last executing test programs: 18.218611348s ago: executing program 0 (id=5277): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b31, &(0x7f0000000580)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x5, 0x0, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b7a8a5fc7b3627ca"}}, 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="06"], 0x48}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x0) 16.73040225s ago: executing program 0 (id=5279): socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63dcdfd71d3043b0dd5c4cf9785f3f531abc19bc1548f5e0b33006bd1049ca45bd8500d67a5aa0200000000000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc96eb384dbb4268c50943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab856af0a0c12b3c93ba5aa906bde2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c7500"/400, @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002140)='./file0\x00', 0x391402, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0), 0xb) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x20a5f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r4, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002d80)={0x2020}, 0x2025) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/110, 0x6e, 0x0) 16.72934786s ago: executing program 4 (id=5280): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000300)=""/85}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x107', 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000000000000000000001003e0000000012000000003800000000000000a163000000000000000000000000007f8049e30c"], 0x58) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40), 0xfc, 0x575, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000080)='./bus\x00', 0x835425, &(0x7f0000000080)=ANY=[], 0x1, 0x127f, &(0x7f0000002f80)="$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") ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x74a3e78c568d224c, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) msgsnd(0x0, 0x0, 0x8, 0x0) msgget(0x1, 0x93) msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200"], 0x8, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) finit_module(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 16.108854967s ago: executing program 3 (id=5288): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x100, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f00000004c0)='./file1\x00', 0x2000, 0x1) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000440)='./file0\x00', 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000240)='./file1\x00', 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00') r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0xfe3c) dup3(r4, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) 14.8731939s ago: executing program 3 (id=5292): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000006c72663a00000000000000008500000061000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x4, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.704123553s ago: executing program 3 (id=5294): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(0xffffffffffffffff, 0x7fff) r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 14.560487593s ago: executing program 3 (id=5297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000002020300000000000010000002000004440002802c00018014000300fc00000000000000000000000000000014000400ff0100000000beb000000000000000011400018008"], 0x58}, 0x1, 0x0, 0x0, 0xc010}, 0x18) 14.2033272s ago: executing program 3 (id=5299): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xaed, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r2, @ANYRES8=r2, @ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000000090102000020001cb11c8d00000000240002000c00020200000000000000001400018008000100ac14140008000200ac1e270108000540000000000900010073797a310000e8ff0b000480040001400000000032d8ee362a15d259"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0xa, 0x3, 0x0, 0x0}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000240)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 13.170740608s ago: executing program 0 (id=5300): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80), 0x0, 0x6400c000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="dc0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400fc0200000000000000000000000000000c00028005000100000000003c0002802c0001801400030000000000000000000000ffffe000000214000400fc0200000000000000000000000000000c"], 0xdc}, 0x1, 0xfffff000, 0x0, 0x4010}, 0x4000010) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSPTLCK(r6, 0x5423, &(0x7f0000000040)=0x1) openat$mixer(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x1}]}}}]}, 0x44}}, 0x0) 11.217938185s ago: executing program 3 (id=5303): r0 = syz_open_procfs(0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c98012887634086080070061ffe80000000000000ff"], 0xffdd) 10.671719096s ago: executing program 2 (id=5306): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_CONTINUE(r0, 0x8010aa02, &(0x7f0000000000)={{&(0x7f000016e000/0x4000)=nil, 0x7ffffffff000}}) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x23, 0x3, 0x5) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000055) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xb, 0xfe, 0x0, @SEQ_NOTEON=@note=0x2}) r3 = getpid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x4a}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000c}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1c, 0x6, 0x0, 0x0, 0x19}, 0x48) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) bind$tipc(r6, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000040) write(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 9.914973843s ago: executing program 4 (id=5309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000002020300000000000010000002000004440002802c00018014000300fc00000000000000000000000000000014000400ff0100000000beb000000000000000011400018008"], 0x58}, 0x1, 0x0, 0x0, 0xc010}, 0x18) 9.577003879s ago: executing program 4 (id=5311): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0xfffffffffffffffe, 0x10000) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000280)=ANY=[@ANYBLOB="71ba000013000000818a858a8b03058e8d8d898e87028300090d80fb2f0936d5f7b7822f4b21a15a2c993e3ef2779475c0e3df9963db0e07fc7f829ee15fe74571de0f604fa844173172ee5a3acdc934da55d5b0cf7940c12e8678292cef49ea89c5a3ce966c5c3a57e28f4738d6a976b41b99"]) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x40600) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendto$packet(r3, &(0x7f0000000180)="0b03feffe0ff020002004788aa96a13bb100002f000088ca1a00", 0x10008, 0x0, &(0x7f0000000140), 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x7497c, 0x6) creat(0x0, 0x0) close(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000056195efc2711d42d00000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="02120000"], 0x10}}, 0x0) close(r5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001d0001"], 0xb8}}, 0x0) 8.503740049s ago: executing program 2 (id=5312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4004090}, 0x40000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003100), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000003140)={0x50, r8, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0xfffffff7, @mcast1, 0x8000}}}, &(0x7f0000000000)=0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048050}, 0x0) 8.484365171s ago: executing program 4 (id=5313): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f00000001c0), 0x4) mkdir(0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x3, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) 6.792859428s ago: executing program 2 (id=5314): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) sendmmsg$inet6(r0, &(0x7f0000006500)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfe38}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="ad04", 0x2}], 0x1}}], 0x1, 0x20000000) 6.63609155s ago: executing program 2 (id=5315): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000f6ffffe3ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff070000000000"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e24, 0x0, @empty}}}, 0x108) 6.456048803s ago: executing program 1 (id=5316): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x275, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) 6.360047631s ago: executing program 1 (id=5317): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) dup3(r2, r1, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x2}, 0x8) 6.23936698s ago: executing program 1 (id=5318): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.139997967s ago: executing program 1 (id=5319): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x8100000000000000}, 0x0) 6.089822961s ago: executing program 4 (id=5320): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 3.5831443s ago: executing program 2 (id=5321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000002020300000000000010000002000004440002802c00018014000300fc00000000000000000000000000000014000400ff0100000000beb0000000000000000114000180080001006401"], 0x58}, 0x1, 0x0, 0x0, 0xc010}, 0x18) 3.4429978s ago: executing program 2 (id=5322): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x9801) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) gettid() r4 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r5, 0x5421, &(0x7f0000001100)=0x7) connect$bt_sco(r5, &(0x7f0000000040)={0x1f, @fixed}, 0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x1be}, 0x8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x78, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xe, {{{}, {}, @broadcast, @device_b}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x24]}]}]}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.409569733s ago: executing program 0 (id=5323): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0xfffffffffffffffe, 0x10000) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000280)=ANY=[@ANYBLOB="71ba000013000000818a858a8b03058e8d8d898e87028300090d80fb2f0936d5f7b7822f4b21a15a2c993e3ef2779475c0e3df9963db0e07fc7f829ee15fe74571de0f604fa844173172ee5a3acdc934da55d5b0cf7940c12e8678292cef49ea89c5a3ce966c5c3a57e28f4738d6a976b41b99"]) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x40600) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendto$packet(r3, &(0x7f0000000180)="0b03feffe0ff020002004788aa96a13bb100002f000088ca1a00", 0x10008, 0x0, &(0x7f0000000140), 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x7497c, 0x6) creat(0x0, 0x0) close(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000056195efc2711d42d00000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="02120000"], 0x10}}, 0x0) close(r5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001d0001"], 0xb8}}, 0x0) 336.048914ms ago: executing program 1 (id=5325): syz_emit_ethernet(0x112, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaa0c56a02f90685e88a800008121"], 0x0) 335.641714ms ago: executing program 4 (id=5326): socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="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"/400, @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002140)='./file0\x00', 0x391402, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0), 0xb) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x20a5f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, &(0x7f0000002d80)={0x2020}, 0x2025) pread64(r4, &(0x7f0000000080)=""/110, 0x6e, 0x0) 241.298602ms ago: executing program 1 (id=5327): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x275, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) 184.756236ms