last executing test programs: 41.511413617s ago: executing program 0 (id=2139): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x541b, 0x0) 41.324533777s ago: executing program 0 (id=2140): socket(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) inotify_init1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$midi(&(0x7f0000000400), 0xb6, 0x0) syz_io_uring_setup(0x4e5e, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) fanotify_init(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0) 41.284930458s ago: executing program 0 (id=2141): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f3f00001a0059"], 0xfe33) 40.706189008s ago: executing program 0 (id=2145): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f000000cf00), 0x0, 0x0) 40.647934337s ago: executing program 0 (id=2146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x0, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) io_setup(0x0, &(0x7f0000000280)) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x4) finit_module(r3, 0x0, 0x0) 17.88034748s ago: executing program 0 (id=2149): openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x408440, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x500, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x4010640a, &(0x7f0000000e40)={0x0, 0x0}) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ed806abf77aaaaaaaaaabb08004500004c00611000002190780a0101000000000005009078ac1e03014c000000fffe000000000000ac1414bbe0000001075300ac1414aafffffffeac1414bbffffffff89072de00000020000"], 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000200)={0x10, 0x2, 0x0, "11010100001400000100b64c0000005c4b7c1500"}) readv(r1, &(0x7f0000002740)=[{&(0x7f0000000180)=""/29, 0x1b}], 0x2) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000300)="c70f1c13", 0x4}], 0x1, 0x7ffffd, 0x0) fallocate(r5, 0x3, 0x80000, 0x80000001) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) gettid() r9 = memfd_create(0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES8=r5, @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000100", @ANYRES64=r9, @ANYBLOB="c523339da09c66caaed1fbcdf9529c2cd8880f601306c6f7dd95a1ff9a10fb81fc94323c5167e6695eaa076982c67becb7394e1b710a2b926fd6eda172a9d8cd34945e70f79219543186c1"], 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x20000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$unix(0x1, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582"], 0x0) 17.213962864s ago: executing program 3 (id=2283): r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r1, 0xffffffffffffffff) semget$private(0x0, 0x4000000009, 0x82) semop(0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)={{0x0}, 0x0, 0x0, 0x1}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000100)={{0x2}, 0x0, 0x0, 0x2}) 17.120647331s ago: executing program 3 (id=2284): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000007, &(0x7f0000000100)="05ff03076844268cb89e14f00800fee0ffff00febabec44277fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) 17.120308418s ago: executing program 3 (id=2285): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 17.097992148s ago: executing program 3 (id=2286): ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x890b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000009}) 16.950592082s ago: executing program 3 (id=2287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000010000b0500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800c0001006d6163766c616e00240002800800010010000000100005800a000400aaaaaaaaaaaa0000080003000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 15.98534054s ago: executing program 3 (id=2291): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getrlimit(0xe5c672a11a1e321c, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_open_procfs(0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0x10, r5, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 6.960698688s ago: executing program 2 (id=2319): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000007, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) 6.80977253s ago: executing program 2 (id=2320): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 6.784797826s ago: executing program 2 (id=2321): socket(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) inotify_init1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$midi(&(0x7f0000000400), 0xb6, 0x0) syz_io_uring_setup(0x4e5e, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) fanotify_init(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0) 6.746683239s ago: executing program 2 (id=2322): syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x8000000) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x2, &(0x7f00000003c0), &(0x7f0000000200)=0x4) 5.356315525s ago: executing program 1 (id=2330): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 5.352701803s ago: executing program 1 (id=2331): socket(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) inotify_init1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$midi(&(0x7f0000000400), 0xb6, 0x0) syz_io_uring_setup(0x4e5e, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) fanotify_init(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0) 5.319242926s ago: executing program 1 (id=2332): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5.288240177s ago: executing program 1 (id=2333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000010000b0500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800c0001006d6163766c616e00240002800800010010000000100005800a000400aaaaaaaaaaaa0000080003000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 4.205024295s ago: executing program 1 (id=2334): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) pwritev2(r0, &(0x7f0000022e80)=[{&(0x7f0000000240)="8a8fa9a4fd711518fe0e9e4149db868356ddc80d3106a3ba4ba182e556b3c69cc44209ebc21772952577d924f8d11d62aaab7f93861471f6e33ead6ee3645d3ab16f814699cd4c867ee2297f9c56e59ee22286e6c904c002cc20ecffd7b1d93bc02da638ee85d19c1a366709f10be4e63ff4d2179581e6765e1dd48bf1efd11c6b1a8c27fa9ca79dce16359b4b1ad14c7b3c5a5c8e0fb954047a6be5fe4a5b2307b3bbefaf72c891c48f1fb5ed763ab8788c08dc8d4befc6", 0xb8}, {&(0x7f000001fc00)="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", 0xb76}], 0x2, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 3.616696602s ago: executing program 2 (id=2335): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000300)}, {0x0}], 0x2) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0xfffffffc, 0x4) 3.616203284s ago: executing program 2 (id=2336): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getrlimit(0xe5c672a11a1e321c, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_open_procfs(0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0x10, r5, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2.733864686s ago: executing program 1 (id=2337): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x4840) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0, 0x0, 0x4020}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000240)={0x0, 0x8, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080603000000000000000000020000000500010007"], 0x1c}}, 0x0) 2.627174216s ago: executing program 4 (id=2338): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}]}, 0x24}}, 0x0) 592.748594ms ago: executing program 4 (id=2339): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 425.307777ms ago: executing program 4 (id=2340): socket(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) inotify_init1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$midi(&(0x7f0000000400), 0xb6, 0x0) syz_io_uring_setup(0x4e5e, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) fanotify_init(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0) 390.605653ms ago: executing program 4 (id=2341): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04", @ANYRES8], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000007, &(0x7f0000000100)="05ff03076844268cb89e14f00800fee0ffff00febabec44277fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) 168.654573ms ago: executing program 4 (id=2342): mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) close(0xffffffffffffffff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}}, 0x0) 0s ago: executing program 4 (id=2343): syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x8000000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x2, &(0x7f00000003c0), &(0x7f0000000200)=0x4) kernel console output (not intermixed with test programs): 0] usb 1-1: config 0 descriptor?? [ 319.947422][ T5155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.953687][T10447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.958314][ T5155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.958356][ T5155] usb 3-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 319.980035][T10447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.987805][ T5155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.003988][ T5155] usb 3-1: config 0 descriptor?? [ 320.006591][T10447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.035644][T10447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.071073][T10492] netlink: 'syz.1.1559': attribute type 29 has an invalid length. [ 320.099523][ T5150] ath6kl: Failed to submit usb control message: -71 [ 320.113707][ T5150] ath6kl: unable to send the bmi data to the device: -71 [ 320.124255][ T5150] ath6kl: Unable to send get target info: -71 [ 320.130829][ T5150] ath6kl: Failed to init ath6kl core: -71 [ 320.138383][ T5150] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 320.159038][ T5150] usb 1-1: USB disconnect, device number 16 [ 320.215255][T10446] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.228315][T10493] netlink: 'syz.1.1559': attribute type 29 has an invalid length. [ 320.254849][T10447] hsr_slave_0: entered promiscuous mode [ 320.261278][T10447] hsr_slave_1: entered promiscuous mode [ 320.267585][T10447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.275226][T10447] Cannot create hsr debugfs directory [ 320.477562][T10496] team0: Device vxcan1 is of different type [ 320.692122][T10503] netlink: 'syz.2.1548': attribute type 1 has an invalid length. [ 320.699887][T10503] netlink: 9360 bytes leftover after parsing attributes in process `syz.2.1548'. [ 320.802011][T10503] netlink: 'syz.2.1548': attribute type 1 has an invalid length. [ 320.810254][T10503] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1548'. [ 321.310201][T10446] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.717757][ T55] Bluetooth: hci0: command tx timeout [ 321.760295][T10518] netlink: 'syz.0.1568': attribute type 29 has an invalid length. [ 321.769064][ T55] Bluetooth: hci1: command tx timeout [ 321.779269][T10518] netlink: 'syz.0.1568': attribute type 29 has an invalid length. [ 321.849018][T10519] netlink: 'syz.0.1568': attribute type 29 has an invalid length. [ 321.888450][ T5155] wacom 0003:056A:0043.0007: unknown main item tag 0x4 [ 321.896274][ T5155] wacom 0003:056A:0043.0007: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 321.909891][T10446] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.921089][ T5155] wacom 0003:056A:0043.0007: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.2-1/input0 [ 321.934065][ T5155] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0043.0007/input/input20 [ 322.161347][ T5155] usb 3-1: USB disconnect, device number 15 [ 322.597289][T10446] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.646215][T10546] netlink: 'syz.2.1578': attribute type 29 has an invalid length. [ 322.654713][T10546] netlink: 'syz.2.1578': attribute type 29 has an invalid length. [ 322.663727][T10546] netlink: 'syz.2.1578': attribute type 29 has an invalid length. [ 323.081314][ T5115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 323.088759][ T5115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 323.096138][ T5115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 323.104439][ T5115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 323.112981][ T5115] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 323.120757][ T5115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 323.663520][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.737841][T10446] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 323.853552][ T5115] Bluetooth: hci0: command tx timeout [ 323.862589][T10446] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 323.872655][T10578] hsr_slave_0: left promiscuous mode [ 323.882455][ T5115] Bluetooth: hci1: command tx timeout [ 323.889545][T10578] hsr_slave_1: left promiscuous mode [ 323.916787][T10446] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 323.942578][T10446] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 324.029612][T10557] chnl_net:caif_netlink_parms(): no params data found [ 324.213452][T10557] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.221338][T10557] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.228975][T10557] bridge_slave_0: entered allmulticast mode [ 324.238089][T10557] bridge_slave_0: entered promiscuous mode [ 324.259700][T10557] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.267898][T10557] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.275116][T10557] bridge_slave_1: entered allmulticast mode [ 324.282746][T10557] bridge_slave_1: entered promiscuous mode [ 324.391600][T10446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.408323][T10446] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.540516][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.547729][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.556634][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.563747][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.575158][T10557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.597293][T10557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.633347][T10557] team0: Port device team_slave_0 added [ 324.775435][T10557] team0: Port device team_slave_1 added [ 324.810401][T10557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.817374][T10557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.843304][T10557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.864777][T10557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.879129][T10557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.906530][T10557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.989891][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.006771][T10446] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.017847][T10446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.063536][T10557] hsr_slave_0: entered promiscuous mode [ 325.074578][T10557] hsr_slave_1: entered promiscuous mode [ 325.198120][T10557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.205736][T10557] Cannot create hsr debugfs directory [ 325.239818][ T5115] Bluetooth: hci5: command tx timeout [ 325.294131][T10603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1598'. [ 325.475972][T10446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.598708][T10446] veth0_vlan: entered promiscuous mode [ 325.610183][T10446] veth1_vlan: entered promiscuous mode [ 325.645013][T10446] veth0_macvtap: entered promiscuous mode [ 325.655014][T10446] veth1_macvtap: entered promiscuous mode [ 325.673484][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.684061][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.694338][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.710068][T10619] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1602'. [ 325.719608][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.729829][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.740572][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.751105][ T5155] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 325.759872][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.770307][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.780117][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.790523][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.800322][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.810799][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.822043][T10446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.832181][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.847986][ T5115] Bluetooth: hci0: command tx timeout [ 325.861688][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.873241][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.883477][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.894197][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.906380][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.917176][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.927317][T10446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.939060][ T5115] Bluetooth: hci1: command tx timeout [ 325.944874][T10446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.956422][T10446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.041883][T10446] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.050952][T10446] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.059699][T10446] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.068471][T10446] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.110512][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.119591][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.238296][ T2824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.246171][ T2824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.452018][T10621] netlink: 'syz.2.1603': attribute type 10 has an invalid length. [ 326.459880][T10621] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1603'. [ 326.511799][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'. [ 326.520737][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1604'. [ 326.633164][ T11] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 326.641357][ T11] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 326.646277][ T5115] block nbd0: Receive control failed (result -107) [ 326.659580][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.678177][T10629] can0: slcan on pts0. [ 326.969547][T10629] can0 (unregistered): slcan off pts0. [ 327.145217][ T5155] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 327.156058][ T5155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.166935][ T5155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.176675][ T5155] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 327.241511][ T11] bridge_slave_1: left allmulticast mode [ 327.327178][ T5115] Bluetooth: hci5: command tx timeout [ 327.338276][ T11] bridge_slave_1: left promiscuous mode [ 327.344109][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.358075][ T11] bridge_slave_0: left allmulticast mode [ 327.363747][ T11] bridge_slave_0: left promiscuous mode [ 327.378829][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.391935][ T11] erspan0: left allmulticast mode [ 327.397017][ T11] erspan0: left promiscuous mode [ 327.402098][ T11] bridge0: port 3(erspan0) entered disabled state [ 327.475810][ T11] bridge_slave_1: left allmulticast mode [ 327.485832][ T11] bridge_slave_1: left promiscuous mode [ 327.492814][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.553659][ T5155] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 327.563032][ T5155] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 327.564156][ T11] bridge_slave_0: left allmulticast mode [ 327.571107][ T5155] usb 1-1: Manufacturer: syz [ 327.582624][ T5155] usb 1-1: config 0 descriptor?? [ 327.592282][ T11] bridge_slave_0: left promiscuous mode [ 327.598019][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.518473][ T5154] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 328.662959][ T5155] usbhid 1-1:0.0: can't add hid device: -71 [ 328.669176][ T5155] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 328.686769][ T5155] usb 1-1: USB disconnect, device number 17 [ 328.743601][ T5154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.754928][ T5154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.764818][ T5154] usb 5-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 328.773906][ T5154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.786225][ T5154] usb 5-1: config 0 descriptor?? [ 329.240513][T10677] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 329.248472][T10677] netlink: 9360 bytes leftover after parsing attributes in process `syz.4.1614'. [ 329.257605][T10677] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 329.265336][T10677] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1614'. [ 329.304197][ T5154] wacom 0003:056A:0043.0008: unknown main item tag 0x4 [ 329.311695][ T5154] wacom 0003:056A:0043.0008: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 329.323706][ T5154] wacom 0003:056A:0043.0008: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.4-1/input0 [ 329.337192][ T5154] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0043.0008/input/input23 [ 329.408247][ T5115] Bluetooth: hci5: command tx timeout [ 329.979364][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.990335][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.000339][ T11] bond0 (unregistering): Released all slaves [ 330.048219][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.061213][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.071941][ T11] bond0 (unregistering): Released all slaves [ 330.539181][T10704] netlink: 'syz.0.1619': attribute type 29 has an invalid length. [ 330.548231][T10704] netlink: 'syz.0.1619': attribute type 29 has an invalid length. [ 330.560008][T10704] netlink: 'syz.0.1619': attribute type 29 has an invalid length. [ 330.649392][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1622'. [ 330.658322][T10713] bridge_slave_1: left allmulticast mode [ 330.663977][T10713] bridge_slave_1: left promiscuous mode [ 330.797494][T10713] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.813184][ T8649] usb 5-1: USB disconnect, device number 13 [ 331.486496][ T5115] Bluetooth: hci5: command tx timeout [ 331.861909][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 331.861927][ T29] audit: type=1326 audit(1720553814.546:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10734 comm="syz.2.1631" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f915fd75bd9 code=0x0 [ 332.757289][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 332.999092][ T5115] Bluetooth: hci0: command tx timeout [ 333.013342][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.034877][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.065854][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 333.085403][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.108163][ T9] usb 1-1: config 0 descriptor?? [ 333.356059][T10774] loop4: detected capacity change from 0 to 40427 [ 333.500532][T10774] F2FS-fs (loop4): invalid crc value [ 333.512474][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1640'. [ 333.521396][T10792] bridge_slave_1: left allmulticast mode [ 333.524645][T10774] F2FS-fs (loop4): Found nat_bits in checkpoint [ 333.527251][T10792] bridge_slave_1: left promiscuous mode [ 333.527438][T10792] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.548314][T10792] bridge_slave_0: left allmulticast mode [ 333.553979][T10792] bridge_slave_0: left promiscuous mode [ 333.559731][T10792] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.596326][T10755] netlink: 'syz.0.1632': attribute type 1 has an invalid length. [ 333.616026][T10755] netlink: 9360 bytes leftover after parsing attributes in process `syz.0.1632'. [ 333.635831][T10755] netlink: 'syz.0.1632': attribute type 1 has an invalid length. [ 333.662569][T10755] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1632'. [ 333.684493][ T9] wacom 0003:056A:0043.0009: unknown main item tag 0x4 [ 333.694550][ T9] wacom 0003:056A:0043.0009: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 333.708079][ T9] wacom 0003:056A:0043.0009: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.0-1/input0 [ 333.721722][ T9] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0043.0009/input/input26 [ 333.801396][T10774] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 333.819102][T10774] syz.4.1636: attempt to access beyond end of device [ 333.819102][T10774] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 333.833765][T10774] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 333.841779][T10774] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 334.403366][T10447] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 334.449753][T10557] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.603526][T10447] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.613960][T10447] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.623734][T10447] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 334.695496][T10447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.923603][T10447] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.970552][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.977698][ T5102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.013125][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.020293][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.187467][T10447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.470703][ T8649] usb 1-1: reset high-speed USB device number 18 using dummy_hcd [ 336.010430][T10447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.030528][T10557] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.185629][T10862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1653'. [ 336.194762][T10862] bridge_slave_1: left allmulticast mode [ 336.200494][T10862] bridge_slave_1: left promiscuous mode [ 336.206245][T10862] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.217982][T10862] bridge_slave_0: left allmulticast mode [ 336.223724][T10862] bridge_slave_0: left promiscuous mode [ 336.229493][T10862] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.494228][ T11] hsr_slave_0: left promiscuous mode [ 336.500167][ T11] hsr_slave_1: left promiscuous mode [ 336.595179][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.603073][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.613029][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.620649][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.632682][ T11] hsr_slave_0: left promiscuous mode [ 336.638941][ T11] hsr_slave_1: left promiscuous mode [ 336.644788][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.652255][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.660084][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.667539][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.753262][ T11] veth1_macvtap: left promiscuous mode [ 336.759342][ T11] veth0_macvtap: left promiscuous mode [ 336.765093][ T11] veth1_vlan: left promiscuous mode [ 336.770889][ T11] veth0_vlan: left promiscuous mode [ 336.777529][ T11] veth1_macvtap: left promiscuous mode [ 336.785041][ T11] veth0_macvtap: left promiscuous mode [ 336.798613][ T11] veth1_vlan: left promiscuous mode [ 336.804161][ T11] veth0_vlan: left promiscuous mode [ 337.062428][ T5102] usb 1-1: USB disconnect, device number 18 [ 337.529859][ T11] team0 (unregistering): Port device team_slave_1 removed [ 337.543937][ T11] team0 (unregistering): Port device team_slave_0 removed [ 337.809311][ T11] team0 (unregistering): Port device team_slave_1 removed [ 337.823748][ T11] team0 (unregistering): Port device team_slave_0 removed [ 337.986254][T10557] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.217654][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1656'. [ 338.335692][T10447] veth0_vlan: entered promiscuous mode [ 338.378554][T10447] veth1_vlan: entered promiscuous mode [ 338.478754][T10447] veth0_macvtap: entered promiscuous mode [ 338.489743][T10447] veth1_macvtap: entered promiscuous mode [ 338.505742][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.655515][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.666063][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.669788][T10883] loop4: detected capacity change from 0 to 2048 [ 338.677806][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.715493][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.726144][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.736299][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.747974][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.756555][T10883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.893188][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.909162][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.920480][T10447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.931119][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.941588][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.951395][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.961801][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.971602][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.982018][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.109183][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.112038][T10447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.132984][T10447] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.141888][T10447] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.150607][T10447] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.176531][T10447] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.410784][T10557] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.488268][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1671'. [ 339.590926][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.602683][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.625531][ T2851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.633615][ T2851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.640635][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1673'. [ 339.656860][ T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 339.903917][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.966250][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.986076][ T8] usb 5-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 340.027753][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.187984][ T8] usb 5-1: config 0 descriptor?? [ 340.648069][T10557] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 340.648144][T10943] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1680'. [ 340.662168][T10944] netlink: 'syz.2.1679': attribute type 29 has an invalid length. [ 340.682446][T10557] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 340.689802][T10910] netlink: 'syz.4.1667': attribute type 1 has an invalid length. [ 340.717168][T10910] netlink: 9360 bytes leftover after parsing attributes in process `syz.4.1667'. [ 340.722413][T10557] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 340.729272][T10910] netlink: 'syz.4.1667': attribute type 1 has an invalid length. [ 340.767282][T10910] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1667'. [ 340.850547][ T8] wacom 0003:056A:0043.000A: unknown main item tag 0x4 [ 340.859137][ T8] wacom 0003:056A:0043.000A: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 340.893236][ T8] wacom 0003:056A:0043.000A: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.4-1/input0 [ 340.907333][ T8] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0043.000A/input/input29 [ 340.926385][T10557] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 340.938633][T10944] netlink: 'syz.2.1679': attribute type 29 has an invalid length. [ 340.955681][T10947] netlink: 'syz.2.1679': attribute type 29 has an invalid length. [ 340.963934][T10951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1682'. [ 341.186306][T10557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.204283][T10557] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.225074][ T8649] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.232209][ T8649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.428016][ T8649] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.435168][ T8649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.455191][T10557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.701422][T10557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.752179][T10557] veth0_vlan: entered promiscuous mode [ 341.808276][T10957] Cannot find add_set index 0 as target [ 341.959605][T10557] veth1_vlan: entered promiscuous mode [ 