last executing test programs: 15.14442157s ago: executing program 2 (id=2490): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0x0, 0x17d, &(0x7f0000001ac0)="$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") chdir(&(0x7f0000000300)='./file0\x00') mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0xffffffff004}) 14.840503074s ago: executing program 2 (id=2496): socket$inet6(0xa, 0x6, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe9, &(0x7f0000000000), &(0x7f0000000080)=0x4) 14.670841018s ago: executing program 2 (id=2498): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000002400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=[@init={0x18}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x8003}}], 0x38}], 0x1, 0x0) 14.424148738s ago: executing program 2 (id=2500): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x90, 0x0, 0x0, {0x3}}, 0x0, 0x0, 0x0, 0x0}) unshare(0x22020400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 14.349807344s ago: executing program 2 (id=2501): syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000276ca640b40b040a91a30102030109022400010000000009040000021033700009050402000000000009058102"], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 11.562375661s ago: executing program 2 (id=2512): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0x0, 0x17d, &(0x7f0000001ac0)="$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") chdir(&(0x7f0000000300)='./file0\x00') mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000000)) 6.168421539s ago: executing program 0 (id=2531): syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c988a8", 0xe}], 0x1) 5.532535171s ago: executing program 0 (id=2539): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={0x0}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r2}, &(0x7f0000000100)=0x8) 5.346493165s ago: executing program 0 (id=2542): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0x42ce, 0x6, 0x8, 0x5, 0x8]}, &(0x7f0000000140)=0x78) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) unshare(0x400) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="959f0000000000000000bc00100004000000950000005f000000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x2, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000900142603600e120800140000000401a80009000860024004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 4.831331357s ago: executing program 0 (id=2550): semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x9000}], 0x1, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 4.201965719s ago: executing program 3 (id=2555): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4.004432025s ago: executing program 3 (id=2557): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)=0x3, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.000333785s ago: executing program 4 (id=2558): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001200)=ANY=[@ANYBLOB="54010000100001000000000000000000ac1414aa000000000000000000000000e0000002000000000000000000000000000000000000ff000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c0000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001500000000000000000008001e00000000000800"], 0x154}}, 0x0) 3.865746886s ago: executing program 0 (id=2559): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0x42ce, 0x6, 0x8, 0x5, 0x8]}, &(0x7f0000000140)=0x78) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) unshare(0x400) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="959f0000000000000000bc00100004000000950000005f000000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000900142603600e120800140000000401a80009000860024004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 3.830687549s ago: executing program 4 (id=2560): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x0, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfffffffffffffca3, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='kvm_set_spte_hva\x00'}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100), 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r0, &(0x7f0000000100), 0x0}, 0x20) 3.560537521s ago: executing program 3 (id=2561): syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c988a8", 0xe}], 0x1) 3.464638009s ago: executing program 4 (id=2562): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000500)=@mgmt_frame=@beacon={{{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0xa}, @val={0x4, 0x6, {0xff, 0x6, 0x2, 0x5000}}, @void, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0x4, {0x1, 0xd3, 0x5, 0x80}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @void}, 0x55) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{&(0x7f0000000100)=@in={0x2, 0x4e24}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14}}, @txtime={{0x18}}], 0x30}}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="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"/364], 0x28}}, 0x0) 3.068179571s ago: executing program 1 (id=2563): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c000000"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.696353871s ago: executing program 1 (id=2564): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xfda1a8838c6b33fe}, 0x0) gettid() socket$unix(0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000f0000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a03f00001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket(0x40000000015, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r5], 0x5c}}, 0x0) 2.666367003s ago: executing program 1 (id=2565): r0 = socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', 0x0}) 1.579455342s ago: executing program 1 (id=2566): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.523389916s ago: executing program 3 (id=2567): pipe(&(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) select(0x40, &(0x7f0000000140), 0x0, &(0x7f0000000400)={0xca}, 0x0) 1.523041306s ago: executing program 4 (id=2568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 1.522578307s ago: executing program 0 (id=2569): syz_emit_vhci(0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80206433, &(0x7f0000000080)=""/12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f903, 0x0, '\x00', @p_u16=0x0}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) syz_emit_vhci(0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x4, 0x5e}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000071100a000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b8d811083d1b4601b8010000000109021b000100000000090400000101dea9000905"], 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000040)={0x0, 0x59455247, 0x27c, 0xfffffff9, 0x3, @discrete={0x6, 0x5}}) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x200008f, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc038563b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="01"]) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000410101c0"]) 1.320183453s ago: executing program 3 (id=2570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="f900000000000000b702000014000000b7030000000000008500000083000000bf090000009500000000000000bf91000000000000b702000000000000850000a5dcb942f9be8b8f6e2e6f463c0084000000b700000000000010950000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x12) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0x7005, 0x0) readv(r7, &(0x7f00000004c0)=[{&(0x7f00000012c0)=""/191, 0xbf}], 0x1) 1.319893753s ago: executing program 1 (id=2571): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x0, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfffffffffffffca3, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='kvm_set_spte_hva\x00'}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100), 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r0, &(0x7f0000000100), 0x0}, 0x20) 416.136176ms ago: executing program 3 (id=2572): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x74) 412.064967ms ago: executing program 4 (id=2573): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0x0, 0x17d, &(0x7f0000001ac0)="$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") chdir(&(0x7f0000000300)='./file0\x00') mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0xffffffff004}) 288.15µs ago: executing program 1 (id=2574): socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) socketpair(0x5, 0x2, 0x6, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x9c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x80, 0x33, @beacon={{{}, {}, @broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{}]}, @void, @val={0x4, 0x6}, @void, @val={0x5, 0x3}, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a, {0x0, 0x2, 0x4, 0x0, {0x1ff, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x7cfadfd09456c78c, 0x401, 0x7}}, @void, @void, @void, [{0xdd, 0x1d, "4681fcb2fb4323c9f657e659a392e70d299679756854196d371f504d9b"}]}}]}, 0x9c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @mcast2}]}, 0x44}}, 0x0) 0s ago: executing program 4 (id=2575): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14}, 0x14}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r2}, &(0x7f0000000100)=0x8) kernel console output (not intermixed with test programs): device hsr_slave_0 entered promiscuous mode [ 436.922922][ T9976] device hsr_slave_1 entered promiscuous mode [ 436.965064][T10072] loop0: detected capacity change from 0 to 256 [ 436.979368][ T5667] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 436.979604][ T41] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 437.185047][ T9976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.250516][ T9976] Cannot create hsr debugfs directory [ 437.365437][ T41] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.470085][ T41] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 437.634337][ T5667] usb 3-1: not running at top speed; connect to a high speed hub [ 437.694297][ T41] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 437.710182][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.738729][ T41] usb 5-1: Product: syz [ 437.746815][ T41] usb 5-1: Manufacturer: syz [ 437.763564][ T41] usb 5-1: SerialNumber: syz [ 437.768983][ T5667] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 437.799400][ T5667] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 437.812904][ T5667] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 437.834203][ T3559] Bluetooth: hci0: command tx timeout [ 437.927630][T10087] loop1: detected capacity change from 0 to 1024 [ 438.014278][ T5667] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 438.032440][T10087] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 438.043483][ T5667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.072482][ T5667] usb 3-1: Product: ࡠ [ 438.075272][T10087] EXT4-fs (loop1): barriers disabled [ 438.083377][ T5667] usb 3-1: Manufacturer: Џ [ 438.098544][ T5667] usb 3-1: SerialNumber: 䐻魪Ⲏ꩟샏龯ꚯ떽ⶺօ피ᢩ鋩︃푂ቋ⅛༥㩹炁陎ꗖ䲡믅Ѷ礛䰗펌ힾ贾䴚ᖌ唛 [ 438.114649][T10087] JBD2: no valid journal superblock found [ 438.130850][T10087] EXT4-fs (loop1): error loading journal [ 438.548507][T10104] loop0: detected capacity change from 0 to 256 [ 438.562841][ T3649] device hsr_slave_0 left promiscuous mode [ 438.589620][ T3649] device hsr_slave_1 left promiscuous mode [ 438.601029][T10104] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3289bd7c, utbl_chksum : 0xe619d30d) [ 438.616748][ T3649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.662241][ T3649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.074009][ T3649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.101355][ T5667] usb 3-1: 0:2 : does not exist [ 439.220344][ T3649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.324259][ T41] cdc_ncm 5-1:1.0: failed to get mac address [ 439.344438][ T41] cdc_ncm 5-1:1.0: bind() failure [ 439.389667][ T5667] usb 3-1: USB disconnect, device number 35 [ 439.404913][ T3649] device bridge_slave_1 left promiscuous mode [ 439.414237][ T41] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 439.431042][ T3649] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.439539][ T41] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 439.510536][ T41] usbtest: probe of 5-1:1.1 failed with error -71 [ 439.519077][ T3649] device bridge_slave_0 left promiscuous mode [ 439.538526][ T3649] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.568204][ T41] usb 5-1: USB disconnect, device number 35 [ 439.665412][ T4396] udevd[4396]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.924052][ T3559] Bluetooth: hci0: command tx timeout [ 439.929937][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.937438][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.991467][T10122] loop0: detected capacity change from 0 to 2048 [ 440.087642][T10123] loop2: detected capacity change from 0 to 256 [ 440.246913][ T8982] EXT4-fs (loop4): unmounting filesystem. [ 440.395823][T10122] EXT4-fs (loop0): cluster size (2048) smaller than block size (4096) [ 441.512923][ T3649] device veth1_macvtap left promiscuous mode [ 441.559728][ T3649] device veth0_macvtap left promiscuous mode [ 441.587125][ T3649] device veth1_vlan left promiscuous mode [ 441.609649][ T3649] device veth0_vlan left promiscuous mode [ 442.465788][ T5663] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 442.836177][ T3649] team0 (unregistering): Port device team_slave_1 removed [ 442.877126][ T5663] usb 1-1: not running at top speed; connect to a high speed hub [ 442.897445][ T3649] team0 (unregistering): Port device team_slave_0 removed [ 442.949974][ T3649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.981054][ T5663] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 442.989951][ T5663] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 443.001217][ T5663] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.021407][ T3649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.178564][ T5663] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.187786][ T5663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.196127][ T5663] usb 1-1: Product: ࡠ [ 443.201207][ T5663] usb 1-1: Manufacturer: Џ [ 443.206337][ T5663] usb 1-1: SerialNumber: 䐻魪Ⲏ꩟샏龯ꚯ떽ⶺօ피ᢩ鋩︃푂ቋ⅛༥㩹炁陎ꗖ䲡믅Ѷ礛䰗펌ힾ贾䴚ᖌ唛 [ 443.643765][ T3649] bond0 (unregistering): Released all slaves [ 443.805196][ T5663] usb 1-1: 0:2 : does not exist [ 443.840030][ T5663] usb 1-1: USB disconnect, device number 18 [ 444.087207][T10138] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1660'. [ 444.108756][T10144] loop1: detected capacity change from 0 to 2048 [ 444.116890][T10144] EXT4-fs (loop1): cluster size (2048) smaller than block size (4096) [ 444.272591][ T4944] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 444.353401][T10146] loop2: detected capacity change from 0 to 256 [ 444.414499][T10148] loop4: detected capacity change from 0 to 2048 [ 444.415421][T10146] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3289bd7c, utbl_chksum : 0xe619d30d) [ 444.539692][T10148] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 445.684682][ T5556] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 445.847238][ T9976] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 445.927481][ T9976] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 445.998371][ T9976] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 446.044107][ T5556] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.079598][ T5556] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 446.096378][ T9976] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 446.264385][ T5556] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 446.287492][ T5556] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.322039][ T5556] usb 5-1: Product: syz [ 446.342396][ T5556] usb 5-1: Manufacturer: syz [ 446.361133][ T5556] usb 5-1: SerialNumber: syz [ 446.764061][ T9976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.845603][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 446.860694][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 446.905614][ T9976] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.942773][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 