last executing test programs: 4m58.305647951s ago: executing program 1 (id=1677): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r4 = dup(r3) ioctl$GIO_UNISCRNMAP(r4, 0x43403d0e, &(0x7f0000000080)=""/96) 4m56.887634855s ago: executing program 1 (id=1684): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'c6xdigio\x00', [0x109, 0x80008000, 0x86c, 0xa, 0x0, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x1, 0x1138fce9, 0x6, 0xffffffa7, 0x2000001, 0xfffffffd, 0x65c, 0x3ff, 0x10004, 0x800, 0xe2df, 0x9, 0x6, 0x4, 0x3, 0x7, 0x5, 0x5]}) mmap(&(0x7f0000b8c000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0xfae76000) 4m56.467733292s ago: executing program 1 (id=1686): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x493, &(0x7f00000000c0)={0x0, 0x7750, 0x80, 0x4, 0x1001e3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB="184c3a5d", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r7 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x4, 0x10100, 0x0, 0x2000000}, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000000700)=0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_io_uring_submit(r8, 0x0, 0x0) io_uring_enter(r7, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 4m53.989844643s ago: executing program 1 (id=1694): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x7fff, 0x3}, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) 4m53.201734436s ago: executing program 1 (id=1696): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) syz_open_dev$dri(&(0x7f0000000740), 0x7, 0x58d083) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x37, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x69, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r8, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) io_uring_enter(r4, 0x46f3, 0x0, 0x0, 0x0, 0x0) 4m51.909634667s ago: executing program 1 (id=1698): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000000)={'vxcan1\x00', 0x96}) 4m36.809712746s ago: executing program 32 (id=1698): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000000)={'vxcan1\x00', 0x96}) 9.239449037s ago: executing program 2 (id=2594): io_uring_setup(0x756c, &(0x7f0000000140)={0x0, 0x49fb, 0x2, 0x20000005, 0x185}) socket(0xa, 0x5, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000000000000000000000e00000018000000000000001001000001"], 0x28}, 0x0) 8.992247692s ago: executing program 2 (id=2595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000001540)=0x8, 0x12) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) accept4(r3, &(0x7f0000000280)=@l2, &(0x7f00000001c0)=0xfffffffffffffe88, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 8.896965333s ago: executing program 4 (id=2596): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 8.027066857s ago: executing program 2 (id=2600): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @enter_looper], 0x0, 0x0, 0x0}) 7.85780808s ago: executing program 4 (id=2601): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x9, 0x6, 0x8}) fstat(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x3, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffe, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}}}}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002740)=ANY=[], 0x100}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0x5, 0xf7af, 0x8000, 0x8, 0x0, "4cb8b210acdc716f64cf76062d59a56f2584c4"}) 6.121867939s ago: executing program 4 (id=2604): io_uring_setup(0x756c, &(0x7f0000000140)={0x0, 0x49fb, 0x2, 0x20000005, 0x185}) socket(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000000000000000000000e00000018000000000000001001000001"], 0x28}, 0x0) 6.090476719s ago: executing program 2 (id=2606): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.937899782s ago: executing program 2 (id=2607): r0 = socket$kcm(0x10, 0x2, 0x10) creat(&(0x7f00000016c0)='./file0\x00', 0x40) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b4550182108307584b39e3c"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) ioctl$HIDIOCGSTRING(r2, 0x81044804, 0x0) 5.937616242s ago: executing program 4 (id=2608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000001540)=0x8, 0x12) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) accept4(r3, &(0x7f0000000280)=@l2, &(0x7f00000001c0)=0xfffffffffffffe88, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 5.047386086s ago: executing program 4 (id=2611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x31008003, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) dup3(0xffffffffffffffff, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x85402, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x12, r6, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) 3.921288865s ago: executing program 3 (id=2612): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x9, 0x6, 0x8}) fstat(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x3, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffe, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}}}}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002740)=ANY=[], 0x100}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0x5, 0xf7af, 0x8000, 0x8, 0x0, "4cb8b210acdc716f64cf76062d59a56f2584c4"}) 3.361099754s ago: executing program 0 (id=2613): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 3.232987536s ago: executing program 3 (id=2614): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @enter_looper], 0x0, 0x0, 0x0}) 3.105866348s ago: executing program 0 (id=2615): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.070159419s ago: executing program 3 (id=2616): io_uring_setup(0x756c, &(0x7f0000000140)={0x0, 0x49fb, 0x2, 0x20000005, 0x185}) socket(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000000000000000000000e00000018000000000000001001000001"], 0x28}, 0x0) 2.97838021s ago: executing program 0 (id=2617): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x0, 0x0}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2.874875212s ago: executing program 3 (id=2618): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r1}, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r2, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x85402, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x12, r3, 0x0) 2.823091163s ago: executing program 2 (id=2619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000001540)=0x8, 0x12) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) accept4(r4, &(0x7f0000000280)=@l2, &(0x7f00000001c0)=0xfffffffffffffe88, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 2.082660995s ago: executing program 0 (id=2620): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 1.837676369s ago: executing program 3 (id=2621): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x0, 0x0}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x200}, &(0x7f0000000280)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x2200000c) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000003c0)={'team0\x00', &(0x7f0000000340)=@ethtool_coalesce={0x1, 0x40000002, 0x0, 0xfffffffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, 0x40, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x4, 0x8000}}) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "6d3cbbb62532c269dca454cb53b94ab848259001ac948c5fdb400a57c261c2288359c48f8d9c550fcf34d669d822bc6192565eb908c0134e07f3dd890ca33531", 0x40}, 0xfffffffffffffeb6, 0x0) getpid() acct(&(0x7f00000001c0)='./file0\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x0) splice(r3, 0x0, r0, 0x0, 0xe4d4, 0x4) 831.935586ms ago: executing program 0 (id=2622): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x9, 0x6, 0x8}) fstat(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x3, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffe, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}}}}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002740)=ANY=[], 0x100}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0x5, 0xf7af, 0x8000, 0x8, 0x0, "4cb8b210acdc716f64cf76062d59a56f2584c4"}) 110.332928ms ago: executing program 0 (id=2623): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x4, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x0, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x6, 0xe1cc, 0x0, 0xe0000000, 0x3, 0x1ff, 0x80000089, 0xfffffffd, 0x0, 0x20001e56, 0xffffeadb, 0xffffffff, 0x3d, 0x8, 0x4, 0x7ff, 0xdffffffa]}) 86.696688ms ago: executing program 3 (id=2624): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @enter_looper], 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=2625): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): cmda12 driver are: [ 815.385313][T12110] pcmda12 [ 815.405156][T12110] comedi: valid board names for pcmad driver are: [ 815.436971][T12110] pcmad12 [ 815.440663][T12110] pcmad16 [ 815.443749][T12110] comedi: valid board names for ni_labpc driver are: [ 815.450536][T12110] lab-pc-1200 [ 815.453949][T12110] lab-pc-1200ai [ 815.457532][T12110] lab-pc+ [ 815.460674][T12110] comedi: valid board names for atmio16 driver are: [ 815.467397][T12110] atmio16 [ 815.471985][ T55] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 815.478367][T12110] atmio16d [ 815.483257][T12110] comedi: valid board names for ni_at_ao driver are: [ 815.494510][T12110] at-ao-6 [ 815.497611][T12110] at-ao-10 [ 815.501794][T12110] comedi: valid board names for ni_at_a2150 driver are: [ 815.509965][T12110] ni_at_a2150 [ 815.513476][T12110] comedi: valid board names for adq12b driver are: [ 815.580192][T12110] adq12b [ 815.585314][T12110] comedi: valid board names for mpc624 driver are: [ 815.611823][T12110] mpc624 [ 815.620373][T12110] comedi: valid board names for c6xdigio driver are: [ 815.639171][T12110] c6xdigio [ 815.756402][T12110] comedi: valid board names for aio_iiro_16 driver are: [ 815.843589][T12110] aio_iiro_16 [ 815.865706][T12110] comedi: valid board names for aio_aio12_8 driver are: [ 815.914256][T12110] aio_aio12_8 [ 815.974511][T12110] aio_ai12_8 [ 816.007604][T12110] aio_ao12_4 [ 816.338178][T12110] comedi: valid board names for fl512 driver are: [ 816.355080][T12110] fl512 [ 816.365287][T12110] comedi: valid board names for dmm32at driver are: [ 816.387968][T12110] dmm32at [ 816.391107][T12110] comedi: valid board names for dt282x driver are: [ 816.404654][T12110] dt2821 [ 816.407679][T12110] dt2821-f [ 816.411453][T12110] dt2821-g [ 816.414822][T12110] dt2823 [ 816.426864][T12110] dt2824-pgh [ 816.435094][T12110] dt2824-pgl [ 816.446912][T12110] dt2825 [ 816.454482][T12110] dt2827 [ 816.477681][T12110] dt2828 [ 816.485675][T12110] dt2829 [ 816.494501][T12110] dt21-ez [ 816.496912][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 816.509881][T12110] dt23-ez [ 816.513824][T12110] dt24-ez [ 816.517247][T12110] dt24-ez-pgl [ 816.521744][T12110] comedi: valid board names for dt2817 driver are: [ 816.529414][T12110] dt2817 [ 816.532607][ T55] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 816.541030][ T55] usb 4-1: config 0 has no interface number 0 [ 816.547462][T12110] comedi: valid board names for dt2815 driver are: [ 816.554697][T12110] dt2815 [ 816.558447][T12110] comedi: valid board names for dt2814 driver are: [ 816.572502][T12110] dt2814 [ 816.575871][T12110] comedi: valid board names for dt2811 driver are: [ 816.583252][T12110] dt2811-pgh [ 816.586865][ T55] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 816.596366][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.605253][T12110] dt2811-pgl [ 816.608816][ T55] usb 4-1: Product: syz [ 816.613935][ T55] usb 4-1: Manufacturer: syz [ 816.619581][T12110] comedi: valid board names for dt2801 driver are: [ 816.626258][T12110] dt2801 [ 816.630095][ T55] usb 4-1: SerialNumber: syz [ 816.636210][T12110] comedi: valid board names for das6402 driver are: [ 816.645559][ T55] usb 4-1: config 0 descriptor?? [ 816.651212][T12110] das6402-12 [ 816.655165][T12110] das6402-16 [ 816.662084][ T55] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 816.673650][T12110] comedi: valid board names for das1800 driver are: [ 816.680867][ T55] usb 4-1: selecting invalid altsetting 1 [ 816.686961][T12110] das-1701st [ 816.692231][ T55] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 816.708040][T12110] das-1701st-da [ 816.718171][T12110] das-1702st [ 816.721648][T12110] das-1702st-da [ 816.740020][T12110] das-1702hr [ 816.756714][T12110] das-1702hr-da [ 816.838403][T12110] das-1701ao [ 816.841881][T12110] das-1702ao [ 816.845220][T12110] das-1801st [ 816.879991][ T55] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 816.898696][ T55] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 816.899133][T12110] das-1801st-da [ 816.907211][ T55] usb 4-1: media controller created [ 816.946019][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 817.046905][ T5102] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 817.783604][T12110] das-1802st [ 817.806834][T12134] program syz.1.1588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 817.818118][T12134] program syz.1.1588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 817.828322][T12134] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 817.860811][T12110] das-1802st-da [ 817.869266][T12110] das-1802hr [ 817.872950][T12110] das-1802hr-da [ 817.876883][T12110] das-1801hc [ 817.882673][T12110] das-1802hc [ 817.890628][T12110] das-1801ao [ 817.894927][T12110] das-1802ao [ 817.901839][T12110] comedi: valid board names for das800 driver are: [ 817.915164][T12110] das-800 [ 817.918889][T12110] cio-das800 [ 817.922446][T12110] das-801 [ 817.937309][T12110] cio-das801 [ 817.945978][T12110] das-802 [ 817.949832][T12110] cio-das802 [ 817.953406][T12110] cio-das802/16 [ 817.957757][T12110] comedi: valid board names for isa-das08 driver are: [ 817.973705][T12110] isa-das08 [ 817.978186][T12117] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 817.987713][T12110] das08-pgm [ 817.993487][T12110] das08-pgh [ 818.008299][T12140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1589'. [ 818.018145][ T55] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 818.025446][ T55] zl10353_read_register: readreg error (reg=127, ret==-71) [ 818.036659][T12110] das08-pgl [ 818.043980][T12110] das08-aoh [ 818.047323][T12110] das08-aol [ 818.052591][T12140] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.061455][T12140] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.068402][T12110] das08-aom [ 818.069825][T12140] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.072951][T12110] das08/jr-ao [ 818.081107][T12140] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 818.089095][T12140] vxlan0: entered promiscuous mode [ 818.096307][ T55] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 818.129808][T12110] das08jr-16-ao [ 818.141558][T12110] pc104-das08 [ 818.145072][T12110] das08jr/16 [ 818.158588][T12110] comedi: valid board names for das16m1 driver are: [ 818.165411][T12110] das16m1 [ 818.181881][T12110] comedi: valid board names for dac02 driver are: [ 818.196524][ T55] usb 4-1: USB