341.983733][T10557] veth0_macvtap: entered promiscuous mode [ 341.993741][T10557] veth1_macvtap: entered promiscuous mode [ 342.009903][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.168106][ T9] usb 5-1: reset high-speed USB device number 14 using dummy_hcd [ 342.256522][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.266366][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.276787][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.286600][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.297024][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.306847][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.317268][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.327247][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.507395][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.517241][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.527786][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.539093][T10557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.558749][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.569856][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.580518][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.591043][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.745774][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.756236][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.766538][T10557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.780622][T10557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.783727][T10982] netlink: 'syz.4.1693': attribute type 29 has an invalid length. [ 342.791736][T10557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.809997][T10557] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.819173][T10557] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.828059][T10557] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.858011][T10557] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.950815][T10982] netlink: 'syz.4.1693': attribute type 29 has an invalid length. [ 343.299278][T10983] netlink: 'syz.4.1693': attribute type 29 has an invalid length. [ 343.644926][ T8] usb 5-1: USB disconnect, device number 14 [ 344.231754][ T2824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.243346][ T2824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.356340][T11004] Cannot find add_set index 0 as target [ 344.417621][ T2874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.431976][ T2874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.488635][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.496071][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.503516][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.511100][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.669512][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.679317][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x4 [ 344.687045][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.697547][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x2 [ 344.705005][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.705709][T11020] netlink: 'syz.0.1706': attribute type 29 has an invalid length. [ 344.712396][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.712427][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.712450][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.742375][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x4 [ 344.875779][T11020] netlink: 'syz.0.1706': attribute type 29 has an invalid length. [ 344.887146][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.895073][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.902789][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.904458][T11025] loop3: detected capacity change from 0 to 512 [ 344.910410][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.910443][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.910467][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.910490][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.910513][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.910535][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.910558][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.910581][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.910605][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.910626][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.910646][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.910668][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.910689][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.910712][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.910735][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.910755][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.930085][T11025] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.1707: casefold flag without casefold feature [ 344.931808][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.939538][T11025] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1707: couldn't read orphan inode 15 (err -117) [ 344.946469][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.946497][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.946518][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.946550][ T5102] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 344.955731][T11025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.138995][ T5102] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 345.191897][T10447] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.708667][T11040] Cannot find add_set index 0 as target [ 346.089422][T11059] loop4: detected capacity change from 0 to 512 [ 346.105267][T11059] EXT4-fs (loop4): Test dummy encryption mode enabled [ 346.125805][T11059] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz.4.1718: corrupted in-inode xattr: invalid ea_ino [ 346.145824][T11059] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1718: couldn't read orphan inode 12 (err -117) [ 346.161353][T11059] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.599785][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 346.608126][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 346.618913][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 346.755805][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 346.764394][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 346.772862][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x4 [ 346.791078][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 346.802775][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x2 [ 347.089808][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.104517][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.113438][T11072] overlayfs: missing 'lowerdir' [ 347.142965][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.152180][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.159620][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x4 [ 347.167432][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.177990][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.185497][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.192910][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.233941][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.335337][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.342870][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.355904][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.363468][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.371201][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.381045][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.391011][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.403171][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.416585][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.429691][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.446577][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.455214][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.465923][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.476759][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.504801][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.594206][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.660024][T10446] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 347.679001][T11076] Cannot find add_set index 0 as target [ 347.685865][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.885934][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.904150][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 347.991555][ T8] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 348.582686][T11108] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1734'. [ 349.066414][ T11] bridge_slave_1: left allmulticast mode [ 349.083465][ T11] bridge_slave_1: left promiscuous mode [ 349.101132][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.143636][ T11] bridge_slave_0: left allmulticast mode [ 349.300202][ T11] bridge_slave_0: left promiscuous mode [ 349.305969][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.891040][T11120] ebt_limit: overflow, try lower: 0/0 [ 350.092834][T11125] overlayfs: missing 'workdir' [ 350.790013][T11139] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1745'. [ 350.941548][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.951741][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.962942][ T11] bond0 (unregistering): Released all slaves [ 351.663875][T11153] loop4: detected capacity change from 0 to 40427 [ 351.673476][T11153] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 351.699346][T11153] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 351.728044][T11153] F2FS-fs (loop4): invalid crc value [ 351.739590][T11153] F2FS-fs (loop4): Found nat_bits in checkpoint [ 351.766175][T11162] Cannot find add_set index 0 as target [ 351.782195][T11153] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 351.789534][T11153] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 352.211406][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.283537][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.295136][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.302821][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.310623][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.318243][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x4 [ 352.325631][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.333383][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x2 [ 352.344011][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.352017][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.360580][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.368356][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.375904][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x4 [ 352.383719][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.391473][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.401222][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.445803][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.855621][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.863111][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.870650][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.951880][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.960382][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.975893][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.983400][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.983430][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.983455][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.983478][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.983501][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.983524][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.983549][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.983573][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.983596][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.983621][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.983647][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.983679][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.983705][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 352.983730][ T5154] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 353.031184][ T5154] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 353.706237][T11207] loop4: detected capacity change from 0 to 2048 [ 353.837599][T11198] Cannot find add_set index 0 as target [ 353.936868][T11184] tty tty23: ldisc open failed (-12), clearing slot 22 [ 353.991108][T11207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.154468][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.174984][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.182410][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.190028][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.197483][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.204893][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.212295][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x4 [ 354.219704][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.227106][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x2 [ 354.234512][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.241913][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.372934][ T5155] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 354.380715][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.388133][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.395554][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x4 [ 354.402981][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.413129][ T11] hsr_slave_0: left promiscuous mode [ 354.413479][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.426144][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.433572][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.433710][ T11] hsr_slave_1: left promiscuous mode [ 354.440963][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.440988][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.441010][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.441031][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.441053][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.441076][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.441098][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.441121][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.441143][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.441166][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.441188][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.441211][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.441234][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.441257][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.441281][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.441311][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.441334][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.441357][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.441381][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.441405][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 354.442669][ T5102] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 354.901401][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.908863][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.007477][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.014994][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.152745][T11241] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 355.406550][ T11] veth1_macvtap: left promiscuous mode [ 355.412095][ T11] veth0_macvtap: left promiscuous mode [ 355.451738][ T11] veth1_vlan: left promiscuous mode [ 355.461895][ T11] veth0_vlan: left promiscuous mode [ 356.112384][T11250] loop4: detected capacity change from 0 to 40427 [ 356.121131][T11250] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 356.128900][T11250] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 356.143310][T11250] F2FS-fs (loop4): invalid crc value [ 356.156730][T11250] F2FS-fs (loop4): Found nat_bits in checkpoint [ 356.250598][T11250] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 