446.975439][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 447.075447][ T4881] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.082587][ T4881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.179967][T10190] loop0: detected capacity change from 0 to 16 [ 447.224622][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 447.255401][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 447.272281][T10190] erofs: (device loop0): mounted with root inode @ nid 36. [ 447.300940][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 447.319411][T10190] syz.0.1671: attempt to access beyond end of device [ 447.319411][T10190] loop0: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 447.351481][ T5665] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.358767][ T5665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.399225][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 447.414343][T10197] syz.0.1671: attempt to access beyond end of device [ 447.414343][T10197] loop0: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 447.419685][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 447.473100][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 447.489879][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 447.503231][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 447.540695][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 447.569583][ T9976] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 447.620724][ T9976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 447.683571][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 447.714885][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 447.723450][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 447.734016][ T5556] cdc_ncm 5-1:1.0: failed to get mac address [ 447.756527][ T5556] cdc_ncm 5-1:1.0: bind() failure [ 447.765297][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 447.784049][ T5556] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 447.794900][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 447.813641][ T5556] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 447.842753][ T5663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 447.844316][ T5556] usbtest: probe of 5-1:1.1 failed with error -71 [ 447.863919][ T4700] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 447.914613][ T5556] usb 5-1: USB disconnect, device number 36 [ 447.984144][ T41] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 448.224205][ T4700] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.247460][ T41] usb 3-1: Using ep0 maxpacket: 16 [ 448.277331][ T4700] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.290890][T10208] syz.0.1671: attempt to access beyond end of device [ 448.290890][T10208] loop0: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 448.333767][ T4700] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 448.370058][ T4700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.384181][ T41] usb 3-1: config 0 has no interfaces? [ 448.411893][ T4700] usb 2-1: config 0 descriptor?? [ 448.524734][ T41] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 448.546941][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 448.556868][ T8982] EXT4-fs (loop4): unmounting filesystem. [ 448.562865][ T41] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 448.563663][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 448.593944][ T41] usb 3-1: Product: syz [ 448.598181][ T41] usb 3-1: Manufacturer: syz [ 448.627783][ T41] r8152-cfgselector 3-1: config 0 descriptor?? [ 448.637311][ T9976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.748117][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 448.774890][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 448.827161][ T5663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 448.836833][ T5663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 448.865693][ T9976] device veth0_vlan entered promiscuous mode [ 448.892790][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 448.901510][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 448.915223][ T41] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 448.928112][ T4700] hid-rmi 0003:06CB:81A7.0029: unknown main item tag 0x0 [ 448.929822][ T9976] device veth1_vlan entered promiscuous mode [ 448.962759][ T4486] usb 3-1: config 0 descriptor?? [ 448.981675][ T4700] hid-rmi 0003:06CB:81A7.0029: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.1-1/input0 [ 449.045312][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 449.054912][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 449.084188][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 449.093016][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 449.118141][T10193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.127991][ T5556] usb 2-1: USB disconnect, device number 37 [ 449.147170][T10193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.170552][ T9976] device veth0_macvtap entered promiscuous mode [ 449.204058][ T4700] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 449.204528][ T9976] device veth1_macvtap entered promiscuous mode [ 449.472880][ T9976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.529478][ T9976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.701625][ T9976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.955502][ T9976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.209528][ T9976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.337899][ T9976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.363391][ T9976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.379596][ T9976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.415484][ T4700] usb 5-1: not running at top speed; connect to a high speed hub [ 450.432752][ T9976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.472357][ T9976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.514364][ T4700] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 450.536163][ T4700] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 450.539178][ T9976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.557441][ T9976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.567955][ T9976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.578564][ T9976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.589074][ T9976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.599054][ T9976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.602569][ T4700] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 450.609619][ T9976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.611312][ T9976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.890860][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 450.990197][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 451.216662][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 451.274873][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 451.379498][ T4486] usb 3-1: can't set config #0, error -71 [ 451.474799][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 451.483758][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 451.554193][ T4700] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 451.579465][ T4700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.597637][ T9976] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.614588][ T4700] usb 5-1: Product: ࡠ [ 451.623444][ T9976] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.642834][ T5667] usb 3-1: USB disconnect, device number 36 [ 451.649057][ T4700] usb 5-1: Manufacturer: Џ [ 451.664064][ T4700] usb 5-1: SerialNumber: 䐻魪Ⲏ꩟샏龯ꚯ떽ⶺօ피ᢩ鋩︃푂ቋ⅛༥㩹炁陎ꗖ䲡믅Ѷ礛䰗펌ힾ贾䴚ᖌ唛 [ 451.683928][ T9976] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.709400][ T9976] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.884036][ T4700] usb 5-1: can't set config #1, error -71 [ 452.590962][ T4700] usb 5-1: USB disconnect, device number 37 [ 452.817187][ T4486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.840980][ T4486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.907405][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 452.994828][ T4486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.025842][ T4486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.115026][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 453.942085][ T5667] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 454.189013][ T4700] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 454.211439][ T5667] usb 2-1: Using ep0 maxpacket: 16 [ 454.334147][ T5667] usb 2-1: config 0 has no interfaces? [ 454.467605][ T5667] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 454.506359][ T5667] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 454.529790][ T5667] usb 2-1: Product: syz [ 454.537843][ T5667] usb 2-1: Manufacturer: syz [ 454.578317][ T5667] r8152-cfgselector 2-1: config 0 descriptor?? [ 454.594324][ T4700] usb 5-1: not running at top speed; connect to a high speed hub [ 454.684334][ T4700] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 454.699931][ T4700] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 454.732993][ T4700] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.856103][ T5667] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 454.924390][ T4700] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 454.934592][ T4700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.942657][ T4700] usb 5-1: Product: ࡠ [ 454.964563][ T4700] usb 5-1: Manufacturer: Џ [ 454.977987][ T4700] usb 5-1: SerialNumber: 䐻魪Ⲏ꩟샏龯ꚯ떽ⶺօ피ᢩ鋩︃푂ቋ⅛༥㩹炁陎ꗖ䲡믅Ѷ礛䰗펌ힾ贾䴚ᖌ唛 [ 455.084961][T10280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.121052][T10280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.614243][ T4700] usb 5-1: 0:2 : does not exist [ 456.636876][ T9] usb 2-1: config 0 descriptor?? [ 456.662445][ T4700] usb 5-1: USB disconnect, device number 38 [ 457.672768][ T9] usb 2-1: can't set config #0, error -71 [ 457.684086][ T41] usb 2-1: USB disconnect, device number 38 [ 458.065780][T10376] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 458.069325][T10381] loop2: detected capacity change from 0 to 512 [ 458.187537][T10381] EXT4-fs (loop2): 1 truncate cleaned up [ 458.193259][T10381] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 458.405788][T10397] loop1: detected capacity change from 0 to 16 [ 458.429900][ T7184] EXT4-fs (loop2): unmounting filesystem. [ 458.438962][T10397] erofs: (device loop1): mounted with root inode @ nid 36. [ 458.480805][T10399] loop4: detected capacity change from 0 to 512 [ 458.576365][T10399] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 458.597975][T10397] syz.1.1717: attempt to access beyond end of device [ 458.597975][T10397] loop1: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 458.619740][T10397] syz.1.1717: attempt to access beyond end of device [ 458.619740][T10397] loop1: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 458.762234][T10399] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 458.831047][T10399] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038 (0x7fffffff) [ 458.890763][T10399] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2926: inode #15: comm syz.4.1720: corrupted xattr block 32 [ 459.078419][T10417] syz.1.1717: attempt to access beyond end of device [ 459.078419][T10417] loop1: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 459.642790][T10399] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 459.782032][ T8982] EXT4-fs (loop4): unmounting filesystem. [ 459.877314][T10427] loop3: detected capacity change from 0 to 512 [ 459.915768][T10427] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 459.958514][T10432] loop1: detected capacity change from 0 to 512 [ 459.965356][T10427] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.1728: casefold flag without casefold feature [ 459.980716][T10427] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.1728: missing EA_INODE flag [ 460.009677][T10432] EXT4-fs (loop1): 1 truncate cleaned up [ 460.015947][T10432] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 460.030757][T10427] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1728: error while reading EA inode 12 err=-117 [ 460.073311][T10427] EXT4-fs (loop3): 1 orphan inode deleted [ 460.079441][T10427] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 460.198966][ T9976] EXT4-fs (loop3): unmounting filesystem. [ 460.258438][ T3551] EXT4-fs (loop1): unmounting filesystem. [ 460.417588][T10450] x_tables: duplicate entry at hook 2 [ 460.641180][T10457] loop4: detected capacity change from 0 to 128 [ 460.680145][T10457] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 460.741841][ T3716] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 460.790720][T10463] loop3: detected capacity change from 0 to 512 [ 460.846991][T10463] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 460.885010][T10463] EXT4-fs (loop3): 1 truncate cleaned up [ 460.890728][T10463] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 460.915379][T10463] EXT4-fs error (device loop3): ext4_generic_delete_entry:2680: inode #2: block 13: comm syz.3.1743: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 461.006309][T10463] EXT4-fs error (device loop3) in ext4_delete_entry:2751: Corrupt filesystem [ 461.027321][T10463] EXT4-fs warning (device loop3): ext4_rename_delete:3735: inode #2: comm syz.3.1743: Deleting old file: nlink 4, error=-117 [ 461.056636][T10473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1745'. [ 461.131626][ T9976] EXT4-fs (loop3): unmounting filesystem. [ 462.455181][ T26] audit: type=1326 audit(1721208439.504:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.1.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4314375a19 code=0x7ffc0000 [ 462.520278][ T26] audit: type=1326 audit(1721208439.504:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.1.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4314375a19 code=0x7ffc0000 [ 462.611818][ T26] audit: type=1326 audit(1721208439.544:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.1.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4314375a19 code=0x7ffc0000 [ 462.713651][ T26] audit: type=1326 audit(1721208439.544:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.1.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4314375a19 code=0x7ffc0000 [ 462.744153][ T26] audit: type=1326 audit(1721208439.544:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.1.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4314375a19 code=0x7ffc0000 [ 462.823136][ T26] audit: type=1326 audit(1721208439.564:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.1.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4314375a19 code=0x7ffc0000 [ 462.856088][ T26] audit: type=1326 audit(1721208439.564:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.1.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4314375a19 code=0x7ffc0000 [ 462.910299][ T26] audit: type=1326 audit(1721208439.564:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.1.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4314375a19 code=0x7ffc0000 [ 463.028116][ T26] audit: type=1326 audit(1721208439.564:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.1.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f4314375a19 code=0x7ffc0000 [ 463.099208][ T26] audit: type=1326 audit(1721208439.564:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10504 comm="syz.1.