ago: executing program 0 (id=5328): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) dup3(r2, r1, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x2}, 0x8) 0s ago: executing program 0 (id=5329): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000b80)=ANY=[@ANYBLOB='\x00llow_utime=00000000000000000000006,umask=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=default,namecase=1,fmask=00000000000000000000406,fmask=00000000000000000000005,fmask=00000000000000000000006,fmask=00000000000000000000003,iocharset=cp864,\x00'], 0x1, 0x1524, &(0x7f00000037c0)="$eJzs3AuYjtXaOPD7Xms9Y0h6m+QwrLXuhzc5LJMkOSTJIUmSJMkpIWmSLQmJIaekIQnJYUgOQ0gOE5PG+Xw+JCRJkyQhOSXrf0342+3a3977233bd31z/67ruaz7Xc+9nvW89/u8z8HMfNdlaM3Gtao1JCL4t+DFf5IAIBYABgLAdQAQAEC5uHJxWf05JSb9exthf65HUq/2DNjVxPXP3rj+2RvXP3vj+mdvXP/sjeufvXH9szeuP2PZ2ebpBa/nJfsu/Pw/O+Pz//8hmaXHfrW29I1dAWL+2RSuf/bG9f8/K/hnVuL6Z29c/+wq9mpPgP0vwMd/dpDj7/Zw/bM3rj9j2dnVfv58tReIZO/34Gp//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZQ9n/BUKAC63r/a8GGOMMcYYY4wx9ufxOa72DBhjjDHGGGOMMfY/D0GABAUBxEAOiIWckAsEAFwLeeA6iMD1EAc3QF64EfJBfigABSEeCkFh0GAgBghCKAJFIQo3QTG4GYpDCSgJpcBBaUiAW6AM3Apl4TYoB7dDebgDKkBFqASV4U6oAndBVbgbqsE9UB1qQE2oBfdCbbgP6sD9UBcegHrwINSHh6ABPAwN4RFoBI9CY3gMmsDj0BSaQXNoAS3/W/kvQQ94GXpCL0iC3tAHXoG+0A/6wwAYCK/CIHgNBsPrkAxDYCi8AcPgTRgOb8EIGAmj4G0YDe/AGBgL42A8pMAEmAjvwiR4DybDFJgK0yAVpsMMeB9mwiyYDR/AHPgQ5sI8mA8LIA0+goWwCNLhY1gMn0AGLIGlsAyWwwpYCatgNayBtbAO1sMG2AibYDNsga2wDbbDDtgJn8Iu+Ax2wx7YC5/DPvjiX8w//Tf5XREQUKBAhQpjMAZjMRZzYS7MjbkxD+bBCEYwDuMwL+bFfJgPC2ABjMd4LIyF0aBBQsIiWASjGMViWAyLY3EsiSXRocMETMAyeCuWxbJYDstheSyPFbAiVsTKWBmrYBWsilWxGlbD6lgda2JNvBfvxd5YB+tgXayL9bDe5cdT2BAbYiNshI2xMTbBJtgUm2JzbI4tsSW2wlbYGltjW2yL7bAdtsf2mIiJ2AE7YEfsiJ2wE3bGztgFu2BX7IbdMl/KAfgyvoy9sLrojX2wD/bF5Bz9cQAOwFdxEL6Gr+HrmIxDcCi+gW/gmzgcT+EIHImjcBRWEe/gGByLJMZjCqbgRJyIk3ASTsYpOAWnYSpOxxk4A2fiLJyFH+Ac/BA/xHk4DxdgGqbhQlyE6ZiOi/E0ZuASXIrLcDmuwOW4ClfjKlyL63AtbsANuAk34RbcgttwG+7AHfgpKgD8DPfgHkzGfbgP9+N+PIAH8CAexEzMxEN4CA/jYTyCR/AoHsVjeBxP4HE8iSfxFJ7GM3gGz+E5PI8vxH/T6NMSa5JBZFFCiRgRI2JFrMglconcIrfII/KIiIiIOBEn8oq8Ip/IJwqIAiJexIvCorAwwggSYQwAiKiIimKimCguiouSoqRwwokEkSDKiDKirCgryonbRXlxh6ggKoo2rrKoLKqItq6quFtUE9VEdVFD1BS1RC1RW9QWdUQdUVfUFfVEPVFfPCQaiN7YHx8RWZVpLIZgEzEUm4pmQl76BmslhmNr0Ua0FU+JkTgC24tWLlE8KzqIMdhR/EWMxedFZzEeu4gXRVfRTXQXL4keorXrKXqJydhb9BHTsK/oJ/qLAWIm1hAf4JycNcXrIlkMEUPFG2IBvimGi7fECDFSjBJvi9HiHTFGjBXjxHiRIiaIieJdMUm8JyaLKWKqmCZSxXQxQ7wvZopZYrb4QMwRH4q5Yp6YLxaINPGRWCgWiXTxsVgsPhEZYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie1ih9gpPhW7xGdit9gj9orPxT7xhdgvvhQHxFfioPhaZIpvxCHxrTgsvhNHxPfiqPhBHBPHxQnxozgpfhKnxGlxRpwV58TP4rz4RVwQXoBEKaSUSgYyRuaQsTKnzCWvkbllcOndvV7GyRtkXnmjzCfzywKyoIyXhWRhqaWRVpIMZRFZVEblTbKYvFkWlyVkSVlKOllaJshbZBl5qywrb5Pl5O2yvLxDVpAVZSVZWd4pq8i7JEQubqO6rCFrylryXpkE98k68n5ZVz4g68kHZX35kGwgH5YN5SOykXxUNpaPySbycdlUNpPNZQvZUj4hW8knZWvZRraVT8l28mnZXj4jE+WzsoP0lz4iz8vO8gXZRb4ou8pusrv8RV6QXvaUvST0BtlHviL7yn6yvxwgB8pX5SD5mhwsX5fJcogcKt+Qw+Sbcrh8S46QI+Uo+bYcLd+RY+RYOU6Olylygpwo35WT5Htyspwip8ppMlVOl/0vjTRbyn+Y/+4f5A/+deub5Ga5RW6V2+R2uUPulJ/KXXKX3C13y71yr9wn98n9cr88IA/Ig/KgzJSZ8pA8JA/Lw/KIPCKPyqPymDwuz8of5Un5kzwlT8vT8qw8J8/J85feA1CohJJKqUDFqBwqVuVUudQ1Kre6VuVR16mIul7FqRtUXnWjyqfyqwKqoIpXhVRhpZVRVpEKVRFVVEXVTXjpA6NKqlLKqdIqQd3yr+SrYupmVVyV+E3+5fkl/Z35tVQtVSvVSrVWrVVb1Va1U+1Ue9VeJapE1UF1UB1VR9VJdVKdVWfVRXVRXVVX1V11Vz1UD9VT9VRJKkn1Ua+ovqqf6q8GqIHqVTVIDVKD1WCVrJLVUDVUDVPD1HA1XI1QI9QoNUqNVqPVGDVGjVPjVIpKURPVRDVJTVKT1WQ1VU1VqSpVzVAz1Ew1U81Ws9UcNUfNVXPVfDVfpak0tVAtVOkqXS1Wi1WGWqKWqGVqmVqhVqhVapVao9aodWqd2qA2qAy1WW1WW9VWtV1tVzvVTrVL7VK71W61V+1V+9Q+tV/tVwfUAXVQHVSZKlMdUofUYXVYHVFH1FF1VB1Tx9QJdUKdVCfVKXVKnVFn1Dl1Tp1X59UFdSHrsi8QgQhUkHWmjQlig9ggV5AryB3kDvIEeYJIEAnigrggb3BjkC/IHxQICgbxQaGgcKADE9hAXCp6NLgpKBbcHBQPSgQlg1KBC0oHCcEtQZng1qBscFtQLrg9KB/cEVQIKgaVgsrBnUGV4K6ganB3UC24J6ge1AhqBrWCe4PawX1BneD+oG7wQFAveDCoHzwUNAgeDhoGjwSNgkeDxsFjQZPg8aBp0CxoHrQIWv6p43t/Kv+TrqfupZN0b91Hv6L76n66vx6gB+pX9SD9mh6sX9fJeogeqt/Qw/Sberh+S4/QI/Uo/bYerd/RY/RYPU6P1yl6gp6o39WT9Ht6sp6ip+ppOlVP1zP0+3qmnqVn6w/0HP2hnqvn6fl6gU7TH+mFepFO1x/rxfoTnaGX6KV6mV6uV+iVepVerdfotXqdXq836I16k96st+itepvernfonfpTvUt/pnfrPXqv/lzv01/o/fpLfUB/pQ/qr3Wm/kYf0t/qw/o7fUR/r4/qH/QxfVyf0D/qk/onfUqf1mf0WX1O/6zP61/0Be2zLu6zTu9GGWViTIyJNbEml8llcpvcJo/JYyImYuJMnMlr8pp8Jp8pYAqYeBNvCpvCJgsZMkVMERM1UVPMFDPFTXFT0pQ0zjiTYBJMGVPGlDVlTTlTzpQ35U0FU8FUMpXMneZOc5e5y9xt7jb3mHtMDVPD1DK1TG1T29QxdUxdU9fUM/VMfVPfNDANTEPT0DQyjUxj09g0MU1MU9PUNDfNTUvT0rQyrUxr09q0NW1NO9POtDftTaJJNB1MB9PRdDSdTCfT2XQ2XUwX09V0Nd1Nd9PD9DA9TU+TZJJMH9PH9DV9TX/T3ww0A80gM8gMNoNNskk2Q81QM8wMM8PNcDPCjDSjsg4f844ZY8aacWa8STEpZqKZaCaZSWaymWymmqkm1aSaGWaGmWlmmtlmtplj5pi5Zq6Zb+abNJNmFpqFJt2km8VmsckwGWapWWqWm+VmpVlpVpvVZq1Za9bDerPRbDSbzWaz1Ww12812s9PsNLvMLrPb7DZ7zV6zz+wz+81+c8AcMAfNQZNpMs0hc8gcNofNEXPEHDVHzTFzzJwwJ8xJc9KcMqfMGXPGnDP5L50vvYm1OW0ue43Nba+1eex19m/jAragjbeFbGGrbT6b/zexsdYWtyVsSVvKOlvaJthbfhdXsBVtJVvZ3mmr2Lts1d/Fte19to6939a1D9ha9t7fxPXsg7a+fcw2QASwzWwj28I2to/ZJvZx29Q2s81tC9vOPm3b22dson3WdrDP/S5eaBfZ1XaNXWvX2d12jz1jz9rD9jt7zv5se9pedqB91Q6yr9nB9nWbbIf8Lh5l37aj7Tt2jB1rx9nxv4un2mk21U63M+z7dqad9bs4zX5k59h0O9fOs/Ptgl/jrDml24/tYvuJzbABLLXL7HK7wq60q/7/XJfZDXaj3WR32c/sVrvNbrc77M7LF8J2j91rP7f77Bf2kP3WHrBf2YP2iM203/waZ+3fEfu9PWp/sMfscXvC/mhP2p/U5eysff/R/mIvWG+BkIAkKQoohnJQLOWkXHQN5aZrKQ9dRxG6nuLoBspLN1I+yk8FqCDFUyEqTJoMWSIKqQgVpSjdRJenV5JKkaPSlEC3UBm6lcrSbVSObqfydAdVoIpUiSrTnVSF7qKqdDdVo3uoOtWgmlSL7qXadB/VofupLjxA9ehBqk8PUQN6mBrSI9SIHqXG9Bg1ocepKTWj5tSCWtIT1IqepNbUhtrSU9SOnqb29Awl0rPUgZ6jjvQX6kTPU2d6gbrQi9SVulF3eol60MvUk3pREvWmPvQK9aV+1J8G0EB6lQbRazSYXqdkGkJD6Q0aRm/ScHqLRtBIGkVv02h6h8bQWBpH4ymFJtBEepcm0Xs0mabQVJpGqTSdZtD7NJNm0Wz6gObQhzSX5tF8WkBp9BEtpEWUTh/TYvqEMmgJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQTvqUdtFntJv20F76nPbRF7SfvqQD9BUdpK8pk76hQ/QtHabv6Ah973vRD3SMjtMJ+pFO0k90ik7TGTpL5+hnOk+/0AXyBCGGIpShCoMwJswRxoY5w1zhNWHu8NowT3hdGAmvD+PCG8K84Y1hvjB/WCAsGMaHhcLCoQ5NaEMKw7BIWDSMhjeFxcKbw+JhibBkWCp0YekwIbwlLBPeGpYNbwvLhbeH5cM7wgphxfCxByqHd4ZVwrvCquHdYbXwnrB6WCOsGdYK7w1rh/eFdcL7w7rhA2HZ8MGwfvhQ2CB8OGwYPhI2Ch8NG4ePhU3Cx8OmYbOwedgibBk+EbYKnwxbh23CtuFTYbvw6bB9+EyYGD4bdgif+7X/wUV/vz8p7B32CV8JXwm9v1/Ojy6IpkU/ii6MLoqmRz+OLo5+Es2ILokujS6LLo+uiK6Mroqujq6Jro2ui66PbohujG6Kel8rBzh0wkmnXOBiXA4X63K6XO4al9td6/K461zEXe/i3A0ur7vR5XP5XQFX0MW7Qq6w084468iFrogr6qLuJlfM3eyKuxKupCvlnCvtElwL19K1dK3ck661a+PauqfcU+5p97R7xj3jnnUd3HOuo/uL6+Sed53dC+4F96Lr6rq57u4l18NNyHPxmExyfVwf19f1df1dfzfQDXSD3CA32A12yS7ZDXVD3TA3zA13w90IN8KNcqPcaDfajXFj3Dg3zqW4FDfRTXST3CQ32U12U91Ul+pS3Qw3w810M12VWRe3MtfNdfPdfJfm0txCl3XNmO4Wu8Uuw2W4pW6pW+6Wu5VupVvtVru1bq1b79a7jW6j2+w2u61uq9vutrudbqfb5Xa53f66i4O6fW6/2+8OuAPuoPvaZbpv3CH3rTvsvnNH3PfuqPvBHXPH3Qn3ozvpfnKn3Gl3xp1159zP7rz7xV1w3qVEJkQmRt6NTIq8F5kcmRKZGpkWSY1Mj8yIvB+ZGZkVmR35IDIn8mFkbmReZH5kQSQt8lFkYWRRJD3ycWRx5JNIRmRJZGlkWWR5ZEXE+0JbQ1/EF/VRf5Mv5m/2xX0JX9KX8s6X9gn+Fl/G3+rL+tt8OX+7L+/v8BV8RV/JP+6b+ma+uW/hW/onfCv/pG/t2/i2/infzj/t2/tnfKJ/1nfwz/mO/i++k3/ed/Yv+C7+Rd/Vd/Pd/Uu+h3/Z9/S9fJLv7fv4V3xf38/39wP8QP+qH+Rf84P96z7ZD/FD/Rt+mH/TD/dv+RF+pB8V87YfffkWGcb7FD/BT/Tv+kn+PbjbT/FT/TSf6qf7Gf59P9PP8rP9B36O/9DP9fP8fL/Ap/mP/EK/yKf7j/1i/4nP8EsuP1T2K/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v93v8Dv9p36X/8zv9nv8Xv+53+e/8Pv9l/6A/8of9F/7TP+NP+S/9Yf9d/6I/94f9T/4Y/64P+F/9Cf9T/6UP+3P+LP+nP/Zn/e/+Av8O2uMMcYYY/+UCVea4rc9Fx/n9/6DHPFXK/cBgGu3Fcz86/6sK8r1+S62+4n4dhEAeLZXl0cuL9WrJyUlXVo3Q0JQdB7A5f8JyhIDV+Il0BaehkRoA2X+cP79RLdz9A/Gj94OkOuvcmLhSnxl/C8BMOkPxn/iqVELy4dn4v6L8ecBFC96JScnXImXQNtfn6+0gbJ/Z/75W/2D+ef8KgWg9V/l5IYr8ZX5J8CT8Bwk/mZNxhhjjDHGGGPson6iUqfL95+Xf+Lzj+7P49WVnBxwJf5H9+eMMcYYY4wxxhi7+p7v1v2ZJxIT23T61xtV/1tZ/3SjCfxPjcyNP2x4D3D5FQUA/+aAAFkN+Z/ciy3/kW0lXzp0/rZr+VkfwP+OUv4Zjav8xcQYY4wxxhj701256P/t6+pqTYgxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/Tuxq7yNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//8BsgGO") creat(&(0x7f0000000040)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): em [ 1075.049014][T19757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4434'. [ 1075.096205][T19757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4434'. [ 1075.135785][T19728] XFS (loop4): Ending clean mount [ 1075.146915][T19728] XFS (loop4): Quotacheck needed: Please wait. [ 1075.224854][T19728] XFS (loop4): Quotacheck: Done. [ 1075.392069][T18429] XFS (loop4): Unmounting Filesystem [ 1075.651603][T19775] 9pnet_fd: Insufficient options for proto=fd [ 1078.466329][T19802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4444'. [ 1078.472361][T19812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4443'. [ 1078.472430][T19812] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4443'. [ 1078.557808][T19813] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1078.557836][T19813] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1078.557951][T19813] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1078.557964][T19813] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1082.486015][T19872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4465'. [ 1082.496034][T19872] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4465'. [ 1083.431834][T19884] loop2: detected capacity change from 0 to 256 [ 1083.440696][T19884] exfat: Deprecated parameter 'utf8' [ 1083.446161][T19884] exfat: Deprecated parameter 'namecase' [ 1083.452496][T19884] exfat: Deprecated parameter 'utf8' [ 1083.473738][T19884] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1083.962470][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 1083.962509][ T26] audit: type=1800 audit(1725102295.922:818): pid=19886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4470" name="bus" dev="loop2" ino=1048691 res=0 errno=0 [ 1085.525992][T19906] program syz.1.4474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1085.916839][ T52] block nbd0: Attempted send on invalid socket [ 1085.926316][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1087.422439][T19939] loop2: detected capacity change from 0 to 256 [ 1087.463355][T19939] exfat: Deprecated parameter 'utf8' [ 1087.512327][T19939] exfat: Deprecated parameter 'namecase' [ 1087.543709][T19939] exfat: Deprecated parameter 'utf8' [ 1087.565169][T19939] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1087.585139][T19942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4487'. [ 1087.594293][T19942] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4487'. [ 1088.441928][ T26] audit: type=1800 audit(1725102300.432:819): pid=19947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4486" name="bus" dev="loop2" ino=1048692 res=0 errno=0 [ 1090.026658][T19981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4498'. [ 1090.035775][T19981] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4498'. [ 1091.903168][T19997] loop4: detected capacity change from 0 to 1024 [ 1092.395099][T20015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4503'. [ 1092.395190][T20015] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4503'. [ 1092.659002][T20020] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4507'. [ 1093.640824][T20025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4500'. [ 1093.640915][T20025] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4500'. [ 1093.669437][T20026] loop0: detected capacity change from 0 to 512 [ 1093.675319][T20026] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1093.714809][T20026] EXT4-fs error (device loop0): __ext4_iget:5055: inode #11: block 1: comm syz.0.4509: invalid block [ 1093.718406][T20026] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.4509: couldn't read orphan inode 11 (err -117) [ 1093.718626][T20026] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1094.883039][T20026] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.4509: Directory hole found for htree leaf block 0 [ 