute type 10 has an invalid length. [ 2139.948119][T25170] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5152'. [ 2140.102974][T25170] team0: Port device geneve0 added [ 2140.707698][T25176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5155'. [ 2141.295636][T25194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5161'. [ 2141.305733][T25190] netlink: 'syz.0.5158': attribute type 10 has an invalid length. [ 2141.313596][T25190] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5158'. [ 2141.337390][T25190] team0: Port device geneve0 added [ 2141.676105][T25205] netlink: 'syz.4.5164': attribute type 10 has an invalid length. [ 2141.684088][T25205] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5164'. [ 2141.724646][T25205] team0: Port device geneve0 added [ 2142.335521][T25223] syz_tun: entered allmulticast mode [ 2142.375744][T25222] syz_tun: left allmulticast mode [ 2142.726650][T19744] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2142.926467][T19744] usb 2-1: Using ep0 maxpacket: 8 [ 2143.024538][T25234] loop0: detected capacity change from 0 to 4096 [ 2143.042858][T25234] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 2144.200944][T19744] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2144.388678][T19744] usb 2-1: config 4 interface 0 has no altsetting 0 [ 2144.399724][T19744] usb 2-1: string descriptor 0 read error: -22 [ 2144.406219][T19744] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2144.416283][T19744] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2144.524174][T19744] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2144.535619][T19744] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2144.551489][T19744] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2144.559672][T19744] usb 2-1: media controller created [ 2144.610813][T19744] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2145.704307][T19744] zl10353_read_register: readreg error (reg=127, ret==0) [ 2145.824683][T19744] usb 2-1: USB disconnect, device number 36 [ 2146.439553][T25263] tipc: Enabling of bearer rejected, failed to enable media [ 2146.659298][ T9236] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2146.799623][T25271] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2147.476510][ T9236] usb 3-1: Using ep0 maxpacket: 8 [ 2147.483824][ T9236] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2147.498141][ T9236] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2147.506620][ T9236] usb 3-1: can't read configurations, error -61 [ 2147.876641][ T9236] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2148.117957][T25280] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2148.557324][T25279] warning: `syz.4.5186' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 2149.578544][T25284] syzkaller0: entered promiscuous mode [ 2149.584073][T25284] syzkaller0: entered allmulticast mode [ 2149.688629][T25284] tipc: Started in network mode [ 2149.696585][T25284] tipc: Node identity 3e034d15745b, cluster identity 4711 [ 2149.714808][T25284] tipc: Enabled bearer , priority 0 [ 2149.774569][T25283] tipc: Resetting bearer [ 2149.843123][T25283] tipc: Disabling bearer [ 2150.359403][T25301] loop0: detected capacity change from 0 to 32768 [ 2150.444099][T25301] JBD2: Ignoring recovery information on journal [ 2150.491352][T25301] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 2150.681660][T25301] (syz.0.5195,25301,0):ocfs2_remove_inode_range:1793 ERROR: status = -22 [ 2150.704495][T25301] (syz.0.5195,25301,0):__ocfs2_change_file_space:2044 ERROR: status = -22 [ 2150.776199][T23807] ocfs2: Unmounting device (7,0) on (node local) [ 2152.178961][T25327] syzkaller0: entered promiscuous mode [ 2152.184638][T25327] syzkaller0: entered allmulticast mode [ 2152.340505][T25327] tipc: Started in network mode [ 2152.345532][T25327] tipc: Node identity 76697e02d592, cluster identity 4711 [ 2152.820755][T25327] tipc: Enabled bearer , priority 0 [ 2153.143548][T25326] tipc: Resetting bearer [ 2153.197635][T25326] tipc: Disabling bearer [ 2155.466304][T25362] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2156.576794][T25370] loop0: detected capacity change from 0 to 8 [ 2157.433481][T25351] loop1: detected capacity change from 0 to 32768 [ 2157.475578][T25351] JBD2: Ignoring recovery information on journal [ 2157.623365][T25351] JBD2: journal reset failed [ 2157.629917][T25351] (syz.1.5212,25351,1):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 2157.639205][T25351] (syz.1.5212,25351,1):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4 [ 2157.719111][T25379] loop2: detected capacity change from 0 to 4096 [ 2157.745620][T25379] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 2157.947065][T24891] Bluetooth: hci2: command 0x0406 tx timeout [ 2158.206167][T25377] ntfs3: loop2: failed to convert "c46c" to macturkish [ 2158.419212][T25399] loop0: detected capacity change from 0 to 128 [ 2158.559050][T25401] loop2: detected capacity change from 0 to 2048 [ 2160.232197][T25399] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2160.265430][T25401] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2160.285780][T25399] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2160.353026][T25401] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 2160.404525][T25401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2161.376652][T23807] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2162.945962][T25419] loop2: detected capacity change from 0 to 4096 [ 2162.974233][T25419] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 2163.262289][T25417] ntfs3: loop2: failed to convert "c46c" to macturkish [ 2163.657616][T25433] loop2: detected capacity change from 0 to 7 [ 2163.708210][T25433] Dev loop2: unable to read RDB block 7 [ 2163.717394][T25437] xt_hashlimit: size