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4314375a19 code=0x7ffc0000 [ 463.374513][T10536] x_tables: duplicate entry at hook 2 [ 463.413905][ T4700] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 463.665785][ T4700] usb 3-1: Using ep0 maxpacket: 16 [ 463.798242][ T4700] usb 3-1: config 0 has no interfaces? [ 463.928309][ T4700] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 463.937632][ T4700] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 463.946188][ T4700] usb 3-1: Product: syz [ 463.950403][ T4700] usb 3-1: Manufacturer: syz [ 463.972463][ T4700] r8152-cfgselector 3-1: config 0 descriptor?? [ 464.235171][ T4700] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 464.457823][T10526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.478546][T10526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.874929][ T4700] usb 3-1: USB disconnect, device number 37 [ 467.348508][T10579] x_tables: duplicate entry at hook 2 [ 467.837268][T10593] loop2: detected capacity change from 0 to 512 [ 467.898940][T10593] EXT4-fs: Ignoring removed orlov option [ 467.922207][T10593] EXT4-fs (loop2): unable to read superblock [ 469.097124][T10627] loop1: detected capacity change from 0 to 512 [ 469.175293][T10627] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 469.195701][T10627] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038 (0x7fffffff) [ 469.246628][T10627] EXT4-fs warning (device loop1): ext4_group_extend:1894: will only finish group (16384 blocks, 16256 new) [ 469.300998][T10627] EXT4-fs warning (device loop1): ext4_group_extend:1899: can't read last block, resize aborted [ 469.344271][T10638] loop4: detected capacity change from 0 to 1024 [ 469.351795][T10638] EXT4-fs: Ignoring removed nomblk_io_submit option [ 469.353400][ T3551] EXT4-fs (loop1): unmounting filesystem. [ 469.416854][T10638] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8803c118, mo2=0002] [ 469.463586][T10638] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 469.498643][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 469.498661][ T26] audit: type=1326 audit(1721208446.544:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10648 comm="syz.2.1811" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbd6975a19 code=0x0 [ 469.783883][ T4700] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 470.154235][ T4700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 470.203941][ T4700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 470.244003][ T4700] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 470.293396][ T4700] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 470.310878][ T4700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.351416][ T4700] usb 5-1: config 0 descriptor?? [ 470.362134][T10679] loop1: detected capacity change from 0 to 1024 [ 470.384822][T10679] EXT4-fs: Ignoring removed orlov option [ 470.396243][T10679] EXT4-fs (loop1): Test dummy encryption mode enabled [ 470.404263][T10638] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 470.484048][T10679] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 470.701493][ T3551] EXT4-fs (loop1): unmounting filesystem. [ 470.866286][ T4700] plantronics 0003:047F:FFFF.002A: unknown main item tag 0xd [ 470.917784][ T4700] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving [ 470.958614][ T4700] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 471.148014][ T4700] usb 5-1: USB disconnect, device number 39 [ 471.780514][ T8982] EXT4-fs (loop4): unmounting filesystem. [ 472.820925][T10759] loop2: detected capacity change from 0 to 512 [ 472.909755][T10759] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 472.924085][T10759] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038 (0x7fffffff) [ 474.067328][ T7184] EXT4-fs (loop2): unmounting filesystem. [ 474.235189][T10783] loop1: detected capacity change from 0 to 256 [ 474.265295][T10784] loop2: detected capacity change from 0 to 512 [ 474.304752][T10784] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 474.320395][T10783] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 474.370739][T10784] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 474.386465][T10784] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038 (0x7fffffff) [ 474.514234][T10784] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 474.633960][T10784] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 32768 with max blocks 1 with error 28 [ 474.657343][T10758] loop3: detected capacity change from 0 to 40427 [ 474.686175][T10758] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 474.724121][T10784] EXT4-fs (loop2): This should not happen!! Data will be lost [ 474.724121][T10784] [ 474.732652][T10758] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 474.769391][T10784] EXT4-fs (loop2): Total free blocks count 0 [ 474.792702][T10758] F2FS-fs (loop3): Found nat_bits in checkpoint [ 474.794010][T10784] EXT4-fs (loop2): Free/Dirty block details [ 474.886833][T10784] EXT4-fs (loop2): free_blocks=39626 [ 474.892271][T10784] EXT4-fs (loop2): dirty_blocks=1 [ 474.928922][T10784] EXT4-fs (loop2): Block reservation details [ 474.955893][T10784] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 474.962236][T10758] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 474.999198][T10758] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 475.028461][T10771] loop4: detected capacity change from 0 to 32768 [ 475.117914][ T7184] EXT4-fs (loop2): unmounting filesystem. [ 475.151161][ T26] audit: type=1800 audit(1721208452.194:121): pid=10771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1857" name="file1" dev="loop4" ino=65 res=0 errno=0 [ 475.247484][ T9976] syz-executor: attempt to access beyond end of device [ 475.247484][ T9976] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 475.357039][ T9976] syz-executor: attempt to access beyond end of device [ 475.357039][ T9976] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 475.579022][ T11] kworker/u4:1: attempt to access beyond end of device [ 475.579022][ T11] loop3: rw=2049, sector=40960, nr_sectors = 104 limit=40427 [ 475.956310][T10815] loop2: detected capacity change from 0 to 512 [ 475.976203][T10787] loop0: detected capacity change from 0 to 40427 [ 475.978320][T10815] EXT4-fs: Ignoring removed nobh option [ 476.056058][T10815] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 476.106391][T10815] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 476.117835][T10787] F2FS-fs (loop0): Found nat_bits in checkpoint [ 476.142409][T10815] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #13: comm syz.2.1874: casefold flag without casefold feature [ 476.196590][T10787] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 476.242663][T10815] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #13: comm syz.2.1874: unexpected EA_INODE flag [ 476.277364][T10815] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1874: couldn't read orphan inode 13 (err -117) [ 476.327382][T10815] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 476.445198][ T9444] syz-executor: attempt to access beyond end of device [ 476.445198][ T9444] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 476.475590][T10815] EXT4-fs error (device loop2): __ext4_remount:6425: comm syz.2.1874: Abort forced by user [ 476.524398][T10815] EXT4-fs (loop2): Remounting filesystem read-only [ 476.665020][ T7184] EXT4-fs (loop2): unmounting filesystem. [ 477.372299][T10836] loop0: detected capacity change from 0 to 512 [ 477.395694][T10836] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 477.488676][T10836] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 477.514862][T10836] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038 (0x7fffffff) [ 477.745639][ T9444] EXT4-fs (loop0): unmounting filesystem. [ 477.940702][ T3565] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 477.952081][ T3565] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 477.960572][ T3565] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 477.971355][ T3565] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 477.979325][ T3565] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 477.986714][ T3565] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 478.262813][T10828] loop4: detected capacity change from 0 to 40427 [ 478.298132][T10830] loop2: detected capacity change from 0 to 32768 [ 478.307666][T10828] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 478.319124][T10828] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 478.370568][T10828] F2FS-fs (loop4): Found nat_bits in checkpoint [ 478.392294][T10830] XFS (loop2): Mounting V5 Filesystem [ 478.492863][ T3649] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.590371][T10830] XFS (loop2): Ending clean mount [ 478.621865][T10828] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 478.669041][T10828] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 478.710587][ T3649] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.742254][ T7184] XFS (loop2): Unmounting Filesystem [ 478.876278][T10879] loop0: detected capacity change from 0 to 256 [ 478.881757][ T8982] syz-executor: attempt to access beyond end of device [ 478.881757][ T8982] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 478.920700][T10879] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 478.991911][ T3649] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.018773][ T8982] syz-executor: attempt to access beyond end of device [ 479.018773][ T8982] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 479.055274][T10844] chnl_net:caif_netlink_parms(): no params data found [ 479.070217][T10881] loop1: detected capacity change from 0 to 512 [ 479.134579][T10881] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 479.232632][ T3649] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.262745][ T9946] kworker/u4:2: attempt to access beyond end of device [ 479.262745][ T9946] loop4: rw=2049, sector=40960, nr_sectors = 104 limit=40427 [ 479.274331][T10881] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 479.757332][T10881] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038 (0x7fffffff) [ 479.908472][T10881] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 479.954293][T10881] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 32768 with max blocks 1 with error 28 [ 479.993980][T10881] EXT4-fs (loop1): This should not happen!! Data will be lost [ 479.993980][T10881] [ 480.003703][T10881] EXT4-fs (loop1): Total free blocks count 0 [ 480.018701][T10881] EXT4-fs (loop1): Free/Dirty block details [ 480.073985][ T3565] Bluetooth: hci0: command tx timeout [ 480.107068][T10881] EXT4-fs (loop1): free_blocks=39626 [ 480.112600][T10881] EXT4-fs (loop1): dirty_blocks=1 [ 480.136879][T10881] EXT4-fs (loop1): Block reservation details [ 480.159426][T10881] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 480.194929][T10844] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.209928][T10844] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.229208][T10844] device bridge_slave_0 entered promiscuous mode [ 480.243009][ T3551] EXT4-fs (loop1): unmounting filesystem. [ 480.333220][T10844] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.349566][T10844] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.374441][T10844] device bridge_slave_1 entered promiscuous mode [ 480.616219][T10844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.659270][T10844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.903423][T10844] team0: Port device team_slave_0 added [ 480.983637][T10910] loop0: detected capacity change from 0 to 256 [ 481.057293][T10844] team0: Port device team_slave_1 added [ 481.092728][T10910] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 481.305174][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1905'. [ 481.364656][T10844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.371698][T10844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.406134][T10922] autofs4:pid:10922:validate_dev_ioctl: path string terminator missing for cmd(0xc0189378) [ 481.424848][T10924] loop2: detected capacity change from 0 to 1024 [ 481.453846][T10844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.501039][T10919] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 481.501173][T10919] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 481.501751][ T3559] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 481.506745][ T3559] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 481.509630][ T3559] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 481.510917][ T3559] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 481.512519][ T3559] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 481.512810][ T3559] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 481.642220][T10844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.693262][T10844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.763397][T10844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.001833][T10844] device hsr_slave_0 entered promiscuous mode [ 482.029376][T10844] device hsr_slave_1 entered promiscuous mode [ 482.044150][T10844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.072266][T10844] Cannot create hsr debugfs directory [ 482.154528][ T3565] Bluetooth: hci0: command tx timeout [ 482.466519][T10922] loop1: detected capacity change from 0 to 32768 [ 482.623100][T10922] XFS (loop1): Mounting V5 Filesystem [ 482.810293][T10964] loop0: detected capacity change from 0 to 512 [ 482.870754][T10964] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 482.899058][T10922] XFS (loop1): Ending clean mount [ 483.248871][T10972] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 3: comm syz.0.1915: lblock 0 mapped to illegal pblock 3 (length 1) [ 483.278285][T10972] EXT4-fs warning (device loop0): dx_probe:822: inode #2: lblock 0: comm syz.0.1915: error -117 reading directory block [ 483.772019][T10969] syz.1.1906[10969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 483.843467][ T26] audit: type=1326 audit(1721208460.764:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10920 comm="syz.1.1906" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4314375a19 code=0x0 [ 483.881216][T10925] chnl_net:caif_netlink_parms(): no params data found [ 483.955494][ T3551] XFS (loop1): Unmounting Filesystem [ 483.960739][ T3565] Bluetooth: hci1: command tx timeout [ 483.990301][ T9444] EXT4-fs (loop0): unmounting filesystem. [ 484.185365][T10983] loop0: detected capacity change from 0 to 512 [ 484.234133][ T3559] Bluetooth: hci0: command tx timeout [ 484.249734][T10983] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 484.315799][ T3649] device hsr_slave_0 left promiscuous mode [ 484.332752][ T3649] device hsr_slave_1 left promiscuous mode [ 484.341675][T10983] EXT4-fs (loop0): orphan cleanup on readonly fs [ 484.372847][ T3649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.380778][ T3649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.412868][T10983] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3845: comm syz.0.1918: Allocating blocks 41-42 which overlap fs metadata [ 484.428798][ T3649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.447701][T10983] EXT4-fs (loop0): Remounting filesystem read-only [ 484.458308][ T3649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.470376][T10983] Quota error (device loop0): write_blk: dquota write failed [ 484.478791][ T3649] device bridge_slave_1 left promiscuous mode [ 484.493958][T10983] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 484.506561][ T3649] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.520159][T10983] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.1918: Failed to acquire dquot type 0 [ 484.543477][ T3649] device bridge_slave_0 left promiscuous mode [ 484.553321][T10983] EXT4-fs (loop0): 1 truncate cleaned up [ 484.589831][T10983] EXT4-fs (loop0): pa ffff888073311620: logic 1, phys. 41, len 23 [ 484.597831][T10983] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4885: group 0, free 22, pa_free 23 [ 484.608471][ T3649] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.635098][T10983] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 484.841120][ T3649] device veth1_macvtap left promiscuous mode [ 484.854494][ T3649] device veth0_macvtap left promiscuous mode [ 484.872344][ T3649] device veth1_vlan left promiscuous mode [ 484.879362][ T3649] device veth0_vlan left promiscuous mode [ 485.424313][ T9444] EXT4-fs (loop0): unmounting filesystem. [ 485.835172][ T3649] team0 (unregistering): Port device team_slave_1 removed [ 485.886145][ T3649] team0 (unregistering): Port device team_slave_0 removed [ 485.942380][ T3649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.996049][ T3649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.004730][ T3559] Bluetooth: hci1: command tx timeout [ 486.324033][ T3565] Bluetooth: hci0: command tx timeout [ 486.626558][ T3649] bond0 (unregistering): Released all slaves [ 486.900952][T11029] autofs4:pid:11029:validate_dev_ioctl: path string terminator missing for cmd(0xc0189378) [ 487.282838][T11029] loop1: detected capacity change from 0 to 32768 [ 487.360879][T11029] XFS (loop1): Mounting V5 Filesystem [ 487.493395][T11029] XFS (loop1): Ending clean mount [ 487.688416][ T26] audit: type=1326 audit(1721208464.724:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11028 comm="syz.1.1926" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4314375a19 code=0x0 [ 487.756512][T11041] syz.1.1926[11041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 487.917536][ T3551] XFS (loop1): Unmounting Filesystem [ 488.081320][ T3565] Bluetooth: hci1: command tx timeout [ 489.985943][T11043] loop1: detected capacity change from 0 to 40427 [ 490.015361][T11043] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 490.022193][T11043] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 490.024371][T10925] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.079633][T11043] F2FS-fs (loop1): Found nat_bits in checkpoint [ 490.089218][T10925] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.137661][T10925] device bridge_slave_0 entered promiscuous mode [ 490.154183][ T3565] Bluetooth: hci1: command tx timeout [ 490.174846][T10925] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.182700][T10925] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.203058][T10925] device bridge_slave_1 entered promiscuous mode [ 490.230973][T11043] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 490.256923][T11043] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 490.341169][T10925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.353557][T10925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.363218][ T3551] syz-executor: attempt to access beyond end of device [ 490.363218][ T3551] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 490.532423][T10925] team0: Port device team_slave_0 added [ 490.546345][T10925] team0: Port device team_slave_1 added [ 490.671635][T10925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.691347][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.845114][T10925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.931567][T10844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 490.977849][T10925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.994362][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.082203][T10925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.125273][T10844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 491.145804][T10844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 491.176553][T10844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 491.565244][T11065] binder: 11063:11065 ioctl c0306201 200003c0 returned -14 [ 491.806008][T10925] device hsr_slave_0 entered promiscuous mode [ 491.840585][T10925] device hsr_slave_1 entered promiscuous mode [ 491.864982][T10925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.872600][T10925] Cannot create hsr debugfs directory [ 492.290156][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1941'. [ 492.321466][T10844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.362649][T11092] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 492.409585][T11093] loop0: detected capacity change from 0 to 1024 [ 492.420931][T11092] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 492.575414][T10844] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.624468][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 492.626018][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 493.093614][T11090] loop2: detected capacity change from 0 to 40427 [ 493.116661][T11090] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 493.123335][T11090] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 493.224366][T11090] F2FS-fs (loop2): Found nat_bits in checkpoint [ 493.312076][T11090] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 493.327172][T11090] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 493.409098][ T7184] syz-executor: attempt to access beyond end of device [ 493.409098][ T7184] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 496.268302][T10925] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.300381][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 496.309517][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 496.320692][ T5665] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.327881][ T5665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.513668][T11101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.676404][T10925] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.612386][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 498.622764][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 498.631848][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 498.641545][ T5667] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.648748][ T5667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.664024][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 498.754259][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 498.763236][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 498.776122][T11127] loop1: detected capacity change from 0 to 1024 [ 498.819841][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 498.828804][T11127] EXT4-fs: Ignoring removed nomblk_io_submit option [ 498.838310][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 498.856413][T11127] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 498.881930][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 498.943286][T11127] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 499.025502][T10925] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.062204][T10844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 499.090195][T11141] fuse: Bad value for 'fd' [ 499.101963][T10844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 499.147020][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 499.162306][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 499.192541][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 499.217279][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 499.234980][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 499.350415][T10925] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.394323][ T3551] EXT4-fs (loop1): unmounting filesystem. [ 499.417844][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 499.604523][ T3649] tipc: Left network mode [ 499.798448][T11160] loop0: detected capacity change from 0 to 256 [ 499.848062][T11160] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 500.022449][T11162] loop0: detected capacity change from 0 to 512 [ 500.080814][T11162] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 500.101004][T11162] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038 (0x7fffffff) [ 500.142068][T11146] loop2: detected capacity change from 0 to 40427 [ 500.161933][T11146] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 500.171357][T11146] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 500.405690][T11146] F2FS-fs (loop2): Found nat_bits in checkpoint [ 500.819037][T11146] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 500.877752][T11146] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 501.172288][ T7184] syz-executor: attempt to access beyond end of device [ 501.172288][ T7184] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 501.367716][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.374140][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.530724][T11172] autofs4:pid:11172:validate_dev_ioctl: path string terminator missing for cmd(0xc0189378) [ 501.893609][T11172] loop2: detected capacity change from 0 to 32768 [ 501.982764][T11172] XFS (loop2): Mounting V5 Filesystem [ 502.051823][T11172] XFS (loop2): Ending clean mount [ 502.281369][ T7184] XFS (loop2): Unmounting Filesystem [ 503.481234][ T9444] EXT4-fs (loop0): unmounting filesystem. [ 503.608762][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 503.631907][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 503.706603][T10844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.728195][T10925] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 503.771229][T10925] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 505.035723][T10925] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 506.132733][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 506.154258][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 506.259766][T10925] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 506.369733][T10844] device veth0_vlan entered promiscuous mode [ 506.414894][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 506.425223][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 506.588997][T10844] device veth1_vlan entered promiscuous mode [ 506.595529][T11207] loop1: detected capacity change from 0 to 256 [ 506.624062][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 506.632097][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 506.654703][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 506.677270][T11207] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 506.789610][T11211] autofs4:pid:11211:validate_dev_ioctl: path string terminator missing for cmd(0xc0189378) [ 507.055287][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 507.063511][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 507.101291][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 507.129202][T10844] device veth0_macvtap entered promiscuous mode [ 507.365193][T10844] device veth1_macvtap entered promiscuous mode [ 507.384189][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 507.393057][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 507.417696][T10925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.504071][ T3649] device hsr_slave_0 left promiscuous mode [ 507.524454][ T3649] device hsr_slave_1 left promiscuous mode [ 507.541585][ T3649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.561004][ T3649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.589922][ T3649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.607876][ T3649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.634927][ T3649] device bridge_slave_1 left promiscuous mode [ 507.651173][ T3649] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.678177][ T3649] device bridge_slave_0 left promiscuous mode [ 507.694108][ T3649] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.780091][ T3649] device veth1_macvtap left promiscuous mode [ 507.787457][ T3649] device veth0_macvtap left promiscuous mode [ 507.793601][ T3649] device veth1_vlan left promiscuous mode [ 507.827210][ T3649] device veth0_vlan left promiscuous mode [ 507.869175][T11211] loop0: detected capacity change from 0 to 32768 [ 507.875221][T11209] loop2: detected capacity change from 0 to 40427 [ 507.899439][T11209] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 507.922250][T11209] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 507.962178][T11209] F2FS-fs (loop2): Found nat_bits in checkpoint [ 507.971912][T11211] XFS (loop0): Mounting V5 Filesystem [ 508.040990][T11209] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 508.050666][T11209] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 508.072819][T11211] XFS (loop0): Ending clean mount [ 508.144990][ T7184] syz-executor: attempt to access beyond end of device [ 508.144990][ T7184] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 508.181405][ T9444] XFS (loop0): Unmounting Filesystem [ 508.787599][T11237] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1972'. [ 508.882746][ T3649] team0 (unregistering): Port device team_slave_1 removed [ 508.954183][ T3649] team0 (unregistering): Port device team_slave_0 removed [ 509.008279][ T3649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.061228][ T3649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.733016][ T3649] bond0 (unregistering): Released all slaves [ 509.846003][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.856896][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.866985][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.877580][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.887560][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.898147][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.909343][T10844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.066601][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 512.074820][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 512.082595][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 512.091529][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 512.129596][T10925] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.140955][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.161052][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.172411][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.189229][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.199994][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.211654][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.242927][T10844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.270156][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 512.305700][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 512.307219][T11250] loop1: detected capacity change from 0 to 256 [ 512.347891][T10844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.357688][T10844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.378697][T11250] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 512.403586][T10844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.438185][T10844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.479370][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 512.495294][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 512.508358][ T4881] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.515564][ T4881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.557124][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 512.574927][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 512.584627][ T4881] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.591756][ T4881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.601923][T11256] autofs4:pid:11256:validate_dev_ioctl: path string terminator missing for cmd(0xc0189378) [ 512.602114][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 512.699240][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 512.712595][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 512.744982][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 512.778915][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 512.882780][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 512.895034][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 512.935627][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 513.008732][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 513.037168][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 513.066643][T11262] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1981'. [ 513.079495][T10925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 513.120993][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 513.149685][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 513.171296][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 513.197710][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.250560][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.311264][T10418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.317538][ T5663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 513.394848][T10418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.502799][T11254] loop2: detected capacity change from 0 to 40427 [ 513.521002][T11254] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 