1095.232636][T20042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4511'. [ 1095.241726][T20042] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4511'. [ 1095.479319][T18299] EXT4-fs (loop0): unmounting filesystem. [ 1096.791056][T20060] loop0: detected capacity change from 0 to 1024 [ 1098.243360][T20070] loop1: detected capacity change from 0 to 2048 [ 1099.034701][T20075] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4519'. [ 1099.453979][T20100] xt_hashlimit: size too large, truncated to 1048576 [ 1099.713384][T20104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4523'. [ 1099.722483][T20104] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4523'. [ 1100.481395][T20082] loop1: detected capacity change from 0 to 32768 [ 1100.512106][T20082] XFS: noikeep mount option is deprecated. [ 1100.579901][T20082] XFS (loop1): Mounting V5 Filesystem [ 1100.673454][T20082] XFS (loop1): Ending clean mount [ 1100.689716][T20082] XFS (loop1): Quotacheck needed: Please wait. [ 1100.775794][T20082] XFS (loop1): Quotacheck: Done. [ 1102.800952][T16046] XFS (loop1): Unmounting Filesystem [ 1103.203103][T20169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4527'. [ 1103.212225][T20169] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4527'. [ 1103.897397][T20187] loop4: detected capacity change from 0 to 1024 [ 1103.969877][T20187] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 1104.197283][T20193] loop1: detected capacity change from 0 to 1024 [ 1104.530177][T20187] loop4: detected capacity change from 0 to 8192 [ 1105.223550][T10197] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1106.204256][T20210] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4533'. [ 1107.135748][T20224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4538'. [ 1107.144906][T20224] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4538'. [ 1110.932483][T20265] loop1: detected capacity change from 0 to 1024 [ 1111.615304][ T3651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1111.628871][ T3651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1111.638316][ T3651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1111.646476][ T3651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1111.655193][ T3651] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1111.662835][ T3651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1111.821267][T13216] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.049957][T13216] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.341017][T13216] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.666626][T20290] loop0: detected capacity change from 0 to 256 [ 1113.441444][T13216] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.465716][T20292] loop0: detected capacity change from 0 to 512 [ 1113.482969][T20292] EXT4-fs: Ignoring removed orlov option [ 1113.507772][T20292] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1113.540744][T20292] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e014e19c, mo2=0002] [ 1113.569960][T20292] System zones: 1-12 [ 1113.588845][T20292] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.4551: casefold flag without casefold feature [ 1113.659675][T20292] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.4551: missing EA_INODE flag [ 1113.730378][T20292] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.4551: error while reading EA inode 12 err=-117 [ 1113.764350][ T3652] Bluetooth: hci0: command tx timeout [ 1113.799046][T20292] EXT4-fs (loop0): 1 orphan inode deleted [ 1113.804781][T20292] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1113.965101][T20299] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4547'. [ 1114.685773][T20292] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.4551: Directory hole found for htree leaf block 0 [ 1114.839090][T18299] EXT4-fs (loop0): unmounting filesystem. [ 1114.956352][T20268] chnl_net:caif_netlink_parms(): no params data found [ 1114.974189][T20303] loop4: detected capacity change from 0 to 512 [ 1115.058578][T20303] EXT4-fs: Ignoring removed nobh option [ 1115.064217][T20303] EXT4-fs: quotafile must be on filesystem root [ 1115.199538][T10197] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1115.758904][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.839668][ T3637] Bluetooth: hci0: command tx timeout [ 1115.897879][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.248763][T20318] program syz.4.4555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1117.209792][ T26] audit: type=1326 audit(1725102329.202:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20320 comm="syz.4.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1117.235805][ T26] audit: type=1326 audit(1725102329.212:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20320 comm="syz.4.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1117.259845][ T26] audit: type=1326 audit(1725102329.212:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20320 comm="syz.4.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1117.323620][ T26] audit: type=1326 audit(1725102329.212:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20320 comm="syz.4.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1117.432781][ T26] audit: type=1326 audit(1725102329.212:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20320 comm="syz.4.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1117.529199][ T26] audit: type=1326 audit(1725102329.212:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20320 comm="syz.4.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1117.553125][T20268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.567842][ T26] audit: type=1326 audit(1725102329.212:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20320 comm="syz.4.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1117.584204][T20268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.651398][ T26] audit: type=1326 audit(1725102329.252:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20320 comm="syz.4.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1117.655433][T20268] device bridge_slave_0 entered promiscuous mode [ 1117.750357][ T26] audit: type=1326 audit(1725102329.392:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20325 comm="syz.3.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7286179eb9 code=0x7ffc0000 [ 1117.859728][ T3651] Bluetooth: hci1: command 0x0406 tx timeout [ 1117.877564][T20268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.915534][T20268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.922681][ T3637] Bluetooth: hci0: command tx timeout [ 1117.933849][ T26] audit: type=1326 audit(1725102329.392:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20325 comm="syz.3.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f7286179eb9 code=0x7ffc0000 [ 1118.012777][T20344] syz.1.4560[20344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1118.013235][T20344] syz.1.4560[20344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1118.324705][T20268] device bridge_slave_1 entered promiscuous mode [ 1118.773206][T20313] loop0: detected capacity change from 0 to 40427 [ 1118.874927][T20313] F2FS-fs (loop0): invalid crc value [ 1118.939099][T20268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1118.969613][T20268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.980594][T20313] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1119.272118][T20268] team0: Port device team_slave_0 added [ 1119.294408][T20268] team0: Port device team_slave_1 added [ 1119.876541][T20268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.907769][T20268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1119.997903][ T3637] Bluetooth: hci0: command tx timeout [ 1120.088033][T20268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.173816][T13216] device hsr_slave_0 left promiscuous mode [ 1120.180571][T13216] device hsr_slave_1 left promiscuous mode [ 1120.260482][T13216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1120.270187][T13216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.283449][T13216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1120.300914][T13216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.315462][T13216] device bridge_slave_1 left promiscuous mode [ 1120.329867][T13216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.346059][T13216] device bridge_slave_0 left promiscuous mode [ 1120.352526][T13216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.508060][T20356] loop4: detected capacity change from 0 to 40427 [ 1120.515064][T13216] device veth1_macvtap left promiscuous mode [ 1120.656554][T20356] F2FS-fs (loop4): invalid crc value [ 1120.656616][T13216] device veth0_macvtap left promiscuous mode [ 1120.686941][T13216] device veth1_vlan left promiscuous mode [ 1120.697476][T13216] device veth0_vlan left promiscuous mode [ 1120.725516][T20356] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1120.935413][T20356] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1122.416184][T20379] loop1: detected capacity change from 0 to 40427 [ 1122.486630][T20379] F2FS-fs (loop1): invalid crc value [ 1122.540715][T20379] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1122.581414][T20406] loop4: detected capacity change from 0 to 256 [ 1122.672753][T20406] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1122.791530][T20379] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1123.040755][T20409] overlayfs: filesystem on './file1' not supported [ 1123.666701][T20412] loop4: detected capacity change from 0 to 512 [ 1123.762639][T20412] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1123.789215][T20412] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038 (0x7fffffff) [ 1124.156374][T12451] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 1124.159438][T16046] syz-executor: attempt to access beyond end of device [ 1124.159438][T16046] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 1124.537909][T12451] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 1124.553088][T13216] team0 (unregistering): Port device team_slave_1 removed [ 1124.560837][T12451] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1124.687947][T12451] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1124.697016][T12451] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1124.716347][T13216] team0 (unregistering): Port device team_slave_0 removed [ 1124.717702][T12451] usb 5-1: SerialNumber: syz [ 1124.768041][T20412] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1124.859640][T13216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1124.999198][T20412] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1125.038264][T13216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1125.251343][T20421] loop1: detected capacity change from 0 to 40427 [ 1125.290413][T20421] F2FS-fs (loop1): invalid crc value [ 1125.323591][T20421] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1125.383922][T20421] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 1125.408339][T20421] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1125.697292][T20430] syz.1.4576: attempt to access beyond end of device [ 1125.697292][T20430] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1125.876859][T13216] bond0 (unregistering): Released all slaves [ 1126.077415][T16046] syz-executor: attempt to access beyond end of device [ 1126.077415][T16046] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1126.091976][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1126.091989][ T26] audit: type=1804 