disconnect, device number 5 [ 818.202725][T12110] dac02 [ 818.206840][T12110] comedi: valid board names for rti802 driver are: [ 818.215589][T12110] rti802 [ 818.217036][ T6081] udevd[6081]: setting mode of /dev/bus/usb/004/005 to 020664 failed: No such file or directory [ 818.221479][T12110] comedi: valid board names for rti800 driver are: [ 818.236682][T12110] rti800 [ 818.239844][T12110] rti815 [ 818.243300][T12110] comedi: valid board names for pcm3724 driver are: [ 818.250509][T12110] pcm3724 [ 818.253707][T12110] comedi: valid board names for pcl818 driver are: [ 818.286754][T12110] pcl818l [ 818.290228][T12110] pcl818h [ 818.293648][ T6081] udevd[6081]: setting owner of /dev/bus/usb/004/005 to uid=0, gid=0 failed: No such file or directory [ 818.305270][T12110] pcl818hd [ 818.318627][T12110] pcl818hg [ 818.321925][T12110] pcl818 [ 818.324973][T12110] pcl718 [ 818.339650][T12110] pcm3718 [ 818.345175][T12110] comedi: valid board names for pcl816 driver are: [ 818.363295][T12110] pcl816 [ 818.379171][T12110] pcl814b [ 818.382463][T12110] comedi: valid board names for pcl812 driver are: [ 818.399110][T12110] pcl812 [ 818.402278][T12110] pcl812pg [ 818.413615][T12110] acl8112pg [ 818.419743][T12110] acl8112dg [ 818.423156][T12110] acl8112hg [ 818.426529][T12110] a821pgl [ 818.430531][T12110] a821pglnda [ 818.433946][T12110] a821pgh [ 818.437063][T12110] a822pgl [ 818.441383][T12110] a822pgh [ 818.444530][T12110] a823pgl [ 818.454260][T12110] a823pgh [ 818.458077][T12110] pcl813 [ 818.461293][T12110] pcl813b [ 818.464408][T12110] acl8113 [ 818.467476][T12110] iso813 [ 818.472664][T12110] acl8216 [ 818.475820][T12110] a826pg [ 818.479380][T12110] comedi: valid board names for pcl730 driver are: [ 818.486233][T12110] pcl730 [ 818.489456][T12110] iso730 [ 818.492639][T12110] acl7130 [ 818.495762][T12110] pcm3730 [ 818.498959][T12110] pcl725 [ 818.502183][T12110] p8r8dio [ 818.505313][T12110] acl7225b [ 818.508725][T12110] p16r16dio [ 818.513550][T12110] pcl733 [ 818.516613][T12110] pcl734 [ 818.519717][T12110] opmm-1616-xt [ 818.523511][T12110] pearl-mm-p [ 818.526910][T12110] ir104-pbf [ 818.549804][T12110] comedi: valid board names for pcl726 driver are: [ 818.556516][T12110] pcl726 [ 818.562252][T12110] pcl727 [ 818.565328][T12110] pcl728 [ 818.568567][T12110] acl6126 [ 818.571691][T12110] acl6128 [ 818.579946][T12110] comedi: valid board names for pcl724 driver are: [ 818.588431][T12110] pcl724 [ 818.591496][T12110] pcl722 [ 818.594490][T12110] pcl731 [ 818.597473][T12110] acl7122 [ 818.600719][T12110] acl7124 [ 818.604211][T12110] pet48dio [ 818.607482][T12110] pcmio48 [ 818.611091][T12110] onyx-mm-dio [ 818.616322][T12110] comedi: valid board names for pcl711 driver are: [ 818.623211][T12110] pcl711 [ 818.626447][T12110] pcl711b [ 818.629735][T12110] acl8112hg [ 818.633181][T12110] acl8112dg [ 818.636504][T12110] comedi: valid board names for amplc_pc263 driver are: [ 818.643638][T12110] pc263 [ 818.648478][T12110] comedi: valid board names for amplc_pc236 driver are: [ 818.655602][T12110] pc36at [ 818.668106][T12110] comedi: valid board names for amplc_dio200 driver are: [ 818.675371][T12110] pc212e [ 818.688747][T12110] pc214e [ 818.691855][T12110] pc215e [ 818.694903][T12110] pc218e [ 818.699936][T12110] pc272e [ 818.703015][T12110] comedi: valid board names for comedi_parport driver are: [ 818.710521][T12110] comedi_parport [ 818.714514][T12110] comedi: valid board names for comedi_test driver are: [ 818.723804][T12110] comedi_test [ 818.727312][T12110] comedi: valid board names for comedi_bond driver are: [ 818.734566][T12110] comedi_bond [ 820.216763][T12168] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 820.226553][T12168] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 820.239316][T12168] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 820.248705][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 820.248719][ T28] audit: type=1800 audit(1753633422.087:107): pid=12168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1601" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 820.375660][T12168] syz.0.1601 (12168) used greatest stack depth: 19784 bytes left [ 823.477568][T12187] delete_channel: no stack [ 824.347921][ T28] audit: type=1326 audit(1753633426.217:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.1.1613" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb843d8e9a9 code=0x0 [ 825.355389][T12215] netlink: 'syz.1.1617': attribute type 39 has an invalid length. [ 825.880350][T12220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1618'. [ 827.899495][T12247] netlink: set zone limit has 8 unknown bytes [ 828.272221][T12258] tipc: Failed to remove unknown binding: 66,1,1/0:3296317680/3296317682 [ 828.282628][T12258] tipc: Failed to remove unknown binding: 66,1,1/0:3296317680/3296317682 [ 831.572877][ T28] audit: type=1326 audit(1753633433.437:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.1.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb843d8e9a9 code=0x7ffc0000 [ 831.737893][ T28] audit: type=1326 audit(1753633433.437:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.1.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb843d8e9a9 code=0x7ffc0000 [ 832.121856][ T28] audit: type=1326 audit(1753633433.447:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.1.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb843d8d310 code=0x7ffc0000 [ 832.143490][T12303] binder: 12302:12303 ioctl c0306201 0 returned -14 [ 832.501164][ T28] audit: type=1326 audit(1753633433.447:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.1.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb843d901d7 code=0x7ffc0000 [ 833.335616][ T28] audit: type=1326 audit(1753633433.447:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.1.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb843d8e9a9 code=0x7ffc0000 [ 833.412146][ T28] audit: type=1326 audit(1753633433.447:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.1.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb843d901d7 code=0x7ffc0000 [ 833.495125][ T28] audit: type=1326 audit(1753633433.447:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.1.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb843d8d60a code=0x7ffc0000 [ 833.547988][ T28] audit: type=1326 audit(1753633433.447:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.1.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb843d8e9a9 code=0x7ffc0000 [ 833.608770][ T28] audit: type=1326 audit(1753633433.447:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.1.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb843d8e9a9 code=0x7ffc0000 [ 833.637299][ T28] audit: type=1326 audit(1753633433.447:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.1.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb843d8e9a9 code=0x7ffc0000 [ 833.650679][T12319] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 835.886960][T12347] netlink: set zone limit has 8 unknown bytes [ 836.684018][T12350] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 836.720000][T12337] delete_channel: no stack [ 836.910842][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 836.910859][ T28] audit: type=1326 audit(1753633438.777:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12356 comm="syz.2.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 836.997918][ T28] audit: type=1326 audit(1753633438.817:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12356 comm="syz.2.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 837.108457][ T28] audit: type=1326 audit(1753633438.817:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12356 comm="syz.2.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 837.127739][T12363] NILFS (nullb0): couldn't find nilfs on the device [ 837.176658][ T28] audit: type=1326 audit(1753633438.817:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12356 comm="syz.2.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 837.202390][ T28] audit: type=1326 audit(1753633438.817:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12356 comm="syz.2.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 837.249579][ T28] audit: type=1326 audit(1753633438.817:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12356 comm="syz.2.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 837.293928][ T28] audit: type=1326 audit(1753633438.817:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12356 comm="syz.2.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 837.529309][ T787] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 838.187289][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.482912][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.719843][ T787] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 838.812733][ T787] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 838.837980][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.879480][ T787] usb 4-1: config 0 descriptor?? [ 839.360631][ T787] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x3 [ 839.390884][ T787] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 839.519402][ T787] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 839.752442][ T28] audit: type=1326 audit(1753633441.617:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12388 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 839.905503][T12375] cgroup: fork rejected by pids controller in /syz1 [ 840.346339][ T28] audit: type=1326 audit(1753633441.617:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12388 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 840.370981][ T28] audit: type=1326 audit(1753633442.217:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12388 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 840.526227][T12391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.565838][T12391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.705864][ T787] usb 4-1: USB disconnect, device number 6 [ 841.581461][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1686'. [ 841.650020][T12508] bridge0: entered promiscuous mode [ 841.844350][T12515] NILFS (nullb0): couldn't find nilfs on the device [ 843.259282][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 843.259299][ T28] audit: type=1326 audit(1753633445.137:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb843d8e9a9 code=0x7ffc0000 [ 843.287912][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.892789][ T28] audit: type=1326 audit(1753633445.167:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb843d8e9a9 code=0x7ffc0000 [ 843.924423][ T28] audit: type=1326 audit(1753633445.167:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb843d8e9a9 code=0x7ffc0000 [ 843.975469][ T28] audit: type=1326 audit(1753633445.717:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb843d8e9a9 code=0x7ffc0000 [ 844.000828][ T28] audit: type=1326 audit(1753633445.737:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb843d8e9a9 code=0x7ffc0000 [ 844.029201][T11537] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 844.036885][ T28] audit: type=1326 audit(1753633445.737:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb843d8e9a9 code=0x7ffc0000 [ 844.116408][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1691'. [ 844.178129][ T28] audit: type=1326 audit(1753633445.737:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb843d8e9a9 code=0x7ffc0000 [ 844.210164][ T28] audit: type=1326 audit(1753633445.737:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb843d8e9a9 code=0x7ffc0000 [ 844.244090][ T28] audit: type=1326 audit(1753633445.737:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb843d8e9a9 code=0x7ffc0000 [ 844.296120][T11537] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 844.323755][T11537] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.342882][T11537] usb 3-1: Product: syz [ 844.347284][T11537] usb 3-1: Manufacturer: syz [ 844.352555][T11537] usb 3-1: SerialNumber: syz [ 844.434464][T11537] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 844.599873][ T55] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 845.406280][T12543] xt_hashlimit: size too large, truncated to 1048576 [ 845.468389][T12544] : renamed from vxcan1 (while UP) [ 845.790785][ T5801] usb 3-1: USB disconnect, device number 4 [ 845.827696][ T55] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 845.843561][ T55] ath9k_htc: Failed to initialize the device [ 845.868179][ T5801] usb 3-1: ath9k_htc: USB layer deinitialized [ 846.780924][T12557] NILFS (nullb0): couldn't find nilfs on the device [ 850.619364][T12589] syz.2.1714 uses obsolete (PF_INET,SOCK_PACKET) [ 852.367955][ T5894] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 852.626377][ T5894] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 852.678822][ T5894] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 852.736324][ T5894] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 852.802183][ T5894] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 852.914353][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.095282][ T5894] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 853.872869][T12597] delete_channel: no stack [ 854.025567][ T5894] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 854.115115][ T5894] usb 1-1: USB disconnect, device number 5 [ 859.669766][ T28] audit: type=1326 audit(1753633461.517:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 859.694636][ T28] audit: type=1326 audit(1753633461.517:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 859.718696][ T28] audit: type=1326 audit(1753633461.517:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb84cb8d310 code=0x7ffc0000 [ 859.742220][ T28] audit: type=1326 audit(1753633461.527:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb84cb901d7 code=0x7ffc0000 [ 859.788028][ T28] audit: type=1326 audit(1753633461.527:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 859.869709][ T28] audit: type=1326 audit(1753633461.527:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb84cb901d7 code=0x7ffc0000 [ 859.987971][ T28] audit: type=1326 audit(1753633461.527:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb84cb8d60a code=0x7ffc0000 [ 860.097919][ T28] audit: type=1326 audit(1753633461.527:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 860.178032][ T28] audit: type=1326 audit(1753633461.527:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 860.307922][ T28] audit: type=1326 audit(1753633461.527:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.2.