too large, truncated to 1048576 [ 2163.722558][T25423] loop1: detected capacity change from 0 to 32768 [ 2163.730405][T25433] loop2: unable to read partition table [ 2163.762400][T25423] JBD2: Ignoring recovery information on journal [ 2163.766013][T25433] loop2: partition table beyond EOD, truncated [ 2163.811996][T25433] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2163.853302][T25423] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 2164.071335][T25423] (syz.1.5233,25423,0):ocfs2_remove_inode_range:1793 ERROR: status = -22 [ 2164.099584][T25423] (syz.1.5233,25423,0):__ocfs2_change_file_space:2044 ERROR: status = -22 [ 2164.265055][T23120] ocfs2: Unmounting device (7,1) on (node local) [ 2165.112609][T25459] loop2: detected capacity change from 0 to 8 [ 2167.337750][T25463] loop1: detected capacity change from 0 to 32768 [ 2167.428112][T25463] JBD2: Ignoring recovery information on journal [ 2167.585317][T25463] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 2167.712533][T25480] loop2: detected capacity change from 0 to 2048 [ 2167.808816][T25480] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2167.822052][T25480] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 2167.863992][T25480] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2168.729241][T23120] ocfs2: Unmounting device (7,1) on (node local) [ 2168.956772][T25493] netlink: 'syz.2.5254': attribute type 64 has an invalid length. [ 2169.922470][T25508] loop1: detected capacity change from 0 to 8 [ 2171.607353][T25512] loop2: detected capacity change from 0 to 7 [ 2171.661682][T25512] Dev loop2: unable to read RDB block 7 [ 2171.676520][T25512] loop2: AHDI p1 p2 p3 [ 2171.701485][T25512] loop2: partition table partially beyond EOD, truncated [ 2171.749492][T25512] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2171.783121][T25512] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2173.091108][T24891] Bluetooth: hci0: command 0x0406 tx timeout [ 2173.195716][T25534] loop0: detected capacity change from 0 to 8 [ 2173.972958][T25539] loop2: detected capacity change from 0 to 4096 [ 2174.006199][T25539] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 2174.523074][T25539] ntfs3: loop2: failed to convert "c46c" to macturkish [ 2175.576984][T25563] loop2: detected capacity change from 0 to 2048 [ 2176.722864][T25563] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2176.810477][T25563] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 2176.868917][T25563] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2177.524283][T25570] loop1: detected capacity change from 0 to 4096 [ 2177.594967][T25570] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 2177.723757][T25567] loop0: detected capacity change from 0 to 4096 [ 2177.933355][T25570] ntfs3: loop1: failed to convert "c46c" to macturkish [ 2178.143331][T25567] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 2178.503881][T25565] ntfs3: loop0: failed to convert "c46c" to macturkish [ 2179.085530][T25572] loop2: detected capacity change from 0 to 32768 [ 2179.231887][T25584] loop0: detected capacity change from 0 to 8 [ 2179.560162][T25572] JBD2: Ignoring recovery information on journal [ 2179.920877][T25572] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 2180.377871][T23537] ocfs2: Unmounting device (7,2) on (node local) [ 2180.529632][T25604] loop1: detected capacity change from 0 to 8 [ 2181.864516][T25620] loop2: detected capacity change from 0 to 4096 [ 2182.582351][T25620] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 2183.763318][T25618] ntfs3: loop2: failed to convert "c46c" to macturkish [ 2184.071548][T25630] loop0: detected capacity change from 0 to 4096 [ 2184.087928][T25630] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 2184.199656][T25630] ntfs3: loop0: failed to convert "c46c" to macturkish [ 2184.915937][T25645] loop1: detected capacity change from 0 to 4096 [ 2184.978620][T25645] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 2186.121061][T25642] ntfs3: loop1: failed to convert "c46c" to macturkish [ 2187.485554][T25676] loop0: detected capacity change from 0 to 8 [ 2189.359899][T25695] loop1: detected capacity change from 0 to 8 [ 2190.925122][T25699] loop2: detected capacity change from 0 to 8 [ 2191.547605][T25696] loop0: detected capacity change from 0 to 4096 [ 2191.610906][T25696] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 2192.168836][T25696] ntfs3: loop0: Failed to read $UpCase (-4). [ 2192.220300][T25704] mmap: syz.2.5324 (25704) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 2195.547932][T25736] loop2: detected capacity change from 0 to 128 [ 2195.636165][T25736] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 2195.697834][T25736] vxfs: WRONG superblock magic 7b318cb5 at 8 [ 2195.813701][T25736] vxfs: can't find superblock. [ 2196.646198][T25747] loop0: detected capacity change from 0 to 8 [ 2197.471832][T25736] loop2: detected capacity change from 0 to 4096 [ 2197.535057][T25736] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 2197.757132][T25755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5335'. [ 2200.883865][T25789] loop2: detected capacity change from 0 to 7 [ 2200.910751][T25789] Dev loop2: unable to read RDB block 7 [ 2200.918761][T25789] loop2: AHDI p1 p2 p3 [ 2200.936563][T25789] loop2: partition table partially beyond EOD, truncated [ 2200.960233][T25789] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2200.967890][T25789] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2200.996899][ T5142] Dev loop2: unable to read RDB block 7 [ 2201.013201][ T5142] loop2: AHDI p1 p2 p3 [ 2201.025058][ T5142] loop2: partition table partially beyond EOD, truncated [ 2201.052427][ T5142] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2201.070825][ T5142] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2205.998707][T25857] loop2: detected capacity change from 0 to 7 [ 2206.025456][T25857] Dev loop2: unable to read RDB block 7 [ 2206.051833][T25857] loop2: AHDI p1 p2 p3 [ 2206.056077][T25857] loop2: partition table partially beyond EOD, truncated [ 2206.065054][T25857] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2206.078343][T25857] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2206.812964][T25875] overlayfs: failed to clone upperpath [ 2208.616834][T25896] loop2: detected capacity change from 0 to 7 [ 2208.634536][T25896] Dev loop2: unable to read RDB block 7 [ 2208.643832][T25896] loop2: AHDI p1 p2 p3 [ 2208.661030][T25896] loop2: partition table partially beyond EOD, truncated [ 2208.684202][T25896] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2208.692654][T25896] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2209.246725][T25910] loop2: detected capacity change from 0 to 128 [ 2209.299564][T25910] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 2209.373062][T25910] vxfs: WRONG superblock magic 7b318cb5 at 8 [ 2209.428960][T25910] vxfs: can't find superblock. [ 2209.450633][T25914] overlayfs: failed to clone upperpath [ 2210.282056][T25910] loop2: detected capacity change from 0 to 4096 [ 2210.593110][T25910] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 2215.746116][T25993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5417'. [ 2224.387749][T26042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5430'. [ 2229.143886][ T28] audit: type=1326 audit(2229.147:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26062 comm="syz.4.5436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3a2d9ce59 code=0x0 [ 2231.180393][T26085] loop2: detected capacity change from 0 to 256 [ 2231.257244][T26044] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2231.282168][T26085] tipc: Started in network mode [ 2231.298602][T26085] tipc: Node identity ac1414aa, cluster identity 4711 [ 2231.414997][T26085] tipc: Enabled bearer , priority 10 [ 2232.516680][ T5761] tipc: Node number set to 2886997162 [ 2233.956759][ T28] audit: type=1326 audit(2233.957:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26114 comm="syz.2.5453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76d4d9ce59 code=0x0 [ 2233.980995][T19224] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 2234.530227][T19224] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2234.559915][T19224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2234.581210][T19224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2234.600716][T19224] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 2234.620779][T19224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2234.644100][T19224] usb 2-1: config 0 descriptor?? [ 2236.167261][T26139] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 2236.175456][T26139] overlayfs: overlapping lowerdir path [ 2240.086740][T19224] usbhid 2-1:0.0: can't add hid device: -71 [ 2240.092726][T19224] usbhid: probe of 2-1:0.0 failed with error -71 [ 2240.108952][T19224] usb 2-1: USB disconnect, device number 37 [ 2241.986770][T19284] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 2242.190989][T19284] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2242.202849][T26156] loop2: detected capacity change from 0 to 32768 [ 2242.211475][T19284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2242.240905][T19284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2242.268809][T19284] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 2242.290964][T26156] JBD2: Ignoring recovery information on journal [ 2242.321491][T19284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2242.402658][T19284] usb 2-1: config 0 descriptor?? [ 2242.439984][T26156] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 2243.444280][T26172] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2243.566977][T26172] overlayfs: failed to look up (tracing) for ino (-66) [ 2243.942842][T23537] ocfs2: Unmounting device (7,2) on (node local) [ 2246.634870][ T28] audit: type=1326 audit(2245.743:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26173 comm="syz.0.5469" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f403f39ce59 code=0x0 [ 2247.800299][T19284] usbhid 2-1:0.0: can't add hid device: -71 [ 2247.820584][T19284] usbhid: probe of 2-1:0.0 failed with error -71 [ 2247.901648][T19284] usb 2-1: USB disconnect, device number 38 [ 2250.992303][T24891] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2251.011757][T24891] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2251.032036][T24891] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2251.047147][T24891] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2251.054725][T24891] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2251.074994][T24891] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2251.382314][ T28] audit: type=1326 audit(2251.383:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26209 comm="syz.1.5478" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7def59ce59 code=0x0 [ 2253.844965][T19935] Bluetooth: hci4: command tx timeout [ 2254.366503][T26208] chnl_net:caif_netlink_parms(): no params data found [ 2255.509265][T26208] bridge0: port 1(bridge_slave_0) entered blocking state [ 2255.516557][T26208] bridge0: port 1(bridge_slave_0) entered disabled state [ 2255.523808][T26208] bridge_slave_0: entered allmulticast mode [ 2255.535921][T26208] bridge_slave_0: entered promiscuous mode [ 2255.544908][T26208] bridge0: port 2(bridge_slave_1) entered blocking state [ 2255.554703][T26208] bridge0: port 2(bridge_slave_1) entered disabled state [ 2255.562731][T26208] bridge_slave_1: entered allmulticast mode [ 2255.570099][T26208] bridge_slave_1: entered promiscuous mode [ 