356.317338][T11250] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 356.347946][ T11] team0 (unregistering): Port device team_slave_1 removed [ 356.548506][ T11] team0 (unregistering): Port device team_slave_0 removed [ 357.137971][T11285] loop4: detected capacity change from 0 to 1024 [ 357.565986][ T5155] usb 1-1: unable to read config index 0 descriptor/all [ 357.573208][ T5155] usb 1-1: can't read configurations, error -71 [ 358.017016][ T5154] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 358.291235][ T5154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 358.301308][ T5154] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 358.310752][ T5154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.345003][ T5154] usb 2-1: config 0 descriptor?? [ 358.486892][T11305] syz.4.1801[11305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.487041][T11305] syz.4.1801[11305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 358.715704][T11307] syzkaller0: entered promiscuous mode [ 358.724764][ T5154] ath6kl: Failed to submit usb control message: -71 [ 358.727196][T11307] syzkaller0: entered allmulticast mode [ 358.764709][ T5154] ath6kl: unable to send the bmi data to the device: -71 [ 358.775161][ T5154] ath6kl: Unable to send get target info: -71 [ 358.781727][ T5154] ath6kl: Failed to init ath6kl core: -71 [ 358.788140][ T5154] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 358.806074][ T5154] usb 2-1: USB disconnect, device number 14 [ 358.918480][ T5155] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 360.079707][ T5155] usb 1-1: Using ep0 maxpacket: 32 [ 360.511318][ T5155] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 360.519706][ T5155] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 360.528333][ T5155] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 360.537794][ T5155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 360.547450][ T5155] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 360.597137][ T5155] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 360.610138][ T5155] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 360.619169][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.628278][ T5155] usb 1-1: config 0 descriptor?? [ 360.779416][ T5155] usb 1-1: can't set config #0, error -71 [ 360.786762][ T5155] usb 1-1: USB disconnect, device number 20 [ 361.344634][T11380] validate_nla: 1 callbacks suppressed [ 361.344656][T11380] netlink: 'syz.2.1835': attribute type 4 has an invalid length. [ 361.495027][T11386] wg2: entered promiscuous mode [ 361.500199][T11386] wg2: entered allmulticast mode [ 361.586414][ T5155] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 362.147863][T11406] loop4: detected capacity change from 0 to 256 [ 362.425685][T11410] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 362.754933][ T29] audit: type=1326 audit(1720553845.426:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11414 comm="syz.1.1846" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbeab375bd9 code=0x0 [ 363.312312][ T5155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 363.322117][ T5155] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 363.331529][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.341426][ T5155] usb 1-1: config 0 descriptor?? [ 363.651741][ T5155] ath6kl: Failed to submit usb control message: -71 [ 363.658906][ T5155] ath6kl: unable to send the bmi data to the device: -71 [ 363.665960][ T5155] ath6kl: Unable to send get target info: -71 [ 363.672212][ T5155] ath6kl: Failed to init ath6kl core: -71 [ 363.678332][ T5155] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 364.332160][T11444] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 364.346573][T11444] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 364.546508][ T5155] usb 1-1: USB disconnect, device number 21 [ 365.456078][T11469] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 365.794102][T11465] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 365.922086][ T5156] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 366.100070][T11490] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.107463][T11490] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.293438][T11490] 9pnet_fd: Insufficient options for proto=fd [ 366.649004][ T5156] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 366.658943][ T5156] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 366.667965][ T5156] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.677052][ T5156] usb 5-1: config 0 descriptor?? [ 366.712754][T11510] block nbd2: shutting down sockets [ 366.918785][ T29] audit: type=1326 audit(1720553849.606:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11512 comm="syz.2.1882" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f915fd75bd9 code=0x0 [ 366.990459][ T5156] ath6kl: Failed to submit usb control message: -71 [ 366.997097][ T5156] ath6kl: unable to send the bmi data to the device: -71 [ 367.004105][ T5156] ath6kl: Unable to send get target info: -71 [ 367.011276][ T5156] ath6kl: Failed to init ath6kl core: -71 [ 367.017328][ T5156] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 367.079081][ T5156] usb 5-1: USB disconnect, device number 15 [ 367.874868][T11523] loop4: detected capacity change from 0 to 512 [ 367.895395][T11523] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 367.908376][ T29] audit: type=1326 audit(1720553850.606:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11524 comm="syz.2.1886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f915fd75bd9 code=0x0 [ 367.969387][T11523] EXT4-fs (loop4): 1 truncate cleaned up [ 367.978319][T11523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.057758][ T5115] Bluetooth: hci2: command 0x0406 tx timeout [ 368.585336][T11535] ebt_limit: overflow, try lower: 0/0 [ 368.609249][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.870634][T11562] netlink: 'syz.4.1898': attribute type 29 has an invalid length. [ 369.897092][T11562] netlink: 'syz.4.1898': attribute type 29 has an invalid length. [ 370.030940][T11562] netlink: 'syz.4.1898': attribute type 29 has an invalid length. [ 370.243609][ T5115] block nbd2: Receive control failed (result -104) [ 370.300031][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.307655][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.316021][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.325617][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.333339][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 370.340828][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.602102][T11547] block nbd2: shutting down sockets [ 370.862438][T11569] chnl_net:caif_netlink_parms(): no params data found [ 371.210840][T11572] loop4: detected capacity change from 0 to 32768 [ 371.376206][T11572] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 371.390129][T11572] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 371.529336][T11569] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.536563][T11569] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.543830][T11569] bridge_slave_0: entered allmulticast mode [ 371.550876][T11569] bridge_slave_0: entered promiscuous mode [ 371.558582][T11572] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 371.560314][T11569] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.573233][T11569] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.574774][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 371.580428][T11569] bridge_slave_1: entered allmulticast mode [ 371.587925][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 371.593997][T11569] bridge_slave_1: entered promiscuous mode [ 371.663417][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 75ms [ 371.675923][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 371.682148][T11572] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 371.833864][T11569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.847080][T11569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.046718][T11569] team0: Port device team_slave_0 added [ 372.187895][T11569] team0: Port device team_slave_1 added [ 372.205709][T11569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.214202][T11569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.240235][T11569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.262462][T11569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.269421][T11569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.277024][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 372.390410][T11569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.598195][ T55] Bluetooth: hci3: command tx timeout [ 372.608690][T11569] hsr_slave_0: entered promiscuous mode [ 372.619613][T11569] hsr_slave_1: entered promiscuous mode [ 372.626411][T11569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.634533][T11569] Cannot create hsr debugfs directory [ 372.665700][T11623] loop4: detected capacity change from 0 to 512 [ 372.673211][T11623] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 372.739799][T11623] EXT4-fs (loop4): 1 truncate cleaned up [ 372.750688][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 372.762273][T11623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.775453][ T8] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 372.788127][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.817024][ T8] usb 2-1: config 0 descriptor?? [ 372.889613][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.027805][ T8] ath6kl: Failed to submit usb control message: -71 [ 373.036144][ T8] ath6kl: unable to send the bmi data to the device: -71 [ 373.055018][ T8] ath6kl: Unable to send get target info: -71 [ 373.154149][ T8] ath6kl: Failed to init ath6kl core: -71 [ 373.186917][ T8] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 373.199442][T11569] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.220942][ T8] usb 2-1: USB disconnect, device number 15 [ 373.445776][T11636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1922'. [ 374.210368][T11569] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.413099][ T5115] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 374.440531][T11654] loop4: detected capacity change from 0 to 512 [ 374.467265][T11654] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 374.544657][ T5115] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 374.552679][ T5115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 374.560851][ T5115] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 374.569324][ T5115] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 374.584442][ T5115] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 374.592375][T11654] EXT4-fs (loop4): 1 truncate cleaned up [ 374.625489][T11654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.716908][ T5115] Bluetooth: hci3: command tx timeout [ 374.757106][T11569] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.943336][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.983041][T11666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.990949][T11666] batadv_slave_1: entered promiscuous mode [ 375.003579][T11666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1932'. [ 375.144715][T11569] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.604366][T11651] chnl_net:caif_netlink_parms(): no params data found [ 375.916791][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 376.138961][T11651] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.146990][T11651] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.155816][T11651] bridge_slave_0: entered allmulticast mode [ 376.166961][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 376.252895][T11651] bridge_slave_0: entered promiscuous mode [ 376.260390][T11651] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.267797][T11651] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.274986][T11651] bridge_slave_1: entered allmulticast mode [ 376.322317][T11651] bridge_slave_1: entered promiscuous mode [ 376.324303][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 376.341339][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.403890][ T9] usb 5-1: config 0 descriptor?? [ 376.404512][T11651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.428330][ T5106] syz-executor (5106) used greatest stack depth: 19376 bytes left [ 376.469470][ T2851] bridge_slave_1: left allmulticast mode [ 376.475197][ T2851] bridge_slave_1: left promiscuous mode [ 376.483367][ T2851] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.560148][ T2851] bridge_slave_0: left allmulticast mode [ 376.565853][ T2851] bridge_slave_0: left promiscuous mode [ 376.575841][ T2851] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.640599][ T9] ath6kl: Failed to submit usb control message: -71 [ 376.648381][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 376.655766][ T9] ath6kl: Unable to send get target info: -71 [ 376.662753][ T9] ath6kl: Failed to init ath6kl core: -71 [ 376.668891][ T5115] Bluetooth: hci6: command tx timeout [ 376.675291][ T9] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 376.686609][ T9] usb 5-1: USB disconnect, device number 16 [ 376.809062][ T5115] Bluetooth: hci3: command tx timeout [ 377.025447][ T2851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.045863][ T2851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.063089][ T2851] bond0 (unregistering): Released all slaves [ 377.083068][T11651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.113030][T11695] netlink: 'syz.1.1938': attribute type 10 has an invalid length. [ 377.137843][T11695] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1938'. [ 377.147209][T11695] ipvlan1: entered promiscuous mode [ 377.152476][T11695] ipvlan1: entered allmulticast mode [ 377.158366][T11695] veth0_vlan: entered allmulticast mode [ 377.166088][T11695] bridge0: port 3(ipvlan1) entered blocking state [ 377.177637][T11695] bridge0: port 3(ipvlan1) entered disabled state [ 377.187042][T11695] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 377.346372][T11651] team0: Port device team_slave_0 added [ 377.365051][T11651] team0: Port device team_slave_1 added [ 377.558129][T11569] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 377.579201][T11651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.586178][T11651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.612064][T11651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.624310][T11651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.631268][T11651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.921829][T11651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.939277][T11569] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 378.076389][T11651] hsr_slave_0: entered promiscuous mode [ 378.082695][T11651] hsr_slave_1: entered promiscuous mode [ 378.088713][T11651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.096265][T11651] Cannot create hsr debugfs directory [ 378.233833][T11569] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 378.356706][T11569] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 378.378401][T11651] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.604230][T11651] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.734385][ T5115] Bluetooth: hci6: command tx timeout [ 378.781729][ T2851] hsr_slave_0: left promiscuous mode [ 378.787784][ T2851] hsr_slave_1: left promiscuous mode [ 378.797599][ T2851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.805170][ T2851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.817531][ T5115] Bluetooth: hci3: command tx timeout [ 378.858242][ T2851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.865650][ T2851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.874792][ T2851] veth1_macvtap: left promiscuous mode [ 378.880302][ T2851] veth0_macvtap: left promiscuous mode [ 378.885823][ T2851] veth1_vlan: left promiscuous mode [ 378.935010][ T2851] veth0_vlan: left promiscuous mode [ 379.025925][ T5155] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 379.088510][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.094907][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.480191][ T2851] team0 (unregistering): Port device team_slave_1 removed [ 379.500825][ T2851] team0 (unregistering): Port device team_slave_0 