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 862.312303][T12115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 862.323165][T12115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 862.331870][T12115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 862.343386][T12115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 862.351893][T12115] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 862.359440][T12115] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 864.462093][T12115] Bluetooth: hci4: command tx timeout [ 864.514514][T12675] chnl_net:caif_netlink_parms(): no params data found [ 864.931259][T12675] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.939167][T12675] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.946809][T12675] bridge_slave_0: entered allmulticast mode [ 864.955911][T12675] bridge_slave_0: entered promiscuous mode [ 864.964852][T12675] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.974108][T12675] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.982231][T12675] bridge_slave_1: entered allmulticast mode [ 864.999362][T12675] bridge_slave_1: entered promiscuous mode [ 865.037662][T12675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.052545][T12675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.138150][T11537] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 865.152401][T12675] team0: Port device team_slave_0 added [ 865.204410][T12675] team0: Port device team_slave_1 added [ 865.298351][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.390238][T12675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.409177][T12675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.491418][T12675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.521620][T12675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.529573][T12675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.891322][T12675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.173260][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.338717][T11537] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.350766][T11537] usb 4-1: config 0 interface 0 has no altsetting 0 [ 866.381197][T11537] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 866.390931][T11537] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.399225][T11537] usb 4-1: Product: syz [ 866.403518][T11537] usb 4-1: Manufacturer: syz [ 866.409837][T11537] usb 4-1: SerialNumber: syz [ 866.429087][T11537] usb 4-1: config 0 descriptor?? [ 866.445350][T11537] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 866.479307][T11537] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 866.496676][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.497293][T11537] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 866.530633][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1760'. [ 866.546823][T12115] Bluetooth: hci4: command tx timeout [ 866.555591][T11537] usb 4-1: media controller created [ 866.587210][T11537] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 866.596350][T12675] hsr_slave_0: entered promiscuous mode [ 866.614834][T12675] hsr_slave_1: entered promiscuous mode [ 866.621927][T12675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 866.640315][T12675] Cannot create hsr debugfs directory [ 866.752533][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.775822][T11537] DVB: Unable to find symbol tda10046_attach() [ 866.795187][T11537] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 866.812936][T11537] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 866.828027][ T787] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 867.030872][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.060594][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.078146][ T787] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 867.096885][ T787] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 867.110775][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.148335][ T787] usb 1-1: config 0 descriptor?? [ 867.205609][T11537] dvb_usb_m920x: probe of 4-1:0.0 failed with error -71 [ 867.257225][T11537] usb 4-1: USB disconnect, device number 7 [ 867.601673][ T787] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x3 [ 867.632385][ T787] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 867.644416][T12675] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 867.680007][T12675] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 867.699053][ T787] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 867.784896][T12675] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 867.829019][T12675] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 867.882582][ T8] usb 1-1: USB disconnect, device number 6 [ 868.638199][T12115] Bluetooth: hci4: command tx timeout [ 869.280539][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1770'. [ 869.502794][ T12] IPVS: stopping backup sync thread 6506 ... [ 869.812677][T12675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.902842][T12675] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.969759][ T6113] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.977148][ T6113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.069474][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 870.069486][ T28] audit: type=1326 audit(1753633471.947:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f73b8e9a9 code=0x7ffc0000 [ 870.197185][ T28] audit: type=1326 audit(1753633471.987:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f73b8d310 code=0x7ffc0000 [ 870.199375][ T6113] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.227388][ T6113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.255733][ T28] audit: type=1326 audit(1753633471.987:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7f73b901d7 code=0x7ffc0000 [ 870.438957][ T28] audit: type=1326 audit(1753633471.987:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f73b8e9a9 code=0x7ffc0000 [ 870.534699][ T28] audit: type=1326 audit(1753633471.987:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7f73b901d7 code=0x7ffc0000 [ 870.567302][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.573791][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.647940][ T28] audit: type=1326 audit(1753633471.987:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7f73b8d60a code=0x7ffc0000 [ 870.708702][T12115] Bluetooth: hci4: command tx timeout [ 870.711281][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1780'. [ 870.723545][ T28] audit: type=1326 audit(1753633471.987:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f73b8e9a9 code=0x7ffc0000 [ 870.779194][ T28] audit: type=1326 audit(1753633471.987:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7f73b8e9a9 code=0x7ffc0000 [ 870.895369][ T28] audit: type=1326 audit(1753633471.987:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f73b8e9a9 code=0x7ffc0000 [ 870.965000][ T28] audit: type=1326 audit(1753633471.987:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f73b8e9a9 code=0x7ffc0000 [ 871.290179][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.318248][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.341298][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.399433][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.413863][ T12] bridge_slave_1: left allmulticast mode [ 871.420737][ T12] bridge_slave_1: left promiscuous mode [ 871.429239][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.446081][ T12] bridge_slave_0: left allmulticast mode [ 871.454022][ T12] bridge_slave_0: left promiscuous mode [ 871.463982][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.534317][ T12] bridge0: left promiscuous mode [ 871.550723][ T12] veth1_macvtap: left promiscuous mode [ 871.570348][ T12] veth0_macvtap: left promiscuous mode [ 871.600613][ T12] veth1_vlan: left promiscuous mode [ 871.606493][ T12] veth0_vlan: left promiscuous mode [ 872.548020][ T12] bond1 (unregistering): Released all slaves [ 873.781756][ T12] team0 (unregistering): Port device team_slave_1 removed [ 873.846475][ T12] team0 (unregistering): Port device team_slave_0 removed [ 873.907629][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.967161][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.036673][T12867] 9pnet_fd: Insufficient options for proto=fd [ 875.616233][ T12] bond0 (unregistering): Released all slaves [ 876.086380][T12882] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 877.075381][T12675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.652914][T12903] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 877.659534][T12903] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 877.667910][T12903] vhci_hcd vhci_hcd.0: Device attached [ 877.871628][T12904] vhci_hcd: connection closed [ 877.874249][ T6113] vhci_hcd: stop threads [ 877.883683][ T6113] vhci_hcd: release socket [ 877.906602][ T6113] vhci_hcd: disconnect device [ 878.167991][ T787] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 878.373743][ T787] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 878.448924][ T787] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 878.494848][T12675] veth0_vlan: entered promiscuous mode [ 878.510303][ T787] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 878.583095][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.598039][T12675] veth1_vlan: entered promiscuous mode [ 878.628433][ T787] usb 1-1: config 0 descriptor?? [ 878.659913][ T787] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 878.754937][T12675] veth0_macvtap: entered promiscuous mode [ 878.842320][T12675] veth1_macvtap: entered promiscuous mode [ 878.920524][T12675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.937156][T12675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.948972][T12675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.960511][T12675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.970977][T12675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.982559][T12675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.995582][T12675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.023623][T12675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.049799][T12675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.061418][T12675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.073883][T12675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.094437][T12675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.110859][T12675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.123121][T12675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 879.160920][T12675] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.178160][T12675] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.197277][T12675] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.217552][T12675] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.411749][T12943] o2cb: This node has not been configured. [ 879.417723][T12943] o2cb: Cluster check failed. Fix errors before retrying. [ 879.425835][T12943] (syz.3.1813,12943,1):user_dlm_register:674 ERROR: status = -22 [ 879.433745][T12943] (syz.3.1813,12943,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 879.505427][ T6352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.526413][ T6352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.597489][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.617433][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.874262][T12956] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 880.067294][T12962] overlayfs: failed to resolve './file0': -2 [ 880.258056][T11537] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 880.471541][T11537] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 880.495300][T11537] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 880.507589][T12972] o2cb: This node has not been configured. [ 880.513786][T12972] o2cb: Cluster check failed. Fix errors before retrying. [ 880.521099][T12972] (syz.4.1822,12972,1):user_dlm_register:674 ERROR: status = -22 [ 880.529098][T12972] (syz.4.1822,12972,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 880.570778][T11537] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 880.582628][T11537] usb 4-1: config 0 has no interface number 0 [ 880.589854][T11537] usb 4-1: config 0 has no interface number 1 [ 880.596346][T11537] usb 4-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 880.608587][T11537] usb 4-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 880.622378][T11537] usb 4-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 880.634391][T11537] usb 4-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 880.645985][T11537] usb 4-1: config 0 interface 66 altsetting 153 has an invalid endpoint with address 0x12, skipping [ 880.666081][T11537] usb 4-1: config 0 interface 66 altsetting 153 has an invalid endpoint with address 0xE6, skipping [ 880.682053][T11537] usb 4-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 880.696964][T11537] usb 4-1: config 0 interface 66 has no altsetting 0 [ 880.713398][T11537] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 880.723666][T11537] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.733603][T11537] usb 4-1: Product: syz [ 880.738970][T11537] usb 4-1: Manufacturer: syz [ 880.743727][T11537] usb 4-1: SerialNumber: syz [ 880.751832][T11537] usb 4-1: config 0 descriptor?? [ 880.947717][ T5920] usb 1-1: USB disconnect, device number 7 [ 880.999401][T11537] usb 4-1: USB disconnect, device number 8 [ 882.711131][T13016] o2cb: This node has not been configured. [ 882.717882][T13016] o2cb: Cluster check failed. Fix errors before retrying. [ 882.725271][T13016] (syz.2.1831,13016,1):user_dlm_register:674 ERROR: status = -22 [ 882.733227][T13016] (syz.2.1831,13016,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 885.908134][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 886.279595][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 886.337375][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 886.417158][ T9] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 886.477879][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.510434][ T9] usb 4-1: Product: syz [ 886.534238][ T9] usb 4-1: Manufacturer: syz [ 886.552511][ T9] usb 4-1: SerialNumber: syz [ 886.578818][ T9] usb 4-1: config 0 descriptor?? [ 886.639398][T13080] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 886.671674][T13080] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 886.963162][T13080] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 887.026348][T13080] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 887.952293][ T9] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 888.040796][ T9] usb 4-1: USB disconnect, device number 9 [ 890.083876][T13138] netlink: zone id is out of range [ 892.589630][ T5920] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 892.672300][T13197] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1882'. [ 892.708133][T13197] usb usb8: usbfs: process 13197 (syz.2.1882) did not claim interface 0 before use [ 892.791456][ T5920] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.815262][ T5920] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 892.846643][ T5920] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 892.868408][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 892.882857][ T5920] usb 5-1: SerialNumber: syz [ 893.309173][ T5920] usb 5-1: 0:2 : does not exist [ 893.338085][ T5920] usb 5-1: USB disconnect, device