2255.607093][T26208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2255.627541][T26208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2255.697893][T26208] team0: Port device team_slave_0 added [ 2255.717041][T26208] team0: Port device team_slave_1 added [ 2255.794010][T26208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2255.815362][T26208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2255.924911][T19935] Bluetooth: hci4: command tx timeout [ 2256.033569][T26208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2256.046777][T26208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2256.053763][T26208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2256.089908][T26208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2256.862994][T26208] hsr_slave_0: entered promiscuous mode [ 2256.875846][T26208] hsr_slave_1: entered promiscuous mode [ 2256.882786][T26208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2256.899409][T26208] Cannot create hsr debugfs directory [ 2257.154473][T26208] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2257.163959][T26208] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2257.174419][T26208] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2257.183493][T26208] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2257.271810][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2257.336175][T26208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2257.364441][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2257.392614][T26208] 8021q: adding VLAN 0 to HW filter on device team0 [ 2257.403947][ T7876] bridge0: port 1(bridge_slave_0) entered blocking state [ 2257.411124][ T7876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2257.448639][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2257.469711][T13191] bridge0: port 2(bridge_slave_1) entered blocking state [ 2257.476899][T13191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2257.523293][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2257.805446][T26208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2257.815990][ T12] tipc: Left network mode [ 2257.936457][T19935] Bluetooth: hci4: command tx timeout [ 2258.269963][T26208] veth0_vlan: entered promiscuous mode [ 2258.284674][T26208] veth1_vlan: entered promiscuous mode [ 2258.371757][T26208] veth0_macvtap: entered promiscuous mode [ 2258.385765][T26208] veth1_macvtap: entered promiscuous mode [ 2258.405714][T26208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2258.420548][T26208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.432140][T26208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2258.446099][T26208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.461958][T26208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2258.474359][T26208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.484405][T26208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2258.495269][T26208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.507286][T26208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2258.554673][T26208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2258.567840][T26208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.581192][T26208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2258.591902][T26208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.602431][T26208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2258.612959][T26208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.622822][T26208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2258.633339][T26208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2258.644300][T26208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2258.681293][T26208] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2258.691481][T26208] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2258.702171][T26208] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2258.710991][T26208] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2258.776702][ T12] dvmrp8 (unregistering): left allmulticast mode [ 2258.990719][T13191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2259.007249][T13191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2259.091037][ T7876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2259.124709][ T7876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2259.134827][ T12] hsr_slave_0: left promiscuous mode [ 2259.153949][ T12] hsr_slave_1: left promiscuous mode [ 2259.160487][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2259.169509][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2259.178068][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2259.185517][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2259.196203][ T12] bridge_slave_1: left allmulticast mode [ 2259.202334][ T12] bridge_slave_1: left promiscuous mode [ 2259.208592][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2259.218206][ T12] bridge_slave_0: left allmulticast mode [ 2259.223875][ T12] bridge_slave_0: left promiscuous mode [ 2259.230458][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2259.264720][ T12] veth1_macvtap: left promiscuous mode [ 2259.270943][ T12] veth0_macvtap: left promiscuous mode [ 2259.277112][ T12] veth1_vlan: left promiscuous mode [ 2259.282451][ T12] veth0_vlan: left promiscuous mode [ 2259.479592][ T12] team0 (unregistering): Port device geneve0 removed [ 2259.994716][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2260.024867][T19935] Bluetooth: hci4: command tx timeout [ 2260.053032][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2260.105359][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2260.157457][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2260.489543][ T12] bond0 (unregistering): Released all slaves [ 2377.696596][T24891] Bluetooth: hci4: command 0x0406 tx timeout