removed [ 379.912437][T11569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.936912][T11651] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.043979][T11746] loop4: detected capacity change from 0 to 256 [ 380.054588][T11569] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.159418][T11746] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72a6026c, utbl_chksum : 0xe619d30d) [ 380.240279][T11569] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 380.251228][T11569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.356348][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.363593][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.376340][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.383474][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.816938][ T5115] Bluetooth: hci6: command tx timeout [ 380.829051][ T5155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 380.838840][ T5155] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 380.847878][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.857034][ T5155] usb 1-1: config 0 descriptor?? [ 381.444979][ T5155] ath6kl: Failed to submit usb control message: -71 [ 381.451716][ T5155] ath6kl: unable to send the bmi data to the device: -71 [ 381.458763][ T5155] ath6kl: Unable to send get target info: -71 [ 381.464986][ T5155] ath6kl: Failed to init ath6kl core: -71 [ 381.471146][ T5155] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 381.482472][ T5155] usb 1-1: USB disconnect, device number 22 [ 381.530183][T11651] bond0: (slave netdevsim0): Releasing backup interface [ 381.668601][T11651] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.706188][T11569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.743743][T11763] loop4: detected capacity change from 0 to 512 [ 381.767286][T11763] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 381.810746][T11569] veth0_vlan: entered promiscuous mode [ 381.823553][T11569] veth1_vlan: entered promiscuous mode [ 381.858645][T11569] veth0_macvtap: entered promiscuous mode [ 381.868667][T11569] veth1_macvtap: entered promiscuous mode [ 381.892302][T11569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.902992][T11569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.913349][T11763] EXT4-fs (loop4): 1 truncate cleaned up [ 381.920570][T11763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.935186][T11569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.952963][T11569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.964453][T11569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.975415][T11569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.986126][T11569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.997773][T11569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.011313][T11569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.022108][T11569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.033613][T11569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.043926][T11569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.064763][T11569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.086639][T11569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.105145][T11569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.117017][T11569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.142668][T11569] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.153803][T11569] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.169553][T11569] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.178719][T11569] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.595066][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.603395][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.627777][ T2835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.635624][ T2835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.682239][T11651] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 382.769982][T11651] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 382.779904][T11651] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 382.793473][T11651] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 382.907820][ T5115] Bluetooth: hci6: command tx timeout [ 383.039644][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.351658][T11788] loop4: detected capacity change from 0 to 512 [ 383.584203][T11651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.603716][T11651] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.135755][T11788] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 384.203016][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.210219][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.236538][T11788] EXT4-fs (loop4): 1 truncate cleaned up [ 384.242745][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.243312][T11788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.249913][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.277334][ T29] audit: type=1804 audit(1720553866.936:192): pid=11788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1967" name="/newroot/85/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 384.353644][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.440698][T11797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1969'. [ 384.684494][T11815] loop4: detected capacity change from 0 to 512 [ 384.721115][T11815] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 384.736357][T11815] EXT4-fs (loop4): 1 truncate cleaned up [ 384.742562][T11815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.911437][T11651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.184539][T11651] veth0_vlan: entered promiscuous mode [ 385.197215][T11651] veth1_vlan: entered promiscuous mode [ 385.250618][T11651] veth0_macvtap: entered promiscuous mode [ 385.258666][T11651] veth1_macvtap: entered promiscuous mode [ 385.307828][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.316397][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.356392][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.366720][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.378082][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.388169][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.506162][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.516177][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.581094][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.591811][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.602453][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.612369][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.763024][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.817285][T11651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.842665][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.868229][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.903483][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.914010][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.923840][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.962659][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.129503][T11651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.155702][T11847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1986'. [ 386.239281][T11651] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.267017][T11651] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.275746][T11651] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.309897][T11651] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.324805][T11854] loop3: detected capacity change from 0 to 8 [ 386.430543][T11854] SQUASHFS error: Unable to read directory block [1d0:32] [ 386.725915][T11870] loop3: detected capacity change from 0 to 128 [ 386.738726][ T2874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.870402][ T2874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.890249][T11870] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 386.908502][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.908632][T11870] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 386.916319][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.097507][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1999'. [ 387.271628][T11569] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 387.479803][T11889] loop3: detected capacity change from 0 to 8 [ 389.414021][T11953] loop3: detected capacity change from 0 to 8 [ 390.336497][ T25] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 390.890628][T11985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2039'. [ 392.001255][ T29] audit: type=1326 audit(1720553874.456:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11971 comm="syz.0.2035" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1555175bd9 code=0x0 [ 392.063052][ T5115] Bluetooth: hci3: command tx timeout [ 392.303628][T11996] loop3: detected capacity change from 0 to 2048 [ 392.778095][T11996] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz.3.2042: bad orphan inode 8192 [ 392.800848][T11996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.070293][T11569] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.681840][ T29] audit: type=1326 audit(1720553879.356:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.1.2066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbeab375bd9 code=0x0 [ 396.779774][T12077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2067'. [ 396.883922][ T9] IPVS: starting estimator thread 0... [ 397.014467][T12083] IPVS: using max 33 ests per chain, 79200 per kthread [ 397.362654][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2078'. [ 397.636793][T12104] loop4: detected capacity change from 0 to 4096 [ 397.647275][T12104] EXT4-fs: Ignoring removed i_version option [ 397.656682][T12104] EXT4-fs: Ignoring removed nomblk_io_submit option [ 397.916949][T12104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.948978][T12104] EXT4-fs error (device loop4): ext4_do_update_inode:5149: inode #15: comm syz.4.2080: corrupted inode contents [ 397.984576][T12104] EXT4-fs error (device loop4): ext4_dirty_inode:6009: inode #15: comm syz.4.2080: mark_inode_dirty error [ 398.141582][T12104] EXT4-fs error (device loop4): ext4_do_update_inode:5149: inode #15: comm syz.4.2080: corrupted inode contents [ 398.156691][T12104] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.2080: mark_inode_dirty error [ 398.170358][T12104] EXT4-fs error (device loop4): ext4_do_update_inode:5149: inode #15: comm syz.4.2080: corrupted inode contents [ 398.182562][T12104] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.2080: mark_inode_dirty error [ 398.195221][T12104] EXT4-fs error (device loop4): ext4_do_update_inode:5149: inode #15: comm syz.4.2080: corrupted inode contents [ 398.203635][T12114] ebt_limit: overflow, try lower: 0/0 [ 398.367078][T12104] EXT4-fs error (device loop4): ext4_truncate:4236: inode #15: comm syz.4.2080: mark_inode_dirty error [ 398.378474][T12104] EXT4-fs error (device loop4): ext4_evict_inode:262: comm syz.4.2080: couldn't truncate inode 15 (err -117) [ 398.428438][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.825142][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2090'. [ 399.893715][T12138] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 399.988443][ T29] audit: type=1326 audit(1720553882.676:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12115 comm="syz.1.2085" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbeab375bd9 code=0x0 [ 401.177504][T12155] ebt_limit: overflow, try lower: 0/0 [ 401.849269][T12146] loop3: detected capacity change from 0 to 32768 [ 402.136181][T12146] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 402.150963][T12146] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 402.172820][T12146] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 402.196255][ T1147] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 402.203952][ T1147] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 402.420194][ T1147] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 216ms [ 402.436778][ T1147] gfs2: fsid=syz:syz.0: jid=0: Done [ 402.453524][T12146] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 403.010723][ T5115] Bluetooth: hci0: command tx timeout [ 403.337424][T12171] Cannot find add_set index 0 as target [ 403.825971][T12194] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 403.869083][ T5115] Bluetooth: hci6: command tx timeout [ 405.301838][ T5115] Bluetooth: hci0: command tx timeout [ 406.199821][T12212] loop4: detected capacity change from 0 to 32768 [ 406.328272][T12212] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 406.343382][T12212] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 406.426385][T12212] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 406.435282][ T5156] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 406.442224][ T5156] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 406.444941][T12227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2125'. [ 406.473436][ T5156] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 31ms [ 406.481002][ T5156] gfs2: fsid=syz:syz.0: jid=0: Done [ 406.486251][T12212] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 406.936496][T12238] netlink: 16227 bytes leftover after parsing attributes in process `syz.2.2130'. [ 408.440657][ T5115] Bluetooth: hci0: command tx timeout [ 408.854798][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'. [ 409.936827][T12274] loop3: detected capacity change from 0 to 512 [ 409.940794][T12275] netlink: 16227 bytes leftover after parsing attributes in process `syz.0.2141'. [ 409.947901][T12274] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 410.076844][T12274] EXT4-fs (loop3): 1 truncate cleaned up [ 410.102229][T12274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.942069][T12291] sctp: [Deprecated]: syz.4.2147 (pid 12291) Use of int in max_burst socket option. [ 410.942069][T12291] Use struct sctp_assoc_value instead [ 411.652977][T12296] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2148'. [ 412.107059][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2150'. [ 412.426945][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2151'. [ 412.526660][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 412.534769][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 412.542395][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 412.550626][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 412.558373][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 412.565783][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 412.626267][T11569] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.713170][T12314] netlink: 16227 bytes leftover after parsing attributes in process `syz.4.2155'. [ 413.226854][T12306] chnl_net:caif_netlink_parms(): no params data found [ 413.969173][ T5115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 413.976453][ T5115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 413.984277][ T5115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 413.992087][ T5115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 413.999617][ T5115] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 414.006908][ T5115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 414.187967][T12306] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.195103][T12306] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.225050][T12306] bridge_slave_0: entered allmulticast mode [ 414.232112][T12306] bridge_slave_0: entered promiscuous mode [ 414.240205][T12306] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.247408][T12306] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.496910][T12306] bridge_slave_1: entered allmulticast mode [ 414.516614][T12306] bridge_slave_1: entered promiscuous mode [ 414.677653][ T55] Bluetooth: hci1: command tx timeout [ 414.822610][T12306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.852598][T12306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.060156][T12306] team0: Port device team_slave_0 added [ 415.070318][T12306] team0: Port device team_slave_1 added [ 415.483464][T12332] chnl_net:caif_netlink_parms(): no params data found [ 