number 2 [ 894.170220][T13213] lo speed is unknown, defaulting to 1000 [ 894.176524][T13213] lo speed is unknown, defaulting to 1000 [ 894.481582][T13213] lo speed is unknown, defaulting to 1000 [ 894.499005][T13213] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 894.523683][T13213] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 894.563061][T13213] lo speed is unknown, defaulting to 1000 [ 894.571541][T13213] lo speed is unknown, defaulting to 1000 [ 894.580120][T13213] lo speed is unknown, defaulting to 1000 [ 894.587323][T13213] lo speed is unknown, defaulting to 1000 [ 894.740453][ T6081] udevd[6081]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 895.552571][T13240] lo speed is unknown, defaulting to 1000 [ 895.985140][T13241] mmap: syz.3.1891 (13241) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 898.118494][ T787] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 898.348221][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 898.368314][ T787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 898.386283][ T787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 898.426759][ T787] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 898.442551][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.461019][ T787] usb 4-1: Product: syz [ 898.474818][ T787] usb 4-1: Manufacturer: syz [ 898.516695][ T787] usb 4-1: SerialNumber: syz [ 899.425260][T13299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1909'. [ 899.560325][ T787] usb 4-1: 0:2 : does not exist [ 899.587163][ T787] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 899.687386][ T787] usb 4-1: USB disconnect, device number 10 [ 899.817588][ T6081] udevd[6081]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 900.686321][T13318] syz.2.1913 (13318): drop_caches: 2 [ 901.280422][T13330] Cannot find add_set index 0 as target [ 908.438713][T13384] netlink: 'syz.4.1932': attribute type 6 has an invalid length. [ 908.446627][T13384] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1932'. [ 912.887367][T13441] o2cb: This node has not been configured. [ 912.920974][T13441] o2cb: Cluster check failed. Fix errors before retrying. [ 912.948260][T13441] (syz.4.1948,13441,0):user_dlm_register:674 ERROR: status = -22 [ 912.958324][T13441] (syz.4.1948,13441,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 914.160736][T13464] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 917.457895][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 917.457911][ T28] audit: type=1326 audit(1753633519.327:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13525 comm="syz.2.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 917.675286][ T28] audit: type=1326 audit(1753633519.337:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13525 comm="syz.2.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 918.415183][ T28] audit: type=1326 audit(1753633519.337:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13525 comm="syz.2.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb84cb8d310 code=0x7ffc0000 [ 918.458134][ T28] audit: type=1326 audit(1753633519.337:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13525 comm="syz.2.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb84cb901d7 code=0x7ffc0000 [ 918.544179][ T28] audit: type=1326 audit(1753633519.337:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13525 comm="syz.2.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 918.567866][ T28] audit: type=1326 audit(1753633519.337:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13525 comm="syz.2.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb84cb901d7 code=0x7ffc0000 [ 918.590697][ T28] audit: type=1326 audit(1753633519.337:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13525 comm="syz.2.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb84cb8d60a code=0x7ffc0000 [ 918.614510][ T28] audit: type=1326 audit(1753633519.337:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13525 comm="syz.2.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 918.645791][ T28] audit: type=1326 audit(1753633519.337:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13525 comm="syz.2.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 918.669592][ T28] audit: type=1326 audit(1753633519.337:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13525 comm="syz.2.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 921.074013][T13567] fuse: Bad value for 'fd' [ 923.265038][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 923.265055][ T28] audit: type=1326 audit(1753633525.137:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13597 comm="syz.2.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 923.343260][T13603] fuse: Bad value for 'fd' [ 923.404362][ T28] audit: type=1326 audit(1753633525.197:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13597 comm="syz.2.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb84cb8d310 code=0x7ffc0000 [ 923.497019][ T28] audit: type=1326 audit(1753633525.197:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13597 comm="syz.2.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb84cb901d7 code=0x7ffc0000 [ 923.542421][ T28] audit: type=1326 audit(1753633525.197:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13597 comm="syz.2.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 923.583198][ T28] audit: type=1326 audit(1753633525.197:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13597 comm="syz.2.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb84cb901d7 code=0x7ffc0000 [ 923.612933][ T28] audit: type=1326 audit(1753633525.197:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13597 comm="syz.2.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb84cb8d60a code=0x7ffc0000 [ 923.644410][ T28] audit: type=1326 audit(1753633525.197:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13597 comm="syz.2.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 923.675447][ T28] audit: type=1326 audit(1753633525.197:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13597 comm="syz.2.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 923.768277][ T28] audit: type=1326 audit(1753633525.197:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13597 comm="syz.2.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 923.865366][ T28] audit: type=1326 audit(1753633525.197:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13597 comm="syz.2.1991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 924.518277][T13636] overlayfs: failed to resolve './file1': -2 [ 925.613700][T13651] fuse: Bad value for 'fd' [ 927.179512][T13680] overlayfs: failed to resolve './file1': -2 [ 929.234270][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 929.234321][ T28] audit: type=1326 audit(1753633531.107:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13688 comm="syz.2.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 929.349657][ T28] audit: type=1326 audit(1753633531.147:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13688 comm="syz.2.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb84cb8d310 code=0x7ffc0000 [ 929.482978][ T28] audit: type=1326 audit(1753633531.147:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13688 comm="syz.2.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb84cb901d7 code=0x7ffc0000 [ 929.555278][ T28] audit: type=1326 audit(1753633531.147:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13688 comm="syz.2.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 929.609607][T13700] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2017'. [ 929.649606][T13700] usb usb8: usbfs: process 13700 (syz.4.2017) did not claim interface 0 before use [ 929.769111][T13707] syz.3.2020: attempt to access beyond end of device [ 929.769111][T13707] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 929.879676][T13707] gfs2: error 10 reading superblock [ 929.897327][ T28] audit: type=1326 audit(1753633531.147:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13688 comm="syz.2.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb84cb901d7 code=0x7ffc0000 [ 930.308154][ T28] audit: type=1326 audit(1753633531.147:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13688 comm="syz.2.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb84cb8d60a code=0x7ffc0000 [ 930.342216][ T28] audit: type=1326 audit(1753633531.147:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13688 comm="syz.2.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 930.452539][ T28] audit: type=1326 audit(1753633531.157:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13688 comm="syz.2.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 930.553293][ T28] audit: type=1326 audit(1753633531.157:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13688 comm="syz.2.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 930.679042][T13715] overlayfs: failed to resolve './file1': -2 [ 930.692710][ T28] audit: type=1326 audit(1753633531.157:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13688 comm="syz.2.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84cb8e9a9 code=0x7ffc0000 [ 932.020975][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.027707][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.317164][T13743] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2031'. [ 934.379404][T13743] usb usb8: usbfs: process 13743 (syz.3.2031) did not claim interface 0 before use [ 934.522789][T13747] o2cb: This node has not been configured. [ 934.548254][T13747] o2cb: Cluster check failed. Fix errors before retrying. [ 934.562316][T13747] (syz.2.2030,13747,0):user_dlm_register:674 ERROR: status = -22 [ 934.571322][T13747] (syz.2.2030,13747,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 935.584803][T13758] netlink: 'syz.3.2033': attribute type 1 has an invalid length. [ 935.592998][T13758] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2033'. [ 936.903220][T13768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2036'. [ 936.917471][T13768] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.926441][T13768] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.693795][T12115] Bluetooth: Unexpected start frame (len 16) [ 939.244546][T13796] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2045'. [ 939.269083][T13796] usb usb8: usbfs: process 13796 (syz.4.2045) did not claim interface 0 before use [ 939.834316][T13806] syz.4.2051: attempt to access beyond end of device [ 939.834316][T13806] nbd4: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 939.848135][T13806] gfs2: error 10 reading superblock [ 942.105441][T13822] fuse: Bad value for 'fd' [ 942.378882][T13830] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2059'. [ 942.424957][T13830] usb usb8: usbfs: process 13830 (syz.3.2059) did not claim interface 0 before use [ 944.875037][T13844] syz.2.2064: attempt to access beyond end of device [ 944.875037][T13844] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 944.888844][T13844] gfs2: error 10 reading superblock [ 945.594653][T13851] overlayfs: failed to resolve './file0': -2 [ 945.654692][T13853] fuse: Bad value for 'fd' [ 945.942257][T13855] binder: 13854:13855 ioctl c0306201 200000000240 returned -11 [ 946.158589][T13864] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 946.173585][T13864] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 947.449508][T13879] overlayfs: missing 'lowerdir' [ 949.114441][T13893] overlayfs: failed to resolve './file0': -2 [ 950.966377][T13914] fuse: Bad value for 'fd' [ 951.198897][T13918] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 951.259732][T13918] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 953.032607][T13939] (null): rxe_set_mtu: Set mtu to 4096 [ 953.049146][T13939] rdma_rxe: rxe_newlink: failed to add lo [ 953.133568][T13939] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 953.377645][T13930] Process accounting resumed [ 953.460815][T13946] veth0_to_team: entered promiscuous mode [ 953.466634][T13946] veth0_to_team: entered allmulticast mode [ 954.326046][T13949] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2100'. [ 955.890050][T13968] overlayfs: failed to resolve './file0': -2 [ 955.968153][T13972] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 955.987400][T13972] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 956.035680][T13974] fuse: Bad value for 'fd' [ 956.546854][T13983] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 958.727427][ T5920] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 958.787443][ T5920] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 959.251331][T14007] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 959.261211][T14007] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 961.002013][T14013] Process accounting resumed [ 961.934908][T14022] loop9: detected capacity change from 0 to 7 [ 963.119015][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 963.128551][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 963.159751][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 963.169012][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 963.179288][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 963.188551][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 963.197559][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 963.206807][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 963.216123][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 963.225696][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 963.235302][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 963.244803][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 963.253518][T14022] ldm_validate_partition_table(): Disk read failed. [ 963.257944][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 963.270479][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 963.284887][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 963.294152][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 963.302389][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 963.311827][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 963.321534][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 963.330785][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 963.338875][T14022] Dev loop9: unable to read RDB block 0 [ 963.345427][T14022] loop9: unable to read partition table [ 963.351582][T14022] loop9: partition table beyond EOD, truncated [ 963.358036][T14022] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 963.358036][T14022] ) failed (rc=-5) [ 963.703876][T14026] syz_tun: entered allmulticast mode [ 964.223333][ T5920] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 964.748129][ T5920] usb 1-1: device descriptor read/64, error -71 [ 965.008713][ T8] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 965.021376][T14050] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 965.088129][ T5920] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 965.308325][ T5920] usb 