513.530216][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 513.547792][T11254] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 513.631312][T11254] F2FS-fs (loop2): Found nat_bits in checkpoint [ 513.769233][T11254] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 513.795233][T11254] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 513.856109][T11256] loop0: detected capacity change from 0 to 32768 [ 513.930687][ T7184] syz-executor: attempt to access beyond end of device [ 513.930687][ T7184] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 513.968435][T11256] XFS (loop0): Mounting V5 Filesystem [ 514.093403][T11256] XFS (loop0): Ending clean mount [ 514.309820][ T9444] XFS (loop0): Unmounting Filesystem [ 514.830816][T11288] loop0: detected capacity change from 0 to 512 [ 514.878100][T11288] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 514.887587][T11288] System zones: 0-2, 18-18, 34-35 [ 514.921899][T11288] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 514.942056][T11288] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038 (0x7fffffff) [ 515.049883][ T9444] EXT4-fs (loop0): unmounting filesystem. [ 517.793908][ T5663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 517.801559][ T5663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 517.868540][T10925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.172467][T11306] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1990'. [ 518.236567][T11310] autofs4:pid:11310:validate_dev_ioctl: path string terminator missing for cmd(0xc0189378) [ 518.431847][T11315] delete_channel: no stack [ 518.679401][ T4700] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 519.693906][ T4700] usb 4-1: Using ep0 maxpacket: 16 [ 519.814029][ T4700] usb 4-1: config 0 has no interfaces? [ 519.934150][ T4700] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 519.943252][ T4700] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 519.966070][T11310] loop1: detected capacity change from 0 to 32768 [ 519.987110][ T4700] usb 4-1: Product: syz [ 519.991331][ T4700] usb 4-1: Manufacturer: syz [ 520.016405][ T4700] r8152-cfgselector 4-1: config 0 descriptor?? [ 520.063556][T11312] loop0: detected capacity change from 0 to 40427 [ 520.084218][T11312] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 520.102554][T11310] XFS (loop1): Mounting V5 Filesystem [ 520.109621][T11312] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 520.128269][T11312] F2FS-fs (loop0): Found nat_bits in checkpoint [ 520.215509][T11310] XFS (loop1): Ending clean mount [ 520.229358][T11312] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 520.249245][T11312] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 520.284459][ T4700] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 520.389565][ T9444] syz-executor: attempt to access beyond end of device [ 520.389565][ T9444] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 520.412444][ T3551] XFS (loop1): Unmounting Filesystem [ 520.499548][T11317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.519546][T11317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.578732][ T5667] usb 4-1: USB disconnect, device number 29 [ 520.980623][T11343] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 521.592749][T11355] overlayfs: missing 'lowerdir' [ 522.529491][T11362] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2003'. [ 523.925972][ T3565] Bluetooth: hci5: command 0x0406 tx timeout [ 524.392198][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 524.402079][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 524.422896][T10925] device veth0_vlan entered promiscuous mode [ 524.466499][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 524.487571][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 524.503094][T10925] device veth1_vlan entered promiscuous mode [ 524.626876][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 524.655074][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 524.663067][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 524.708278][T11371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2006'. [ 524.740675][T11371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2006'. [ 524.825235][ T5663] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 524.834574][ T5663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 524.874223][ T5663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 524.895060][T10925] device veth0_macvtap entered promiscuous mode [ 524.907726][T10925] device veth1_macvtap entered promiscuous mode [ 524.932674][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.957090][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.975822][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.992594][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.010057][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.034699][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.044049][ T152] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 525.053866][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.079849][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.102505][T10925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.122169][ T5663] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 525.136806][ T5663] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 525.157071][ T5663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 525.173408][ T5663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 525.191695][T11383] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2013'. [ 525.194949][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.213918][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.226075][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.237121][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.261767][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.282185][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.292626][T11370] loop3: detected capacity change from 0 to 40427 [ 525.323868][ T152] usb 1-1: Using ep0 maxpacket: 16 [ 525.333158][T10925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.339903][T11370] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 525.353714][T10925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.393420][T11370] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 525.394929][T10925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.444189][ T152] usb 1-1: config 0 has no interfaces? [ 525.445642][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 525.465083][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 525.466277][T11370] F2FS-fs (loop3): Found nat_bits in checkpoint [ 525.488685][T10925] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.507654][T10925] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.526540][T10925] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.541522][T10925] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.565676][ T152] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 525.576486][ T152] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 525.588051][ T152] usb 1-1: Product: syz [ 525.593002][T11370] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 525.600680][ T152] usb 1-1: Manufacturer: syz [ 525.607837][T11370] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 525.684293][ T152] r8152-cfgselector 1-1: config 0 descriptor?? [ 525.769360][ T3649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.789422][ T3649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.816776][T10844] syz-executor: attempt to access beyond end of device [ 525.816776][T10844] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 525.829687][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.839454][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 525.862449][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.944579][ T152] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 525.974600][ T4445] usb 1-1: config 0 descriptor?? [ 526.152414][T11375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.179101][T11375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.277319][ T152] usb 1-1: USB disconnect, device number 19 [ 526.283981][ T4445] usb 1-1: can't set config #0, error -71 [ 527.862211][T11415] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2023'. [ 528.584679][T11421] loop0: detected capacity change from 0 to 40427 [ 528.605162][T11421] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 528.611975][T11421] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 528.675499][T11421] F2FS-fs (loop0): Found nat_bits in checkpoint [ 528.694042][ T4882] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 528.756810][T11421] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 528.764023][T11421] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 528.827786][ T9444] syz-executor: attempt to access beyond end of device [ 528.827786][ T9444] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 528.964081][ T4882] usb 3-1: Using ep0 maxpacket: 16 [ 529.095064][ T4882] usb 3-1: config 0 has no interfaces? [ 529.214914][ T4882] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 529.235060][ T4882] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 529.243166][ T4882] usb 3-1: Product: syz [ 529.253568][ T4882] usb 3-1: Manufacturer: syz [ 529.274186][ T4882] r8152-cfgselector 3-1: config 0 descriptor?? [ 529.645136][ T4882] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 529.886102][T11429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.990547][T11429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.214698][ T4882] usb 3-1: USB disconnect, device number 38 [ 530.836204][T11447] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2035'. [ 531.920341][T11459] loop2: detected capacity change from 0 to 1024 [ 532.667594][T11459] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 532.756639][T11459] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 533.005242][ T7184] EXT4-fs (loop2): unmounting filesystem. [ 533.013635][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 533.361470][T11475] loop3: detected capacity change from 0 to 512 [ 533.412477][T11475] ext4: Unknown parameter 'smackfsfloor' [ 533.504208][T11479] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2045'. [ 533.838549][ T152] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 534.748041][T11464] loop0: detected capacity change from 0 to 40427 [ 534.768942][T11464] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 534.804184][T11464] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 534.853880][ T152] usb 3-1: Using ep0 maxpacket: 16 [ 534.861251][T11464] F2FS-fs (loop0): Found nat_bits in checkpoint [ 534.974187][ T152] usb 3-1: config 0 has no interfaces? [ 534.979931][ T5554] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 535.015048][T11464] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 535.022139][T11464] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 535.094375][ T152] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 535.103490][ T152] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 535.128136][ T152] usb 3-1: Product: syz [ 535.132358][ T152] usb 3-1: Manufacturer: syz [ 535.138523][ T9444] syz-executor: attempt to access beyond end of device [ 535.138523][ T9444] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 535.162028][ T152] r8152-cfgselector 3-1: config 0 descriptor?? [ 535.233979][ T5554] usb 4-1: Using ep0 maxpacket: 32 [ 535.354251][ T5554] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.373947][ T5554] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.389322][ T5554] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 535.398592][ T5554] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.412972][ T152] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 535.441128][ T5554] usb 4-1: config 0 descriptor?? [ 535.488601][ T5554] hub 4-1:0.0: USB hub found [ 535.621201][T11481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.652566][T11481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.704062][ T5554] hub 4-1:0.0: 1 port detected [ 535.771059][ T7] usb 3-1: USB disconnect, device number 39 [ 536.373993][ T5554] hub 4-1:0.0: activate --> -90 [ 536.790477][T11514] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2058'. [ 536.816893][ T7] usb 4-1: USB disconnect, device number 30 [ 538.276926][T11522] loop3: detected capacity change from 0 to 512 [ 538.404329][T11522] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 538.433217][T11522] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038 (0x7fffffff) [ 540.582665][T10844] EXT4-fs (loop3): unmounting filesystem. [ 541.810133][T11550] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2069'. [ 541.893860][ T4881] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 541.927876][T11554] loop2: detected capacity change from 0 to 512 [ 542.053359][T11554] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 542.068393][T11554] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038 (0x7fffffff) [ 542.343938][ T4881] usb 5-1: Using ep0 maxpacket: 16 [ 542.604695][ T4881] usb 5-1: config 0 has no interfaces? [ 542.774191][ T4881] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 542.790202][ T4881] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 542.819030][ T4881] usb 5-1: Product: syz [ 542.823287][ T4881] usb 5-1: Manufacturer: syz [ 542.873285][T11534] loop1: detected capacity change from 0 to 40427 [ 542.897554][T11534] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 542.932931][T11534] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 542.942383][ T4881] r8152-cfgselector 5-1: config 0 descriptor?? [ 542.989084][T11534] F2FS-fs (loop1): Found nat_bits in checkpoint [ 543.097185][T11534] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 543.107744][T11534] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 543.210241][T11575] delete_channel: no stack [ 543.228344][ T3551] syz-executor: attempt to access beyond end of device [ 543.228344][ T3551] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 543.234780][ T4881] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 543.437490][T11579] loop3: detected capacity change from 0 to 512 [ 543.454955][T11540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.482887][T11579] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 543.491281][T11540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.509663][T11579] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 543.542847][T11579] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 543.568229][T11579] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 543.589960][T11579] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 543.590634][ T4700] usb 5-1: USB disconnect, device number 40 [ 543.598509][T11579] EXT4-fs (loop3): too many log groups per flexible block group [ 543.598683][T11579] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 543.619444][T11579] EXT4-fs (loop3): mount failed [ 544.138279][T11592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2083'. [ 544.808852][T11603] loop1: detected capacity change from 0 to 40427 [ 544.817040][T11603] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 544.832234][T11603] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 544.870957][T11603] F2FS-fs (loop1): Found nat_bits in checkpoint [ 544.943006][T11603] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 544.954819][T11603] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 545.025104][ T3551] syz-executor: attempt to access beyond end of device [ 545.025104][ T3551] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 545.736242][T11608] loop1: detected capacity change from 0 to 32768 [ 546.439577][T11621] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2094'. [ 546.785787][ T5554] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 547.042062][ T5554] usb 2-1: Using ep0 maxpacket: 16 [ 547.181924][ T7184] EXT4-fs (loop2): unmounting filesystem. [ 547.204194][ T5554] usb 2-1: config 0 has no interfaces? [ 547.325181][ T5554] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 547.349038][ T5554] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 547.384969][ T5554] usb 2-1: Product: syz [ 547.401144][ T5554] usb 2-1: Manufacturer: syz [ 547.430301][ T5554] r8152-cfgselector 2-1: config 0 descriptor?? [ 547.555523][T11644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2105'. [ 547.714841][ T5554] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 547.922632][T11623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.944266][T11623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.029541][ T5554] usb 2-1: USB disconnect, device number 39 [ 548.212166][T11667] loop4: detected capacity change from 0 to 16 [ 548.230886][T11667] erofs: (device loop4): mounted with root inode @ nid 36. [ 548.474901][T11633] loop2: detected capacity change from 0 to 40427 [ 548.484001][T11671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2117'. [ 548.501299][T11633] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 548.516853][T11633] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 548.611059][T11633] F2FS-fs (loop2): Found nat_bits in checkpoint [ 548.797526][T11633] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 548.829126][T11633] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 548.946618][ T7184] syz-executor: attempt to access beyond end of device [ 548.946618][ T7184] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 549.009534][T11693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2129'. [ 549.477267][ T7] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 549.524221][ T5663] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 549.733873][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 549.803893][ T5663] usb 4-1: Using ep0 maxpacket: 16 [ 549.855424][ T7] usb 5-1: config 0 has no interfaces? [ 549.974254][ T7] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 549.983370][ T7] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 550.023887][ T7] usb 5-1: Product: syz [ 550.028181][ T7] usb 5-1: Manufacturer: syz [ 550.044334][ T7] r8152-cfgselector 5-1: config 0 descriptor?? [ 550.114320][ T5663] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 550.140346][ T5663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.149075][ T5663] usb 4-1: Product: syz [ 550.153295][ T5663] usb 4-1: Manufacturer: syz [ 550.177878][ T5663] usb 4-1: SerialNumber: syz [ 550.193936][ T5663] usb 4-1: config 0 descriptor?? [ 550.210216][T11728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2141'. [ 550.235448][ T5663] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 550.264693][ T5663] usb 4-1: Detected FT232H [ 550.304286][ T7] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 550.373180][T11719] loop2: detected capacity change from 0 to 40427 [ 550.400165][T11719] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 550.420076][T11719] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 550.460777][ T5663] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 550.490449][T11719] F2FS-fs (loop2): Found nat_bits in checkpoint [ 550.507999][T11698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.534706][T11698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.566484][ T4881] usb 5-1: USB disconnect, device number 41 [ 550.620294][T11719] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 550.627739][T11719] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 550.655460][ T26] audit: type=1800 audit(1721208783.705:124): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2138" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 550.685327][T11719] syz.2.2138: attempt to access beyond end of device [ 550.685327][T11719] loop2: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 550.689681][ T26] audit: type=1800 audit(1721208783.725:125): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2138" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 550.824063][ T7184] syz-executor: attempt to access beyond end of device [ 550.824063][ T7184] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 551.001208][ T5663] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 551.420461][T11700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.463105][T11700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.574956][ T5554] usb 4-1: USB disconnect, device number 31 [ 551.605401][ T5554] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 551.743912][ T5554] ftdi_sio 4-1:0.0: device disconnected [ 552.827515][T11789] loop2: detected capacity change from 0 to 8192 [ 552.875334][ T5667] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 553.196223][T11797] loop1: detected capacity change from 0 to 128 [ 553.796450][T11776] loop0: detected capacity change from 0 to 40427 [ 553.854770][T11776] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 553.861451][T11776] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 553.879439][ T5667] usb 5-1: Using ep0 maxpacket: 16 [ 553.966316][T11776] F2FS-fs (loop0): Found nat_bits in checkpoint [ 554.160547][T11776] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 554.165301][ T5667] usb 5-1: config 0 has no interfaces? [ 554.205533][T11776] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 554.324711][ T5667] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 554.353630][ T5667] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 554.546561][ T26] audit: type=1800 audit(1721208787.595:126): pid=11776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2160" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 554.623514][ T5667] usb 5-1: Product: syz [ 554.700307][T11776] syz.0.2160: attempt to access beyond end of device [ 554.700307][T11776] loop0: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 554.736478][ T5667] usb 5-1: Manufacturer: syz [ 554.804676][ T26] audit: type=1800 audit(1721208787.665:127): pid=11776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2160" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 554.830940][ T5667] r8152-cfgselector 5-1: config 0 descriptor?? [ 554.964217][ T9444] syz-executor: attempt to access beyond end of device [ 554.964217][ T9444] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 555.149950][ T5667] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 555.353523][T11787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.396157][T11787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.429314][ T5554] usb 5-1: USB disconnect, device number 42 [ 555.454687][T11834] loop2: detected capacity change from 0 to 1024 [ 555.475248][T11834] EXT4-fs: Ignoring removed oldalloc option [ 555.522824][T11834] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 555.553486][T11834] EXT4-fs: test_dummy_encryption requires encrypt feature [ 555.592079][T11836] loop0: detected capacity change from 0 to 1024 [ 555.615689][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2182'. [ 555.626120][T11836] EXT4-fs: Ignoring removed oldalloc option [ 555.698713][T11836] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 555.910939][ T26] audit: type=1804 audit(1721208788.955:128): pid=11836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2179" name="/newroot/155/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 555.994771][T11816] loop1: detected capacity change from 0 to 32768 [ 556.124127][ T9444] EXT4-fs (loop0): unmounting filesystem. [ 556.140183][T11847] loop4: detected capacity change from 0 to 16 [ 556.162540][T11843] loop2: detected capacity change from 0 to 8192 [ 556.193107][T11847] erofs: (device loop4): mounted with root inode @ nid 36. [ 556.222654][T11849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.446006][T11849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.722826][T11854] loop0: detected capacity change from 0 to 40427 [ 557.743858][T11854] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 557.750617][T11854] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 557.764903][ T4700] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 557.823565][T11854] F2FS-fs (loop0): Found nat_bits in checkpoint [ 557.962106][T11854] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 557.969449][T11854] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 558.004012][ T4700] usb 4-1: Using ep0 maxpacket: 16 [ 558.024922][ T26] audit: type=1800 audit(1721208791.075:129): pid=11854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2190" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 558.027098][T11854] syz.0.2190: attempt to access beyond end of device [ 558.027098][T11854] loop0: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 558.107543][T11886] loop1: detected capacity change from 0 to 16 [ 558.119612][ T26] audit: type=1800 audit(1721208791.075:130): pid=11854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2190" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 558.164141][ T4700] usb 4-1: config 0 has no interfaces? [ 558.183296][T11886] erofs: (device loop1): mounted with root inode @ nid 36. [ 558.217874][ T9444] syz-executor: attempt to access beyond end of device [ 558.217874][ T9444] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 558.294134][ T4700] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 558.306092][ T4700] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 558.334035][ T4700] usb 4-1: Product: syz [ 558.338256][ T4700] usb 4-1: Manufacturer: syz [ 558.397581][ T4700] r8152-cfgselector 4-1: config 0 descriptor?? [ 558.431521][T11879] loop2: detected capacity change from 0 to 32768 [ 558.506550][T11888] loop4: detected capacity change from 0 to 8192 [ 558.675086][ T4700] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 558.766154][T11892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.880141][T11873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.910495][T11892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.967974][T11873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.125012][ T4700] usb 4-1: USB disconnect, device number 32 [ 559.353932][ T3565] Bluetooth: hci1: command tx timeout [ 559.786661][T11911] loop0: detected capacity change from 0 to 512 [ 559.877259][T11911] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 559.928570][T11919] loop4: detected capacity change from 0 to 16 [ 559.944128][T11911] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038 (0x7fffffff) [ 559.994747][T11919] erofs: (device loop4): mounted with root inode @ nid 36. [ 560.068259][ T9444] EXT4-fs (loop0): unmounting filesystem. [ 560.563379][T11945] loop2: detected capacity change from 0 to 512 [ 560.564608][T11946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.584072][ T4881] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 560.630483][T11946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.644672][T11945] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 560.663970][T11945] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038 (0x7fffffff) [ 560.844056][ T4881] usb 4-1: Using ep0 maxpacket: 16 [ 561.599508][T11957] loop4: detected capacity change from 0 to 16 [ 561.646207][ T4881] usb 4-1: config 0 has no interfaces? [ 561.667792][ T7184] EXT4-fs (loop2): unmounting filesystem. [ 561.675601][T11957] erofs: (device loop4): mounted with root inode @ nid 36. [ 561.774235][ T4881] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 561.803960][ T4881] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 561.833142][ T4881] usb 4-1: Product: syz [ 561.845627][ T4881] usb 4-1: Manufacturer: syz [ 561.875511][T11925] loop1: detected capacity change from 0 to 32768 [ 561.883596][ T4881] r8152-cfgselector 4-1: config 0 descriptor?? [ 562.165063][ T4881] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 562.204452][T11970] loop2: detected capacity change from 0 to 128 [ 562.221612][T11970] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 562.436673][ T4881] usb 4-1: USB disconnect, device number 33 [ 562.535188][T11970] FAT-fs (loop2): FAT read failed (blocknr 128) [ 562.551760][T11987] loop0: detected capacity change from 0 to 512 [ 562.600632][T11987] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 562.642838][ T3745] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 562.669832][T11987] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038 (0x7fffffff) [ 562.805442][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.811846][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.928909][T11998] loop4: detected capacity change from 0 to 16 [ 562.963620][T11998] erofs: (device loop4): mounted with root inode @ nid 36. [ 565.123948][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.206675][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.227637][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.243444][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.270648][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.311308][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.351782][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.399939][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.431513][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.463190][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.497009][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.529232][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.548461][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.558636][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.576715][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.592436][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.617518][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.633157][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.648208][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.661791][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.679366][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.690071][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.721533][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.729279][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.742905][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.750808][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.768504][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.783835][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.793923][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.819336][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.831662][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.851219][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.882533][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.912953][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.930135][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.943680][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.957349][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.966297][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.979876][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 565.988706][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 566.004192][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 566.009310][T12030] loop1: detected capacity change from 0 to 128 [ 566.016627][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 566.028039][ T5554] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 566.039802][T12030] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 566.051565][ T5554] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 566.214011][ T4881] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 566.251659][T12030] FAT-fs (loop1): FAT read failed (blocknr 128) [ 566.446137][ T4241] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 566.464113][ T4881] usb 5-1: Using ep0 maxpacket: 16 [ 566.527580][T12038] loop3: detected capacity change from 0 to 8192 [ 566.594200][ T4881] usb 5-1: config 0 has no interfaces? [ 566.706869][ T9444] EXT4-fs (loop0): unmounting filesystem. [ 566.894034][ T4881] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 567.294171][ T4881] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 567.302250][ T4881] usb 5-1: Product: syz [ 567.306483][ T4881] usb 5-1: Manufacturer: syz [ 567.420989][ T4881] r8152-cfgselector 5-1: config 0 descriptor?? [ 567.707983][ T4881] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 567.802721][T12077] loop0: detected capacity change from 0 to 512 [ 567.869396][T12077] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 567.898121][ T5554] usb 5-1: USB disconnect, device number 43 [ 567.936570][T12077] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038 (0x7fffffff) [ 568.986593][ T9444] EXT4-fs (loop0): unmounting filesystem. [ 569.110364][T12097] loop3: detected capacity change from 0 to 8192 [ 569.348621][T12119] loop1: detected capacity change from 0 to 8 [ 571.027851][T12135] loop3: detected capacity change from 0 to 16 [ 571.094651][T12135] erofs: (device loop3): mounted with root inode @ nid 36. [ 571.263022][T12141] loop0: detected capacity change from 0 to 512 [ 571.370612][T12145] loop3: detected capacity change from 0 to 16 [ 571.383975][T12141] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 571.392978][T12141] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038 (0x7fffffff) [ 571.431812][T12145] erofs: (device loop3): mounted with root inode @ nid 36. [ 571.523971][ T5554] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 571.591995][T12107] loop4: detected capacity change from 0 to 40427 [ 571.651450][T12150] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 571.662369][T12107] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 571.710014][T12107] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 571.773127][T12107] F2FS-fs (loop4): Found nat_bits in checkpoint [ 571.995757][ T5554] usb 3-1: Using ep0 maxpacket: 16 [ 572.131951][T12107] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 572.161801][T12107] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 572.184074][ T5554] usb 3-1: config 0 has no interfaces? [ 572.304166][ T5554] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 572.331777][ T5554] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 572.380906][ T5554] usb 3-1: Product: syz [ 572.395969][ T5554] usb 3-1: Manufacturer: syz [ 572.489045][ T9444] EXT4-fs (loop0): unmounting filesystem. [ 572.496666][ T5554] r8152-cfgselector 3-1: config 0 descriptor?? [ 572.754023][ T5554] r8152-cfgselector 3-1: Unknown version 0x0000 [ 572.785140][ T5554] r8152-cfgselector 3-1: USB disconnect, device number 40 [ 572.812606][T12176] loop0: detected capacity change from 0 to 256 [ 572.872996][T12180] loop3: detected capacity change from 0 to 16 [ 572.893558][T12176] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 572.931069][T12180] erofs: (device loop3): mounted with root inode @ nid 36. [ 573.302878][T12194] loop0: detected capacity change from 0 to 16 [ 573.360317][T12196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.383548][T12194] erofs: (device loop0): mounted with root inode @ nid 36. [ 573.531910][T12199] wlan1: authenticate with 50:50:50:50:50:50 [ 573.551974][T12199] wlan1: No basic rates, using min rate instead [ 573.578157][T12199] wlan1: send auth to 50:50:50:50:50:50 (try 1/3) [ 573.611427][ T3745] wlan1: send auth to 50:50:50:50:50:50 (try 2/3) [ 573.638048][ T11] wlan1: send auth to 50:50:50:50:50:50 (try 3/3) [ 573.662413][T11461] wlan1: authentication with 50:50:50:50:50:50 timed out [ 573.730515][T12206] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 574.189097][T12226] loop3: detected capacity change from 0 to 256 [ 574.266537][T12226] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 574.325994][T12233] loop4: detected capacity change from 0 to 8 [ 575.525361][T12251] loop0: detected capacity change from 0 to 512 [ 575.703171][T12257] netlink: 'syz.3.2326': attribute type 2 has an invalid length. [ 575.750120][T12251] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 575.804244][T12251] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038 (0x7fffffff) [ 576.669194][ T9444] EXT4-fs (loop0): unmounting filesystem. [ 576.712003][T12279] loop3: detected capacity change from 0 to 256 [ 576.770443][T12279] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 576.817135][T12281] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2332'. [ 576.821318][T12264] loop2: detected capacity change from 0 to 32768 [ 576.881382][T12277] netlink: 'syz.4.2332': attribute type 3 has an invalid length. [ 577.383875][T12292] netlink: 'syz.0.2339': attribute type 2 has an invalid length. [ 577.432230][T12289] loop3: detected capacity change from 0 to 8192 [ 578.127014][T12309] loop0: detected capacity change from 0 to 512 [ 578.258275][T12309] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 578.298631][T12309] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038 (0x7fffffff) [ 578.669793][T12320] loop3: detected capacity change from 0 to 256 [ 578.979166][T12320] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 579.368263][T12311] loop2: detected capacity change from 0 to 32768 [ 581.555924][T12326] netlink: 'syz.3.2349': attribute type 21 has an invalid length. [ 581.564118][T12326] netlink: 'syz.3.2349': attribute type 20 has an invalid length. [ 581.725168][ T9444] EXT4-fs (loop0): unmounting filesystem. [ 581.855961][T12342] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2352'. [ 581.870385][T12346] loop0: detected capacity change from 0 to 16 [ 581.886383][T12346] erofs: (device loop0): mounted with root inode @ nid 36. [ 582.103117][T12356] loop0: detected capacity change from 0 to 256 [ 582.162815][T12356] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 582.188727][T12358] loop1: detected capacity change from 0 to 16 [ 582.222659][T12358] erofs: (device loop1): mounted with root inode @ nid 36. [ 582.250857][T12350] loop4: detected capacity change from 0 to 8192 [ 582.911449][T12365] netlink: 'syz.1.2362': attribute type 21 has an invalid length. [ 582.974302][T12365] netlink: 'syz.1.2362': attribute type 20 has an invalid length. [ 583.000919][T12370] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2363'. [ 583.363852][T12355] loop2: detected capacity change from 0 to 32768 [ 583.448123][T12383] loop1: detected capacity change from 0 to 16 [ 583.481173][T12383] erofs: (device loop1): mounted with root inode @ nid 36. [ 583.710378][T12393] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2372'. [ 583.730928][T12392] loop3: detected capacity change from 0 to 256 [ 583.801322][T12392] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 583.958775][T12405] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2379'. [ 584.107547][T12407] netlink: 'syz.4.2380': attribute type 21 has an invalid length. [ 584.157047][T12407] netlink: 'syz.4.2380': attribute type 20 has an invalid length. [ 584.227509][T12404] loop0: detected capacity change from 0 to 8192 [ 584.591517][T12421] loop4: detected capacity change from 0 to 16 [ 584.764760][T12421] erofs: (device loop4): mounted with root inode @ nid 36. [ 585.348387][T12439] loop2: detected capacity change from 0 to 256 [ 585.379594][T12439] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 587.598358][T12432] netlink: 'syz.4.2389': attribute type 10 has an invalid length. [ 587.621588][T12432] team0: Device ipvlan1 failed to register rx_handler [ 587.930796][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 588.072652][T12453] loop4: detected capacity change from 0 to 8192 [ 588.156609][T12466] loop0: detected capacity change from 0 to 256 [ 588.183636][T12466] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 588.837214][T12472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.559019][T12504] loop3: detected capacity change from 0 to 256 [ 589.576662][T12504] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 589.906748][T12511] loop2: detected capacity change from 0 to 8192 [ 591.770235][T12527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.828502][T12515] netlink: 'syz.4.2421': attribute type 10 has an invalid length. [ 592.838838][T12515] team0: Device ipvlan1 failed to register rx_handler [ 593.048962][T12537] loop2: detected capacity change from 0 to 256 [ 593.109299][T12537] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 593.273937][ T5554] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 593.286405][T12546] loop4: detected capacity change from 0 to 8 [ 593.418175][T12550] loop1: detected capacity change from 0 to 16 [ 593.472952][T12550] erofs: (device loop1): mounted with root inode @ nid 36. [ 593.844267][ T5554] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 593.921209][ T5554] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 594.928034][ T5554] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.938513][ T5554] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 595.065611][T12566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.104110][ T5554] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a04, bcdDevice=a3.91 [ 595.130762][ T5554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.145207][ T5554] usb 4-1: Product: syz [ 595.170121][ T5554] usb 4-1: Manufacturer: syz [ 595.185167][ T5554] usb 4-1: SerialNumber: syz [ 595.214218][ T5554] usb 4-1: config 0 descriptor?? [ 595.255276][ T5554] ipaq 4-1:0.0: PocketPC PDA converter detected [ 595.261978][ T5554] usb 4-1: active config #0 != 1 ?? [ 595.482624][ T4700] usb 4-1: USB disconnect, device number 34 [ 595.580586][T12583] netlink: 'syz.2.2446': attribute type 21 has an invalid length. [ 595.592180][T12583] netlink: 'syz.2.2446': attribute type 20 has an invalid length. [ 595.760017][T12588] loop4: detected capacity change from 0 to 256 [ 595.792646][T12588] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 595.899016][T12592] loop2: detected capacity change from 0 to 8 [ 596.061728][T12590] loop1: detected capacity change from 0 to 8192 [ 596.112227][T12595] loop4: detected capacity change from 0 to 16 [ 596.121016][T12595] erofs: (device loop4): mounted with root inode @ nid 36. [ 597.880308][T12619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.032475][T12622] netlink: 'syz.3.2460': attribute type 21 has an invalid length. [ 598.061284][T12624] loop1: detected capacity change from 0 to 256 [ 598.070477][T12622] netlink: 'syz.3.2460': attribute type 20 has an invalid length. [ 598.142588][T12624] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 598.293228][T12626] loop4: detected capacity change from 0 to 8192 [ 598.363690][T12631] loop1: detected capacity change from 0 to 16 [ 598.386176][T12631] erofs: (device loop1): mounted with root inode @ nid 36. [ 598.404522][T12633] loop3: detected capacity change from 0 to 8 [ 598.434232][T12631] overlayfs: unrecognized mount option "/" or missing value [ 598.609609][ T4700] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 599.535214][ T4700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 599.618360][ T4700] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 599.856297][ T4700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.923958][ T4700] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 600.184054][ T4700] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a04, bcdDevice=a3.91 [ 600.193166][ T4700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.218330][ T4700] usb 1-1: Product: syz [ 600.236969][ T4700] usb 1-1: Manufacturer: syz [ 600.272219][ T4700] usb 1-1: SerialNumber: syz [ 600.285482][ T4700] usb 1-1: config 0 descriptor?? [ 600.321174][T12657] loop4: detected capacity change from 0 to 256 [ 600.321445][T12661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 600.342058][ T4700] ipaq 1-1:0.0: PocketPC PDA converter detected [ 600.358112][ T4700] usb 1-1: active config #0 != 1 ?? [ 600.377448][T12660] netlink: 'syz.3.2475': attribute type 21 has an invalid length. [ 600.390759][T12663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 600.401423][T12660] netlink: 'syz.3.2475': attribute type 20 has an invalid length. [ 600.415998][T12657] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 600.600943][ T4700] usb 1-1: USB disconnect, device number 20 [ 600.651620][T12668] loop2: detected capacity change from 0 to 16 [ 600.681004][T12668] erofs: (device loop2): mounted with root inode @ nid 36. [ 600.714182][ T3559] Bluetooth: hci0: command 0x0406 tx timeout [ 600.820875][T12666] loop3: detected capacity change from 0 to 8192 [ 600.851980][T12674] loop4: detected capacity change from 0 to 8 [ 602.780350][T12690] netlink: 'syz.0.2488': attribute type 21 has an invalid length. [ 602.788440][T12690] netlink: 'syz.0.2488': attribute type 20 has an invalid length. [ 602.804978][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2486'. [ 602.919500][T12698] loop2: detected capacity change from 0 to 16 [ 602.977873][T12698] erofs: (device loop2): mounted with root inode @ nid 36. [ 603.298949][T12704] device syzkaller0 entered promiscuous mode [ 603.311140][T12713] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 603.319278][ T4881] syzkaller0: tun_net_xmit 48 [ 603.473537][T12704] syzkaller0: tun_net_xmit 1280 [ 603.623933][T12725] fuse: Unknown parameter 'user_i00000000000000000000' [ 603.629310][T12710] loop4: detected capacity change from 0 to 8192 [ 604.896834][ T5554] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 605.203394][T12722] loop3: detected capacity change from 0 to 32768 [ 605.276102][ T5554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 605.294334][ T5554] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 605.310415][ T5554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.320772][ T5554] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 605.346601][T12722] XFS (loop3): Mounting V5 Filesystem [ 605.442824][T12722] XFS (loop3): Ending clean mount [ 605.445377][T12748] loop4: detected capacity change from 0 to 16 [ 605.472773][T12748] erofs: (device loop4): mounted with root inode @ nid 36. [ 605.484060][ T5554] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a04, bcdDevice=a3.91 [ 605.493185][ T5554] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.508087][ T5554] usb 3-1: Product: syz [ 605.522637][ T5554] usb 3-1: Manufacturer: syz [ 605.527636][ T5554] usb 3-1: SerialNumber: syz [ 605.564723][ T5554] usb 3-1: config 0 descriptor?? [ 605.614484][ T5554] ipaq 3-1:0.0: PocketPC PDA converter detected [ 605.620999][ T5554] usb 3-1: active config #0 != 1 ?? [ 605.668729][T10844] XFS (loop3): Unmounting Filesystem [ 605.852681][ T4696] usb 3-1: USB disconnect, device number 41 [ 605.914138][ T3559] Bluetooth: hci1: command 0x0406 tx timeout [ 605.930965][T12755] loop4: detected capacity change from 0 to 256 [ 605.953158][T12755] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 606.464163][ T4881] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 606.498484][T12759] loop2: detected capacity change from 0 to 16 [ 606.511608][T12759] erofs: (device loop2): mounted with root inode @ nid 36. [ 606.546436][T12759] overlayfs: unrecognized mount option "/" or missing value [ 606.884293][ T4881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.912111][ T4881] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 606.935601][ T4881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.951313][ T3565] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 606.960106][ T4881] usb 5-1: config 0 descriptor?? [ 606.966309][ T3561] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 606.989988][ T3561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 607.012194][ T3561] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 607.025846][ T3561] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 607.063945][ T3561] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 607.473454][ T4881] keytouch 0003:0926:3333.002C: fixing up Keytouch IEC report descriptor [ 607.493828][ T4881] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.002C/input/input22 [ 607.801556][ T4881] keytouch 0003:0926:3333.002C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 609.211638][ T3559] Bluetooth: hci2: command tx timeout [ 609.442277][T12764] netlink: 'syz.3.2508': attribute type 21 has an invalid