415.524786][T12306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.531962][T12306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.558820][T12306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.577020][T12306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.584201][T12306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.611207][T12306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.706420][T12306] hsr_slave_0: entered promiscuous mode [ 415.712858][T12306] hsr_slave_1: entered promiscuous mode [ 415.719069][T12306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.726633][T12306] Cannot create hsr debugfs directory [ 416.010075][T12332] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.025984][T12332] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.042762][T12332] bridge_slave_0: entered allmulticast mode [ 416.049881][T12332] bridge_slave_0: entered promiscuous mode [ 416.082049][T12359] netlink: 'syz.1.2169': attribute type 29 has an invalid length. [ 416.090598][ T55] Bluetooth: hci2: command tx timeout [ 416.286776][T12332] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.293970][T12332] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.301225][T12332] bridge_slave_1: entered allmulticast mode [ 416.308472][T12332] bridge_slave_1: entered promiscuous mode [ 416.317865][T12359] netlink: 'syz.1.2169': attribute type 29 has an invalid length. [ 416.546065][T12362] netlink: 'syz.1.2169': attribute type 29 has an invalid length. [ 416.569840][T12332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.581524][T12332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.595511][T12364] Cannot find add_set index 0 as target [ 416.727020][ T55] Bluetooth: hci1: command tx timeout [ 416.753222][T12332] team0: Port device team_slave_0 added [ 416.775902][T12306] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.796109][T12332] team0: Port device team_slave_1 added [ 416.798893][T12378] loop4: detected capacity change from 0 to 512 [ 416.811567][T12378] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 416.866356][T12378] EXT4-fs (loop4): 1 truncate cleaned up [ 416.873182][T12378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.945940][T12332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.953269][T12332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.979278][T12332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.992092][T12332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.999047][T12332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.024917][T12332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.035789][T12383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2178'. [ 417.169847][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.214910][T12306] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.344281][T12395] netlink: 'syz.4.2184': attribute type 29 has an invalid length. [ 417.433235][T12395] netlink: 'syz.4.2184': attribute type 29 has an invalid length. [ 417.464784][T12332] hsr_slave_0: entered promiscuous mode [ 417.471464][T12332] hsr_slave_1: entered promiscuous mode [ 417.483066][T12332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.497477][T12332] Cannot create hsr debugfs directory [ 417.505297][T12399] netlink: 'syz.4.2184': attribute type 29 has an invalid length. [ 417.967336][ T1147] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 418.097336][T12306] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.176807][ T55] Bluetooth: hci2: command tx timeout [ 418.190010][ T1147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.208659][ T1147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.218825][ T1147] usb 2-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 418.228421][ T1147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.242624][ T1147] usb 2-1: config 0 descriptor?? [ 418.288011][T12306] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.302911][T12418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2194'. [ 418.468153][T12427] netlink: 'syz.4.2198': attribute type 29 has an invalid length. [ 418.477119][T12427] netlink: 'syz.4.2198': attribute type 29 has an invalid length. [ 418.486416][T12427] netlink: 'syz.4.2198': attribute type 29 has an invalid length. [ 418.589270][T12431] loop4: detected capacity change from 0 to 512 [ 418.605719][T12431] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 418.629595][T12431] EXT4-fs (loop4): 1 truncate cleaned up [ 418.636910][T12431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.766068][T12410] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.2189'. [ 418.787945][ T1147] wacom 0003:056A:0043.000F: unknown main item tag 0x4 [ 418.795798][ T1147] wacom 0003:056A:0043.000F: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 418.808495][ T1147] wacom 0003:056A:0043.000F: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.1-1/input0 [ 418.822029][ T1147] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0043.000F/input/input34 [ 418.839470][ T55] Bluetooth: hci1: command tx timeout [ 419.071920][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.109293][T12435] loop4: detected capacity change from 0 to 512 [ 419.130108][T12435] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 419.152321][T12435] EXT4-fs (loop4): 1 truncate cleaned up [ 419.159362][T12435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.178643][ T29] audit: type=1804 audit(1720553901.846:196): pid=12435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2201" name="/newroot/136/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 419.342412][T12440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2203'. [ 419.565689][T12332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.652531][ T1147] usb 2-1: USB disconnect, device number 17 [ 419.652554][T10446] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.706421][T12446] netlink: 'syz.1.2207': attribute type 29 has an invalid length. [ 419.839466][T12456] sctp: [Deprecated]: syz.1.2210 (pid 12456) Use of int in max_burst socket option. [ 419.839466][T12456] Use struct sctp_assoc_value instead [ 420.259720][ T55] Bluetooth: hci2: command tx timeout [ 420.543025][T12479] sctp: [Deprecated]: syz.2.2220 (pid 12479) Use of int in max_burst socket option. [ 420.543025][T12479] Use struct sctp_assoc_value instead [ 420.886690][ T55] Bluetooth: hci1: command tx timeout [ 421.239324][T12501] blktrace: Concurrent blktraces are not allowed on nullb0 [ 421.419237][T12332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.515114][T12332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.555262][T12503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2227'. [ 421.639657][T12507] sctp: [Deprecated]: syz.2.2229 (pid 12507) Use of int in max_burst socket option. [ 421.639657][T12507] Use struct sctp_assoc_value instead [ 422.325940][T12332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.336883][ T55] Bluetooth: hci2: command tx timeout [ 422.567534][T12516] loop4: detected capacity change from 0 to 32768 [ 422.586348][T12516] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 422.594592][T12516] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 422.606134][T12516] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 422.615555][ T5150] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 422.622719][ T5150] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 422.673142][ T5150] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 50ms [ 422.680909][ T5150] gfs2: fsid=syz:syz.0: jid=0: Done [ 422.688034][T12516] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 423.283710][T12535] sctp: [Deprecated]: syz.2.2240 (pid 12535) Use of int in max_burst socket option. [ 423.283710][T12535] Use struct sctp_assoc_value instead [ 423.499436][ T2824] bridge_slave_1: left allmulticast mode [ 423.505500][ T2824] bridge_slave_1: left promiscuous mode [ 423.517318][ T2824] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.527353][ T2824] bridge_slave_0: left allmulticast mode [ 423.533076][ T2824] bridge_slave_0: left promiscuous mode [ 423.543938][ T2824] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.806881][T12546] blktrace: Concurrent blktraces are not allowed on nullb0 [ 424.211016][T12550] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2244'. [ 424.741337][ T2824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.926173][ T2824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.952382][ T2824] bond0 (unregistering): Released all slaves [ 425.082374][T12332] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 425.208857][T12332] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 425.249317][T12332] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 425.278392][T12560] sctp: [Deprecated]: syz.2.2249 (pid 12560) Use of int in max_burst socket option. [ 425.278392][T12560] Use struct sctp_assoc_value instead [ 425.472187][T12306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 425.482270][T12332] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 425.504996][T12306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 425.742516][T12306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 425.759989][T12306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 425.806502][ T29] audit: type=1326 audit(1720553908.496:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12562 comm="syz.4.2251" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10a1575bd9 code=0x0 [ 426.027417][T12332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.044191][T12332] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.079802][T12332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 426.090183][T12332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 426.330018][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.337217][ T5102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.346366][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.386667][T12580] blktrace: Concurrent blktraces are not allowed on nullb0 [ 426.551981][ T5102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.637605][T12584] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2257'. [ 427.024549][T12306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.231677][T12306] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.279999][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.287203][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.301196][T12332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.332327][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.339588][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.485864][T12332] veth0_vlan: entered promiscuous mode [ 427.487124][ T1147] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 427.497099][T12332] veth1_vlan: entered promiscuous mode [ 427.772035][ T1147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.788518][ T1147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.799040][ T1147] usb 5-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 427.808401][ T1147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.821985][ T1147] usb 5-1: config 0 descriptor?? [ 427.834742][T12332] veth0_macvtap: entered promiscuous mode [ 427.848965][T12332] veth1_macvtap: entered promiscuous mode [ 427.884836][T12306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 427.898548][T12306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 427.924149][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.935452][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.945778][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.959865][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.970452][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.981252][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.991586][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.041246][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.056141][T12593] sctp: [Deprecated]: syz.2.2261 (pid 12593) Use of int in max_burst socket option. [ 428.056141][T12593] Use struct sctp_assoc_value instead [ 428.075643][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.087004][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.102957][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.126956][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.138570][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.149457][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.265661][T12332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.275843][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.286278][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.296103][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.306611][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.316428][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.326847][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.336752][T12332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.347177][T12332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.358254][T12332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.514634][T12332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.523368][T12332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.529903][T12594] validate_nla: 2 callbacks suppressed [ 428.529922][T12594] netlink: 'syz.4.2259': attribute type 1 has an invalid length. [ 428.568169][ T1147] wacom 0003:056A:0043.0010: unknown main item tag 0x4 [ 428.576101][ T1147] wacom 0003:056A:0043.0010: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 428.597985][T12332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.611562][T12594] netlink: 9388 bytes leftover after parsing attributes in process `syz.4.2259'. [ 428.617208][ T1147] wacom 0003:056A:0043.0010: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.4-1/input0 [ 428.619098][ T1147] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0043.0010/input/input37 [ 428.854506][T12332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.138196][ T2874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.150247][ T2874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.172671][T12306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.242206][T12306] veth0_vlan: entered promiscuous mode [ 429.256417][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.265182][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.285070][T12306] veth1_vlan: entered promiscuous mode [ 429.364141][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 429.374319][T12306] veth0_macvtap: entered promiscuous mode [ 429.427012][T12306] veth1_macvtap: entered promiscuous mode [ 429.468582][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.481375][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.491709][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.525477][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.535799][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.623824][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.633667][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.644082][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.653897][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.664402][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.674246][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.684724][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.694532][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.704952][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.708410][T12609] loop3: detected capacity change from 0 to 2048 [ 429.714746][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.714762][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.754076][ T5154] usb 5-1: USB disconnect, device number 17 [ 429.881097][T12306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.890938][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.901388][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.911530][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.922151][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.932206][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.942753][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.952591][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.963007][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.111270][T12306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.127102][T12609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.142763][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.181049][T12306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.210909][T12609] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 