last executing test programs: 37.62960608s ago: executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$int_in(r0, 0x5452, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x8040, 0x0) preadv(r1, &(0x7f0000000240), 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000600)={0x23e3}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f7fc70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cb64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f440af2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719a674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be58e602d985430cea00020000cf4591c926abfb076719237c8d0e60b0eea24490a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb72fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccb528a16816219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28d5271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1fcff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969cc1595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6d372ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee99de7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2eaa6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000100000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed90868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e0700000005bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba68df304a8bd66fcdf240430a537a395dc73bda1b7bf12cb2d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0d482ac3750e0170da9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d4abb150e5fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422636f949e2ab8f162d7e3f855e378f4a1f40bc96fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e73970413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c28fd4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5001000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7e661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428713b4218821176d8067997527230fa67d26950d3e4f2750fa7c8720000000001000000b08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b332a46396c0dc7d2f637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373eaea36546791d04f1f0da240455a0980b1882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca005d0000000000000000001a462fe02852f49e1f94f1fec6893f9ae8af000000000000000000000000000000000000000000000000004f8b9b5f7cee68aba507fc5f13ac95a5e5e4a02bbf965958c3c47375da1295ab94edab5fd16dcdff7476923c6d25f1c0e178b472d25a1eb0462c7e5658a59307b8ba9b60b836fb572dd25f32ace92f2c04a8cbcb48a170250d1a4e31239b6f68521207eec10931d4bb48d21890633f6d21e5d6fa81c7db3c725729675c16a4e57d4baecc965bf767d40ea354fc43840658fe31664de826849251db3760a37e704ceba7269f73a4a33403b18a782efe83ea81f8da49c7929c3b7ab05595cd0c59e6cfeb562743ba47d8d30e63e823ac719f5402490f253327f289df87437376549f2e4da021b66d496473144788d0c9fc07a7b31dc5"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x402c5342, &(0x7f00000000c0)) tkill(r3, 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 37.210119796s ago: executing program 1: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x2800000, &(0x7f00000018c0)=ANY=[@ANYBLOB="004933b287aff48da3e9bd5ad8990c3e6d00c6d7f662e3e9ca82be8d05ac4704cbe9f204442ec77935e50cf23b26efa95515169c45e47f16db3ed6eb09d5b3c7f335ed4f62b3a57b4366d1834bb24ea90e3a0dba2adcd22db3e824bfae562ffe43f4553711d96675f7421a894152e728400ab4f3b53e5ecfb33a9bfdb46585b759c17a1b0f9f08d3b33fd5ab09424158e66bc5d5af938aac970e91e3", @ANYRES32, @ANYRESHEX], 0x1, 0x173, &(0x7f0000000b00)="$eJzs281OGlEYxvHnDF8t/S7tpiuSLtpNmQLpB3Gjl0JgJMRBibiBmBBXXof35SVIolsXjslkGMNANKBwFP6/1fvMm6PvLA68GwRgYxVVlJGRE+VhwWTipmNtLAArEEi6CQBsptSl7QkA2DHakbqSLq6OG0plpvaDcyNtj/tOdqo/OpG+paO+yelVcr84k36Mz5vXM8/n435+Zv/n9/H/f6O3eqf3+qCP+qTPUb8Zn//6yG0I2CxGpWSeeOBot+17v+OcCXM5ztkwVxK5GudcmEuNA7+5rFcAsCDngfufStz/dOL+A3i5ev3BXt33vcO5i63rIJj/1H2FiWZ6sj9IQWG1GEp6BmMsVFj+YAKwdO5Rp+v2+oNf7U695bW8/cr/Su1v9U/5X80NN393cv8HsD7uvvRtTwIAAAAAAAAAAAAAABZV0Jfph6c2JgEAAACwbKv4OZHtdwQAAAAAAAAAAAAAAAAAAADWxW0AAAD//zRhIgg=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 37.130557348s ago: executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'full', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) write$cgroup_pressure(r1, &(0x7f0000000480)={'full'}, 0x2f) 37.084706236s ago: executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r0, 0x82000000) futex_waitv(&(0x7f0000002300)=[{0x0, &(0x7f0000000480), 0x82}], 0x1, 0x0, 0x0, 0x0) 36.687528037s ago: executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x90) 36.647925633s ago: executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'full', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) write$cgroup_pressure(r1, &(0x7f0000000480)={'full'}, 0x2f) 36.604442s ago: executing program 4: syz_mount_image$f2fs(&(0x7f0000000680), &(0x7f0000000080)='./file2\x00', 0x2000000, &(0x7f0000000740)=ANY=[], 0x1, 0x54f9, &(0x7f0000002a80)="$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") r0 = open(&(0x7f0000000400)='./bus\x00', 0x14937e, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x0, 0x0, 0x1b7c) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x2}) 36.151171571s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 35.96394812s ago: executing program 4: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="0bf8", 0x2}], 0x1, 0x0, 0x0, 0x0) 34.621803659s ago: executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x3c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_FLAGS={0x8, 0xb}, @IFA_LOCAL={0x14, 0x2, @dev}, @IFA_RT_PRIORITY={0x8}]}, 0x3c}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x86}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)='dx:') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x76}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 34.445317607s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 34.369973159s ago: executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x8000001, 0x1}, 0x8) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) close(r0) 34.341642013s ago: executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0x2cc4, 0x0, 0x0, 0x1ff, 0x0, "5f330000a90100f9"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xa) 34.267814465s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(0x0, 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) mount$binder(0x0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x26) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x0, "fe79ca3351f25129c1ca0c4beb19855c55392fde21c7d98aef39b2c985c9c778"}) renameat2(r2, &(0x7f0000000080)='./file1\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = userfaultfd(0x1) unshare(0x20400) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_UNREGISTER(r4, 0xc020aa04, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4002}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8800000002020102000000000000000000000006080005400000000808000840efc5dede6861733f9175c3c9bd3be600000000080006005241530008000540001c00000a000b00512e39333100000008000540000010060c0001800600034000040000240002800c00028005000100280000001400018008000100e000000108000200ac1414aa08"], 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048000) 34.120107208s ago: executing program 2: r0 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) 34.051681878s ago: executing program 2: mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x2000000000000005, 0x0) 33.994831507s ago: executing program 2: sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000000)=0x2, 0x4) write(r4, &(0x7f00000000c0), 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(r6, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x48, &(0x7f0000000300)=ANY=[@ANYBLOB="8d84"], 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='jbd2_handle_stats\x00', r3}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 33.877456166s ago: executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000000440)={[{@shortname_winnt}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@utf8no}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@fat=@flush}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@fat=@check_strict}, {@rodir}, {@uni_xlate}, {@shortname_lower}, {@shortname_winnt}], [{@uid_eq}]}, 0xfd, 0x289, &(0x7f0000000c40)="$eJzs3cFLNGUcB/Dfums7CrF7CMQInOhQp0WN6LoSBtFCUeyhTkmuFK4JCkId1Jv0P9S/UMegU9AhuvYPRBAWdMlOHoKNdVbdWXc39X3X5eX9fC7+/M3zZZ6ZZ3DxsM989MLO9ubu/tbZ2WkkSSFK9ajHeSGqMRPF6CrHcQwq3egAAE+O804n/u5kpj0XAOBh+PwHgKfPuM//wvFV792HnxkAMCmP9P//zESmBABM2PsffPj2WqOx/l6aJhE7JwfNg2b2Mzu+thWfRjtasRyV+DeicyWr33yrsb6cdv1RjWTnqJc/OmgW8/mVqES1P/99pftbN7+SZqLZn5+N+V7+1/loxWpU4rnh518dmn8mXnmp7/y1qMQvH8dutGMzutksX46Iw5U0feOdxkC+fDEOAAAAAAAAAAAAAAAAAAAAAAAmoZZeqeb3v8n276nVRh3P8v37A82N3R9ocH+eUjzvNYIAAAAAAAAAAAAAAAAAAABwYf/zL7Y32u3W3rjis5+/+fG0nAX+d/D4otA7791SJ7nO6y/npzF3u6sYKJ598fevhh0qR/lu96cY97sbsxHR30l7p/xh6f6398GKn04/WXx1f+G1UWOi1N/5snupuTHZCi4Oxkv3WspbFH9VIr9MS3H9PCd3fiD7i28vi/o/N8ZcPkqtvblpL9zC1/WN7w5/+/O6k1xMbOQKjtYpPu4/QwAAAAAAAAAAAAAAAAAAQO777dOeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMz/X7/y+LJCLyneFFOXKdZOTg42lfIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/BcAAP//S4aJvQ==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 33.754882815s ago: executing program 0: socket$inet6(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}]}]}, 0x2c}}, 0x0) 33.687098665s ago: executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4610, &(0x7f00000001c0)) 33.639270303s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x48}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 33.582703141s ago: executing program 0: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000008c0)={'team0\x00', 0xe761}) 32.609493523s ago: executing program 3: syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1f, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015c883747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 32.56958849s ago: executing program 3: r0 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) 32.524721726s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x200}]}}}]}, 0x40}}, 0x0) 3.632150953s ago: executing program 1: mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x2000000000000005, 0x0) 2.097414533s ago: executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r0, 0x82000000) futex_waitv(&(0x7f0000002300)=[{0x0, &(0x7f0000000480), 0x82}], 0x1, 0x0, 0x0, 0x0) 1.47343284s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x13, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}}, 0x0) 1.057887275s ago: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040), 0x4) 0s ago: executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000380)={0x1, 0x0, {0x0, 0x0, 0x3012}}) kernel console output (not intermixed with test programs): ig=0 arch=c000003e syscall=116 compat=0 ip=0x7f9104c7cea9 code=0x7ffc0000 [ 161.630797][ T27] audit: type=1326 audit(1718252191.190:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5926 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9104c7a627 code=0x7ffc0000 [ 161.772512][ T27] audit: type=1326 audit(1718252191.190:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5926 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9104c40309 code=0x7ffc0000 [ 162.456575][ T5983] "syz-executor.2" (5983) uses obsolete ecb(arc4) skcipher [ 162.810426][ T5996] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 162.915234][ T5996] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 162.926233][ T5996] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.079570][ T6001] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 163.100606][ T3856] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 163.396595][ T5985] loop0: detected capacity change from 0 to 32768 [ 163.404410][ T5985] /dev/loop0: Can't open blockdev [ 163.459226][ T5888] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.495510][ T3856] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 163.523883][ T3856] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.544269][ T3856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.615003][ T5997] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 163.634981][ T5997] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 163.980846][ T3856] usb 2-1: USB disconnect, device number 4 [ 164.004066][ T6018] "syz-executor.3" (6018) uses obsolete ecb(arc4) skcipher [ 164.058562][ T6020] loop0: detected capacity change from 0 to 64 [ 164.457574][ T6040] loop2: detected capacity change from 0 to 128 [ 164.716570][ T6047] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 165.296242][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 165.709064][ T6061] loop4: detected capacity change from 0 to 64 [ 165.721999][ T7] usb 1-1: device descriptor read/all, error -71 [ 165.887427][ T6061] hfs: request for non-existent node 1291 in B*Tree [ 165.917433][ T6061] hfs: request for non-existent node 1291 in B*Tree [ 166.025835][ T5101] hfs: request for non-existent node 1291 in B*Tree [ 166.037082][ T5101] hfs: request for non-existent node 1291 in B*Tree [ 166.051944][ T5101] hfs: request for non-existent node 1291 in B*Tree [ 166.063198][ T5101] hfs: request for non-existent node 1291 in B*Tree [ 166.551627][ T6093] loop1: detected capacity change from 0 to 1024 [ 166.585861][ T6093] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.600690][ T6093] /dev/loop1: Can't open blockdev [ 166.626188][ T6097] loop2: detected capacity change from 0 to 4096 [ 166.634309][ T6097] /dev/loop2: Can't open blockdev [ 166.744166][ T6099] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 167.340593][ T6125] loop4: detected capacity change from 0 to 512 [ 167.577116][ T27] kauditd_printk_skb: 150 callbacks suppressed [ 167.577132][ T27] audit: type=1326 audit(1718252197.514:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9567cea9 code=0x7ffc0000 [ 167.653911][ T27] audit: type=1326 audit(1718252197.514:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9567cea9 code=0x7ffc0000 [ 167.680446][ T27] audit: type=1326 audit(1718252197.551:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda9567cea9 code=0x7ffc0000 [ 167.705957][ T27] audit: type=1326 audit(1718252197.551:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9567cea9 code=0x7ffc0000 [ 167.740047][ T27] audit: type=1326 audit(1718252197.551:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9567cea9 code=0x7ffc0000 [ 167.806325][ T27] audit: type=1326 audit(1718252197.551:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda9567cea9 code=0x7ffc0000 [ 167.870207][ T27] audit: type=1326 audit(1718252197.551:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9567cea9 code=0x7ffc0000 [ 167.936974][ T27] audit: type=1326 audit(1718252197.551:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda9567a627 code=0x7ffc0000 [ 168.015478][ T27] audit: type=1326 audit(1718252197.551:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda95640309 code=0x7ffc0000 [ 168.099867][ T27] audit: type=1326 audit(1718252197.551:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda9567a627 code=0x7ffc0000 [ 168.324302][ T6153] loop0: detected capacity change from 0 to 8192 [ 168.352997][ T6158] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 168.361295][ T6158] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 168.384190][ T6158] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.2'. [ 168.563471][ T6169] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsÅ‚Ümý¼§6°'ÿÿ… [ 168.886076][ T6178] loop0: detected capacity change from 0 to 8 [ 168.908937][ T6177] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 168.942245][ T6178] /dev/loop0: Can't open blockdev [ 169.127828][ T6188] xt_hashlimit: overflow, rate too high: 0 [ 169.311284][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 169.478551][ T6195] loop3: detected capacity change from 0 to 256 [ 169.606690][ T6195] kAFS: No cell specified [ 170.289243][ T6213] support for the xor transformation has been removed. [ 170.320215][ T6213] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.470787][ T6224] xt_hashlimit: overflow, rate too high: 0 [ 170.586470][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 170.667906][ T6228] loop4: detected capacity change from 0 to 8192 [ 170.724412][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 170.847770][ T6243] loop0: detected capacity change from 0 to 256 [ 170.916129][ T6247] loop1: detected capacity change from 0 to 8 [ 170.921770][ T6243] kAFS: No cell specified [ 170.953174][ T6247] /dev/loop1: Can't open blockdev [ 171.239750][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.260701][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.270739][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.279638][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.290563][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.298075][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.310286][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.317767][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.330158][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.338572][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.362676][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.395032][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.424734][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.458238][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.485430][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.520617][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.549182][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.556952][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.565897][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.598396][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.627871][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.662235][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.686049][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.711197][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.728698][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.736909][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.772757][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.789306][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.816130][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.834911][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.858448][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.877056][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.892781][ T4160] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 171.919947][ T4160] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 172.240969][ T4160] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 172.347991][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 172.454135][ T6284] loop0: detected capacity change from 0 to 256 [ 172.467325][ T6274] loop2: detected capacity change from 0 to 32768 [ 172.494646][ T6274] /dev/loop2: Can't open blockdev [ 172.527137][ T6284] kAFS: No cell specified [ 172.668845][ T4160] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 172.701025][ T4160] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 172.735602][ T4160] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.770591][ T4160] usb 5-1: config 0 descriptor?? [ 172.817374][ T4160] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 172.981281][ T6281] loop3: detected capacity change from 0 to 32768 [ 173.012137][ T6281] XFS (loop3): Mounting V5 Filesystem [ 173.067573][ T3615] usb 5-1: USB disconnect, device number 6 [ 173.083041][ T6281] XFS (loop3): Ending clean mount [ 173.125044][ T6281] XFS (loop3): Quotacheck needed: Please wait. [ 173.167927][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 173.215160][ T6281] XFS (loop3): Quotacheck: Done. [ 173.319606][ T6312] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 173.647833][ T6322] loop1: detected capacity change from 0 to 8192 [ 173.790331][ T5478] XFS (loop3): Unmounting Filesystem [ 173.822082][ T3676] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.954309][ T3676] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.080691][ T3676] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.143775][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 174.201012][ T3676] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.300312][ T6326] loop0: detected capacity change from 0 to 32768 [ 174.318979][ T6326] /dev/loop0: Can't open blockdev [ 174.622155][ T6353] xt_hashlimit: overflow, rate too high: 0 [ 174.904837][ T6348] loop1: detected capacity change from 0 to 32768 [ 174.918362][ T6348] /dev/loop1: Can't open blockdev [ 174.943507][ T3568] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.958345][ T3568] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.967218][ T3568] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.976623][ T3568] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.984935][ T3568] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 174.992509][ T3568] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.095810][ T3615] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 175.315453][ T3676] device hsr_slave_0 left promiscuous mode [ 175.338255][ T3676] device hsr_slave_1 left promiscuous mode [ 175.362690][ T3676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.370458][ T3676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.387754][ T3676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.395947][ T3676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.405275][ T3676] device bridge_slave_1 left promiscuous mode [ 175.412443][ T3676] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.421386][ T3676] device bridge_slave_0 left promiscuous mode [ 175.428301][ T3676] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.441541][ T3676] device veth1_macvtap left promiscuous mode [ 175.447776][ T3676] device veth0_macvtap left promiscuous mode [ 175.454051][ T3676] device veth1_vlan left promiscuous mode [ 175.460713][ T3676] device veth0_vlan left promiscuous mode [ 175.516239][ T3615] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.534243][ T3615] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.632279][ T3615] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 175.641519][ T3615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 175.660667][ T3615] usb 1-1: SerialNumber: syz [ 175.774196][ T3676] team0 (unregistering): Port device team_slave_1 removed [ 175.788986][ T3676] team0 (unregistering): Port device team_slave_0 removed [ 175.808180][ T6384] loop4: detected capacity change from 0 to 32768 [ 175.814986][ T3676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.821937][ T6384] XFS (loop4): Mounting V5 Filesystem [ 175.836373][ T3676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.845417][ T6384] XFS (loop4): totally zeroed log [ 175.857652][ T6384] XFS (loop4): Corruption warning: Metadata has LSN (1:384) ahead of current LSN (1:0). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 175.874064][ T6384] XFS (loop4): log mount/recovery failed: error -22 [ 175.897822][ T6384] XFS (loop4): log mount failed [ 175.912009][ T3676] bond0 (unregistering): Released all slaves [ 175.963295][ T3615] usb 1-1: 0:2 : does not exist [ 176.010763][ T6360] chnl_net:caif_netlink_parms(): no params data found [ 176.168943][ T6360] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.176212][ T6360] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.189942][ T6360] device bridge_slave_0 entered promiscuous mode [ 176.198576][ T6360] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.205752][ T6360] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.223037][ T6360] device bridge_slave_1 entered promiscuous mode [ 176.269855][ T6360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.297601][ T6360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.350473][ T6360] team0: Port device team_slave_0 added [ 176.370113][ T6360] team0: Port device team_slave_1 added [ 176.432827][ T3613] usb 1-1: USB disconnect, device number 7 [ 176.457007][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.471126][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.504923][ T6360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.527889][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.535254][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.574489][ T6360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.637149][ T6415] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.669130][ T6360] device hsr_slave_0 entered promiscuous mode [ 176.685219][ T6360] device hsr_slave_1 entered promiscuous mode [ 176.699185][ T6360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.715570][ T6360] Cannot create hsr debugfs directory [ 176.922872][ T3568] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.932271][ T3568] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.940613][ T3568] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.948714][ T3568] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.960347][ T3568] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 176.968448][ T3568] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.159520][ T3615] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 177.203125][ T3568] Bluetooth: hci2: command tx timeout [ 177.484184][ T6425] loop0: detected capacity change from 0 to 32768 [ 177.491701][ T6425] /dev/loop0: Can't open blockdev [ 177.549814][ T6360] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 177.550010][ T3615] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.584921][ T6360] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 177.588563][ T3615] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99 [ 177.616842][ T6360] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 177.622746][ T3615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.638449][ T6422] chnl_net:caif_netlink_parms(): no params data found [ 177.661511][ T6360] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 177.666567][ T3615] usb 5-1: config 0 descriptor?? [ 177.728466][ T3615] usb 5-1: interface 1 not found [ 177.967333][ T6422] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.976555][ T26] usb 5-1: USB disconnect, device number 7 [ 177.989343][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.998892][ T6422] device bridge_slave_0 entered promiscuous mode [ 178.026499][ T6422] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.041414][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.059692][ T6422] device bridge_slave_1 entered promiscuous mode [ 178.076879][ T6360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.110426][ T6422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.124018][ T6422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.218793][ T6360] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.363206][ T6449] loop0: detected capacity change from 0 to 512 [ 178.373893][ T6449] /dev/loop0: Can't open blockdev [ 180.131837][ T3568] Bluetooth: hci3: command tx timeout [ 180.163164][ T3568] Bluetooth: hci2: command tx timeout [ 180.220147][ T6422] team0: Port device team_slave_0 added [ 180.243040][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.202211][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.210145][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.219038][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.227815][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.234939][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.242671][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.251530][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.260387][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.267518][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.275200][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.284190][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.296182][ T6422] team0: Port device team_slave_1 added [ 181.385458][ T6360] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.417792][ T6360] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.446492][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.458244][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.469201][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.477962][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.486690][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.495270][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.504261][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.513148][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.527151][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.546493][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.568463][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.621938][ T6422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.648337][ T6422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.714548][ T3856] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 181.726447][ T6422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.755557][ T6422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.762530][ T6422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.836439][ T6422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.923604][ T6459] loop0: detected capacity change from 0 to 32768 [ 181.955672][ T6422] device hsr_slave_0 entered promiscuous mode [ 181.985978][ T6422] device hsr_slave_1 entered promiscuous mode [ 182.004214][ T6422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.030705][ T6422] Cannot create hsr debugfs directory [ 182.132498][ T3856] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.164582][ T3856] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.284366][ T3856] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 182.293607][ T3856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 