audit(1725102338.072:831): pid=20431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4574" name="/newroot/82/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 1126.176944][T20268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1126.190866][T20268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1126.242446][T20268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.275609][T12451] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1126.422529][T20268] device hsr_slave_0 entered promiscuous mode [ 1126.441592][T20268] device hsr_slave_1 entered promiscuous mode [ 1126.462953][T20268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1126.493025][T20268] Cannot create hsr debugfs directory [ 1126.826817][T20442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4581'. [ 1126.836069][T20442] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4581'. [ 1127.263161][T12451] usb 5-1: USB disconnect, device number 38 [ 1127.270084][T12451] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 1127.772891][T18429] EXT4-fs (loop4): unmounting filesystem. [ 1128.161392][ T3651] Bluetooth: hci5: command 0x0406 tx timeout [ 1128.172545][ T26] audit: type=1326 audit(1725102340.162:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20466 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1128.266523][ T26] audit: type=1326 audit(1725102340.162:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20466 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1128.327752][T16929] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1128.355584][ T26] audit: type=1326 audit(1725102340.162:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20466 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1128.431443][ T26] audit: type=1326 audit(1725102340.162:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20466 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1128.514625][ T26] audit: type=1326 audit(1725102340.162:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20466 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1128.597320][T20268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1128.604399][ T26] audit: type=1326 audit(1725102340.162:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20466 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1128.653646][T20268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1128.680741][T20484] loop0: detected capacity change from 0 to 16 [ 1128.681982][ T26] audit: type=1326 audit(1725102340.162:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20466 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1128.697824][T16929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.747762][ T26] audit: type=1326 audit(1725102340.162:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20466 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1128.750377][T20484] erofs: (device loop0): mounted with root inode @ nid 36. [ 1128.780156][T20268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1128.787834][T16929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1128.810837][T20268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1128.818725][T16929] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1128.860825][T20484] syz.0.4594: attempt to access beyond end of device [ 1128.860825][T20484] loop0: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 1128.862482][ T26] audit: type=1326 audit(1725102340.192:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20466 comm="syz.4.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1128.888183][T16929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.941298][T16929] usb 2-1: config 0 descriptor?? [ 1128.962178][T20485] syz.0.4594: attempt to access beyond end of device [ 1128.962178][T20485] loop0: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 1129.029274][T20485] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 1129.047206][T20268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1129.070877][T20485] syz.0.4594: attempt to access beyond end of device [ 1129.070877][T20485] loop0: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 1129.082563][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1129.099432][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1129.119861][T20268] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.159399][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1129.179073][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1129.198432][T11740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.205553][T11740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.282861][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1129.298424][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1129.329755][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1129.349496][T11740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.356612][T11740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.399028][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1129.429824][T20490] loop0: detected capacity change from 0 to 512 [ 1129.445361][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1129.472094][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1129.480491][T16929] hid (null): bogus close delimiter [ 1129.493430][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1129.511776][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1129.521074][T20490] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1129.530180][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1129.539768][T20477] loop4: detected capacity change from 0 to 40427 [ 1129.540595][T20490] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038 (0x7fffffff) [ 1129.553823][T20268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1129.567004][T20268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1129.584593][T20477] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 1129.613291][T20477] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1129.623433][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1129.625343][T20477] F2FS-fs (loop4): Unrecognized mount option "resgid=0x00000000000000000x0000000000000000" or missing value [ 1129.653137][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1129.680181][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1129.697140][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1129.708630][T16929] usb 2-1: string descriptor 0 read error: -22 [ 1129.746878][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1129.769869][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1129.957938][T16928] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 1129.973236][T16929] uclogic 0003:256C:006D.0027: interface is invalid, ignoring [ 1130.051308][T20477] loop4: detected capacity change from 0 to 512 [ 1130.086155][T20477] ext4: Bad value for 'max_batch_time' [ 1130.376056][T20514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4599'. [ 1130.385275][T20514] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4599'. [ 1130.459117][T14643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1130.473140][T14643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1130.495116][T20268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1130.657471][T16928] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 1130.703761][T16928] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1130.792207][T20268] device veth0_vlan entered promiscuous mode [ 1130.799126][T16928] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1130.826112][T16928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1130.876608][T16928] usb 1-1: SerialNumber: syz [ 1130.887233][T20268] device veth1_vlan entered promiscuous mode [ 1130.904360][ T7] usb 2-1: USB disconnect, device number 38 [ 1130.977970][T20490] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1131.044656][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1131.073716][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1131.083751][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1131.098702][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1131.117376][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1131.140013][T20527] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4601'. [ 1131.159702][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1131.179148][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1131.196456][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1131.208060][T20490] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1131.236786][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1131.261619][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1131.358906][T20268] device veth0_macvtap entered promiscuous mode [ 1131.372079][T20268] device veth1_macvtap entered promiscuous mode [ 1131.389967][T20268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.411541][T20268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.442039][T20268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.491693][T20268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.506990][T20268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.543836][T20268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.627070][T20268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.669332][T20268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.709715][T20268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1131.745243][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1131.755793][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1131.765404][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1132.188950][T11719] Bluetooth: hci2: Frame reassembly failed (-84) [ 1132.203051][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1132.235403][T16928] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1132.237377][T20268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.292223][T20268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.349152][T20268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.389848][T20268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.410712][T20268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.439580][T20268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.452499][T20268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.463529][T20268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.498775][T20268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1132.523539][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1132.523555][ T26] audit: type=1804 audit(1725102344.512:843): pid=20490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4596" name="/newroot/85/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 1132.562148][T11719] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1132.584971][T11719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1132.612911][T20268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.683083][T20268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.724344][T20268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.774363][T20268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.572186][T11740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.583887][T11740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.701429][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1133.795821][T11740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.816215][T11740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.881534][T11719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1134.238088][ T3637] Bluetooth: hci2: command 0x1003 tx timeout [ 1134.238545][ T3651] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1134.391690][ T26] audit: type=1326 audit(1725102346.382:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20576 comm="syz.4.