1-1: device descriptor read/64, error -71 [ 965.370823][ T8] usb 3-1: config 201 has an invalid interface number: 249 but max is 0 [ 965.429396][ T5920] usb usb1-port1: attempt power cycle [ 965.436225][ T8] usb 3-1: config 201 has no interface number 0 [ 965.503604][ T8] usb 3-1: config 201 interface 249 has no altsetting 0 [ 965.632365][ T8] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 965.737479][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.770004][ T8] usb 3-1: Product: syz [ 965.785747][ T8] usb 3-1: Manufacturer: syz [ 965.794277][ T8] usb 3-1: SerialNumber: syz [ 965.839873][ T5920] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 965.905640][ T5920] usb 1-1: device descriptor read/8, error -71 [ 966.178495][ T5920] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 966.790676][ T8] ath6kl: Failed to submit usb control message: -71 [ 966.847292][ T8] ath6kl: unable to send the bmi data to the device: -71 [ 966.855991][ T8] ath6kl: Unable to send get target info: -71 [ 966.879430][ T8] ath6kl: Failed to init ath6kl core: -71 [ 966.888006][ T5920] usb 1-1: device descriptor read/8, error -71 [ 966.894681][ T8] ath6kl_usb: probe of 3-1:201.249 failed with error -71 [ 966.913203][ T8] usb 3-1: USB disconnect, device number 5 [ 966.918946][T14026] syz_tun: left allmulticast mode [ 967.080978][ T5920] usb usb1-port1: unable to enumerate USB device [ 968.622871][T14085] o2cb: This node has not been configured. [ 968.657003][T14085] o2cb: Cluster check failed. Fix errors before retrying. [ 968.668364][T14085] (syz.0.2142,14085,0):user_dlm_register:674 ERROR: status = -22 [ 968.694384][T14085] (syz.0.2142,14085,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 972.779928][T14130] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 973.027976][T11537] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 973.715327][T11537] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 973.724358][T11537] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 973.774776][T11537] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 973.870922][T11537] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 973.892553][T11537] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.907554][T11537] usb 3-1: config 0 descriptor?? [ 973.926077][T14129] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 973.962148][T11537] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 977.585269][ T8] usb 3-1: USB disconnect, device number 6 [ 981.969198][T14190] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 982.016161][T14190] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 985.219034][T14217] binder: 14216:14217 ioctl c0306201 200000000240 returned -11 [ 985.244286][T14220] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 985.399503][T14221] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 985.738377][T12115] Bluetooth: hci4: command 0x0406 tx timeout [ 985.860589][T14230] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2190'. [ 985.873848][T14230] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2190'. [ 986.119044][T14238] overlayfs: failed to resolve './file1': -2 [ 987.056866][T14252] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 987.089466][T14252] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 988.678463][T14269] overlayfs: failed to resolve './file1': -2 [ 990.294019][T14292] overlayfs: missing 'lowerdir' [ 992.872225][T14315] Process accounting resumed [ 993.692414][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.699365][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.142419][T14368] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2240'. [ 999.941855][T14403] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2253'. [ 1000.756443][T14428] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2264'. [ 1000.987051][T14435] tipc: Started in network mode [ 1001.006090][T14435] tipc: Node identity 8a2f54eb5a8e, cluster identity 4711 [ 1001.018408][T14435] tipc: Enabled bearer , priority 0 [ 1001.039486][T14437] syzkaller0: entered promiscuous mode [ 1001.062194][T14437] syzkaller0: entered allmulticast mode [ 1001.110424][T14439] binder_alloc: 14438: binder_alloc_buf, no vma [ 1001.124532][T14439] binder: 14438:14439 ioctl c0306201 200000000240 returned -11 [ 1001.150117][T14435] tipc: Resetting bearer [ 1001.186439][T14433] tipc: Resetting bearer [ 1001.237260][T14433] tipc: Disabling bearer [ 1001.291560][T14443] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1001.303832][T14443] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1002.518863][T14467] o2cb: This node has not been configured. [ 1002.525376][T14467] o2cb: Cluster check failed. Fix errors before retrying. [ 1002.532900][T14467] (syz.2.2279,14467,1):user_dlm_register:674 ERROR: status = -22 [ 1002.540810][T14467] (syz.2.2279,14467,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1002.608901][T14468] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1002.666911][T14468] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1002.732620][T14471] binder_alloc: 14470: binder_alloc_buf, no vma [ 1002.808488][T14471] binder: 14470:14471 ioctl c0306201 200000000240 returned -11 [ 1008.193070][T14505] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1008.222646][T14505] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1008.565190][T14508] binder_alloc: 14507: binder_alloc_buf, no vma [ 1008.588224][T14508] binder: 14507:14508 ioctl c0306201 200000000240 returned -11 [ 1013.162928][T14542] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1013.228327][T14542] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1015.241641][T14567] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1015.254181][T14569] overlayfs: missing 'lowerdir' [ 1015.272731][T14567] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1017.798774][T14602] overlayfs: missing 'lowerdir' [ 1017.805735][T14605] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1017.860197][T14605] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1020.403948][T14636] overlayfs: missing 'lowerdir' [ 1020.552583][T14638] binder: BINDER_SET_CONTEXT_MGR already set [ 1020.559402][T14640] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1020.580010][T14638] binder: 14637:14638 ioctl 4018620d 2000000002c0 returned -16 [ 1020.600534][T14638] binder: 14637:14638 ioctl c0306201 200000000240 returned -11 [ 1021.815434][T14646] ntfs3: nullb0: Primary boot signature is not NTFS. [ 1021.844208][T14646] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 1022.197306][T14659] overlayfs: failed to resolve './file1': -2 [ 1025.322829][T14666] tipc: Started in network mode [ 1025.330388][T14666] tipc: Node identity aea129d79f37, cluster identity 4711 [ 1025.355676][T14666] tipc: Enabled bearer , priority 0 [ 1025.377578][T14666] syzkaller0: entered promiscuous mode [ 1025.411652][T14666] syzkaller0: entered allmulticast mode [ 1025.553162][ T5102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1025.565292][ T5102] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1025.578410][ T5102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1025.596363][ T5102] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1025.599645][T14670] tipc: Resetting bearer [ 1025.618397][ T5102] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1025.629340][ T5102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1025.707809][T14675] overlayfs: missing 'lowerdir' [ 1025.724079][T14665] tipc: Resetting bearer [ 1025.903606][T14678] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1025.914903][T14665] tipc: Disabling bearer [ 1026.150643][T14669] lo speed is unknown, defaulting to 1000 [ 1026.970886][ T6352] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1027.027912][ T6352] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.144293][T14669] chnl_net:caif_netlink_parms(): no params data found [ 1027.189493][ T6352] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1027.237890][ T6352] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.406529][ T6352] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1027.440377][ T6352] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.635128][ T6352] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1027.647061][ T6352] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.737990][ T5102] Bluetooth: hci0: command tx timeout [ 1027.780565][T14669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.788108][T14669] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.795543][T14669] bridge_slave_0: entered allmulticast mode [ 1027.803721][T14669] bridge_slave_0: entered promiscuous mode [ 1027.807317][T14705] overlayfs: missing 'lowerdir' [ 1027.814116][T14669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.825598][T14669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.835353][T14669] bridge_slave_1: entered allmulticast mode [ 1027.862152][T14669] bridge_slave_1: entered promiscuous mode [ 1027.954883][T14709] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1027.970225][T14669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.074523][T14669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.769189][T14669] team0: Port device team_slave_0 added [ 1028.779863][T14669] team0: Port device team_slave_1 added [ 1028.875157][ T6352] tipc: Left network mode [ 1028.879859][T14669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.897948][T14669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1028.926699][T14669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.946420][T14669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1028.959359][T14669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.042000][T14669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.830026][ T5102] Bluetooth: hci0: command tx timeout [ 1030.011909][T14669] hsr_slave_0: entered promiscuous mode [ 1030.044997][T14669] hsr_slave_1: entered promiscuous mode [ 1030.087876][T14669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1030.144891][T14669] Cannot create hsr debugfs directory [ 1031.091933][T14749] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1031.909510][ T5102] Bluetooth: hci0: command tx timeout [ 1032.121922][T14755] Process accounting resumed [ 1033.088279][T14772] overlayfs: failed to resolve './file1': -2 [ 1033.978217][ T5102] Bluetooth: hci0: command tx timeout [ 1034.520414][T14787] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1034.550055][ T6352] IPVS: stopping backup sync thread 6612 ... [ 1036.336773][ T6352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.401275][ T6352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1036.440646][ T6352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1036.667305][ T6352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1036.756508][T14819] overlayfs: failed to resolve './file0': -2 [ 1037.606687][ T6352] bridge_slave_1: left allmulticast mode [ 1037.616786][ T6352] bridge_slave_1: left promiscuous mode [ 1037.644505][ T6352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.734306][ T6352] bridge_slave_0: left allmulticast mode [ 1037.764716][ T6352] bridge_slave_0: left promiscuous mode [ 1037.796721][ T6352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.864896][ T6352] veth1_macvtap: left promiscuous mode [ 1037.883526][ T6352] veth0_macvtap: left promiscuous mode [ 1038.402258][ T6352] veth1_vlan: left promiscuous mode [ 1038.419472][ T6352] veth0_vlan: left promiscuous mode [ 1039.427900][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 1039.427918][ T28] audit: type=1804 audit(1753633641.297:312): pid=14837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2393" name="/newroot/586/file1" dev="fuse" ino=1 res=1 errno=0 [ 1039.474906][ T28] audit: type=1800 audit(1753633641.297:313): pid=14837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2393" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1039.766654][ T28] audit: type=1804 audit(1753633641.297:314): pid=14837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2393" name="/newroot/586/file1" dev="fuse" ino=1 res=1 errno=0 [ 1039.989856][ T28] audit: type=1804 audit(1753633641.297:315): pid=14837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2393" name="/newroot/586/file1" dev="fuse" ino=1 res=1 errno=0 [ 1040.010681][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.029643][ T28] audit: type=1800 audit(1753633641.297:316): pid=14837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2393" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1040.571227][ T6352] team0 (unregistering): Port device team_slave_1 removed [ 1041.087272][ T6352] team0 (unregistering): Port device team_slave_0 removed [ 1041.284825][ T6352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1041.396218][ T6352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1042.198176][ T6352] bond0 (unregistering): Released all slaves [ 1042.307394][ T5801] lo speed is unknown, defaulting to 1000 [ 1042.908041][T14858] overlayfs: failed to resolve './file0': -2 [ 1043.625519][T14669] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1043.724682][T14669] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1043.792609][T14669] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1043.866473][T14669] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1043.943948][T14865] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1043.983342][T14865] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1044.234210][T14669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1044.388466][T14669] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.506488][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.514824][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.544925][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.552292][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.560475][T14888] loop9: detected capacity change from 0 to 7 [ 1045.920050][ C1] blk_print_req_error: 4 callbacks suppressed [ 1045.920070][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1045.935776][ C1] buffer_io_error: 4 callbacks suppressed [ 1045.935790][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1045.951555][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1045.960992][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1045.969556][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1045.978841][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1045.996464][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1046.005694][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1046.018603][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1046.028083][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1046.038581][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1046.047810][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1046.055816][T14888] ldm_validate_partition_table(): Disk read failed. [ 