length. [ 609.463823][T12764] netlink: 'syz.3.2508': attribute type 20 has an invalid length. [ 609.722646][T12777] loop3: detected capacity change from 0 to 16 [ 609.750768][T12777] erofs: (device loop3): mounted with root inode @ nid 36. [ 609.780028][T11461] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.804812][T12771] loop1: detected capacity change from 0 to 8192 [ 610.027374][T11461] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.485319][T11461] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.672769][T11461] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.773301][ T4700] usb 5-1: USB disconnect, device number 44 [ 610.974651][T12791] fuse: Unknown parameter 'user_id00000000000000000000' [ 610.986362][T12761] chnl_net:caif_netlink_parms(): no params data found [ 611.274063][ T3559] Bluetooth: hci2: command tx timeout [ 611.296357][T12798] netlink: 'syz.3.2525': attribute type 21 has an invalid length. [ 611.318652][T12798] netlink: 'syz.3.2525': attribute type 20 has an invalid length. [ 611.341437][T12806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.511035][T12761] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.520685][T12761] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.539853][T12761] device bridge_slave_0 entered promiscuous mode [ 611.564588][T12761] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.584405][T12761] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.614901][T12761] device bridge_slave_1 entered promiscuous mode [ 611.722409][T12761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.786992][T12823] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2529'. [ 611.864056][T12761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.036977][T12834] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2533'. [ 612.183318][T12761] team0: Port device team_slave_0 added [ 612.204230][T12761] team0: Port device team_slave_1 added [ 612.394017][T12761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.411741][T12761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.476122][T12761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.492091][T12852] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 612.580727][T12761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.597068][T12761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.634792][T12761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.778368][T12861] netlink: 'syz.0.2542': attribute type 21 has an invalid length. [ 612.802359][T12861] netlink: 'syz.0.2542': attribute type 20 has an invalid length. [ 612.812674][T12869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.006506][T12761] device hsr_slave_0 entered promiscuous mode [ 613.031624][T12761] device hsr_slave_1 entered promiscuous mode [ 613.039089][T12761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 613.047772][T12761] Cannot create hsr debugfs directory [ 613.375030][ T3559] Bluetooth: hci2: command tx timeout [ 613.665439][T12897] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2552'. [ 613.827359][T11461] device hsr_slave_0 left promiscuous mode [ 613.864886][T11461] device hsr_slave_1 left promiscuous mode [ 613.874834][T11461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.882306][T11461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.944457][T11461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.951956][T11461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.987021][T11461] device bridge_slave_1 left promiscuous mode [ 613.993329][T11461] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.061757][T11461] device bridge_slave_0 left promiscuous mode [ 614.090938][T11461] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.275163][T11461] device veth1_macvtap left promiscuous mode [ 614.281421][T11461] device veth0_macvtap left promiscuous mode [ 614.302281][T11461] device veth1_vlan left promiscuous mode [ 614.321346][T11461] device veth0_vlan left promiscuous mode [ 614.655529][T12931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.684911][T12891] loop1: detected capacity change from 0 to 40427 [ 614.738012][T12891] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 614.745612][T12891] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 614.809072][T12891] F2FS-fs (loop1): Found nat_bits in checkpoint [ 614.894030][T12891] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 614.901141][T12891] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 614.961580][ T3551] syz-executor: attempt to access beyond end of device [ 614.961580][ T3551] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 615.438068][ T3559] Bluetooth: hci2: command tx timeout [ 615.528182][T11461] team0 (unregistering): Port device team_slave_1 removed [ 615.588705][T11461] team0 (unregistering): Port device team_slave_0 removed [ 615.639241][T11461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.691071][T11461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.292958][T11461] bond0 (unregistering): Released all slaves [ 616.381868][T12919] netlink: 'syz.0.2559': attribute type 21 has an invalid length. [ 616.390426][T12919] netlink: 'syz.0.2559': attribute type 20 has an invalid length. [ 617.760066][T12966] loop4: detected capacity change from 0 to 16 [ 617.791989][T12966] erofs: (device loop4): mounted with root inode @ nid 36. [ 617.942535][ T5660] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 618.027643][ T4700] wlan1: authenticate with 50:50:50:50:50:50 [ 618.044041][ T4700] wlan1: No legacy rates in association response [ 618.108073][ T4700] [ 618.110501][ T4700] ============================= [ 618.115630][ T4700] WARNING: suspicious RCU usage [ 618.120498][ T4700] 6.1.99-syzkaller #0 Not tainted [ 618.125710][ T4700] ----------------------------- [ 618.130671][ T4700] net/mac80211/sta_info.c:361 suspicious rcu_dereference_protected() usage! [ 618.139720][ T4700] [ 618.139720][ T4700] other info that might help us debug this: [ 618.139720][ T4700] [ 618.150039][ T4700] [ 618.150039][ T4700] rcu_scheduler_active = 2, debug_locks = 1 [ 618.158217][ T4700] 4 locks held by kworker/0:11/4700: [ 618.163621][ T4700] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 618.174216][ T4700] #1: ffffc90003f1fd20 ((work_completion)(&rdev->conn_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 618.185952][ T4700] #2: ffff88807cc087c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_conn_work+0xbe/0x500 [ 618.196029][ T4700] #3: ffff88807d118d40 (&wdev->mtx){+.+.}-{3:3}, at: cfg80211_conn_work+0x13e/0x500 [ 618.205951][ T4700] [ 618.205951][ T4700] stack backtrace: [ 618.211881][ T4700] CPU: 0 PID: 4700 Comm: kworker/0:11 Not tainted 6.1.99-syzkaller #0 [ 618.220067][ T4700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 618.230163][ T4700] Workqueue: events cfg80211_conn_work [ 618.235684][ T4700] Call Trace: [ 618.238994][ T4700] [ 618.242048][ T4700] dump_stack_lvl+0x1e3/0x2cb [ 618.246781][ T4700] ? nf_tcp_handle_invalid+0x642/0x642 [ 618.252296][ T4700] ? panic+0x764/0x764 [ 618.256419][ T4700] lockdep_rcu_suspicious+0x21c/0x330 [ 618.261849][ T4700] sta_remove_link+0x353/0x4a0 [ 618.266703][ T4700] ? __sta_info_alloc+0x17a0/0x1e90 [ 618.269726][ T5660] usb 1-1: Using ep0 maxpacket: 8 [ 618.271925][ T4700] sta_info_free+0x4f/0x750 [ 618.281476][ T4700] ieee80211_prep_connection+0xda4/0x1150 [ 618.287257][ T4700] ? ieee80211_prep_connection+0x51d/0x1150 [ 618.293202][ T4700] ieee80211_mgd_auth+0xbaf/0x1150 [ 618.298368][ T4700] ? __local_bh_enable_ip+0x164/0x1f0 [ 618.303802][ T4700] ? ieee80211_mlme_notify_scan_completed+0x400/0x400 [ 618.310626][ T4700] ? rcu_is_watching+0x11/0xb0 [ 618.315438][ T4700] cfg80211_mlme_auth+0x587/0x9b0 [ 618.320539][ T4700] cfg80211_conn_do_work+0x47c/0xdd0 [ 618.325878][ T4700] ? cfg80211_conn_work+0x500/0x500 [ 618.331140][ T4700] ? __lock_acquire+0x125b/0x1f80 [ 618.336294][ T4700] ? mutex_lock_nested+0x10/0x10 [ 618.341263][ T4700] ? __lock_acquire+0x125b/0x1f80 [ 618.346338][ T4700] ? mark_lock+0x9a/0x340 [ 618.350712][ T4700] ? cfg80211_conn_work+0x255/0x500 [ 618.355947][ T4700] cfg80211_conn_work+0x2a1/0x500 [ 618.361017][ T4700] ? trace_rdev_return_int+0x270/0x270 [ 618.366518][ T4700] ? mark_lock+0x9a/0x340 [ 618.370889][ T4700] ? __lock_acquire+0x125b/0x1f80 [ 618.375976][ T4700] ? read_lock_is_recursive+0x10/0x10 [ 618.381388][ T4700] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 618.387601][ T4700] ? print_irqtrace_events+0x210/0x210 [ 618.393124][ T4700] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 618.399069][ T4700] ? do_raw_spin_unlock+0x137/0x8a0 [ 618.404356][ T4700] ? process_one_work+0x7a9/0x11d0 [ 618.409507][ T4700] process_one_work+0x8a9/0x11d0 [ 618.414502][ T4700] ? worker_detach_from_pool+0x260/0x260 [ 618.420177][ T4700] ? _raw_spin_lock_irqsave+0x120/0x120 [ 618.422838][T12969] netlink: 'syz.1.2574': attribute type 3 has an invalid length. [ 618.425755][ T4700] ? kthread_data+0x4e/0xc0 [ 618.425799][ T4700] ? wq_worker_running+0x97/0x190 [ 618.443084][ T4700] worker_thread+0xa47/0x1200 [ 618.447816][ T4700] ? _raw_spin_unlock+0x40/0x40 [ 618.452727][ T4700] kthread+0x28d/0x320 [ 618.456831][ T4700] ? worker_clr_flags+0x190/0x190 [ 618.461896][ T4700] ? kthread_blkcg+0xd0/0xd0 [ 618.466521][ T4700] ret_from_fork+0x1f/0x30 [ 618.470992][ T4700] [ 618.513941][ T5660] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x5F, skipping [ 618.547071][ T5660] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 618.584008][ T5660] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.639411][ T5660] usb 1-1: config 0 descriptor?? [ 618.705312][ T5660] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 618.728889][ T5660] usb 1-1: Detected SIO [ 618.756326][ T5660] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 619.152380][T12761] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 619.180839][T12965] loop3: detected capacity change from 0 to 40427 [ 619.203694][T12761] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 619.233147][T12761] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 619.247038][T12965] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 619.280461][T12965] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 619.283070][T12761] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 619.340912][T12965] F2FS-fs (loop3): Found nat_bits in checkpoint [ 619.517227][T12965] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 619.538509][T12965] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 619.623921][T12761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.664316][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 619.677993][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 619.699247][T12761] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.721525][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 619.735404][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 619.754950][ T4700] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.762144][ T4700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.774541][T10844] syz-executor: attempt to access beyond end of device [ 619.774541][T10844] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 619.801865][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 619.813104][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 619.834938][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 619.864436][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.871586][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.902429][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 619.944409][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 619.967661][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 619.996081][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 620.024127][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 620.043515][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 620.072630][T12761] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 620.093821][T12761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 620.123030][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 620.141742][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 620.172173][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 620.192979][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 620.220871][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 620.258578][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 620.860957][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 620.873068][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 620.908205][T12761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.009604][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 621.027087][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 621.083506][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 621.098374][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 621.114516][T12761] device veth0_vlan entered promiscuous mode [ 621.122721][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 621.131677][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 621.151665][T12761] device veth1_vlan entered promiscuous mode [ 621.224751][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 621.239927][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 621.262718][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 621.280006][ T5554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 621.301692][T12761] device veth0_macvtap entered promiscuous mode [ 621.341190][T12761] device veth1_macvtap entered promiscuous mode [ 621.532061][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.609095][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.619905][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.630762][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.640959][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.651783][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.661931][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.672852][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.694140][T12761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.705721][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 621.749869][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 621.758409][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 621.767718][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 621.779775][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.806060][ T5660] usb 1-1: USB disconnect, device number 21 [ 621.821544][ T5660] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 621.830996][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.844507][ T5660] ftdi_sio 1-1:0.0: device disconnected [ 621.851483][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.866510][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.876716][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.887669][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.897803][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.908890][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.922779][T12761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.933408][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 621.942777][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 621.968642][T12761] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.983862][T12761] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.992808][T12761] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.023916][T12761] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.161171][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.183058][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.203338][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 622.230944][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.240012][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.261704][ T5660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 624.235079][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.241744][ T1255] ieee802154 phy1 wpan1: encryption failed: -22