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1134.506230][T16928] usb 1-1: USB disconnect, device number 47 [ 1134.513794][T16928] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 1134.532238][ T26] audit: type=1326 audit(1725102346.432:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20576 comm="syz.4.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1134.581315][T18299] EXT4-fs (loop0): unmounting filesystem. [ 1134.672140][ T26] audit: type=1326 audit(1725102346.432:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20576 comm="syz.4.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1134.812290][ T26] audit: type=1326 audit(1725102346.432:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20576 comm="syz.4.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1134.853893][ T26] audit: type=1326 audit(1725102346.432:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20576 comm="syz.4.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1134.879944][ T26] audit: type=1326 audit(1725102346.432:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20576 comm="syz.4.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1134.905217][ T26] audit: type=1326 audit(1725102346.482:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20576 comm="syz.4.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1134.927941][ T26] audit: type=1326 audit(1725102346.482:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20576 comm="syz.4.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1138.370756][T20638] loop4: detected capacity change from 0 to 512 [ 1138.509152][T20638] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1138.537842][T20638] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038 (0x7fffffff) [ 1138.908814][T12691] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1139.518994][T12691] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 1139.595720][T12691] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1140.058034][T12691] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1140.067107][T12691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1140.103227][T12691] usb 5-1: SerialNumber: syz [ 1140.147961][T20638] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1140.389257][T20638] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1140.902118][T12691] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1141.544791][ T26] audit: type=1804 audit(1725102353.532:852): pid=20725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4627" name="/newroot/93/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 1141.758447][T13828] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1142.076072][T13828] usb 1-1: Using ep0 maxpacket: 32 [ 1142.082556][T20742] fuse: Bad value for 'fd' [ 1142.980725][T13828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.005627][T13828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.015628][T13828] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1143.024755][T13828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.066742][T13828] usb 1-1: config 0 descriptor?? [ 1143.113254][T12691] usb 5-1: USB disconnect, device number 39 [ 1143.128480][T12691] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 1143.190314][T18429] EXT4-fs (loop4): unmounting filesystem. [ 1143.571815][T13828] greenasia 0003:0E8F:0012.0028: item fetching failed at offset 0/3 [ 1143.600662][T13828] greenasia 0003:0E8F:0012.0028: parse failed [ 1143.606791][T13828] greenasia: probe of 0003:0E8F:0012.0028 failed with error -22 [ 1144.456879][T12691] usb 1-1: USB disconnect, device number 48 [ 1144.844895][T20783] loop4: detected capacity change from 0 to 256 [ 1144.937210][T20783] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1145.892315][T20795] loop0: detected capacity change from 0 to 512 [ 1145.995553][T20795] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1146.065401][T20795] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038 (0x7fffffff) [ 1146.437768][T16928] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 1146.808072][T16928] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 1146.836007][T16928] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1146.947946][T16928] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1146.961555][T16928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1146.977446][T16928] usb 1-1: SerialNumber: syz [ 1147.008013][T20795] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1147.229428][T20795] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1147.693517][T16928] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1148.249173][ T26] audit: type=1804 audit(1725102360.232:853): pid=20848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4667" name="/newroot/94/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 1149.010687][T16926] usb 1-1: USB disconnect, device number 49 [ 1149.018113][T16926] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 1149.558867][ T52] block nbd2: Attempted send on invalid socket [ 1149.565138][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1150.214017][T18299] EXT4-fs (loop0): unmounting filesystem. [ 1151.002795][ T26] audit: type=1326 audit(1725102362.992:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20938 comm="syz.4.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1151.021329][T20941] loop0: detected capacity change from 0 to 512 [ 1151.069636][ T26] audit: type=1326 audit(1725102362.992:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20938 comm="syz.4.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1151.092881][ T26] audit: type=1326 audit(1725102363.022:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20938 comm="syz.4.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1151.120461][ T26] audit: type=1326 audit(1725102363.022:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20938 comm="syz.4.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1151.143315][ T26] audit: type=1326 audit(1725102363.022:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20938 comm="syz.4.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1151.165922][ T26] audit: type=1326 audit(1725102363.022:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20938 comm="syz.4.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1151.200090][ T26] audit: type=1326 audit(1725102363.022:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20938 comm="syz.4.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1151.221732][T20941] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1151.236912][T20941] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038 (0x7fffffff) [ 1151.277623][ T26] audit: type=1326 audit(1725102363.022:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20938 comm="syz.4.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8667f79eb9 code=0x7ffc0000 [ 1151.537739][T16926] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 1151.703017][ T26] audit: type=1326 audit(1725102363.692:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20967 comm="syz.3.4716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7286179eb9 code=0x7ffc0000 [ 1151.909592][T16926] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 1151.941046][T16926] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1152.059755][T16926] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1152.077317][T16926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1152.100238][T16926] usb 1-1: SerialNumber: syz [ 1152.121434][T20941] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1152.246030][T20981] 9pnet: Could not find request transport: f [ 1152.283474][T20962] loop4: detected capacity change from 0 to 40427 [ 1152.307873][T20962] F2FS-fs (loop4): invalid crc value [ 1152.356242][T20941] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1152.391876][T20962] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1152.458556][T20992] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4719'. [ 1152.571154][T20996] netlink: 'syz.2.4721': attribute type 46 has an invalid length. [ 1152.588138][T20996] netlink: 212868 bytes leftover after parsing attributes in process `syz.2.4721'. [ 1152.601625][T20962] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1152.821798][T16926] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1153.697751][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 1153.697767][ T26] audit: type=1804 audit(1725102365.662:893): pid=21012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4709" name="/newroot/97/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 1153.738110][T18429] syz-executor: attempt to access beyond end of device [ 1153.738110][T18429] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 1153.824525][T18429] syz-executor: attempt to access beyond end of device [ 1153.824525][T18429] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1154.585916][T21013] tmpfs: Unknown parameter 'usrquota' [ 1154.605801][ T3929] kworker/u4:18: attempt to access beyond end of device [ 1154.605801][ T3929] loop4: rw=2049, sector=40960, nr_sectors = 120 limit=40427 [ 1155.037800][T13828] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1155.075604][T16928] usb 1-1: USB disconnect, device number 50 [ 1155.084487][T16928] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 1155.118656][T21049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4733'. [ 1155.132282][T18299] EXT4-fs (loop0): unmounting filesystem. [ 1155.166931][T21049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4733'. [ 1155.258350][T13828] usb 3-1: device descriptor read/64, error -71 [ 1155.398351][T11719] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.533343][T13828] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1155.542858][T21062] ptrace attach of "./syz-executor exec"[16046] was attempted by "./syz-executor exec"[21062] [ 1155.557761][ T26] audit: type=1326 audit(1725102367.532:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz.1.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1155.640844][ T26] audit: type=1326 audit(1725102367.532:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz.1.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1155.700849][ T26] audit: type=1326 audit(1725102367.532:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz.1.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1155.735460][T11719] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.754716][ T26] audit: type=1326 audit(1725102367.532:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz.1.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1155.777780][T13828] usb 3-1: device descriptor read/64, error -71 [ 1155.801510][ T26] audit: type=1326 audit(1725102367.532:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz.1.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1155.880195][ T26] audit: type=1326 audit(1725102367.532:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz.1.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1155.898001][T13828] usb usb3-port1: attempt power cycle [ 1155.918905][T11719] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.947752][ T26] audit: type=1326 audit(1725102367.602:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz.1.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1156.023956][ T26] audit: type=1326 audit(1725102367.602:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz.1.