1046.059075][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1046.071615][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1046.087907][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1046.097123][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1046.106208][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1046.115444][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1046.134397][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1046.143649][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1046.151684][T14888] Dev loop9: unable to read RDB block 0 [ 1046.170938][T14888] loop9: unable to read partition table [ 1046.177010][T14888] loop9: partition table beyond EOD, truncated [ 1046.183444][T14888] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1046.183444][T14888] ) failed (rc=-5) [ 1047.961745][T14669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.970662][T14919] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1047.995312][T14919] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 1048.210213][T14669] veth0_vlan: entered promiscuous mode [ 1048.262142][T14669] veth1_vlan: entered promiscuous mode [ 1048.274034][T14921] tipc: Started in network mode [ 1048.292175][T14921] tipc: Node identity 96897ae57203, cluster identity 4711 [ 1048.316897][T14921] tipc: Enabled bearer , priority 0 [ 1048.334207][T14924] syzkaller0: entered promiscuous mode [ 1048.350518][T14924] syzkaller0: entered allmulticast mode [ 1048.415898][T14921] tipc: Resetting bearer [ 1048.453417][T14669] veth0_macvtap: entered promiscuous mode [ 1048.519688][T14669] veth1_macvtap: entered promiscuous mode [ 1048.538843][T14920] tipc: Resetting bearer [ 1048.615655][T14920] tipc: Disabling bearer [ 1048.679616][T14669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.443694][T14940] loop9: detected capacity change from 0 to 7 [ 1049.918275][T14669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.930112][T14940] ldm_validate_partition_table(): Disk read failed. [ 1049.938384][T14940] Dev loop9: unable to read RDB block 0 [ 1049.946332][T14940] loop9: unable to read partition table [ 1049.952388][T14940] loop9: partition table beyond EOD, truncated [ 1049.958763][T14940] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1049.958763][T14940] ) failed (rc=-5) [ 1050.023154][T14669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.087937][T14669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.175113][T14669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.306410][T14669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.484847][T14669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.779583][T14669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.804875][T14669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.816433][T14669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.854876][T14669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.037131][T14669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.064192][T14669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.089709][T14669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.175020][T14669] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.204819][T14669] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.237807][T14669] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.246926][T14669] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.439683][ T9015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.486073][ T9015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.700983][ T3449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.752647][ T3449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.528114][T14961] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1052.748367][T14961] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1053.577984][ T5102] Bluetooth: hci0: command 0x0405 tx timeout [ 1053.756470][ T5102] Bluetooth: hci1: command 0x0406 tx timeout [ 1054.166796][T14989] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2424'. [ 1054.167390][T14961] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1054.253592][T14961] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1054.293041][T14989] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2424'. [ 1054.324485][T14961] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1054.338325][T14993] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2424'. [ 1054.366921][T14961] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1054.538782][T14961] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1054.568035][T14961] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1054.623825][T15000] fuse: Bad value for 'fd' [ 1054.837125][T14961] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1054.861731][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.178317][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.819233][T12115] Bluetooth: hci1: command 0x0406 tx timeout [ 1056.068106][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1056.108281][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1056.119633][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1056.139053][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1056.147214][ T5102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1056.154951][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1056.214260][T15013] overlayfs: missing 'lowerdir' [ 1056.220314][ T5102] Bluetooth: hci3: command 0x0406 tx timeout [ 1056.378013][ T5102] Bluetooth: hci4: command 0x0406 tx timeout [ 1056.697927][ T5102] Bluetooth: hci0: command 0x0405 tx timeout [ 1058.218136][ T5102] Bluetooth: hci2: command tx timeout [ 1058.298968][ T5102] Bluetooth: hci3: command 0x0406 tx timeout [ 1058.465973][T15028] Process accounting resumed [ 1058.474542][ T5102] Bluetooth: hci4: command 0x0406 tx timeout [ 1058.777956][ T5102] Bluetooth: hci0: command 0x0405 tx timeout [ 1058.993485][T15048] tipc: Enabled bearer , priority 0 [ 1059.068656][T15051] syzkaller0: entered promiscuous mode [ 1059.074195][T15051] syzkaller0: entered allmulticast mode [ 1059.087481][T15050] overlayfs: missing 'lowerdir' [ 1059.312175][T15044] tipc: Resetting bearer [ 1059.356727][T15042] tipc: Resetting bearer [ 1059.567358][T15042] tipc: Disabling bearer [ 1059.579727][T15010] chnl_net:caif_netlink_parms(): no params data found [ 1060.337845][ T5102] Bluetooth: hci2: command tx timeout [ 1060.439022][T15010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.453779][T15010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.462102][T15010] bridge_slave_0: entered allmulticast mode [ 1060.470815][T15010] bridge_slave_0: entered promiscuous mode [ 1060.484987][T15010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.492859][T15010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.503001][T15010] bridge_slave_1: entered allmulticast mode [ 1060.516338][T15010] bridge_slave_1: entered promiscuous mode [ 1060.590714][T15010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.615313][T15010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.668264][T15010] team0: Port device team_slave_0 added [ 1060.679623][T15010] team0: Port device team_slave_1 added [ 1060.726631][T15010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.734971][T15010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.762690][T15010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.776157][T15010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.783233][T15010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.812016][T15010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.859303][ T5102] Bluetooth: hci0: command 0x0405 tx timeout [ 1060.882855][T15010] hsr_slave_0: entered promiscuous mode [ 1060.898666][T15010] hsr_slave_1: entered promiscuous mode [ 1060.905829][T15010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1060.918191][T15010] Cannot create hsr debugfs directory [ 1061.218462][T15010] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.386999][T15010] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.059583][T15072] Process accounting resumed [ 1062.067662][T15010] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.251878][T15010] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.322222][T15076] tipc: Started in network mode [ 1062.327313][T15076] tipc: Node identity 6e18443e3868, cluster identity 4711 [ 1062.381753][ T5102] Bluetooth: hci2: command tx timeout [ 1062.411444][T15076] tipc: Enabled bearer , priority 0 [ 1062.443582][T15076] syzkaller0: entered promiscuous mode [ 1062.482494][T15076] syzkaller0: entered allmulticast mode [ 1062.532248][T15079] tipc: Resetting bearer [ 1062.558342][T15075] tipc: Resetting bearer [ 1062.589408][T15081] overlayfs: missing 'lowerdir' [ 1062.645758][T15075] tipc: Disabling bearer [ 1062.958083][T15010] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1062.977897][ T28] audit: type=1804 audit(1753633664.827:317): pid=15087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2446" name="/newroot/607/file1" dev="fuse" ino=1 res=1 errno=0 [ 1063.023532][T15010] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1063.077061][ T28] audit: type=1800 audit(1753633664.827:318): pid=15087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2446" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1063.176320][T15010] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1063.631309][T15010] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1063.647839][ T28] audit: type=1804 audit(1753633664.837:319): pid=15087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2446" name="/newroot/607/file1" dev="fuse" ino=1 res=1 errno=0 [ 1063.788420][ T28] audit: type=1804 audit(1753633664.837:320): pid=15087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2446" name="/newroot/607/file1" dev="fuse" ino=1 res=1 errno=0 [ 1063.809686][ T28] audit: type=1800 audit(1753633664.837:321): pid=15087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2446" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1064.460078][ T5102] Bluetooth: hci2: command tx timeout [ 1065.202851][T15010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.233862][T15095] Process accounting resumed [ 1065.322004][T15010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.359558][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.366778][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.368287][T15119] overlayfs: missing 'workdir' [ 1065.419980][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.427211][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1065.544495][T15010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1065.620454][T15122] tipc: Enabled bearer , priority 0 [ 1065.639676][T15122] syzkaller0: entered promiscuous mode [ 1065.645282][T15122] syzkaller0: entered allmulticast mode [ 1065.680145][T15122] tipc: Resetting bearer [ 1065.700482][T15121] tipc: Resetting bearer [ 1065.767526][T15121] tipc: Disabling bearer [ 1066.189075][T15010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1067.106453][T15010] veth0_vlan: entered promiscuous mode [ 1067.177509][T15010] veth1_vlan: entered promiscuous mode [ 1067.335788][T15010] veth0_macvtap: entered promiscuous mode [ 1067.372039][T15010] veth1_macvtap: entered promiscuous mode [ 1067.863387][T15010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.976686][T15010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.006458][T15010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.026317][T15010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.050072][T15010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.062158][T15010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.077008][T15010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.097287][T15010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.116764][T15147] Process accounting resumed [ 1068.120934][T15010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1068.160476][T15010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.207007][T15010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.236501][T15010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.337158][T15010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.402569][T15010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.482031][T15010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.697900][T15010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.732705][T15010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.904890][T15010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.782847][T15152] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1069.996490][T15156] bridge0: entered allmulticast mode [ 1070.031361][T15151] bridge_slave_1: left allmulticast mode [ 1070.037580][T15151] bridge_slave_1: left promiscuous mode [ 1070.044790][T15151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.066481][T15151] bridge_slave_0: left allmulticast mode [ 1070.072261][T15151] bridge_slave_0: left promiscuous mode [ 1070.078281][T15151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.188906][T15010] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.200475][T15010] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.212355][T15010] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.242342][T15010] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.139283][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.156304][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.241280][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.251044][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.597916][T15175] binder: 15174:15175 ioctl c0306201 200000000240 returned -11 [ 1073.024025][T15182] Process accounting resumed [ 1077.129702][T15213] binder: 15212:15213 ioctl c0306201 200000000240 returned -11 [ 1078.374155][T12115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1078.385372][T12115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1078.418089][T12115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1078.599984][T12115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1078.609308][T12115] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1078.616889][T12115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1078.806640][T15224] loop9: detected capacity change from 0 to 7 [ 1078.950032][ C1] blk_print_req_error: 18 callbacks suppressed [ 1078.950056][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1078.965611][ C1] buffer_io_error: 18 callbacks suppressed [ 1078.965626][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1079.347992][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1079.357213][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1079.494457][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1079.503837][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1079.524330][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1079.534477][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1079.544471][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1079.553730][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1079.563992][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1079.573261][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1079.581383][T15224] ldm_validate_partition_table(): Disk