182.312118][ T3856] usb 3-1: SerialNumber: syz [ 182.315793][ T6360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.324124][ T6462] loop4: detected capacity change from 0 to 40427 [ 182.327698][ T3568] Bluetooth: hci3: command tx timeout [ 182.344574][ T6462] F2FS-fs (loop4): invalid crc value [ 182.353164][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.361180][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.379683][ T6462] F2FS-fs (loop4): Found nat_bits in checkpoint [ 182.414693][ T3568] Bluetooth: hci2: command tx timeout [ 182.420595][ T3676] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.478932][ T6462] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 182.489039][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.498650][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.531398][ T3676] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.552039][ T6462] Driver unsupported XDP return value 0 on prog (id 184) dev N/A, expect packet loss! [ 182.582429][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.591232][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.607685][ T6360] device veth0_vlan entered promiscuous mode [ 182.622742][ T3856] usb 3-1: 0:2 : does not exist [ 182.627071][ T3676] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.643134][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.651089][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.676289][ T3676] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.691845][ T6360] device veth1_vlan entered promiscuous mode [ 182.724440][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.741294][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.753221][ T6360] device veth0_macvtap entered promiscuous mode [ 182.774904][ T6360] device veth1_macvtap entered promiscuous mode [ 182.816855][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.830445][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.841135][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.852265][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.868772][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.879449][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.889419][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.900593][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.912133][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.932170][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.940573][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.956044][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.964896][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.977741][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.988198][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.004110][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.014665][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.024872][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.035612][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.045661][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.056120][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.067848][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.092649][ T3615] usb 3-1: USB disconnect, device number 5 [ 183.104498][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.116146][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.148586][ T6360] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.158023][ T6360] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.167319][ T6360] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.177860][ T6360] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.268831][ T4175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.278194][ T4175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.300942][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.313516][ T3610] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 183.326648][ T3647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.340350][ T3647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.356438][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.522532][ T6488] loop3: detected capacity change from 0 to 1024 [ 183.535438][ T6491] loop0: detected capacity change from 0 to 2048 [ 183.541135][ T6488] hfsplus: unable to parse mount options [ 183.614681][ T6493] loop0: detected capacity change from 0 to 512 [ 183.615968][ T6488] Disabled LAPIC found during irq injection [ 183.622844][ T6493] ext4: Unknown parameter 'nouser_xattr' [ 183.703145][ T6493] IPv6: NLM_F_CREATE should be specified when creating new route [ 183.716203][ T6495] loop2: detected capacity change from 0 to 2048 [ 183.768673][ T3610] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.790805][ T3610] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99 [ 183.809009][ T3610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.829092][ T3610] usb 5-1: config 0 descriptor?? [ 183.895009][ T3610] usb 5-1: interface 1 not found [ 183.994183][ T6508] loop2: detected capacity change from 0 to 8 [ 184.003716][ T3676] device hsr_slave_0 left promiscuous mode [ 184.012535][ T3676] device hsr_slave_1 left promiscuous mode [ 184.013252][ T6508] /dev/loop2: Can't open blockdev [ 184.031018][ T3676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.038747][ T3676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.059389][ T3676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.067617][ T3676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.077522][ T3676] device bridge_slave_1 left promiscuous mode [ 184.084762][ T3676] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.093119][ T3676] device bridge_slave_0 left promiscuous mode [ 184.101807][ T3676] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.116615][ T7] usb 5-1: USB disconnect, device number 8 [ 184.133948][ T3676] device veth1_macvtap left promiscuous mode [ 184.141051][ T3676] device veth0_macvtap left promiscuous mode [ 184.147839][ T3676] device veth1_vlan left promiscuous mode [ 184.154126][ T3676] device veth0_vlan left promiscuous mode [ 184.235721][ T3610] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 184.526841][ T3610] usb 1-1: Using ep0 maxpacket: 32 [ 184.570431][ T3568] Bluetooth: hci3: command tx timeout [ 184.579868][ T3676] team0 (unregistering): Port device team_slave_1 removed [ 184.607693][ T3676] team0 (unregistering): Port device team_slave_0 removed [ 184.629456][ T3676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.652604][ T3676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.661532][ T3568] Bluetooth: hci2: command tx timeout [ 184.873649][ T3610] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=c3.cc [ 184.886116][ T3676] bond0 (unregistering): Released all slaves [ 184.895434][ T3610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.922834][ T3610] usb 1-1: Product: syz [ 184.931821][ T3610] usb 1-1: Manufacturer: syz [ 184.943453][ T3610] usb 1-1: SerialNumber: syz [ 184.958313][ T3610] usb 1-1: config 0 descriptor?? [ 185.026062][ T3610] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 185.049257][ T3610] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 185.096573][ T3610] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 185.112787][ T3610] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 185.150288][ T3610] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 185.180836][ T3610] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 185.219896][ T6422] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 185.227113][ T3610] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 185.237270][ T3610] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 185.252001][ T3610] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 185.260982][ T3610] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 185.269062][ T3610] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 185.276978][ T3610] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 185.287925][ T3610] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 185.305738][ T3610] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 185.326076][ T3610] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 185.368873][ T6422] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 185.405358][ T4160] usb 1-1: USB disconnect, device number 8 [ 185.414329][ T4160] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 185.423526][ T6510] loop4: detected capacity change from 0 to 32768 [ 185.432008][ T4160] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 185.439855][ T6510] [ 185.439855][ T6510] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.439855][ T6510] [ 185.459491][ T4160] keyspan 1-1:0.0: device disconnected [ 185.471056][ T6422] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 185.474884][ T6510] read_mapping_page failed! [ 185.484796][ T6510] ERROR: (device loop4): txCommit: [ 185.484796][ T6510] [ 185.489825][ T6422] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 185.499396][ T6510] ERROR: (device loop4): remounting filesystem as read-only [ 185.570807][ T4117] [ 185.570807][ T4117] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.570807][ T4117] [ 185.587569][ T4117] [ 185.587569][ T4117] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.587569][ T4117] [ 185.596198][ T6422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.611561][ T133] [ 185.611561][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.611561][ T133] [ 185.613677][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.631097][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.633446][ T4117] [ 185.633446][ T4117] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.633446][ T4117] [ 185.642936][ T6422] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.654825][ T4117] [ 185.654825][ T4117] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.654825][ T4117] [ 185.676042][ T4033] [ 185.676042][ T4033] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.676042][ T4033] [ 185.688663][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.699329][ T133] [ 185.699329][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.699329][ T133] [ 185.707903][ T3615] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 185.720884][ T4033] [ 185.720884][ T4033] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.720884][ T4033] [ 185.732655][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.762528][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.769667][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.811529][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.833267][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.845628][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.860739][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.867836][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.908389][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.956735][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.966947][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.988330][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.998422][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.009454][ T6529] loop2: detected capacity change from 0 to 2048 [ 186.017809][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.027946][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.039884][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.059190][ T6422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.086203][ T6422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.100416][ T6531] loop4: detected capacity change from 0 to 4096 [ 186.114280][ T3615] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.120486][ T6531] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 186.130930][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.142113][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.150529][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.160675][ T3615] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.199228][ T6531] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 186.261280][ T3615] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 186.281424][ T3615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.290388][ T56] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22. [ 186.300694][ T3615] usb 4-1: SerialNumber: syz [ 186.401959][ T4033] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 186.611823][ T3615] usb 4-1: 0:2 : does not exist [ 186.711908][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.725349][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.750441][ T6422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.790545][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.806778][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.823850][ T48] Bluetooth: hci3: command tx timeout [ 186.890211][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.898561][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.937192][ T6422] device veth0_vlan entered promiscuous mode [ 186.956213][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.980359][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.013536][ T6422] device veth1_vlan entered promiscuous mode [ 187.090677][ T3849] usb 4-1: USB disconnect, device number 2 [ 187.098755][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 187.111226][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 187.138651][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.147478][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.168153][ T6422] device veth0_macvtap entered promiscuous mode [ 187.197649][ T6422] device veth1_macvtap entered promiscuous mode [ 187.228086][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.239198][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 187.274051][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.313238][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.336188][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.369130][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.382900][ T27] kauditd_printk_skb: 43 callbacks suppressed [ 187.382914][ T27] audit: type=1326 audit(1718252215.789:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9104c7cea9 code=0x0 [ 187.436822][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.478492][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.488405][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.524661][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.565434][ T6575] loop4: detected capacity change from 0 to 32768 [ 187.567104][ T6422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.587224][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.588509][ T6575] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6575) [ 187.596473][ T3849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.642011][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.655100][ T6575] BTRFS info (device loop4): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 187.663708][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.672575][ T6575] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 187.695448][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.709030][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.736549][ T6575] BTRFS info (device loop4): using free space tree [ 187.742893][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.792324][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.822539][ T6422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.838230][ T6422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.852412][ T6422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.898209][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.926115][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.954690][ T6422] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.966374][ T6422] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.967835][ T6575] BTRFS info (device loop4): enabling ssd optimizations [ 187.976012][ T6422] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.991907][ T6422] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.998926][ T6626] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.065016][ T6627] loop2: detected capacity change from 0 to 1024 [ 188.087797][ T6626] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.098111][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.116206][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.165594][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 188.186211][ T3647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.200371][ T3647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.249398][ T4033] BTRFS info (device loop4): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 188.266876][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.373597][ T6626] serio: Serial port pts0 [ 188.795612][ T3290] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 188.938639][ T6660] loop3: detected capacity change from 0 to 1024 [ 188.954565][ T6667] loop0: detected capacity change from 0 to 128 [ 188.957220][ T6660] hfsplus: unable to parse mount options [ 189.016464][ T6660] Disabled LAPIC found during irq injection [ 189.023927][ T6671] loop1: detected capacity change from 0 to 2048 [ 189.055664][ T3290] usb 3-1: Using ep0 maxpacket: 32 [ 189.186944][ T3290] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.226662][ T3290] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 189.271827][ T3290] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.510270][ T6677] loop3: detected capacity change from 0 to 1024 [ 190.171836][ T3290] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=5b.95 [ 190.187111][ T3290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.209652][ T3290] usb 3-1: Product: syz [ 190.213836][ T3290] usb 3-1: Manufacturer: syz [ 190.253309][ T3290] usb 3-1: SerialNumber: syz [ 190.272469][ T3290] usb 3-1: config 0 descriptor?? [ 190.442439][ T3614] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 190.645083][ T3290] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 190.661909][ T3290] usb 3-1: USB disconnect, device number 6 [ 190.705303][ T3614] usb 5-1: Using ep0 maxpacket: 32 [ 190.785168][ T6708] loop1: detected capacity change from 0 to 2048 [ 191.005866][ T3614] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=c3.cc [ 191.015155][ T3614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.826713][ T6717] loop2: detected capacity change from 0 to 1024 [ 191.838886][ T6717] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.848497][ T6717] /dev/loop2: Can't open blockdev [ 191.849585][ T3614] usb 5-1: Product: syz [ 191.889221][ T3614] usb 5-1: Manufacturer: syz [ 191.893931][ T3614] usb 5-1: SerialNumber: syz [ 191.915060][ T3614] usb 5-1: config 0 descriptor?? [ 191.975869][ T3614] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 191.987993][ T3614] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 191.993330][ T6721] loop0: detected capacity change from 0 to 4096 [ 192.008236][ T3614] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 192.043442][ T3614] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 192.052873][ T3614] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 192.066092][ T3614] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 192.074036][ T3614] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 192.095211][ T3614] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 192.129074][ T3614] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 192.184075][ T3614] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 192.209620][ T3614] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 192.227383][ T3614] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 192.248191][ T3614] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 192.284856][ T3614] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 192.313134][ T3614] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 192.343973][ T3614] usb 5-1: USB disconnect, device number 9 [ 192.366397][ T3614] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 192.398873][ T3614] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 192.455166][ T3614] keyspan 5-1:0.0: device disconnected [ 192.465835][ T6736] input: syz1 as /devices/virtual/input/input6 [ 192.537372][ T6736] device bond_slave_0 entered promiscuous mode [ 192.552472][ T6736] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 192.617009][ T6733] device bond_slave_0 left promiscuous mode [ 192.692377][ T6745] loop3: detected capacity change from 0 to 2048 [ 192.702146][ T6745] NILFS (loop3): invalid segment: Sequence number mismatch [ 192.709457][ T6745] NILFS (loop3): trying rollback from an earlier position [ 192.722855][ T6745] NILFS (loop3): recovery complete [ 192.729452][ T6752] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.886813][ T3568] Bluetooth: hci0: ISO packet for unknown connection handle 1308 [ 192.912220][ T3613] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 192.979172][ T3568] Bluetooth: hci0: Malformed Event: 0x02 [ 193.183612][ T3613] usb 1-1: Using ep0 maxpacket: 32 [ 193.324456][ T3613] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.400506][ T3613] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 193.548524][ T3613] usb 1-1: config 0 interface 0 has no altsetting 0 [ 193.706676][ T6756] loop1: detected capacity change from 0 to 4096 [ 193.736492][ T6756] /dev/loop1: Can't open blockdev [ 193.942149][ T3613] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=5b.95 [ 193.951314][ T3613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.993016][ T3613] usb 1-1: Product: syz [ 193.997726][ T3613] usb 1-1: Manufacturer: syz [ 194.002337][ T3613] usb 1-1: SerialNumber: syz [ 194.021592][ T3613] usb 1-1: config 0 descriptor?? [ 194.034281][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.040950][ T6775] xt_TPROXY: Can be used only with -p tcp or -p udp [ 194.062206][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.135072][ T6776] loop4: detected capacity change from 0 to 1024 [ 194.206882][ T6784] loop3: detected capacity change from 0 to 128 [ 194.372460][ T3613] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 194.394752][ T3613] usb 1-1: USB disconnect, device number 9 [ 194.431996][ T6761] loop2: detected capacity change from 0 to 32768 [ 194.448038][ T6761] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+" [ 194.457330][ T3610] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 194.465097][ T6761] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)... [ 194.480296][ T6761] gfs2: fsid=(œ[{{{+.0: journal 0 mapped with 22 extents in 0ms [ 194.489710][ T3290] gfs2: fsid=(œ[{{{+.0: jid=0, already locked for use [ 194.497526][ T3290] gfs2: fsid=(œ[{{{+.0: jid=0: Looking at journal... [ 194.535544][ T3290] gfs2: fsid=(œ[{{{+.0: jid=0: Journal head lookup took 35ms [ 194.544458][ T3290] gfs2: fsid=(œ[{{{+.0: jid=0: Done [ 194.549798][ T6761] gfs2: fsid=(œ[{{{+.0: first mount done, others may mount [ 194.808483][ T3610] usb 2-1: Using ep0 maxpacket: 32 [ 195.002011][ T3568] Bluetooth: hci4: ISO packet for unknown connection handle 1308 [ 195.112621][ T3610] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=c3.cc [ 195.150636][ T3610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.170293][ T3610] usb 2-1: Product: syz [ 195.175358][ T3610] usb 2-1: Manufacturer: syz [ 195.183179][ T3610] usb 2-1: SerialNumber: syz [ 195.185331][ T3568] Bluetooth: hci4: Malformed Event: 0x02 [ 195.190301][ T3610] usb 2-1: config 0 descriptor?? [ 195.243685][ T3610] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 195.287257][ T6800] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 195.309811][ T3610] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 195.318079][ T3610] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 195.329349][ T3610] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 195.339498][ T3610] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 195.348526][ T3610] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 195.359747][ T3610] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 195.370943][ T3610] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 195.393352][ T3610] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 195.408125][ T3610] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 195.422276][ T3610] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 195.434200][ T3610] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 195.456734][ T3610] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 195.491360][ T3610] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 195.501463][ T3610] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 195.652186][ T6804] loop0: detected capacity change from 0 to 1024 [ 195.690335][ T3614] usb 2-1: USB disconnect, device number 5 [ 195.700221][ T3614] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 195.762863][ T3614] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 195.811648][ T3614] keyspan 2-1:0.0: device disconnected [ 195.837364][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 195.920470][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 196.425325][ T6819] loop2: detected capacity change from 0 to 512 [ 196.435087][ T6819] /dev/loop2: Can't open blockdev [ 197.439198][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.587759][ T6835] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 198.640513][ T6839] loop1: detected capacity change from 0 to 2048 [ 199.576215][ T3615] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 199.662348][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 199.737047][ T6845] loop1: detected capacity change from 0 to 512 [ 199.783389][ T6845] EXT4-fs: Ignoring removed nobh option [ 199.789056][ T6845] /dev/loop1: Can't open blockdev [ 199.980158][ T3568] Bluetooth: hci2: ISO packet for unknown connection handle 1308 [ 199.990898][ T6851] loop2: detected capacity change from 0 to 4096 [ 200.030811][ T3615] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.052838][ T6851] /dev/loop2: Can't open blockdev [ 200.054284][ T3615] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.082428][ T3568] Bluetooth: hci2: Malformed Event: 0x02 [ 200.150023][ T3615] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 200.159515][ T3615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 200.167668][ T3615] usb 1-1: SerialNumber: syz [ 200.392191][ T6879] xt_TPROXY: Can be used only with -p tcp or -p udp [ 200.477797][ T3615] usb 1-1: 0:2 : does not exist [ 200.794160][ T6888] loop2: detected capacity change from 0 to 512 [ 200.810907][ T6888] EXT4-fs: Ignoring removed nobh option [ 200.817278][ T6888] /dev/loop2: Can't open blockdev [ 200.964672][ T3856] usb 1-1: USB disconnect, device number 10 [ 201.459401][ T6909] loop3: detected capacity change from 0 to 512 [ 201.483408][ T6909] EXT4-fs: Ignoring removed nobh option [ 201.494715][ T6907] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 201.577592][ T6909] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 201.628343][ T6909] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz-executor.3: attempt to clear invalid blocks 2 len 1 [ 201.657600][ T6909] EXT4-fs (loop3): Remounting filesystem read-only [ 202.164419][ T6909] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 202.643671][ T6909] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 1819239214 (level 0) [ 202.873898][ T6909] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 1819239214 (level 1) [ 202.990068][ T6909] EXT4-fs (loop3): 1 truncate cleaned up [ 202.999186][ T6909] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 203.073580][ T6360] EXT4-fs (loop3): unmounting filesystem. [ 203.225147][ T6937] loop2: detected capacity change from 0 to 2048 [ 203.739917][ T6943] loop3: detected capacity change from 0 to 4096 [ 203.761050][ T6943] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 203.770207][ T6943] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 203.981386][ T6943] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 203.997110][ T6943] ntfs: volume version 3.1. [ 204.358060][ T6360] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 204.526836][ T4160] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 204.553135][ T6970] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 206.260304][ T4160] usb 2-1: Using ep0 maxpacket: 8 [ 206.737449][ T4160] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.772138][ T4160] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.913840][ T4160] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 206.987707][ T4160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.062603][ T4160] usb 2-1: config 0 descriptor?? [ 207.096539][ T6999] loop1: detected capacity change from 0 to 8 [ 207.105478][ T4160] usb 2-1: can't set config #0, error -71 [ 207.118865][ T4160] usb 2-1: USB disconnect, device number 6 [ 207.122015][ T6999] /dev/loop1: Can't open blockdev [ 207.319385][ T7021] mmap: syz-executor.4 (7021) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 207.614710][ T3615] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 207.622317][ T3856] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 207.918182][ T3615] usb 4-1: Using ep0 maxpacket: 8 [ 208.081009][ T3856] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.091323][ T3615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.106739][ T3856] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.116110][ T3615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.131575][ T3615] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 208.142387][ T3615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.160734][ T3615] usb 4-1: config 0 descriptor?? [ 208.210669][ T3856] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 208.219959][ T3856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 208.228378][ T3856] usb 3-1: SerialNumber: syz [ 208.701916][ T3615] belkin 0003:1020:0006.0006: unexpected long global item [ 208.724497][ T3615] belkin 0003:1020:0006.0006: parse failed [ 208.748690][ T3615] belkin: probe of 0003:1020:0006.0006 failed with error -22 [ 208.960786][ T4160] usb 4-1: USB disconnect, device number 3 [ 209.145055][ T7084] loop0: detected capacity change from 0 to 764 [ 209.162531][ T7084] rock: directory entry would overflow storage [ 209.168823][ T7084] rock: sig=0x4654, size=5, remaining=4 [ 209.255512][ T7090] loop1: detected capacity change from 0 to 256 [ 209.295812][ T7094] loop4: detected capacity change from 0 to 256 [ 209.317866][ T3856] usb 3-1: 0:2 : does not exist [ 209.337253][ T3856] usb 3-1: USB disconnect, device number 7 [ 210.289905][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 211.559507][ T7129] loop0: detected capacity change from 0 to 256 [ 211.754308][ T7131] loop1: detected capacity change from 0 to 764 [ 211.763790][ T7131] rock: directory entry would overflow storage [ 211.770135][ T7131] rock: sig=0x4654, size=5, remaining=4 [ 212.099350][ T3610] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 213.243582][ T7150] loop3: detected capacity change from 0 to 1024 [ 213.378392][ T3610] usb 5-1: Using ep0 maxpacket: 8 [ 213.466405][ T7159] loop1: detected capacity change from 0 to 128 [ 213.519508][ T3610] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.539341][ T3610] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.567113][ T3610] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 213.594488][ T3610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.624399][ T3610] usb 5-1: config 0 descriptor?? [ 214.574904][ T7151] loop0: detected capacity change from 0 to 40427 [ 214.615090][ T3610] belkin 0003:1020:0006.0007: unexpected long global item [ 214.632110][ T3610] belkin 0003:1020:0006.0007: parse failed [ 214.685091][ T3610] belkin: probe of 0003:1020:0006.0007 failed with error -22 [ 214.862559][ T3849] usb 5-1: USB disconnect, device number 10 [ 216.418798][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.431441][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.439766][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.448205][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.457313][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.465086][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.509944][ T5101] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.569209][ T5101] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.632953][ T5101] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.693760][ T3290] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 216.795671][ T7205] chnl_net:caif_netlink_parms(): no params data found [ 216.842194][ T5101] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.845943][ T7213] loop1: detected capacity change from 0 to 1024 [ 217.793287][ T3290] usb 1-1: Using ep0 maxpacket: 8 [ 217.921034][ T7205] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.937800][ T7205] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.945534][ T3290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.965808][ T3290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.981219][ T7205] device bridge_slave_0 entered promiscuous mode [ 217.997167][ T3290] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 218.014385][ T3290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.035338][ T7205] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.050497][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.080607][ T3290] usb 1-1: config 0 descriptor?? [ 218.090301][ T7205] device bridge_slave_1 entered promiscuous mode [ 218.288433][ T7205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.300702][ T7205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.386154][ T7205] team0: Port device team_slave_0 added [ 218.398263][ T7205] team0: Port device team_slave_1 added [ 218.464978][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.472086][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.498242][ T7205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.543903][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.550991][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.580878][ T7205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.658312][ T3290] belkin 0003:1020:0006.0008: unexpected long global item [ 218.669631][ T3290] belkin 0003:1020:0006.0008: parse failed [ 218.699368][ T3290] belkin: probe of 0003:1020:0006.0008 failed with error -22 [ 218.733055][ T3568] Bluetooth: hci4: command tx timeout [ 218.764840][ T7205] device hsr_slave_0 entered promiscuous mode [ 218.774258][ T7205] device hsr_slave_1 entered promiscuous mode [ 218.783955][ T7205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.792670][ T7205] Cannot create hsr debugfs directory [ 218.878011][ T7236] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 218.913829][ T3615] usb 1-1: USB disconnect, device number 11 [ 219.221802][ T5101] device hsr_slave_0 left promiscuous mode [ 219.246123][ T5101] device hsr_slave_1 left promiscuous mode [ 219.271174][ T5101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.279026][ T5101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.298729][ T5101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.309737][ T5101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.325322][ T5101] device bridge_slave_1 left promiscuous mode [ 219.338652][ T5101] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.351768][ T5101] device bridge_slave_0 left promiscuous mode [ 219.358478][ T5101] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.389351][ T5101] device veth1_macvtap left promiscuous mode [ 219.395560][ T5101] device veth0_macvtap left promiscuous mode [ 219.402466][ T5101] device veth1_vlan left promiscuous mode [ 219.409376][ T5101] device veth0_vlan left promiscuous mode [ 220.823610][ T5101] team0 (unregistering): Port device team_slave_1 removed [ 220.862133][ T5101] team0 (unregistering): Port device team_slave_0 removed [ 220.891927][ T5101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.918351][ T3568] Bluetooth: hci3: unexpected event 0x0f length: 96 > 4 [ 220.927950][ T5101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.934198][ T7269] loop1: detected capacity change from 0 to 2048 [ 220.973299][ T3568] Bluetooth: hci4: command tx timeout [ 220.997964][ T7269] loop1: [ICS] [ 221.005102][ T5101] bond0 (unregistering): Released all slaves [ 221.059620][ T7269] loop1: detected capacity change from 0 to 512 [ 221.067806][ T7243] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 221.068625][ T7269] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.086808][ T7243] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 221.102217][ T7269] EXT4-fs: Ignoring removed oldalloc option [ 221.113182][ T7269] /dev/loop1: Can't open blockdev [ 221.147041][ T7271] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 221.185455][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 221.205488][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.218734][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.735185][ T7205] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.714466][ T7205] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.741669][ T7205] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.772058][ T7205] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.911134][ T7205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.944248][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.954249][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.980609][ T7205] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.004927][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.021713][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.048507][ T3856] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.055667][ T3856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.093545][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.104462][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.132180][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.147105][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.154367][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.169011][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.184193][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.224995][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.237790][ T3568] Bluetooth: hci4: command tx timeout [ 223.247697][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.279022][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.306083][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.352751][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.388596][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.420914][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.438735][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.458276][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.488410][ T7205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.816733][ T3613] kernel write not supported for file /input/mouse0 (pid: 3613 comm: kworker/0:8) [ 223.916856][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.928135][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.983013][ T7205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.056720][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 224.077638][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.259867][ T7205] device veth0_vlan entered promiscuous mode [ 224.318617][ T7352] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 224.368122][ T7352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.395312][ T7360] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 224.407163][ T7352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.579081][ T7364] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 224.624052][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 224.647071][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.682456][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.722312][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.771086][ T7205] device veth1_vlan entered promiscuous mode [ 224.794400][ T3290] kernel write not supported for file /input/mouse0 (pid: 3290 comm: kworker/0:3) [ 224.815586][ T7366] loop1: detected capacity change from 0 to 1764 [ 224.871931][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 224.889630][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 224.924974][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.966512][ T3290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.006026][ T7373] loop4: detected capacity change from 0 to 128 [ 225.022415][ T7205] device veth0_macvtap entered promiscuous mode [ 225.051695][ T7205] device veth1_macvtap entered promiscuous mode [ 225.080075][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.095947][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 225.150188][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.186175][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.237810][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.267205][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.289732][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.308225][ T3568] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 225.316967][ T3568] Bluetooth: hci3: Injecting HCI hardware error event [ 225.328305][ T3568] Bluetooth: hci3: hardware error 0x00 [ 225.336301][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.346535][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.366570][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.422316][ T7205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.485157][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.493332][ T48] Bluetooth: hci4: command tx timeout [ 225.517260][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.577166][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.587950][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.598040][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.622221][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.663964][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.684305][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.694264][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.704928][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.731584][ T7205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.754044][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.763429][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.786916][ T7205] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.816191][ T7205] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.825733][ T7205] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.835783][ T7205] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.060180][ T4175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.078167][ T4175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.126284][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 226.218315][ T4175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.241211][ T4175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.294855][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 227.303581][ T3615] libceph: connect (1)[c::]:6789 error -101 [ 227.318534][ T3615] libceph: mon0 (1)[c::]:6789 connect error [ 227.349138][ T3615] libceph: connect (1)[c::]:6789 error -101 [ 227.365485][ T3615] libceph: mon0 (1)[c::]:6789 connect error [ 227.521615][ T27] audit: type=1326 audit(1718252252.838:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7439 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde63e7cea9 code=0x7ffc0000 [ 227.563008][ T3568] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 227.588263][ T27] audit: type=1326 audit(1718252252.838:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7439 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde63e7cea9 code=0x7ffc0000 [ 227.654946][ T27] audit: type=1326 audit(1718252252.857:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7439 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde63e7cea9 code=0x7ffc0000 [ 227.681698][ T3615] libceph: connect (1)[c::]:6789 error -101 [ 227.688889][ T3615] libceph: mon0 (1)[c::]:6789 connect error [ 227.735221][ T3568] Bluetooth: hci4: command tx timeout [ 227.738018][ T27] audit: type=1326 audit(1718252252.857:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7439 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde63e7cea9 code=0x7ffc0000 [ 227.763888][ T27] audit: type=1326 audit(1718252252.857:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7439 