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1156.061659][T11719] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.317806][T13828] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1156.441889][T13828] usb 3-1: device descriptor read/8, error -71 [ 1156.602825][T21086] tmpfs: Unknown parameter 'usrquota' [ 1156.720589][T13828] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1156.740238][T19105] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1156.812785][ T3637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1156.817969][T13828] usb 3-1: device descriptor read/8, error -71 [ 1156.830901][ T3652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1156.840708][ T3652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1156.855965][ T3652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1156.866304][ T3652] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1156.874509][ T3652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1156.977959][T13828] usb usb3-port1: unable to enumerate USB device [ 1156.987938][T19105] usb 4-1: device descriptor read/64, error -71 [ 1157.267771][T19105] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1157.313933][T21105] device syzkaller0 entered promiscuous mode [ 1157.477739][T19105] usb 4-1: device descriptor read/64, error -71 [ 1157.598357][T19105] usb usb4-port1: attempt power cycle [ 1157.910909][T21123] loop2: detected capacity change from 0 to 1024 [ 1157.964224][T21123] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1158.007855][T19105] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1158.118033][T19105] usb 4-1: device descriptor read/8, error -71 [ 1158.223115][T21123] loop2: detected capacity change from 0 to 8192 [ 1158.292367][T10197] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1158.407921][T19105] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1158.409856][T21126] Invalid ELF section header size [ 1158.528380][T19105] usb 4-1: device descriptor read/8, error -71 [ 1158.650166][T19105] usb usb4-port1: unable to enumerate USB device [ 1158.958938][ T3651] Bluetooth: hci2: command tx timeout [ 1161.037870][ T3651] Bluetooth: hci2: command tx timeout [ 1161.054907][T21144] tmpfs: Unknown parameter 'usrquota' [ 1161.600923][T21128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4749'. [ 1161.613274][T21129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4749'. [ 1162.517362][T21157] loop2: detected capacity change from 0 to 512 [ 1162.617361][T21157] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1162.675078][T21157] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff) [ 1162.812678][T21166] Invalid ELF section header size [ 1163.069949][T21096] chnl_net:caif_netlink_parms(): no params data found [ 1163.129162][ T3651] Bluetooth: hci2: command tx timeout [ 1163.213869][ T26] audit: type=1804 audit(1725102375.202:902): pid=21157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4759" name="/newroot/29/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 1163.567090][T11719] device hsr_slave_0 left promiscuous mode [ 1163.593546][T11719] device hsr_slave_1 left promiscuous mode [ 1163.600294][T11719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1163.617820][T11719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.800176][T21191] hub 9-0:1.0: USB hub found [ 1163.813617][T21191] hub 9-0:1.0: 8 ports detected [ 1164.183370][T11719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1164.191626][T11719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1164.257098][T11719] device bridge_slave_1 left promiscuous mode [ 1164.270070][T11719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.363269][T20268] EXT4-fs (loop2): unmounting filesystem. [ 1164.377079][T11719] device bridge_slave_0 left promiscuous mode [ 1164.383807][T11719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.528407][T21193] tmpfs: Unknown parameter 'usrquota' [ 1164.586138][T11719] device veth1_macvtap left promiscuous mode [ 1164.675340][T11719] device veth0_macvtap left promiscuous mode [ 1164.687358][T11719] device veth1_vlan left promiscuous mode [ 1164.698802][T11719] device veth0_vlan left promiscuous mode [ 1165.466382][ T3651] Bluetooth: hci2: command tx timeout [ 1166.451974][T11719] team0 (unregistering): Port device team_slave_1 removed [ 1166.513148][T11719] team0 (unregistering): Port device team_slave_0 removed [ 1166.583113][T11719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1166.660319][T11719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1168.003794][T11719] bond0 (unregistering): Released all slaves [ 1168.096712][T21096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.104006][T21096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.112816][T21096] device bridge_slave_0 entered promiscuous mode [ 1168.121844][T21203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4768'. [ 1168.146180][T21205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4768'. [ 1168.268220][T21229] program syz.1.4773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1168.616642][T21213] device syzkaller0 entered promiscuous mode [ 1168.765298][T21096] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.938245][T21096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.974650][T21096] device bridge_slave_1 entered promiscuous mode [ 1169.162745][T21237] loop2: detected capacity change from 0 to 1024 [ 1169.169798][T21239] netlink: 'syz.0.4778': attribute type 11 has an invalid length. [ 1169.177635][T21239] netlink: 'syz.0.4778': attribute type 11 has an invalid length. [ 1169.197199][T21237] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1169.249041][T21239] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.4778'. [ 1169.251759][T10197] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1169.457334][T21237] loop2: detected capacity change from 0 to 8192 [ 1169.528845][T10197] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1169.704381][T21243] Invalid ELF section header size [ 1172.362877][T21254] tmpfs: Unknown parameter 'usrquota' [ 1173.984814][T21271] program syz.1.4786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1175.203086][T21276] Invalid ELF section header size [ 1176.869941][ T3637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1176.891114][ T3637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1176.901169][ T3637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1176.915040][ T3637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1176.923396][ T3637] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1176.930886][ T3637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1176.967924][T16926] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1177.087192][T21096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1177.099189][T21216] EXT4-fs (loop3): unmounting filesystem. [ 1177.151238][T21096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.162144][T16926] usb 2-1: device descriptor read/64, error -71 [ 1177.199607][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.205908][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.273946][T21096] team0: Port device team_slave_0 added [ 1177.325530][T21096] team0: Port device team_slave_1 added [ 1177.447926][T16926] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1177.546903][T21096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1177.565830][T21096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1177.661299][T16926] usb 2-1: device descriptor read/64, error -71 [ 1177.677253][T21096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.814572][T16926] usb usb2-port1: attempt power cycle [ 1177.818237][T21318] program syz.2.4796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1177.911993][T21216] device syz_tun left promiscuous mode [ 1178.102949][T21096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1178.127144][T21096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1178.452420][T21096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1178.631973][T21096] device hsr_slave_0 entered promiscuous mode [ 1178.661161][T21096] device hsr_slave_1 entered promiscuous mode [ 1178.668542][T21096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1178.682660][T21096] Cannot create hsr debugfs directory [ 1178.835773][T11719] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.877819][T16926] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1178.967927][ T3637] Bluetooth: hci5: command tx timeout [ 1178.993142][T11719] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.006648][T16926] usb 2-1: device descriptor read/8, error -71 [ 1179.093613][T21329] tmpfs: Unknown parameter 'usrquota' [ 1179.190507][T11719] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.277782][T16926] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1179.354534][T11719] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.378012][T16926] usb 2-1: device descriptor read/8, error -71 [ 1179.421645][T21288] chnl_net:caif_netlink_parms(): no params data found [ 1179.518107][T16926] usb usb2-port1: unable to enumerate USB device [ 1180.089062][T21288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.099753][T21288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.107543][T21288] device bridge_slave_0 entered promiscuous mode [ 1180.151939][T21288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.176872][T21288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.190723][T21288] device bridge_slave_1 entered promiscuous mode [ 1180.503150][T21288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1180.589718][ T26] audit: type=1326 audit(1725102392.582:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.2.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6757779eb9 code=0x7ffc0000 [ 1180.631556][T21288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.640945][ T26] audit: type=1326 audit(1725102392.582:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.2.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6757779eb9 code=0x7ffc0000 [ 1180.776624][ T26] audit: type=1326 audit(1725102392.582:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.2.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f6757779eb9 code=0x7ffc0000 [ 1180.864557][T21288] team0: Port device team_slave_0 added [ 1180.908327][ T26] audit: type=1326 audit(1725102392.582:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.2.