read failed. [ 1079.581465][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1079.597519][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1079.606027][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1079.615403][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1079.651628][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1079.660974][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1079.680272][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1079.689635][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1079.697839][T15224] Dev loop9: unable to read RDB block 0 [ 1079.709410][T15224] loop9: unable to read partition table [ 1079.715372][T15224] loop9: partition table beyond EOD, truncated [ 1079.721690][T15224] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1079.721690][T15224] ) failed (rc=-5) [ 1080.433354][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.698217][ T5102] Bluetooth: hci1: command tx timeout [ 1080.744500][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.719572][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.774970][T15218] chnl_net:caif_netlink_parms(): no params data found [ 1081.836574][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.153574][T15253] binder: 15252:15253 ioctl c0306201 200000000240 returned -11 [ 1082.444358][T15218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.471425][T15218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.498417][T15218] bridge_slave_0: entered allmulticast mode [ 1082.515240][T15218] bridge_slave_0: entered promiscuous mode [ 1082.619257][T15218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.630249][T15218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.640047][T15218] bridge_slave_1: entered allmulticast mode [ 1082.647494][T15218] bridge_slave_1: entered promiscuous mode [ 1082.778547][T12115] Bluetooth: hci1: command tx timeout [ 1082.824596][T15218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.892766][T15218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.033303][T15269] fuse: Bad value for 'fd' [ 1083.077400][ T48] tipc: Left network mode [ 1083.135045][T15218] team0: Port device team_slave_0 added [ 1083.158158][T15218] team0: Port device team_slave_1 added [ 1083.258493][T15243] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1083.265134][T15218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.272504][T15243] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1083.282386][T15218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.314234][T15243] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1083.326799][T15243] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1083.333270][T15218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.352903][T15243] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1083.383933][T15218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.391368][T15218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.431917][T15243] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1083.438830][T15243] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1083.447544][T15243] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1083.506582][T15218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.137943][ T5102] Bluetooth: hci4: command 0x0406 tx timeout [ 1085.113327][T15218] hsr_slave_0: entered promiscuous mode [ 1085.142921][T15218] hsr_slave_1: entered promiscuous mode [ 1085.228516][T15218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1085.237976][T15283] binder: 15282:15283 ioctl 4018620d 0 returned -22 [ 1085.241855][T15218] Cannot create hsr debugfs directory [ 1085.253052][T15283] binder: 15282:15283 ioctl c0306201 200000000240 returned -11 [ 1085.358428][ T5102] Bluetooth: hci2: command 0x0c1a tx timeout [ 1085.365045][ T5102] Bluetooth: hci0: command 0x0405 tx timeout [ 1085.498334][T12115] Bluetooth: hci1: command 0x0419 tx timeout [ 1087.467907][T12115] Bluetooth: hci2: command 0x0c1a tx timeout [ 1087.617841][T12115] Bluetooth: hci1: command 0x0419 tx timeout [ 1087.763381][T15306] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.034351][ T48] IPVS: stopping backup sync thread 7092 ... [ 1089.066868][T15306] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.498100][T12115] Bluetooth: hci2: command 0x0c1a tx timeout [ 1089.662815][T12115] Bluetooth: hci1: command 0x0419 tx timeout [ 1089.712961][T15331] binder: 15330:15331 ioctl 4018620d 0 returned -22 [ 1089.858035][T15331] binder: 15330:15331 ioctl c0306201 200000000240 returned -11 [ 1089.954229][T15306] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.204336][T15306] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.860991][T15306] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.880000][T15306] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.900523][T15306] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.920186][T15306] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.192139][ T48] hsr_slave_0: left promiscuous mode [ 1091.204218][ T48] hsr_slave_1: left promiscuous mode [ 1091.221440][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1091.247974][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1091.257499][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1091.272309][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1091.310149][ T48] bridge_slave_1: left allmulticast mode [ 1091.320486][ T48] bridge_slave_1: left promiscuous mode [ 1091.334654][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.376028][T15351] program syz.3.2514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1091.390888][ T48] bridge_slave_0: left allmulticast mode [ 1091.406740][ T48] bridge_slave_0: left promiscuous mode [ 1091.425280][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.736921][ T48] veth1_macvtap: left promiscuous mode [ 1091.748810][T12115] Bluetooth: hci1: command 0x0419 tx timeout [ 1091.757807][ T48] veth0_macvtap: left promiscuous mode [ 1091.763774][ T48] veth1_vlan: left promiscuous mode [ 1091.771701][ T48] veth0_vlan: left promiscuous mode [ 1092.657248][T15367] overlayfs: failed to resolve './file0': -2 [ 1093.817947][T12115] Bluetooth: hci1: command 0x0419 tx timeout [ 1093.938274][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1094.042623][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1094.178281][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.346792][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1095.079686][ T48] bond0 (unregistering): Released all slaves [ 1095.477914][T15355] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1096.354269][T15355] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1096.379697][T15218] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1096.391974][T15355] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1096.425607][T15355] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1096.473179][T15218] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1096.526536][T15218] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1096.734043][T15218] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1096.879859][ T28] audit: type=1804 audit(1753633698.747:322): pid=15385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2519" name="/newroot/177/file1" dev="fuse" ino=1 res=1 errno=0 [ 1097.581709][T12115] Bluetooth: hci4: command 0x0406 tx timeout [ 1097.628768][T15383] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2520'. [ 1097.639373][ T28] audit: type=1800 audit(1753633698.747:323): pid=15385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2519" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1098.241196][T15218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.350799][T15404] loop9: detected capacity change from 0 to 7 [ 1098.410947][T12115] Bluetooth: hci0: command 0x0405 tx timeout [ 1098.468176][T12115] Bluetooth: hci1: command 0x0419 tx timeout [ 1098.475124][ T5102] Bluetooth: hci2: command 0x0c1a tx timeout [ 1098.508753][ C1] blk_print_req_error: 4 callbacks suppressed [ 1098.508773][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1098.524457][ C1] buffer_io_error: 4 callbacks suppressed [ 1098.524474][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1098.541088][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1098.550561][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1098.597041][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1098.606428][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1098.634205][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1098.643659][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1098.685925][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1098.695315][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1098.730935][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1098.740397][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1098.833425][T15404] ldm_validate_partition_table(): Disk read failed. [ 1098.841025][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1098.850689][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1098.866248][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1098.875598][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1098.896423][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1098.905732][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1098.919461][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1098.928771][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1098.936811][T15404] Dev loop9: unable to read RDB block 0 [ 1098.944311][T15404] loop9: unable to read partition table [ 1098.950419][T15404] loop9: partition table beyond EOD, truncated [ 1098.956689][T15404] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1098.956689][T15404] ) failed (rc=-5) [ 1099.061575][T15218] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.179655][ T9015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.186980][ T9015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.231242][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.238511][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1102.120413][T15422] netlink: 'syz.3.2528': attribute type 1 has an invalid length. [ 1102.128263][T15422] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2528'. [ 1102.206071][T15218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1102.284183][T15218] veth0_vlan: entered promiscuous mode [ 1102.310893][T15218] veth1_vlan: entered promiscuous mode [ 1102.962263][T15443] loop9: detected capacity change from 0 to 7 [ 1103.635496][T15218] veth0_macvtap: entered promiscuous mode [ 1103.653442][ C0] blk_print_req_error: 5 callbacks suppressed [ 1103.653465][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1103.669265][ C0] buffer_io_error: 5 callbacks suppressed [ 1103.669298][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1103.694324][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1103.703615][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1103.717908][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1103.727149][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1103.737355][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1103.746604][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1103.755750][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1103.765121][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1103.773348][T15443] ldm_validate_partition_table(): Disk read failed. [ 1103.781685][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1103.790960][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1103.800842][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1103.810231][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1103.830698][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1103.840185][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1103.851163][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1103.860586][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1103.869697][T15443] Dev loop9: unable to read RDB block 0 [ 1103.888112][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1103.895301][T15218] veth1_macvtap: entered promiscuous mode [ 1103.897346][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1103.923434][T15443] loop9: unable to read partition table [ 1103.929688][T15443] loop9: partition table beyond EOD, truncated [ 1103.935878][T15443] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1103.935878][T15443] ) failed (rc=-5) [ 1104.343245][T15450] program syz.4.2535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1104.367874][T15218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1104.418901][T15218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.438574][T15218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1104.467932][T15218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.493734][T15218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1104.517883][T15218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.538332][T15218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1104.555074][T15218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.587336][T15218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1104.626289][T15218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.637270][T15218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.654649][T15218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.665487][T15218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.682642][T15218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.694925][T15218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.716241][T15218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.729118][T15218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.742218][T15218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1104.755297][T15218] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.773079][T15218] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.784273][T15218] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.796038][T15218] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.571213][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.616870][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.674485][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.898132][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.053935][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1106.525658][ T8] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1106.558814][ T8] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1106.726395][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1106.883356][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1106.914851][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.121867][ T8] usb 1-1: config 0 descriptor?? [ 1107.931332][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1109.022491][T15497] loop9: detected capacity change from 0 to 7 [ 1109.699035][T15503] program syz.3.2549 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1111.273251][ T5920] usb 1-1: USB disconnect, device number 12 [ 1113.728581][T15530] binder: 15529:15530 ioctl c0306201 0 returned -14 [ 1113.747521][T15530] binder: 15529:15530 ioctl c0306201 200000000240 returned -11 [ 1114.284195][T15542] loop9: detected capacity change from 0 to 7 [ 1114.875571][ C0] blk_print_req_error: 3 callbacks suppressed [ 1114.875602][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1114.891187][ C0] buffer_io_error: 3 callbacks suppressed [ 1114.891202][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1114.931949][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1114.941341][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1114.954615][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1114.964657][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1114.975003][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1114.984383][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1114.994838][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1115.004151][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1115.012543][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1115.021817][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1115.030320][T15542] ldm_validate_partition_table(): Disk read failed. [ 1115.038216][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1115.047462][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1115.060513][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1115.069829][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1115.081886][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1115.091217][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1115.100268][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1115.109520][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1115.117929][T15542] Dev loop9: unable to read RDB block 0 [ 1115.129214][T15542] loop9: unable to read partition table [ 1115.135222][T15542] loop9: partition table beyond EOD, truncated [ 1115.141645][T15542] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1115.141645][T15542] ) failed (rc=-5) [ 1116.504752][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.511424][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.540012][ T28] audit: type=1804 audit(1753633718.377:324): pid=15556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2564" name="/newroot/194/file1" dev="fuse" ino=1 res=1 errno=0 [ 1116.928017][ T28] audit: type=1800 audit(1753633718.717:325): pid=15556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2564" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1117.155088][T15568] binder: 15566:15568 ioctl c0306201 0 returned -14 [ 1117.170518][T15568] binder: 15566:15568 ioctl c0306201 200000000240 returned -11 [ 1117.799143][T15580] bond0: (slave rose0): Error: Device can not be enslaved while up [ 1117.808469][T15580] Cannot find del_set index 2 as target [ 1119.347113][T15591] loop9: detected capacity change from 0 to 7 [ 1119.918321][ C1] blk_print_req_error: 12 callbacks suppressed [ 1119.918344][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1119.933964][ C1] buffer_io_error: 12 callbacks suppressed [ 1119.933980][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1119.948452][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1119.957866][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1119.966027][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1119.975278][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1119.983404][T15591] ldm_validate_partition_table(): Disk read failed. [ 1119.987928][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1119.999274][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1120.009349][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1120.018745][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1120.057926][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1120.067267][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1120.244594][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1120.253909][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1120.261968][T15591] Dev loop9: unable to read RDB block 0 [ 1120.281152][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1120.290521][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1120.709085][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1120.719500][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1120.742252][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1120.751732][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1120.760341][T15591] loop9: unable to read partition table [ 1120.767629][T15591] loop9: partition table beyond EOD, truncated [ 1120.774126][T15591] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1120.774126][T15591] ) failed (rc=-5) [ 1121.172594][T15601] binder: 15599:15601 ioctl c0306201 200000000240 returned -11 [ 1121.635768][ T28] audit: type=1804 audit(1753633723.377:326): pid=15608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2577" name="/newroot/201/file1" dev="fuse" ino=1 res=1 errno=0 [ 1122.097504][ T28] audit: type=1800 audit(1753633723.957:327): pid=15608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2577" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1125.303594][T15626] tipc: Started in network mode [ 1125.329938][T15626] tipc: Node identity 020e06ee8221, cluster identity 4711 [ 1125.338326][T15626] tipc: Enabled bearer , priority 0 [ 1125.385734][T15626] tipc: Resetting bearer [ 1125.462108][T15625] tipc: Disabling bearer [ 1126.207929][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1126.512317][ T8] usb 4-1: device descriptor read/64, error -71 [ 1126.788340][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1126.964691][T15637] Process accounting resumed [ 1127.010947][ T8] usb 4-1: device descriptor read/64, error -71 [ 1127.097966][T15651] binder: 15650:15651 ioctl c0306201 200000000240 returned -11 [ 1127.138083][ T8] usb usb4-port1: attempt power cycle [ 1127.577935][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1127.618702][ T8] usb 4-1: device descriptor read/8, error -71 [ 1127.898249][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1127.948695][ T8] usb 4-1: device descriptor read/8, error -71 [ 1128.069941][ T8] usb usb4-port1: unable to enumerate USB device [ 1130.019291][T15678] Process accounting resumed [ 1130.157868][ T28] audit: type=1804 audit(1753633732.027:328): pid=15689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2599" name="/newroot/28/file1" dev="fuse" ino=1 res=1 errno=0 [ 1130.907868][ T28] audit: type=1800 audit(1753633732.597:329): pid=15689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2599" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1130.954042][T15687] binder: 15684:15687 ioctl c0306201 200000000240 returned -11 [ 1131.538375][ T787] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1131.698647][ T787] usb 3-1: device descriptor read/64, error -71 [ 1131.978355][ T787] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1132.170216][ T787] usb 3-1: device descriptor read/64, error -71 [ 1132.310964][ T787] usb usb3-port1: attempt power cycle [ 1133.327930][ T787] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1133.521371][ T787] usb 3-1: device descriptor read/8, error -71 [ 1133.787956][T15724] Process accounting resumed [ 1133.818013][ T787] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1133.859072][ T787] usb 3-1: device descriptor read/8, error -71 [ 1134.010550][ T787] usb usb3-port1: unable to enumerate USB device [ 1134.044993][T15730] binder: 15729:15730 ioctl c0306201 200000000240 returned -11 [ 1134.284399][ T28] audit: type=1804 audit(1753633736.147:330): pid=15737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2611" name="/newroot/210/file1" dev="fuse" ino=1 res=1 errno=0 [ 1134.516743][ T28] audit: type=1800 audit(1753633736.387:331): pid=15737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2611" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1137.063458][T15760] Process accounting resumed [ 1137.205170][T15764] ================================================================== [ 1137.213324][T15764] BUG: KASAN: global-out-of-bounds in kernfs_remove_by_name_ns+0x6b/0x150 [ 1137.221910][T15764] Read of size 8 at addr ffffffff8e2ba5b8 by task syz.0.2623/15764 [ 1137.230016][T15764] [ 1137.232392][T15764] CPU: 0 PID: 15764 Comm: syz.0.2623 Not tainted 6.6.100-syzkaller #0 [ 1137.240577][T15764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1137.250685][T15764] Call Trace: [ 1137.254050][T15764] [ 1137.257038][T15764] dump_stack_lvl+0x16c/0x230 [ 1137.261784][T15764] ? __lock_acquire+0x7c80/0x7c80 [ 1137.267135][T15764] ? show_regs_print_info+0x20/0x20 [ 1137.272490][T15764] ? load_image+0x3b0/0x3b0 [ 1137.277062][T15764] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 1137.281467][T15766] binder: 15765:15766 ioctl c0306201 200000000240 returned -11 [ 1137.282481][T15764] ? __virt_addr_valid+0x18c/0x540 [ 1137.282514][T15764] ? __virt_addr_valid+0x469/0x540 [ 1137.282539][T15764] print_report+0xac/0x200 [ 1137.282561][T15764] ? kernfs_remove_by_name_ns+0x6b/0x150 [ 1137.282590][T15764] kasan_report+0x117/0x150 [ 1137.282615][T15764] ? kernfs_remove_by_name_ns+0x6b/0x150 [ 1137.282647][T15764] kernfs_remove_by_name_ns+0x6b/0x150 [ 1137.282677][T15764] bus_remove_driver+0x193/0x2f0 [ 1137.282700][T15764] comedi_device_detach+0x131/0x6f0 [ 1137.337194][T15764] comedi_unlocked_ioctl+0xbd0/0xf90 [ 1137.342654][T15764] ? comedi_poll+0x8c0/0x8c0 [ 1137.347337][T15764] ? __fget_files+0x28/0x4d0 [ 1137.352266][T15764] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1137.357276][T15764] ? security_file_ioctl+0x80/0xa0 [ 1137.362484][T15764] ? comedi_poll+0x8c0/0x8c0 [ 1137.367137][T15764] __se_sys_ioctl+0xfd/0x170 [ 1137.371793][T15764] do_syscall_64+0x55/0xb0 [ 1137.376277][T15764] ? clear_bhb_loop+0x40/0x90 [ 1137.381011][T15764] ? clear_bhb_loop+0x40/0x90 [ 1137.385748][T15764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1137.391705][T15764] RIP: 0033:0x7f577558e9a9 [ 1137.396186][T15764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1137.415848][T15764] RSP: 002b:00007f577636e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1137.424342][T15764] RAX: ffffffffffffffda RBX: 00007f57757b5fa0 RCX: 00007f577558e9a9 [ 1137.432363][T15764] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 1137.440376][T15764] RBP: 00007f5775610d69 R08: 0000000000000000 R09: 0000000000000000 [ 1137.448406][T15764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1137.456420][T15764] R13: 0000000000000000 R14: 00007f57757b5fa0 R15: 00007ffda4b03c68 [ 1137.464458][T15764] [ 1137.467512][T15764] [ 1137.469867][T15764] The buggy address belongs to the variable: [ 1137.475892][T15764] net_sysctl_root+0x78/0xa0 [ 1137.480531][T15764] [ 1137.482887][T15764] The buggy address belongs to the physical page: [ 1137.489331][T15764] page:ffffea000038ae80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xe2ba [ 1137.499447][T15764] flags: 0xfff00000004000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 1137.507399][T15764] page_type: 0xffffffff() [ 1137.511783][T15764] raw: 00fff00000004000 ffffea000038ae88 ffffea000038ae88 0000000000000000 [ 1137.520412][T15764] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 1137.529024][T15764] page dumped because: kasan: bad access detected [ 1137.535484][T15764] page_owner info is not present (never set?) [ 1137.541581][T15764] [ 1137.543930][T15764] Memory state around the buggy address: [ 1137.549590][T15764] ffffffff8e2ba480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1137.557691][T15764] ffffffff8e2ba500: 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 00 00 00 00 [ 1137.565796][T15764] >ffffffff8e2ba580: 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 00 00 00 00 [ 1137.573912][T15764] ^ [ 1137.580024][T15764] ffffffff8e2ba600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1137.588132][T15764] ffffffff8e2ba680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1137.596245][T15764] ================================================================== [ 1137.610159][T15764] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1137.617447][T15764] CPU: 0 PID: 15764 Comm: syz.0.2623 Not tainted 6.6.100-syzkaller #0 [ 1137.625634][T15764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1137.635728][T15764] Call Trace: [ 1137.639041][T15764] [ 1137.642007][T15764] dump_stack_lvl+0x16c/0x230 [ 1137.646790][T15764] ? show_regs_print_info+0x20/0x20 [ 1137.652208][T15764] ? load_image+0x3b0/0x3b0 [ 1137.656779][T15764] panic+0x2c0/0x710 [ 1137.660719][T15764] ? bpf_jit_dump+0xd0/0xd0 [ 1137.665244][T15764] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 1137.671179][T15764] ? _raw_spin_unlock+0x40/0x40 [ 1137.676097][T15764] ? print_memory_metadata+0x314/0x400 [ 1137.681602][T15764] ? kernfs_remove_by_name_ns+0x6b/0x150 [ 1137.687287][T15764] check_panic_on_warn+0x84/0xa0 [ 1137.692283][T15764] ? kernfs_remove_by_name_ns+0x6b/0x150 [ 1137.699038][T15764] end_report+0x6f/0x140 [ 1137.703345][T15764] kasan_report+0x128/0x150 [ 1137.707926][T15764] ? kernfs_remove_by_name_ns+0x6b/0x150 [ 1137.713730][T15764] kernfs_remove_by_name_ns+0x6b/0x150 [ 1137.719354][T15764] bus_remove_driver+0x193/0x2f0 [ 1137.724331][T15764] comedi_device_detach+0x131/0x6f0 [ 1137.729658][T15764] comedi_unlocked_ioctl+0xbd0/0xf90 [ 1137.734978][T15764] ? comedi_poll+0x8c0/0x8c0 [ 1137.739607][T15764] ? __fget_files+0x28/0x4d0 [ 1137.744229][T15764] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1137.749182][T15764] ? security_file_ioctl+0x80/0xa0 [ 1137.754320][T15764] ? comedi_poll+0x8c0/0x8c0 [ 1137.759103][T15764] __se_sys_ioctl+0xfd/0x170 [ 1137.763811][T15764] do_syscall_64+0x55/0xb0 [ 1137.768244][T15764] ? clear_bhb_loop+0x40/0x90 [ 1137.772932][T15764] ? clear_bhb_loop+0x40/0x90 [ 1137.777627][T15764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1137.783547][T15764] RIP: 0033:0x7f577558e9a9 [ 1137.788010][T15764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1137.807739][T15764] RSP: 002b:00007f577636e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1137.816174][T15764] RAX: ffffffffffffffda RBX: 00007f57757b5fa0 RCX: 00007f577558e9a9 [ 1137.824164][T15764] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 1137.832412][T15764] RBP: 00007f5775610d69 R08: 0000000000000000 R09: 0000000000000000 [ 1137.840397][T15764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1137.848559][T15764] R13: 0000000000000000 R14: 00007f57757b5fa0 R15: 00007ffda4b03c68 [ 1137.856558][T15764] [ 1137.859965][T15764] Kernel Offset: disabled [ 1137.864822][T15764] Rebooting in 86400 seconds..