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde63e7cea9 code=0x7ffc0000 [ 227.789633][ T27] audit: type=1326 audit(1718252252.857:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7439 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fde63e7cea9 code=0x7ffc0000 [ 227.812715][ T27] audit: type=1326 audit(1718252252.857:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7439 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde63e7cea9 code=0x7ffc0000 [ 227.836172][ T27] audit: type=1326 audit(1718252252.857:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7439 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde63e7cea9 code=0x7ffc0000 [ 227.859166][ T27] audit: type=1326 audit(1718252252.857:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7439 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde63e7cea9 code=0x7ffc0000 [ 227.882277][ T27] audit: type=1326 audit(1718252252.857:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7439 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde63e7cea9 code=0x7ffc0000 [ 228.181364][ T7415] ceph: No mds server is up or the cluster is laggy [ 228.254150][ T3615] libceph: connect (1)[c::]:6789 error -101 [ 228.260382][ T3615] libceph: mon0 (1)[c::]:6789 connect error [ 229.226218][ T7479] loop3: detected capacity change from 0 to 1024 [ 229.597309][ T3614] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 229.868899][ T3614] usb 2-1: Using ep0 maxpacket: 16 [ 229.998195][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.015433][ T3614] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.028781][ T3614] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 230.045625][ T3614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.068825][ T3614] usb 2-1: config 0 descriptor?? [ 230.212923][ T7516] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 230.426160][ T7522] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 230.442803][ T7522] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 230.467140][ T7522] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 230.597547][ T3614] HID 045e:07da: Invalid code 65791 type 1 [ 230.609730][ T3614] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0009/input/input7 [ 230.645475][ T7538] loop2: detected capacity change from 0 to 512 [ 230.660957][ T3614] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 230.664091][ T7538] /dev/loop2: Can't open blockdev [ 230.679810][ T7540] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.748137][ T7546] loop4: detected capacity change from 0 to 1024 [ 231.139214][ T3614] usb 2-1: USB disconnect, device number 7 [ 231.619408][ T3614] libceph: connect (1)[c::]:6789 error -101 [ 231.628548][ T3614] libceph: mon0 (1)[c::]:6789 connect error [ 231.926949][ T3614] libceph: connect (1)[c::]:6789 error -101 [ 231.933360][ T3614] libceph: mon0 (1)[c::]:6789 connect error [ 232.494407][ T3614] libceph: connect (1)[c::]:6789 error -101 [ 232.520161][ T3614] libceph: mon0 (1)[c::]:6789 connect error [ 232.831980][ T7553] ceph: No mds server is up or the cluster is laggy [ 232.980960][ T7572] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 232.996691][ T7576] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 233.034834][ T7576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.064247][ T7576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.290164][ T7589] loop3: detected capacity change from 0 to 512 [ 233.391612][ T7592] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 233.395137][ T7563] loop1: detected capacity change from 0 to 32768 [ 233.424231][ T7589] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 233.433804][ T7589] ext4 filesystem being mounted at /root/syzkaller-testdir2979795804/syzkaller.ON8KR4/76/file0 supports timestamps until 2038 (0x7fffffff) [ 234.389965][ T7607] loop2: detected capacity change from 0 to 64 [ 234.422429][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 234.422444][ T27] audit: type=1800 audit(1718252259.207:303): pid=7563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1958 res=0 errno=0 [ 234.483557][ T27] audit: type=1804 audit(1718252259.253:304): pid=7611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2419100424/syzkaller.1Ol9JF/182/bus" dev="sda1" ino=1967 res=1 errno=0 [ 234.508574][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.655627][ T6360] EXT4-fs (loop3): unmounting filesystem. [ 235.147916][ T27] audit: type=1804 audit(1718252259.558:305): pid=7617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2419100424/syzkaller.1Ol9JF/182/bus" dev="sda1" ino=1967 res=1 errno=0 [ 235.201078][ T7621] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 235.704892][ T7635] loop0: detected capacity change from 0 to 256 [ 235.964409][ T7648] loop3: detected capacity change from 0 to 512 [ 235.972493][ T7648] EXT4-fs: Ignoring removed mblk_io_submit option [ 235.982868][ T7648] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 236.005766][ T7650] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 236.023196][ T7648] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 236.124910][ T27] audit: type=1326 audit(1718252260.767:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9104c7cea9 code=0x0 [ 236.155516][ T7648] System zones: 1-12 [ 236.308738][ T7648] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.3: corrupted in-inode xattr [ 236.502805][ T7648] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 236.688187][ T7607] loop2: detected capacity change from 0 to 32768 [ 236.699512][ T7648] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 236.824897][ T6360] EXT4-fs (loop3): unmounting filesystem. [ 236.859024][ T7662] loop1: detected capacity change from 0 to 512 [ 236.866349][ T7662] /dev/loop1: Can't open blockdev [ 237.192201][ T7686] loop2: detected capacity change from 0 to 512 [ 237.210392][ T7686] /dev/loop2: Can't open blockdev [ 237.218485][ T7689] loop3: detected capacity change from 0 to 512 [ 237.231501][ T7689] EXT4-fs: Ignoring removed mblk_io_submit option [ 237.238961][ T7689] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 237.254906][ T7689] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 237.263064][ T7689] System zones: 1-12 [ 237.278550][ T7689] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.3: corrupted in-inode xattr [ 237.311889][ T7689] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 237.340163][ T7689] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 237.425578][ T6360] EXT4-fs (loop3): unmounting filesystem. [ 237.523241][ T7705] loop3: detected capacity change from 0 to 512 [ 237.551718][ T27] audit: type=1804 audit(1718252262.096:307): pid=7706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2419100424/syzkaller.1Ol9JF/190/bus" dev="sda1" ino=1960 res=1 errno=0 [ 237.689861][ T7687] loop4: detected capacity change from 0 to 40427 [ 237.706429][ T7687] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 237.720012][ T7705] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 237.732452][ T7687] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 237.745035][ T7705] ext4 filesystem being mounted at /root/syzkaller-testdir2979795804/syzkaller.ON8KR4/84/file0 supports timestamps until 2038 (0x7fffffff) [ 237.768088][ T7687] F2FS-fs (loop4): invalid crc value [ 237.813365][ T7687] F2FS-fs (loop4): Found nat_bits in checkpoint [ 237.836388][ T7705] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor.3: bg 0: block 256: padding at end of block bitmap is not set [ 238.199649][ T27] audit: type=1804 audit(1718252262.428:308): pid=7721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2419100424/syzkaller.1Ol9JF/190/bus" dev="sda1" ino=1960 res=1 errno=0 [ 238.265163][ T7723] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 238.571039][ T7705] Quota error (device loop3): write_blk: dquota write failed [ 238.579243][ T7705] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 238.588643][ T7705] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 238.623581][ T7705] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz-executor.3: Failed to acquire dquot type 1 [ 238.674296][ T7687] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 238.683539][ T7687] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 238.723481][ T7705] syz-executor.3 (7705) used greatest stack depth: 18424 bytes left [ 238.789827][ T6360] EXT4-fs (loop3): unmounting filesystem. [ 238.804937][ T7731] loop2: detected capacity change from 0 to 512 [ 238.859665][ T7731] /dev/loop2: Can't open blockdev [ 238.891391][ T7735] loop1: detected capacity change from 0 to 512 [ 238.900159][ T7735] EXT4-fs: Ignoring removed mblk_io_submit option [ 238.906752][ T7735] /dev/loop1: Can't open blockdev [ 239.213522][ T27] audit: type=1804 audit(1718252263.628:309): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2979795804/syzkaller.ON8KR4/88/bus" dev="sda1" ino=1964 res=1 errno=0 [ 239.464112][ T7733] loop0: detected capacity change from 0 to 40427 [ 239.853098][ T27] audit: type=1804 audit(1718252263.960:310): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2979795804/syzkaller.ON8KR4/88/bus" dev="sda1" ino=1964 res=1 errno=0 [ 239.932476][ T7759] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 240.339475][ T7764] loop2: detected capacity change from 0 to 512 [ 240.359146][ T7764] /dev/loop2: Can't open blockdev [ 240.592884][ T7778] loop1: detected capacity change from 0 to 512 [ 240.619232][ T7778] /dev/loop1: Can't open blockdev [ 241.081749][ T7769] loop3: detected capacity change from 0 to 40427 [ 241.106780][ T7800] loop4: detected capacity change from 0 to 512 [ 241.113128][ T7769] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 241.125459][ T7769] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 241.143782][ T7769] F2FS-fs (loop3): invalid crc value [ 241.163320][ T7769] F2FS-fs (loop3): Found nat_bits in checkpoint [ 241.184560][ T7800] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 241.200841][ T3646] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 241.206650][ T7800] ext4 filesystem being mounted at /root/syzkaller-testdir203802430/syzkaller.58PCF0/301/file0 supports timestamps until 2038 (0x7fffffff) [ 241.239748][ T7800] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 256: padding at end of block bitmap is not set [ 241.256369][ T7769] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 241.263636][ T7769] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 241.271606][ T7800] Quota error (device loop4): write_blk: dquota write failed [ 241.279734][ T7800] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 241.288936][ T7800] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 241.299191][ T7800] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz-executor.4: Failed to acquire dquot type 1 [ 241.339541][ T4033] EXT4-fs (loop4): unmounting filesystem. [ 241.645356][ T3646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.663489][ T3646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.684309][ T3646] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 241.703247][ T3646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.723956][ T3646] usb 2-1: config 0 descriptor?? [ 241.735551][ T7831] loop0: detected capacity change from 0 to 512 [ 241.746356][ T7831] /dev/loop0: Can't open blockdev [ 241.797626][ T7831] loop0: detected capacity change from 0 to 16 [ 242.108331][ T7842] loop2: detected capacity change from 0 to 32768 [ 242.110891][ T3856] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 242.244123][ T3646] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 242.250952][ T3646] isku 0003:1E7D:319C.000A: unbalanced collection at end of report description [ 242.260796][ T3646] isku 0003:1E7D:319C.000A: parse failed [ 242.266636][ T3646] isku: probe of 0003:1E7D:319C.000A failed with error -22 [ 242.385885][ T3856] usb 4-1: Using ep0 maxpacket: 32 [ 242.465990][ T26] usb 2-1: USB disconnect, device number 8 [ 242.570634][ T7844] loop2: detected capacity change from 0 to 40427 [ 242.689955][ T3856] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 242.722719][ T3856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.731182][ T3856] usb 4-1: Product: syz [ 242.735356][ T3856] usb 4-1: Manufacturer: syz [ 242.760945][ T3856] usb 4-1: SerialNumber: syz [ 242.768792][ T48] Bluetooth: hci1: unexpected subevent 0x01 length: 25 > 18 [ 242.779611][ T3856] usb 4-1: config 0 descriptor?? [ 242.854657][ T7852] loop4: detected capacity change from 0 to 32768 [ 242.865421][ T7852] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 242.875687][ T7852] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 242.886234][ T7852] BTRFS info (device loop4): using free space tree [ 242.921523][ T7852] BTRFS info (device loop4): enabling ssd optimizations [ 242.956149][ T27] audit: type=1800 audit(1718252267.089:311): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 242.976000][ T7876] loop0: detected capacity change from 0 to 512 [ 242.985871][ T7876] /dev/loop0: Can't open blockdev [ 243.120042][ T27] audit: type=1326 audit(1718252267.228:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9104c7cea9 code=0x0 [ 243.407322][ T7892] loop1: detected capacity change from 0 to 16 [ 243.424449][ T7892] /dev/loop1: Can't open blockdev [ 243.515718][ T7879] syz-executor.4 (7879) used greatest stack depth: 18352 bytes left [ 243.570442][ T3856] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 243.592573][ T4033] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 243.731724][ T7898] loop2: detected capacity change from 0 to 512 [ 243.755339][ T7898] /dev/loop2: Can't open blockdev [ 244.288948][ T7930] loop4: detected capacity change from 0 to 256 [ 244.320424][ T7930] FAT-fs (loop4): Directory bread(block 1285) failed [ 244.330976][ T7930] FAT-fs (loop4): Directory bread(block 1285) failed [ 244.344687][ T7930] FAT-fs (loop4): Directory bread(block 1285) failed [ 244.352565][ T7930] FAT-fs (loop4): Directory bread(block 1285) failed [ 244.367855][ T7926] loop2: detected capacity change from 0 to 8192 [ 244.379599][ T7930] FAT-fs (loop4): Directory bread(block 1285) failed [ 244.389058][ T7930] FAT-fs (loop4): Directory bread(block 1285) failed [ 244.397938][ T7930] FAT-fs (loop4): Directory bread(block 1285) failed [ 244.400128][ T27] audit: type=1804 audit(1718252268.418:313): pid=7936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2419100424/syzkaller.1Ol9JF/210/bus" dev="sda1" ino=1964 res=1 errno=0 [ 244.446253][ T7930] FAT-fs (loop4): Directory bread(block 1285) failed [ 244.453222][ T7930] FAT-fs (loop4): Directory bread(block 1285) failed [ 244.460248][ T7930] FAT-fs (loop4): Directory bread(block 1285) failed [ 244.586409][ T48] Bluetooth: hci0: unexpected subevent 0x01 length: 25 > 18 [ 245.106878][ T3854] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 245.115327][ T27] audit: type=1804 