430.227477][T12609] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 24 with error 28 [ 430.239901][T12609] EXT4-fs (loop3): This should not happen!! Data will be lost [ 430.239901][T12609] [ 430.250148][T12609] EXT4-fs (loop3): Total free blocks count 0 [ 430.256139][T12609] EXT4-fs (loop3): Free/Dirty block details [ 430.269365][T12609] EXT4-fs (loop3): free_blocks=2415919104 [ 430.275123][T12609] EXT4-fs (loop3): dirty_blocks=32 [ 430.280681][T12609] EXT4-fs (loop3): Block reservation details [ 430.290072][T12609] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 430.348548][T12332] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.366611][ T2824] hsr_slave_0: left promiscuous mode [ 430.372517][ T2824] hsr_slave_1: left promiscuous mode [ 430.387214][ T2824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.425471][ T2824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.577506][ T2824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.585060][ T2824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.593406][T12611] loop4: detected capacity change from 0 to 40427 [ 430.601076][T12611] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 430.608851][T12611] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 430.609056][ T2824] veth1_macvtap: left promiscuous mode [ 430.622849][ T2824] veth0_macvtap: left promiscuous mode [ 430.630351][T12611] F2FS-fs (loop4): invalid crc value [ 430.636526][ T2824] veth1_vlan: left promiscuous mode [ 430.641807][T12611] F2FS-fs (loop4): Found nat_bits in checkpoint [ 430.642064][ T2824] veth0_vlan: left promiscuous mode [ 430.737839][T12611] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 430.745320][T12611] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 430.757208][ T29] audit: type=1326 audit(1720553913.436:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12616 comm="syz.3.2267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef48375bd9 code=0x0 [ 430.799623][ T29] audit: type=1804 audit(1720553913.466:199): pid=12611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2266" name="/newroot/154/file1/file0" dev="loop4" ino=10 res=1 errno=0 [ 431.138373][ T2824] team0 (unregistering): Port device team_slave_1 removed [ 431.150508][ T2824] team0 (unregistering): Port device team_slave_0 removed [ 431.522232][T12633] blktrace: Concurrent blktraces are not allowed on nullb0 [ 431.868178][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.874377][T12306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.879332][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.879363][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 431.879407][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 431.879428][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.882359][ T25] usb 3-1: config 0 descriptor?? [ 431.905468][T12306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.941386][T12306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.062216][ T25] usb 3-1: can't set config #0, error -71 [ 432.064602][T12644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2268'. [ 432.069755][ T25] usb 3-1: USB disconnect, device number 16 [ 432.122883][T12306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.158093][ T5154] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 432.406310][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.423646][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.552252][ T5154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.576844][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.599383][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.611234][ T5154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.651537][ T5154] usb 2-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 432.670994][ T5154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.805349][ T5154] usb 2-1: config 0 descriptor?? [ 433.115897][ T29] audit: type=1326 audit(1720553915.816:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12656 comm="syz.2.2278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4679d75bd9 code=0x0 [ 433.598033][T12642] netlink: 'syz.1.2275': attribute type 1 has an invalid length. [ 433.769164][T12642] netlink: 9388 bytes leftover after parsing attributes in process `syz.1.2275'. [ 433.803741][ T5154] wacom 0003:056A:0043.0011: unknown main item tag 0x4 [ 433.815736][ T5154] wacom 0003:056A:0043.0011: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 433.827609][ T5154] wacom 0003:056A:0043.0011: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.1-1/input0 [ 433.844001][ T5154] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0043.0011/input/input40 [ 433.896759][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 433.966108][ T927] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 434.258055][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.275922][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.283114][T12689] blktrace: Concurrent blktraces are not allowed on nullb0 [ 434.286099][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 434.306401][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 434.316839][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.327202][ T9] usb 5-1: config 0 descriptor?? [ 434.713833][T12691] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2290'. [ 434.988545][ T1147] usb 2-1: USB disconnect, device number 18 [ 434.999877][ T9] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 435.051788][ T9] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 435.081364][ T9] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 436.689740][T12699] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 436.696850][T12699] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 436.754918][ T2824] IPVS: stop unused estimator thread 0... [ 437.004592][T12699] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 437.139775][T12699] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 437.185348][ T29] audit: type=1326 audit(1720553919.856:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12716 comm="syz.1.2298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbeab375bd9 code=0x0 [ 437.298089][ T927] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 437.305702][ T927] usb 1-1: can't read configurations, error -71 [ 437.368945][T12699] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 437.382623][T12699] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 437.506317][ T5154] usb 5-1: USB disconnect, device number 18 [ 437.744906][T12699] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 437.768678][T12699] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 437.791568][ C0] eth0: bad gso: type: 1, size: 1408 [ 437.871762][T12699] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 437.882614][T12699] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 437.894920][T12754] blktrace: Concurrent blktraces are not allowed on nullb0 [ 438.130199][ T5150] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 438.369041][T12760] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2306'. [ 438.448308][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.463655][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.500012][ T5150] usb 3-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 438.509555][ T5150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.520369][ T5150] usb 3-1: config 0 descriptor?? [ 438.776612][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 438.963385][T12747] netlink: 'syz.2.2303': attribute type 1 has an invalid length. [ 438.971331][T12747] netlink: 9388 bytes leftover after parsing attributes in process `syz.2.2303'. [ 438.993135][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 439.008183][ T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 439.026903][ T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 439.050017][ T5150] wacom 0003:056A:0043.0013: unknown main item tag 0x4 [ 439.058328][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 439.068697][ T5150] wacom 0003:056A:0043.0013: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 439.078747][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 439.094229][ T5150] wacom 0003:056A:0043.0013: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.2-1/input0 [ 439.106205][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 439.118632][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 439.142466][ T5150] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0043.0013/input/input43 [ 439.237960][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 439.270020][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.287001][ T9] usb 5-1: config 0 descriptor?? [ 440.514283][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.639273][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.987291][ T9] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 442.050200][ T9] usb 5-1: USB disconnect, device number 19 [ 442.069920][ T9] usblp0: removed [ 442.580075][ T5102] usb 3-1: USB disconnect, device number 17 [ 442.658653][ T29] audit: type=1326 audit(1720553925.326:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12799 comm="syz.4.2312" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10a1575bd9 code=0x0 [ 444.997139][ T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 446.260017][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 446.810704][T12855] loop4: detected capacity change from 0 to 262144 [ 446.827982][T12855] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2324 (12855) [ 446.931937][T12855] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 446.952700][T12855] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 446.965943][T12855] BTRFS info (device loop4): using free-space-tree [ 447.269572][ T2824] BTRFS warning (device loop4): checksum verify failed on logical 22036480 mirror 1 wanted 0x23e101be1e001a29 found 0x98e2f59226e63d74 level 0 [ 447.284656][T12855] BTRFS info (device loop4): read error corrected: ino 0 off 22036480 (dev /dev/loop4 sector 43040) [ 447.295615][T12855] BTRFS info (device loop4): read error corrected: ino 0 off 22040576 (dev /dev/loop4 sector 43048) [ 447.306892][T12855] BTRFS info (device loop4): read error corrected: ino 0 off 22044672 (dev /dev/loop4 sector 43056) [ 447.318671][T12855] BTRFS info (device loop4): read error corrected: ino 0 off 22048768 (dev /dev/loop4 sector 43064) [ 447.331556][ T2824] BTRFS warning (device loop4): checksum verify failed on logical 30670848 mirror 1 wanted 0xe9f08ec94c425425 found 0x1a4a9216e61c07c8 level 0 [ 447.349813][T12855] BTRFS info (device loop4): read error corrected: ino 0 off 30670848 (dev /dev/loop4 sector 76288) [ 447.370588][T12855] BTRFS info (device loop4): read error corrected: ino 0 off 30674944 (dev /dev/loop4 sector 76296) [ 447.399003][T12855] BTRFS info (device loop4): read error corrected: ino 0 off 30679040 (dev /dev/loop4 sector 76304) [ 447.425483][T12855] BTRFS info (device loop4): read error corrected: ino 0 off 30683136 (dev /dev/loop4 sector 76312) [ 447.641018][ T2824] BTRFS warning (device loop4): checksum verify failed on logical 30457856 mirror 1 wanted 0x402e75f1de9ccfe6 found 0x64dad595b87aeca8 level 0 [ 447.775582][ T25] usb 3-1: unable to read config index 0 descriptor/all [ 447.783661][ T25] usb 3-1: can't read configurations, error -71 [ 447.895056][T12855] BTRFS info (device loop4): read error corrected: ino 0 off 30457856 (dev /dev/loop4 sector 75872) [ 447.912529][T12855] BTRFS info (device loop4): read error corrected: ino 0 off 30461952 (dev /dev/loop4 sector 75880) [ 448.242605][T10446] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 450.627620][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2342'. [ 450.687011][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2342'. [ 486.630845][ T1046] erspan0: left allmulticast mode [ 486.635937][ T1046] erspan0: left promiscuous mode [ 486.641680][ T1046] bridge0: port 3(erspan0) entered disabled state [ 486.669847][ T1046] bridge_slave_1: left allmulticast mode [ 486.675606][ T1046] bridge_slave_1: left promiscuous mode [ 486.681784][ T1046] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.706606][ T1046] bridge_slave_0: left allmulticast mode [ 486.712275][ T1046] bridge_slave_0: left promiscuous mode [ 486.726617][ T1046] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.109451][ T1046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.120307][ T1046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.130486][ T1046] bond0 (unregistering): Released all slaves [ 501.948357][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.954677][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.580566][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.586931][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 584.137187][ T30] INFO: task kworker/0:2:1147 blocked for more than 143 seconds. [ 584.144960][ T30] Not tainted 6.10.0-rc7-next-20240709-syzkaller #0 [ 584.152077][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 584.160764][ T30] task:kworker/0:2 state:D stack:20912 pid:1147 tgid:1147 ppid:2 flags:0x00004000 [ 584.170952][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 584.177653][ T30] Call Trace: [ 584.180934][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 584.183874][ T30] __schedule+0x1800/0x4a60 [ 584.188408][ T30] ? schedule+0x90/0x320 [ 584.192665][ T30] ? schedule+0x90/0x320 [ 584.196918][ T30] ? lock_release+0xbf/0x9f0 [ 584.201745][ T30] ? __pfx___schedule+0x10/0x10 [ 584.206615][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 584.211949][ T30] ? __pfx_lock_release+0x10/0x10 [ 584.218000][ T30] ? kick_pool+0x1bd/0x620 [ 584.222454][ T30] ? schedule+0x90/0x320 [ 584.398547][ T30] ? rcu_is_watching+0x15/0xb0 [ 584.403375][ T30] ? schedule+0x90/0x320 [ 584.407625][ T30] schedule+0x14b/0x320 [ 584.411787][ T30] schedule_preempt_disabled+0x13/0x30 [ 584.417256][ T30] __mutex_lock+0x6a4/0xd70 [ 584.421771][ T30] ? __mutex_lock+0x527/0xd70 [ 584.426462][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 584.432728][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 584.437771][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 584.444123][ T30] ? process_scheduled_works+0x945/0x1830 [ 584.449869][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 584.455953][ T30] ? process_scheduled_works+0x945/0x1830 [ 584.461695][ T30] process_scheduled_works+0xa2c/0x1830 [ 584.676145][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 584.682213][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 584.687792][ T30] ? assign_work+0x364/0x3d0 [ 584.692399][ T30] worker_thread+0x86d/0xd40 [ 584.697005][ T30] ? rcu_is_watching+0x15/0xb0 [ 584.701797][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 584.707707][ T30] ? __kthread_parkme+0x169/0x1d0 [ 584.712748][ T30] ? __pfx_worker_thread+0x10/0x10 [ 584.717882][ T30] kthread+0x2f0/0x390 [ 584.721962][ T30] ? __pfx_worker_thread+0x10/0x10 [ 584.727082][ T30] ? __pfx_kthread+0x10/0x10 [ 584.731688][ T30] ret_from_fork+0x4b/0x80 [ 584.736119][ T30] ? __pfx_kthread+0x10/0x10 [ 584.740762][ T30] ret_from_fork_asm+0x1a/0x30 [ 584.745556][ T30] [ 584.748682][ T30] INFO: task syz.0.2149:12655 blocked for more than 143 seconds. [ 584.756398][ T30] Not tainted 6.10.0-rc7-next-20240709-syzkaller #0 [ 584.763510][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 584.944364][ T30] task:syz.0.2149 state:D stack:23496 pid:12655 tgid:12652 ppid:12306 flags:0x00004006 [ 584.954586][ T30] Call Trace: [ 584.957874][ T30] [ 584.960811][ T30] __schedule+0x1800/0x4a60 [ 584.965331][ T30] ? schedule+0x90/0x320 [ 584.969593][ T30] ? schedule+0x90/0x320 [ 584.973888][ T30] ? lock_release+0xbf/0x9f0 [ 584.978511][ T30] ? __pfx___schedule+0x10/0x10 [ 584.983376][ T30] ? __pfx_lock_release+0x10/0x10 [ 584.988426][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 584.993902][ T30] ? schedule+0x90/0x320 [ 584.999452][ T30] schedule+0x14b/0x320 [ 585.003617][ T30] schedule_preempt_disabled+0x13/0x30 [ 585.009080][ T30] __mutex_lock+0x6a4/0xd70 [ 585.013593][ T30] ? kobject_put+0x443/0x480 [ 585.018198][ T30] ? __mutex_lock+0x527/0xd70 [ 585.022882][ T30] ? rfkill_unregister+0xd0/0x230 [ 585.027921][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 585.032959][ T30] ? __pfx_device_del+0x10/0x10 [ 585.037826][ T30] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 585.043818][ T30] rfkill_unregister+0xd0/0x230 [ 585.245385][ T30] nfc_unregister_device+0x96/0x2a0 [ 585.250645][ T30] virtual_ncidev_close+0x59/0x90 [ 585.255697][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 585.261433][ T30] __fput+0x24a/0x8a0 [ 585.265437][ T30] task_work_run+0x24f/0x310 [ 585.270721][ T30] ? __pfx_task_work_run+0x10/0x10 [ 585.275857][ T30] ? do_exit+0xa2a/0x27f0 [ 585.280201][ T30] ? kmem_cache_free+0x145/0x350 [ 585.285154][ T30] do_exit+0xa2f/0x27f0 [ 585.289326][ T30] ? rcu_is_watching+0x15/0xb0 [ 585.294103][ T30] ? __pfx_do_exit+0x10/0x10 [ 585.298718][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 585.304096][ T30] ? __pfx_lock_release+0x10/0x10 [ 585.309133][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 585.315477][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 585.320614][ T30] do_group_exit+0x207/0x2c0 [ 585.325223][ T30] get_signal+0x16a1/0x1740 [ 585.329745][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 585.334793][ T30] ? __pfx_get_signal+0x10/0x10 [ 585.482911][ T30] arch_do_signal_or_restart+0x96/0x860 [ 585.488520][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 585.494709][ T30] ? rcu_is_watching+0x15/0xb0 [ 585.499590][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 585.505153][ T30] do_syscall_64+0x100/0x230 [ 585.509755][ T30] ? clear_bhb_loop+0x35/0x90 [ 585.514453][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.520373][ T30] RIP: 0033:0x7ff3183757db [ 585.524802][ T30] RSP: 002b:00007ff31906cf20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.533234][ T30] RAX: 0000000000000012 RBX: 000000000000000c RCX: 00007ff3183757db [ 585.541224][ T30] RDX: 00007ff31906cfe0 RSI: 0000000040085503 RDI: 000000000000000c [ 585.549353][ T30] RBP: 00007ff31906dff0 R08: 0000000000000080 R09: 00007ff31906cfe8 [ 585.557353][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 585.565388][ T30] R13: 0000000800000000 R14: 0000000000000012 R15: 00007ff3183ecaf2 [ 585.573392][ T30] [ 585.576465][ T30] INFO: task syz.3.2291:12699 blocked for more than 144 seconds. [ 585.776450][ T30] Not tainted 6.10.0-rc7-next-20240709-syzkaller #0 [ 585.783594][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 585.792763][ T30] task:syz.3.2291 state:D stack:23600 pid:12699 tgid:12692 ppid:12332 flags:0x00004006 [ 585.802963][ T30] Call Trace: [ 585.806255][ T30] [ 585.809199][ T30] __schedule+0x1800/0x4a60 [ 585.813710][ T30] ? schedule+0x90/0x320 [ 585.817985][ T30] ? schedule+0x90/0x320 [ 585.822238][ T30] ? lock_release+0xbf/0x9f0 [ 585.826848][ T30] ? __pfx___schedule+0x10/0x10 [ 585.831709][ T30] ? __pfx_lock_release+0x10/0x10 [ 585.836744][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 585.842220][ T30] ? schedule+0x90/0x320 [ 585.846476][ T30] schedule+0x14b/0x320 [ 585.850742][ T30] schedule_preempt_disabled+0x13/0x30 [ 585.856221][ T30] __mutex_lock+0x6a4/0xd70 [ 585.860745][ T30] ? __mutex_lock+0x527/0xd70 [ 585.865438][ T30] ? nfc_rfkill_set_block+0x50/0x310 [ 585.870736][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 586.286441][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 586.292402][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 586.316428][ T30] nfc_rfkill_set_block+0x50/0x310 [ 586.321596][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 586.336602][ T30] rfkill_set_block+0x1f1/0x440 [ 586.341601][ T30] rfkill_fop_write+0x5bb/0x790 [ 586.362816][ T30] ? common_file_perm+0x1a6/0x210 [ 586.376514][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 586.381929][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 586.396711][ T30] ? rw_verify_area+0x1d2/0x6b0 [ 586.401582][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 586.419583][ T30] vfs_write+0x2a2/0xc90 [ 586.423864][ T30] ? __pfx_vfs_write+0x10/0x10 [ 586.436745][ T30] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 586.442675][ T30] ? __fget_files+0x29/0x470 [ 586.466415][ T30] ? __fget_files+0x3f6/0x470 [ 586.471130][ T30] ? __fget_files+0x29/0x470 [ 586.475729][ T30] ksys_write+0x1a0/0x2c0 [ 586.536451][ T30] ? __pfx_bpf_trace_run2+0x10/0x10 [ 586.541734][ T30] ? __pfx_ksys_write+0x10/0x10 [ 586.556750][ T30] ? rcu_is_watching+0x15/0xb0 [ 586.561633][ T30] ? trace_sys_enter+0x1f/0xd0 [ 586.577002][ T30] do_syscall_64+0xf3/0x230 [ 586.581548][ T30] ? clear_bhb_loop+0x35/0x90 [ 586.586240][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.616430][ T30] RIP: 0033:0x7fef48375bd9 [ 586.620894][ T30] RSP: 002b:00007fef49155048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 586.636754][ T30] RAX: ffffffffffffffda RBX: 00007fef48504110 RCX: 00007fef48375bd9 [ 586.644753][ T30] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000005 [ 586.676558][ T30] RBP: 00007fef483e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 586.684567][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.790062][ T30] R13: 000000000000006e R14: 00007fef48504110 R15: 00007ffe9994c5f8 [ 586.807017][ T30] [ 586.810101][ T30] INFO: lockdep is turned off. [ 586.814873][ T30] NMI backtrace for cpu 0 [ 586.819211][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-next-20240709-syzkaller #0 [ 586.829217][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 586.839283][ T30] Call Trace: [ 586.842566][ T30] [ 586.845501][ T30] dump_stack_lvl+0x241/0x360 [ 586.850196][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.855408][ T30] ? __pfx__printk+0x10/0x10 [ 586.860008][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 586.865044][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 586.870014][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 586.875488][ T30] ? _printk+0xd5/0x120 [ 586.879655][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 586.885647][ T30] ? __pfx__printk+0x10/0x10 [ 586.890257][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 586.896246][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 586.902319][ T30] watchdog+0xfee/0x1030 [ 586.906572][ T30] ? watchdog+0x1ea/0x1030 [ 586.911003][ T30] ? __pfx_watchdog+0x10/0x10 [ 586.915769][ T30] kthread+0x2f0/0x390 [ 586.919843][ T30] ? __pfx_watchdog+0x10/0x10 [ 586.924527][ T30] ? __pfx_kthread+0x10/0x10 [ 586.929204][ T30] ret_from_fork+0x4b/0x80 [ 586.933628][ T30] ? __pfx_kthread+0x10/0x10 [ 586.938218][ T30] ret_from_fork_asm+0x1a/0x30 [ 586.942999][ T30] [ 586.946934][ T30] Sending NMI from CPU 0 to CPUs 1: [ 586.952158][ C1] NMI backtrace for cpu 1 [ 586.952171][ C1] CPU: 1 UID: 0 PID: 4556 Comm: udevd Not tainted 6.10.0-rc7-next-20240709-syzkaller #0 [ 586.952190][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 586.952201][ C1] RIP: 0010:rcu_is_watching+0x55/0xb0 [ 586.952228][ C1] Code: ea de 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 0c b5 80 00 48 c7 c3 98 7c 03 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 22 8b 03 65 ff 0d 11 2c 8a 7e 74 10 83 e0 [ 586.952242][ C1] RSP: 0018:ffffc90000a188e0 EFLAGS: 00000806 [ 586.952257][ C1] RAX: 1ffff110172a6f93 RBX: ffff8880b9537c98 RCX: ffffffff816f8b40 [ 586.952270][ C1] RDX: 0000000000000000 RSI: ffffffff8c209860 RDI: ffffffff8c209820 [ 586.952282][ C1] RBP: ffffc90000a18a30 R08: ffffffff8fafd2af R09: 1ffffffff1f5fa55 [ 586.952295][ C1] R10: dffffc0000000000 R11: fffffbfff1f5fa56 R12: 1ffff9200014312c [ 586.952308][ C1] R13: ffffffff84b788d0 R14: ffffffff8ddeea48 R15: dffffc0000000000 [ 586.952321][ C1] FS: 00007fc1db512c80(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 586.952335][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 586.952347][ C1] CR2: 000055d864ac6058 CR3: 0000000078e84000 CR4: 00000000003506f0 [ 586.952361][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 586.952372][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 586.952383][ C1] Call Trace: [ 586.952389][ C1] [ 586.952396][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 586.952420][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 586.952443][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 586.952474][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 586.952499][ C1] ? nmi_handle+0x14f/0x5a0 [ 586.952515][ C1] ? nmi_handle+0x2a/0x5a0 [ 586.952530][ C1] ? rcu_is_watching+0x55/0xb0 [ 586.952552][ C1] ? default_do_nmi+0x63/0x160 [ 586.952576][ C1] ? exc_nmi+0x123/0x1f0 [ 586.952598][ C1] ? end_repeat_nmi+0xf/0x53 [ 586.952613][ C1] ? debug_objects_fill_pool+0x80/0x9b0 [ 586.952634][ C1] ? lock_release+0xb0/0x9f0 [ 586.952655][ C1] ? rcu_is_watching+0x55/0xb0 [ 586.952677][ C1] ? rcu_is_watching+0x55/0xb0 [ 586.952701][ C1] ? rcu_is_watching+0x55/0xb0 [ 586.952723][ C1] [ 586.952728][ C1] [ 586.952735][ C1] lock_release+0xbf/0x9f0 [ 586.952756][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 586.952775][ C1] ? kasan_save_stack+0x4f/0x60 [ 586.952792][ C1] ? kasan_save_stack+0x3f/0x60 [ 586.952809][ C1] ? __kasan_record_aux_stack+0xac/0xc0 [ 586.952831][ C1] ? task_work_add+0x8b/0x3a0 [ 586.952845][ C1] ? sched_tick+0x322/0x610 [ 586.952860][ C1] ? __pfx_lock_release+0x10/0x10 [ 586.952879][ C1] ? hrtimer_interrupt+0x396/0x990 [ 586.952897][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 586.952920][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 586.952937][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 586.952953][ C1] ? unwind_next_frame+0xfbd/0x2a00 [ 586.952976][ C1] ? arch_stack_walk+0x151/0x1b0 [ 586.952990][ C1] ? stack_trace_save+0x118/0x1d0 [ 586.953013][ C1] ? debug_objects_fill_pool+0x80/0x9b0 [ 586.953030][ C1] ? debug_objects_fill_pool+0x80/0x9b0 [ 586.953048][ C1] debug_objects_fill_pool+0xc0/0x9b0 [ 586.953067][ C1] ? lock_release+0xbf/0x9f0 [ 586.953090][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 586.953108][ C1] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 586.953128][ C1] ? rcu_is_watching+0x15/0xb0 [ 586.953150][ C1] ? lock_acquire+0xe3/0x550 [ 586.953170][ C1] ? advance_sched+0xa02/0xca0 [ 586.953197][ C1] debug_object_activate+0x135/0x510 [ 586.953216][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 586.953234][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 586.953251][ C1] ? advance_sched+0xa02/0xca0 [ 586.953276][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 586.953299][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 586.953323][ C1] enqueue_hrtimer+0x30/0x3c0 [ 586.953344][ C1] __hrtimer_run_queues+0x6cb/0xd50 [ 586.953362][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 586.953393][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 586.953412][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 586.953438][ C1] hrtimer_interrupt+0x396/0x990 [ 586.953467][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 586.953496][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 586.953515][ C1] [ 586.953520][ C1] [ 586.953526][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 586.953542][ C1] RIP: 0010:unwind_next_frame+0xfbd/0x2a00 [ 586.953566][ C1] Code: 52 00 48 83 c5 38 48 89 ef e8 ef 27 00 00 48 89 c6 4c 8b 64 24 28 48 89 74 24 10 49 8d 6c 24 01 48 8b 44 24 38 42 0f b6 04 28 <84> c0 0f 85 20 13 00 00 48 89 e8 48 c1 e8 03 48 89 44 24 78 42 0f [ 586.953579][ C1] RSP: 0018:ffffc9000367f7c8 EFLAGS: 00000282 [ 586.953592][ C1] RAX: 0000000000000000 RBX: ffffffff90d4c88b RCX: ffff88807986da00 [ 586.953604][ C1] RDX: ffffffff90d4c88a RSI: ffffc9000367ff58 RDI: 0000000000000005 [ 586.953615][ C1] RBP: ffffffff90d4c88f R08: 0000000000000005 R09: ffffffff8140ff0e [ 586.953627][ C1] R10: 0000000000000008 R11: ffff88807986da00 R12: ffffffff90d4c88e [ 586.953638][ C1] R13: dffffc0000000000 R14: ffffc9000367f8f0 R15: 1ffff920006cff14 [ 586.953653][ C1] ? unwind_next_frame+0x7be/0x2a00 [ 586.953680][ C1] ? unwind_next_frame+0x8d6/0x2a00 [ 586.953706][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.953730][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.953753][ C1] ? __kernel_text_address+0xd/0x40 [ 586.953768][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.953791][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 586.953812][ C1] arch_stack_walk+0x151/0x1b0 [ 586.953830][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.953856][ C1] stack_trace_save+0x118/0x1d0 [ 586.953877][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 586.953895][ C1] ? lock_release+0xbf/0x9f0 [ 586.953918][ C1] ? __pfx_lock_release+0x10/0x10 [ 586.953937][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 586.953956][ C1] kasan_save_track+0x3f/0x80 [ 586.953972][ C1] ? kasan_save_track+0x3f/0x80 [ 586.953988][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 586.954006][ C1] ? kmem_cache_alloc_lru_noprof+0x139/0x2b0 [ 586.954030][ C1] ? __d_alloc+0x31/0x700 [ 586.954051][ C1] ? d_alloc+0x4b/0x190 [ 586.954070][ C1] ? lookup_one_qstr_excl+0xce/0x260 [ 586.954092][ C1] ? do_unlinkat+0x297/0x830 [ 586.954107][ C1] ? __x64_sys_unlink+0x47/0x50 [ 586.954123][ C1] ? do_syscall_64+0xf3/0x230 [ 586.954142][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.954187][ C1] __kasan_slab_alloc+0x66/0x80 [ 586.954205][ C1] ? __d_alloc+0x31/0x700 [ 586.954226][ C1] kmem_cache_alloc_lru_noprof+0x139/0x2b0 [ 586.954252][ C1] __d_alloc+0x31/0x700 [ 586.954273][ C1] ? __down_write_common+0x162/0x200 [ 586.954292][ C1] d_alloc+0x4b/0x190 [ 586.954314][ C1] lookup_one_qstr_excl+0xce/0x260 [ 586.954338][ C1] do_unlinkat+0x297/0x830 [ 586.954360][ C1] ? __pfx_do_unlinkat+0x10/0x10 [ 586.954376][ C1] ? __check_object_size+0x49c/0x900 [ 586.954402][ C1] ? getname_flags+0x1e3/0x540 [ 586.954424][ C1] __x64_sys_unlink+0x47/0x50 [ 586.954441][ C1] do_syscall_64+0xf3/0x230 [ 586.954461][ C1] ? clear_bhb_loop+0x35/0x90 [ 586.954477][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.954508][ C1] RIP: 0033:0x7fc1db117da7 [ 586.954522][ C1] Code: f0 ff ff 73 01 c3 48 8b 0d 7e 90 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 51 90 0d 00 f7 d8 64 89 01 48 [ 586.954535][ C1] RSP: 002b:00007fff0b505438 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 586.954550][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc1db117da7 [ 586.954562][ C1] RDX: 0000000000000080 RSI: 00007fff0b505628 RDI: 000055bb17c4d0d8 [ 586.954573][ C1] RBP: 000000000000000b R08: 0000000022fa7f2b R09: 7fffffffffffffff [ 586.954584][ C1] R10: 00007fc1db6190b8 R11: 0000000000000202 R12: 0000000000000bb8 [ 586.954595][ C1] R13: 0000000200000001 R14: 0000000000000001 R15: 0000000000000000 [ 586.954613][ C1] [ 587.959121][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 587.966017][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-next-20240709-syzkaller #0 [ 587.976005][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 587.986069][ T30] Call Trace: [ 587.989350][ T30] [ 587.992284][ T30] dump_stack_lvl+0x241/0x360 [ 587.996979][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.002182][ T30] ? __pfx__printk+0x10/0x10 [ 588.006775][ T30] ? vscnprintf+0x5d/0x90 [ 588.011113][ T30] panic+0x349/0x870 [ 588.015013][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 588.021188][ T30] ? __pfx_panic+0x10/0x10 [ 588.025616][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 588.031000][ T30] ? __irq_work_queue_local+0x137/0x410 [ 588.036563][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 588.041942][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 588.048110][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 588.054275][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 588.060441][ T30] watchdog+0x102d/0x1030 [ 588.064778][ T30] ? watchdog+0x1ea/0x1030 [ 588.069204][ T30] ? __pfx_watchdog+0x10/0x10 [ 588.073886][ T30] kthread+0x2f0/0x390 [ 588.077964][ T30] ? __pfx_watchdog+0x10/0x10 [ 588.082661][ T30] ? __pfx_kthread+0x10/0x10 [ 588.087274][ T30] ret_from_fork+0x4b/0x80 [ 588.091793][ T30] ? __pfx_kthread+0x10/0x10 [ 588.096394][ T30] ret_from_fork_asm+0x1a/0x30 [ 588.101182][ T30] [ 588.107876][ T30] Kernel Offset: disabled [ 588.112185][ T30] Rebooting in 86400 seconds..