audit(1718252268.760:314): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2419100424/syzkaller.1Ol9JF/210/bus" dev="sda1" ino=1964 res=1 errno=0 [ 245.142635][ T48] Bluetooth: hci1: command tx timeout [ 245.171283][ T7950] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 245.680792][ T3646] usb 4-1: USB disconnect, device number 4 [ 245.805755][ T7960] IPVS: length: 89 != 8 [ 245.819812][ T7960] Zero length message leads to an empty skb [ 245.855508][ T11] bond0: (slave bond_slave_0): interface is now down [ 245.877487][ T11] bond0: (slave bond_slave_1): interface is now down [ 245.919448][ T4117] bond0: (slave bond_slave_0): interface is now down [ 245.928832][ T4117] bond0: (slave bond_slave_1): interface is now down [ 245.948851][ T4117] bond0: now running without any active interface! [ 246.217021][ T3854] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 246.295490][ T3854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.558563][ T3854] usb 2-1: config 0 descriptor?? [ 246.614404][ T3854] cp210x 2-1:0.0: cp210x converter detected [ 246.837083][ T3568] Bluetooth: hci0: command 0x0406 tx timeout [ 246.989244][ T7951] loop4: detected capacity change from 0 to 40427 [ 247.004232][ T7951] F2FS-fs (loop4): invalid crc value [ 247.014958][ T7951] F2FS-fs (loop4): Found nat_bits in checkpoint [ 247.073019][ T3854] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 247.079028][ T7951] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 247.132839][ T4033] syz-executor.4: attempt to access beyond end of device [ 247.132839][ T4033] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 247.182792][ T7990] loop2: detected capacity change from 0 to 512 [ 247.190859][ T7990] /dev/loop2: Can't open blockdev [ 247.343011][ T27] audit: type=1326 audit(1718252271.132:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f679387cea9 code=0x0 [ 247.359436][ T3854] usb 2-1: cp210x converter now attached to ttyUSB0 [ 247.372295][ T7992] IPVS: length: 89 != 8 [ 247.608911][ T4987] usb 2-1: USB disconnect, device number 9 [ 247.624064][ T4987] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 247.638525][ T4987] cp210x 2-1:0.0: device disconnected [ 247.898256][ T8019] IPVS: length: 89 != 8 [ 247.939723][ T3646] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 247.941122][ T4869] bond0: (slave bond_slave_0): interface is now down [ 247.974842][ T4869] bond0: (slave bond_slave_1): interface is now down [ 248.020691][ T4869] bond0: now running without any active interface! [ 248.252377][ T8030] loop2: detected capacity change from 0 to 4096 [ 248.266967][ T8030] /dev/loop2: Can't open blockdev [ 248.329142][ T8037] loop3: detected capacity change from 0 to 4096 [ 248.350305][ T8039] loop1: detected capacity change from 0 to 764 [ 248.358536][ T8037] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 248.373529][ T8037] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 248.390947][ T8037] ntfs3: loop3: Failed to load $MFTMirr. [ 248.405766][ T3646] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 248.427129][ T3646] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 248.448248][ T3646] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 248.492141][ T3646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.524970][ T8003] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 248.546956][ T3610] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 248.563605][ T8049] IPVS: length: 89 != 8 [ 248.628701][ T8051] loop1: detected capacity change from 0 to 512 [ 248.636787][ T8051] /dev/loop1: Can't open blockdev [ 248.720887][ T27] audit: type=1326 audit(1718252272.406:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8050 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc849c7cea9 code=0x0 [ 248.948735][ T3610] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 248.958947][ T3610] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.968012][ T3646] usb 5-1: USB disconnect, device number 11 [ 248.974848][ T3610] usb 1-1: config 0 descriptor?? [ 249.027255][ T3610] gspca_main: spca508-2.14.0 probing 8086:0110 [ 249.261478][ T3610] gspca_spca508: reg_read err -32 [ 249.304865][ T4987] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 249.326426][ T3610] gspca_spca508: reg_read err -32 [ 249.380725][ T3610] gspca_spca508: reg_read err -32 [ 249.467701][ T8064] loop2: detected capacity change from 0 to 512 [ 249.475241][ T8064] /dev/loop2: Can't open blockdev [ 249.550705][ T8064] input: syz0 as /devices/virtual/input/input8 [ 249.705809][ T4987] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 249.718580][ T4987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.735973][ T3610] gspca_spca508: reg_read err -71 [ 249.759900][ T3610] gspca_spca508: reg write: error -71 [ 249.765393][ T3610] spca508: probe of 1-1:0.0 failed with error -71 [ 249.768345][ T4987] usb 4-1: config 0 descriptor?? [ 249.773288][ T3610] usb 1-1: USB disconnect, device number 12 [ 250.014143][ T8078] loop4: detected capacity change from 0 to 2048 [ 250.188568][ T8078] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 250.197480][ T8078] ext4 filesystem being mounted at /root/syzkaller-testdir203802430/syzkaller.58PCF0/316/bus supports timestamps until 2038 (0x7fffffff) [ 250.481047][ T4987] cp210x 4-1:0.0: cp210x converter detected [ 250.588879][ T4033] EXT4-fs (loop4): unmounting filesystem. [ 250.628911][ T8083] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 250.669607][ T27] audit: type=1800 audit(1718252274.196:317): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 250.691139][ T27] audit: type=1800 audit(1718252274.196:318): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 250.715358][ T4987] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 250.792882][ T8076] loop2: detected capacity change from 0 to 40427 [ 251.007701][ T4987] usb 4-1: cp210x converter now attached to ttyUSB0 [ 251.122356][ T8103] loop2: detected capacity change from 0 to 512 [ 251.144938][ T8103] /dev/loop2: Can't open blockdev [ 251.210375][ T8103] input: syz0 as /devices/virtual/input/input9 [ 251.232481][ T3290] usb 4-1: USB disconnect, device number 5 [ 251.242569][ T3290] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 251.254884][ T3290] cp210x 4-1:0.0: device disconnected [ 251.265751][ T3853] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 251.670197][ T8114] loop2: detected capacity change from 0 to 2048 [ 251.686451][ T8114] /dev/loop2: Can't open blockdev [ 251.938487][ T3853] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 251.988912][ T3853] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 252.131619][ T3853] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 252.183572][ T3853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.241104][ T3613] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 252.318540][ T8099] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 252.667249][ T3613] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 252.672929][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 252.684944][ T3613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.712287][ T3613] usb 2-1: config 0 descriptor?? [ 252.745783][ T3853] usb 1-1: USB disconnect, device number 13 [ 252.794449][ T3613] gspca_main: spca508-2.14.0 probing 8086:0110 [ 253.042598][ T3613] gspca_spca508: reg_read err -32 [ 253.085923][ T3613] gspca_spca508: reg_read err -32 [ 253.114826][ T8144] loop2: detected capacity change from 0 to 764 [ 253.141467][ T3613] gspca_spca508: reg_read err -32 [ 253.411123][ T3613] gspca_spca508: reg_read err -71 [ 253.432600][ T3613] gspca_spca508: reg write: error -71 [ 253.438141][ T3613] spca508: probe of 2-1:0.0 failed with error -71 [ 253.467225][ T3613] usb 2-1: USB disconnect, device number 10 [ 253.505202][ T8165] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 253.974387][ T3610] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 254.256761][ T3568] Bluetooth: hci1: command 0x0406 tx timeout [ 254.915794][ T8198] loop2: detected capacity change from 0 to 4096 [ 254.924203][ T8198] /dev/loop2: Can't open blockdev [ 255.063304][ T3610] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 255.075637][ T3610] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 255.094519][ T3610] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 255.105429][ T3610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.180890][ T8178] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 255.253411][ T8218] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 255.366265][ T27] audit: type=1804 audit(1718252278.488:319): pid=8219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2305363443/syzkaller.QLZqTz/81/bus" dev="sda1" ino=1943 res=1 errno=0 [ 256.185749][ T3613] usb 5-1: USB disconnect, device number 12 [ 256.254271][ T8244] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.670355][ T8240] loop2: detected capacity change from 0 to 40427 [ 256.841401][ T8254] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 256.845434][ T8256] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 256.859427][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.888814][ T8256] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.946475][ T8240] loop2: detected capacity change from 0 to 64 [ 257.285943][ T8277] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 257.358135][ T8284] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 257.381502][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 257.571287][ T3610] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 257.755400][ T3613] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 258.026435][ T3610] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 258.035491][ T3610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.060830][ T3610] usb 4-1: config 0 descriptor?? [ 258.200402][ T3613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.221249][ T3613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.231015][ T3613] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 258.254335][ T3613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.276218][ T3613] usb 2-1: config 0 descriptor?? [ 258.579725][ T3610] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 258.741922][ T8311] loop4: detected capacity change from 0 to 2048 [ 258.832660][ T3613] isku 0003:1E7D:319C.000B: unknown main item tag 0x0 [ 258.898902][ T8315] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 258.927702][ T3613] isku 0003:1E7D:319C.000B: unbalanced collection at end of report description [ 258.957586][ T8311] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 258.966536][ T8311] ext4 filesystem being mounted at /root/syzkaller-testdir203802430/syzkaller.58PCF0/328/bus supports timestamps until 2038 (0x7fffffff) [ 259.192827][ T4987] usb 4-1: USB disconnect, device number 6 [ 259.202040][ T3613] isku 0003:1E7D:319C.000B: parse failed [ 259.220685][ T3613] isku: probe of 0003:1E7D:319C.000B failed with error -22 [ 259.233345][ T3613] usb 2-1: USB disconnect, device number 11 [ 259.366656][ T4033] EXT4-fs (loop4): unmounting filesystem. [ 259.545566][ T3853] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 259.803438][ T3853] usb 3-1: Using ep0 maxpacket: 32 [ 259.933297][ T3853] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.953015][ T3853] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.253986][ T8360] loop3: detected capacity change from 0 to 2048 [ 261.506978][ T3853] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 261.537119][ T3853] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 261.545497][ T3853] usb 3-1: Product: syz [ 261.582951][ T3853] usb 3-1: Manufacturer: syz [ 261.877188][ T3853] hub 3-1:4.0: USB hub found [ 262.060290][ T8360] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 262.069583][ T8360] ext4 filesystem being mounted at /root/syzkaller-testdir2979795804/syzkaller.ON8KR4/133/bus supports timestamps until 2038 (0x7fffffff) [ 262.154485][ T3853] hub 3-1:4.0: 2 ports detected [ 262.307586][ T6360] EXT4-fs (loop3): unmounting filesystem. [ 263.072281][ T8408] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.090909][ T27] audit: type=1800 audit(1718252285.651:320): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1965 res=0 errno=0 [ 263.118757][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.417979][ T8410] loop0: detected capacity change from 0 to 2048 [ 264.442459][ T8410] /dev/loop0: Can't open blockdev [ 264.992890][ T3853] hub 3-1:4.0: hub_ext_port_status failed (err = -71) [ 265.013172][ T3610] usb 3-1: USB disconnect, device number 8 [ 265.075585][ T8415] loop2: detected capacity change from 0 to 128 [ 265.119924][ T8415] /dev/loop2: Can't open blockdev [ 265.414540][ T8421] loop1: detected capacity change from 0 to 256 [ 265.432483][ T8421] exfat: Deprecated parameter 'utf8' [ 265.446213][ T8421] exfat: Deprecated parameter 'namecase' [ 265.469047][ T8421] /dev/loop1: Can't open blockdev [ 265.728114][ T27] audit: type=1804 audit(1718252288.097:321): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2979795804/syzkaller.ON8KR4/136/bus" dev="sda1" ino=1940 res=1 errno=0 [ 266.060482][ T8446] loop0: detected capacity change from 0 to 128 [ 266.254209][ T8448] loop3: detected capacity change from 0 to 2048 [ 266.282990][ T8446] /dev/loop0: Can't open blockdev [ 266.537637][ T8448] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 266.546677][ T8448] ext4 filesystem being mounted at /root/syzkaller-testdir2979795804/syzkaller.ON8KR4/137/bus supports timestamps until 2038 (0x7fffffff) [ 266.912344][ T6360] EXT4-fs (loop3): unmounting filesystem. [ 267.007346][ T8429] loop2: detected capacity change from 0 to 32768 [ 267.031605][ T8460] loop3: detected capacity change from 0 to 64 [ 267.143272][ T8462] loop4: detected capacity change from 0 to 256 [ 267.182731][ T8462] exfat: Deprecated parameter 'utf8' [ 267.203421][ T8462] exfat: Deprecated parameter 'namecase' [ 267.253865][ T8462] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 267.533885][ T8475] loop1: detected capacity change from 0 to 1024 [ 267.583235][ T8481] loop2: detected capacity change from 0 to 1024 [ 267.590694][ T8481] /dev/loop2: Can't open blockdev [ 267.597330][ T8479] loop3: detected capacity change from 0 to 1024 [ 267.632288][ T8479] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 267.663987][ T27] audit: type=1800 audit(1718252289.887:322): pid=8481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 267.678087][ T8479] EXT4-fs error (device loop3): ext4_xattr_ibody_get:603: inode #2: comm syz-executor.3: corrupted in-inode xattr [ 267.772510][ T8485] EXT4-fs error (device loop3): ext4_xattr_ibody_list:748: inode #2: comm syz-executor.3: corrupted in-inode xattr [ 267.800602][ T8479] EXT4-fs (loop3): Remounting filesystem read-only [ 267.818493][ T8479] EXT4-fs error (device loop3) in ext4_evict_inode:254: Readonly filesystem [ 267.926927][ T6360] EXT4-fs (loop3): unmounting filesystem. [ 267.944368][ T4117] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 267.967298][ T4117] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 267.981244][ T8490] syz-executor.2[8490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.981342][ T8490] syz-executor.2[8490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.019015][ T8490] syz-executor.2[8490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.043453][ T8490] syz-executor.2[8490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.153415][ T8494] lo: Caught tx_queue_len zero misconfig [ 268.201529][ T8494] netem: incorrect gi model size [ 268.218093][ T8494] netem: change failed [ 268.542861][ T8503] loop3: detected capacity change from 0 to 4096 [ 268.610071][ T8503] NILFS (loop3): invalid segment: Checksum error in segment payload [ 268.653246][ T8503] NILFS (loop3): trying rollback from an earlier position [ 268.674981][ T8511] loop0: detected capacity change from 0 to 2048 [ 268.697463][ T8511] /dev/loop0: Can't open blockdev [ 268.713621][ T8503] NILFS (loop3): recovery complete [ 268.761892][ T8514] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 268.783141][ T8516] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 268.832131][ T8518] syz-executor.2[8518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.832226][ T8518] syz-executor.2[8518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.891907][ T8519] syz-executor.2[8519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.936495][ T8519] syz-executor.2[8519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.988662][ T8523] loop4: detected capacity change from 0 to 512 [ 269.037451][ T8525] ip6tnl0: Caught tx_queue_len zero misconfig [ 269.055807][ T8525] netem: change failed [ 269.064476][ T8527] Invalid ELF header len 1 [ 269.067844][ T8523] EXT4-fs: Ignoring removed mblk_io_submit option [ 269.109290][ T8523] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 269.137015][ T8523] System zones: 1-12 [ 269.158582][ T8523] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 269.256233][ T8523] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 269.345327][ T8523] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 269.442853][ T8543] team0: Caught tx_queue_len zero misconfig [ 269.446405][ T4033] EXT4-fs (loop4): unmounting filesystem. [ 269.477286][ T8545] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 269.788669][ T8557] netem: change failed [ 269.845302][ T8560] input: syz1 as /devices/virtual/input/input10 [ 270.361459][ T8580] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 271.762923][ T8582] loop1: detected capacity change from 0 to 2048 [ 271.789883][ T8582] /dev/loop1: Can't open blockdev [ 272.156559][ T8587] loop4: detected capacity change from 0 to 64 [ 272.320026][ T8588] loop2: detected capacity change from 0 to 4096 [ 272.659120][ T8597] loop1: detected capacity change from 0 to 2048 [ 272.692585][ T8602] loop2: detected capacity change from 0 to 1024 [ 272.718534][ T8597] /dev/loop1: Can't open blockdev [ 272.759382][ T8602] /dev/loop2: Can't open blockdev [ 272.800849][ T27] audit: type=1800 audit(1718252294.632:323): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1961 res=0 errno=0 [ 273.111584][ T8611] loop2: detected capacity change from 0 to 1764 [ 273.266318][ T8590] loop0: detected capacity change from 0 to 40427 [ 273.334461][ T8620] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 273.343965][ T8620] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.3'. [ 273.367879][ T8620] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 273.377065][ T8620] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.3'. [ 273.865427][ T8636] loop1: detected capacity change from 0 to 1024 [ 273.874379][ T8636] /dev/loop1: Can't open blockdev [ 274.236566][ T8653] loop1: detected capacity change from 0 to 1024 [ 274.413788][ T8662] loop4: detected capacity change from 0 to 512 [ 274.474476][ T8662] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 274.484639][ T8662] ext4 filesystem being mounted at /root/syzkaller-testdir203802430/syzkaller.58PCF0/355/bus supports timestamps until 2038 (0x7fffffff) [ 274.554790][ T4033] EXT4-fs (loop4): unmounting filesystem. [ 274.731230][ T8663] loop3: detected capacity change from 0 to 40427 [ 274.782368][ T8682] loop1: detected capacity change from 0 to 64 [ 274.796674][ T8663] F2FS-fs (loop3): Found nat_bits in checkpoint [ 274.861012][ T8663] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 274.922939][ T6360] syz-executor.3: attempt to access beyond end of device [ 274.922939][ T6360] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 275.249699][ T8710] loop2: detected capacity change from 0 to 64 [ 275.715956][ T8715] loop3: detected capacity change from 0 to 32768 [ 275.791036][ T8723] loop4: detected capacity change from 0 to 40427 [ 275.836143][ T8723] F2FS-fs (loop4): Found nat_bits in checkpoint [ 275.933522][ T8723] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 276.126458][ T4033] syz-executor.4: attempt to access beyond end of device [ 276.126458][ T4033] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 276.304848][ T8736] syz-executor.3 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 277.348955][ T8750] loop0: detected capacity change from 0 to 64 [ 277.622288][ T8769] loop0: detected capacity change from 0 to 256 [ 277.648658][ T8769] exfat: Deprecated parameter 'codepage' [ 277.654333][ T8769] exfat: Bad value for 'codepage' [ 277.720073][ T8775] loop2: detected capacity change from 0 to 512 [ 277.727590][ T8775] /dev/loop2: Can't open blockdev [ 277.780109][ T8775] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 278.117800][ T8794] loop0: detected capacity change from 0 to 256 [ 308.667044][ T3579] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 308.682336][ T3579] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 308.690922][ T3579] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 308.698944][ T3579] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 308.707733][ T3579] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 308.715040][ T3579] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.729296][ T3579] Bluetooth: hci2: command 0x0406 tx timeout [ 310.141509][ T48] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 310.151437][ T48] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 310.159527][ T48] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 310.168357][ T48] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 310.176685][ T48] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 310.183975][ T48] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 310.735639][ T3568] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 310.745920][ T3568] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 310.755008][ T3568] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 310.763259][ T3568] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 310.770911][ T3568] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 310.778939][ T3568] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 310.944388][ T3579] Bluetooth: hci5: command tx timeout [ 311.186019][ T48] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 311.202678][ T48] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 311.211064][ T48] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 311.218939][ T48] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 311.226526][ T48] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 311.233835][ T48] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 312.212172][ T3568] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 312.228842][ T3568] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 312.237810][ T3568] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 312.245832][ T3568] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 312.253390][ T3568] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 312.260669][ T3568] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 312.426351][ T3568] Bluetooth: hci6: command tx timeout [ 313.032681][ T3568] Bluetooth: hci7: command tx timeout [ 313.205029][ T3568] Bluetooth: hci5: command tx timeout [ 313.465181][ T3568] Bluetooth: hci8: command tx timeout [ 314.494502][ T3568] Bluetooth: hci9: command tx timeout [ 314.667665][ T3568] Bluetooth: hci6: command tx timeout [ 315.274614][ T3568] Bluetooth: hci7: command tx timeout [ 315.447818][ T3568] Bluetooth: hci5: command tx timeout [ 315.707846][ T3568] Bluetooth: hci8: command tx timeout [ 316.758731][ T3568] Bluetooth: hci9: command tx timeout [ 316.921236][ T3568] Bluetooth: hci6: command tx timeout [ 317.528238][ T3568] Bluetooth: hci7: command tx timeout [ 317.701288][ T3568] Bluetooth: hci5: command tx timeout [ 317.972141][ T3579] Bluetooth: hci8: command tx timeout [ 319.001456][ T3579] Bluetooth: hci9: command tx timeout [ 319.185580][ T3579] Bluetooth: hci6: command tx timeout [ 319.781514][ T3579] Bluetooth: hci7: command tx timeout [ 320.214830][ T3579] Bluetooth: hci8: command tx timeout [ 321.254970][ T3579] Bluetooth: hci9: command tx timeout [ 329.673371][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 354.104326][ T3579] Bluetooth: hci4: command 0x0406 tx timeout [ 379.182958][ T3579] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 379.199364][ T3579] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 379.207578][ T3579] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 379.215620][ T3579] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 379.224758][ T3579] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 379.232162][ T3579] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 380.547191][ T48] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 380.562892][ T48] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 380.575655][ T48] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 380.583768][ T48] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 380.591337][ T48] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 380.598771][ T48] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 381.163373][ T48] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 381.180014][ T48] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 381.189458][ T48] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 381.198892][ T48] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 381.206495][ T48] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 381.216041][ T48] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 381.500802][ T3568] Bluetooth: hci10: command tx timeout [ 381.654157][ T3579] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 381.664207][ T3579] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 381.683024][ T3579] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 381.692310][ T3579] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 381.706521][ T3579] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 381.713900][ T3579] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 382.666454][ T3568] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 382.683283][ T3568] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 382.693439][ T3568] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 382.706829][ T3568] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 382.714424][ T3568] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 382.721897][ T3568] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 382.793476][ T3579] Bluetooth: hci11: command tx timeout [ 383.400298][ T3579] Bluetooth: hci12: command tx timeout [ 383.747033][ T3579] Bluetooth: hci10: command tx timeout [ 383.920274][ T3579] Bluetooth: hci13: command tx timeout [ 384.960288][ T3579] Bluetooth: hci14: command tx timeout [ 385.047027][ T3579] Bluetooth: hci11: command tx timeout [ 385.653773][ T3579] Bluetooth: hci12: command tx timeout [ 386.000366][ T3579] Bluetooth: hci10: command tx timeout [ 386.173732][ T3579] Bluetooth: hci13: command tx timeout [ 387.224821][ T3579] Bluetooth: hci14: command tx timeout [ 387.300576][ T3579] Bluetooth: hci11: command tx timeout [ 387.917954][ T3579] Bluetooth: hci12: command tx timeout [ 388.253798][ T3579] Bluetooth: hci10: command tx timeout [ 388.437984][ T3579] Bluetooth: hci13: command tx timeout [ 389.478101][ T3579] Bluetooth: hci14: command tx timeout [ 389.564746][ T3579] Bluetooth: hci11: command tx timeout [ 390.160607][ T3579] Bluetooth: hci12: command tx timeout [ 390.680822][ T3579] Bluetooth: hci13: command tx timeout [ 391.720871][ T3579] Bluetooth: hci14: command tx timeout [ 396.238869][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.991661][ T28] INFO: task kworker/1:1:26 blocked for more than 143 seconds. [ 441.999336][ T28] Not tainted 6.1.93-syzkaller #0 [ 442.010587][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 442.021263][ T28] task:kworker/1:1 state:D stack:21216 pid:26 ppid:2 flags:0x00004000 2024/06/13 04:20:50 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 442.036221][ T28] Workqueue: ipv6_addrconf addrconf_verify_work [ 442.042495][ T28] Call Trace: [ 442.079512][ T28] [ 442.082486][ T28] __schedule+0x142d/0x4550 [ 442.087004][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 442.115016][ T28] ? preempt_schedule_common+0xa6/0xd0 [ 442.121041][ T28] ? __sched_text_start+0x8/0x8 [ 442.134444][ T28] ? print_irqtrace_events+0x210/0x210 [ 442.139963][ T28] schedule+0xbf/0x180 [ 442.154081][ T28] schedule_preempt_disabled+0xf/0x20 [ 442.159487][ T28] __mutex_lock+0x6b9/0xd80 [ 442.163998][ T28] ? __mutex_lock+0x53c/0xd80 [ 442.186595][ T28] ? addrconf_verify_work+0x15/0x30 [ 442.191822][ T28] ? mutex_lock_nested+0x10/0x10 [ 442.196767][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 442.219102][ T28] ? print_irqtrace_events+0x210/0x210 [ 442.224587][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 442.240742][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 442.245997][ T28] ? process_one_work+0x7a9/0x11d0 [ 442.262403][ T28] addrconf_verify_work+0x15/0x30 [ 442.267476][ T28] process_one_work+0x8a9/0x11d0 [ 442.272542][ T28] ? worker_detach_from_pool+0x260/0x260 [ 442.289591][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 442.295279][ T28] ? kthread_data+0x4e/0xc0 [ 442.299806][ T28] ? wq_worker_running+0x97/0x190 [ 442.304843][ T28] worker_thread+0xa47/0x1200 [ 442.361868][ T28] kthread+0x28d/0x320 [ 442.365989][ T28] ? worker_clr_flags+0x190/0x190 [ 442.392427][ T28] ? kthread_blkcg+0xd0/0xd0 [ 442.397056][ T28] ret_from_fork+0x1f/0x30 [ 442.401514][ T28] [ 442.414225][ T28] INFO: task syz-executor.4:8752 blocked for more than 143 seconds. [ 442.422224][ T28] Not tainted 6.1.93-syzkaller #0 [ 442.435770][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 442.444454][ T28] task:syz-executor.4 state:D stack:27320 pid:8752 ppid:4033 flags:0x00004006 [