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6757779eb9 code=0x7ffc0000 [ 1180.925871][T21364] random: crng reseeded on system resumption [ 1180.952196][ T26] audit: type=1326 audit(1725102392.582:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21355 comm="syz.2.4805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6757779eb9 code=0x7ffc0000 [ 1180.978920][T21288] team0: Port device team_slave_1 added [ 1181.049521][ T3637] Bluetooth: hci5: command tx timeout [ 1181.065131][T21369] program syz.2.4807 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1181.791836][T21288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.814855][T21288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.871243][T21288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.886874][T21096] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1181.914911][T21288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1181.933801][T21288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.995059][T21367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4806'. [ 1182.007915][T21288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.025693][T21096] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1182.057549][ T3637] Bluetooth: hci3: unexpected event for opcode 0x203c [ 1182.080153][T21096] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1182.105293][T21096] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1182.194630][T21288] device hsr_slave_0 entered promiscuous mode [ 1182.214029][T21288] device hsr_slave_1 entered promiscuous mode [ 1182.235251][T21288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1182.259966][T21288] Cannot create hsr debugfs directory [ 1182.752883][T21400] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4815'. [ 1182.847730][T21409] overlayfs: './bus' not a directory [ 1183.437469][ T3637] Bluetooth: hci5: command tx timeout [ 1183.783839][T21419] program syz.2.4818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1185.082790][T21096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1185.334362][T11719] device batadv_slave_1 left promiscuous mode [ 1185.359418][T11719] device hsr_slave_0 left promiscuous mode [ 1185.378820][T11719] device hsr_slave_1 left promiscuous mode [ 1185.423349][T11719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1185.445326][T11719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1185.481650][T11719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1185.521943][ T3637] Bluetooth: hci5: command tx timeout [ 1185.524945][T11719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1185.543278][T11719] device bridge_slave_1 left promiscuous mode [ 1185.552303][T11719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.569710][T11719] device bridge_slave_0 left promiscuous mode [ 1185.576638][ T26] audit: type=1326 audit(1725102397.562:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21435 comm="syz.2.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6757779eb9 code=0x7ffc0000 [ 1185.578265][T11719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.607276][ T26] audit: type=1326 audit(1725102397.592:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21435 comm="syz.2.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6757779eb9 code=0x7ffc0000 [ 1185.630474][ T26] audit: type=1326 audit(1725102397.592:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21435 comm="syz.2.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f6757779eb9 code=0x7ffc0000 [ 1185.699350][ T26] audit: type=1326 audit(1725102397.592:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21435 comm="syz.2.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6757779eb9 code=0x7ffc0000 [ 1185.728854][T11719] device veth1_macvtap left promiscuous mode [ 1185.734944][T11719] device veth0_macvtap left promiscuous mode [ 1185.748222][T11719] device veth1_vlan left promiscuous mode [ 1185.754955][T11719] device veth0_vlan left promiscuous mode [ 1185.777967][ T26] audit: type=1326 audit(1725102397.592:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21435 comm="syz.2.4824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6757779eb9 code=0x7ffc0000 [ 1185.897774][ T26] audit: type=1326 audit(1725102397.882:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21448 comm="syz.1.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1185.944801][ T26] audit: type=1326 audit(1725102397.912:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21448 comm="syz.1.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1185.973853][ T26] audit: type=1326 audit(1725102397.912:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21448 comm="syz.1.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1187.370259][T11719] team0 (unregistering): Port device team_slave_1 removed [ 1187.563579][T11719] team0 (unregistering): Port device team_slave_0 removed [ 1187.744712][T11719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1188.014083][T11719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1188.900392][T11719] bond0 (unregistering): Released all slaves [ 1189.053026][T21096] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.068270][T14643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1189.093385][T14643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1189.129567][T14643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1189.149753][T14643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1189.188794][T14643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.195918][T14643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.227991][T14643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1189.244385][T14643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1189.269821][T14643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.276996][T14643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1189.446419][T14643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1189.508167][T14643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1189.533330][T14643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1189.575833][T14643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1189.638863][T14643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1189.656867][T14643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1189.687514][T14643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1189.702440][T14643] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1189.741003][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1189.766455][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1189.803842][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1189.820129][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1189.850428][T21096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1190.625623][T21482] loop2: detected capacity change from 0 to 32768 [ 1190.793983][T21482] XFS (loop2): Mounting V5 Filesystem [ 1190.944063][T21482] XFS (loop2): Ending clean mount [ 1190.952200][T21482] XFS (loop2): Quotacheck needed: Please wait. [ 1191.007263][T11719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1191.028228][T11719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1191.044982][T21482] XFS (loop2): Quotacheck: Done. [ 1191.063372][T21096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1191.136296][T20268] XFS (loop2): Unmounting Filesystem [ 1191.159410][T21288] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1191.220622][T21288] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1191.254913][T21288] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1191.296499][T21288] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1192.548857][T21288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.626531][T14643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1192.638902][T14643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1192.687010][T21288] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.760151][T20205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1192.781807][T20205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1192.797588][T21549] loop2: detected capacity change from 0 to 128 [ 1192.831393][T20205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.838545][T20205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.924710][T21551] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4851'. [ 1193.744984][ T3637] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1193.753746][ T3637] Bluetooth: hci3: Injecting HCI hardware error event [ 1193.770448][ T3651] Bluetooth: hci3: hardware error 0x00 [ 1193.789573][T21549] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 1193.798931][T20205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1193.851682][T21549] FAT-fs (loop2): Filesystem has been set read-only [ 1193.869560][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1193.912419][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1193.993288][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1194.004783][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1194.016134][T10305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.023293][T10305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.061659][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1194.080566][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1194.117191][T21096] device veth0_vlan entered promiscuous mode [ 1194.138748][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1194.169207][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1194.208055][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1194.226439][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1194.244381][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1194.253646][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1194.273198][T10305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1194.299462][T21096] device veth1_vlan entered promiscuous mode [ 1194.337611][T21288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1194.365981][T21288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1194.387616][T19041] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1194.396894][T19041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1194.397928][T16928] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1194.425822][T19041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1194.445069][T19041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1194.460663][T19041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1194.480079][T19041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1194.524853][T19041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1194.561223][T19041] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1194.603956][T19041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1194.616451][T19041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1194.635538][T19041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1194.968464][T16928] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1195.017513][T16928] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1195.158942][T16928] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1195.207118][T16928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.285500][T21096] device veth0_macvtap entered promiscuous mode [ 1195.305350][T16928] usb 1-1: config 0 descriptor?? [ 1195.415506][T21096] device veth1_macvtap entered promiscuous mode [ 1195.424084][T16928] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1195.445028][T21096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1195.456015][T21096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.465902][T21096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1195.476789][T21096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.496109][T21096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1195.528592][T21096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.545076][T21096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1195.621613][T21594] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4861'. [ 1195.695297][T11719] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1195.788401][ T7] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1196.083388][ T3651] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1196.089503][T11719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1196.211800][ T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1196.234102][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.310396][T21096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1196.330761][T21096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.341173][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1196.350358][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.351440][T21096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1196.418003][T21096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.428030][T21096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1196.438995][T21096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.478096][ T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1196.488816][T21096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1196.507573][ T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1196.515730][ T7] usb 2-1: Product: syz [ 1196.515902][T11719] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1196.526118][ T7] usb 2-1: Manufacturer: syz [ 1196.555703][T11719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1196.568703][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 1196.577567][T21096] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.586718][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 1196.594491][T21096] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.605087][ T7] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1196.611062][ T7] cdc_wdm 2-1:1.0: Unknown control protocol [ 1196.617156][T21096] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.647638][T21096] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.718076][ T3651] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1196.729009][ T3651] Bluetooth: hci1: Injecting HCI hardware error event [ 1196.738338][ T3637] Bluetooth: hci1: hardware error 0x00 [ 1196.798231][T16928] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1196.813562][T19041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1196.823114][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1196.831372][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1196.837877][T19041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1196.844611][T21288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1196.883865][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1196.893326][ T3922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1196.900111][T19041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1196.910394][T19041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1196.915987][ T3922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1196.952369][T19041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1196.968907][T19041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1196.988174][T19041] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1197.001043][T19041] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1197.009807][T19041] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1197.035911][T21288] device veth0_vlan entered promiscuous mode [ 1197.050668][T21288] device veth1_vlan entered promiscuous mode [ 1197.122115][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1197.137372][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1197.161083][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1197.178289][T16928] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1197.186916][T16928] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1197.192101][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1197.202578][T16928] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1197.216958][T16928] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1197.228968][T16928] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1197.242600][T21288] device veth0_macvtap entered promiscuous mode [ 1197.269820][T21288] device veth1_macvtap entered promiscuous mode [ 1197.284516][ T14] usb 1-1: USB disconnect, device number 51 [ 1197.317514][T21288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1197.334451][T21288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.372526][T21288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1197.384630][T21288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.403001][T21288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1197.413788][T16928] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1197.427553][T16928] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1197.445995][T21288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.456191][T16928] usb 3-1: Product: syz [ 1197.460602][T16928] usb 3-1: Manufacturer: syz [ 1197.466075][T21288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1197.503103][T21288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.531121][T16928] cdc_wdm 3-1:1.0: skipping garbage [ 1197.548524][T16928] cdc_wdm 3-1:1.0: skipping garbage [ 1197.555886][T21288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1197.567633][T16928] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 1197.581646][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1197.598979][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1197.616634][T16928] cdc_wdm 3-1:1.0: Unknown control protocol [ 1197.625066][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1197.638858][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1197.659275][T21288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.684458][T21288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.704156][T21288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.720530][T21288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.731692][T21288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.742342][T21288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.755359][T21288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1197.766516][T21288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1197.788998][T21288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1197.822167][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1197.834733][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1197.852252][ T14] usb 3-1: USB disconnect, device number 48 [ 1197.879364][T21288] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.904897][T21288] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.931716][T21288] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.963229][T21288] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.264288][T19041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.303603][T19041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.342795][T11719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.344930][T19041] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1198.375784][T11719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.413039][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1198.500006][T16928] usb 2-1: USB disconnect, device number 43 [ 1198.508020][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1198.514919][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1198.520976][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1198.812683][ T3637] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1200.006554][T21662] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4871'. [ 1201.726404][T21665] loop2: detected capacity change from 0 to 1024 [ 1201.798773][T21665] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1201.854355][T21670] loop4: detected capacity change from 0 to 2048 [ 1201.871049][T21285] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1201.932982][T21670] Alternate GPT is invalid, using primary GPT. [ 1201.960072][T21670] loop4: p1 p2 p3 [ 1202.426276][T21684] loop4: detected capacity change from 0 to 512 [ 1202.460043][T21664] loop2: detected capacity change from 0 to 8192 [ 1203.417593][T21684] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1203.530358][T21684] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 1203.567372][T21693] usb usb8: usbfs: process 21693 (syz.3.4880) did not claim interface 0 before use [ 1203.871317][T21665] Invalid ELF section header size [ 1204.237096][T21691] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1204.350680][T21700] loop2: detected capacity change from 0 to 1024 [ 1204.408528][T21700] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1204.594105][ T14] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 1204.887403][T21700] loop2: detected capacity change from 0 to 2048 [ 1204.906109][T21700] UDF-fs: bad mount option "user_xattr" or missing value [ 1205.340956][T21096] EXT4-fs (loop4): unmounting filesystem. [ 1205.343592][T21285] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1206.344950][T21728] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4886'. [ 1206.668644][T21729] loop4: detected capacity change from 0 to 1024 [ 1207.520811][T21751] loop3: detected capacity change from 0 to 1024 [ 1207.658396][T21751] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1207.870530][T21757] random: crng reseeded on system resumption [ 1208.168441][T21751] loop3: detected capacity change from 0 to 8192 [ 1208.239064][T21285] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1208.613882][T21768] Invalid ELF section header size [ 1209.297843][T16928] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1209.507841][T16928] usb 2-1: device descriptor read/64, error -71 [ 1209.778154][T16928] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1209.994045][T21784] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4902'. [ 1210.058153][T16928] usb 2-1: device descriptor read/64, error -71 [ 1211.739221][T16928] usb usb2-port1: attempt power cycle [ 1212.829958][T21802] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4909'. [ 1213.818173][T21815] random: crng reseeded on system resumption [ 1214.000122][T21824] fuse: Bad value for 'fd' [ 1214.923601][T21832] loop3: detected capacity change from 0 to 512 [ 1215.038606][T21832] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1215.079561][T21832] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 1215.478100][T16928] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1216.463733][T21850] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4920'. [ 1216.667851][T16928] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.694595][T16928] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1216.827870][T16928] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1216.863887][T16928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1216.934725][T16928] usb 4-1: SerialNumber: syz [ 1217.018521][T16928] cdc_ether 4-1:1.0: skipping garbage [ 1217.023970][T16928] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1217.116447][T21866] random: crng reseeded on system resumption [ 1218.433730][ T26] audit: type=1804 audit(1725102430.422:916): pid=21887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4916" name="/newroot/12/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 1218.694188][T21891] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4933'. [ 1219.664481][ T14] usb 4-1: USB disconnect, device number 34 [ 1219.711699][T21288] EXT4-fs (loop3): unmounting filesystem. [ 1219.836250][T21906] sctp: [Deprecated]: syz.3.4939 (pid 21906) Use of int in maxseg socket option. [ 1219.836250][T21906] Use struct sctp_assoc_value instead [ 1219.856392][T21908] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4942'. [ 1219.953682][T21911] loop2: detected capacity change from 0 to 1024 [ 1219.979144][T21911] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1220.037736][T21911] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 1220.091325][T21911] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 1220.162805][T21919] loop3: detected capacity change from 0 to 256 [ 1220.199003][T21920] random: crng reseeded on system resumption [ 1220.244902][T21919] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1220.400313][ T26] audit: type=1326 audit(1725102432.392:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21909 comm="syz.2.4941" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6757779eb9 code=0x0 [ 1220.896455][T21928] overlayfs: filesystem on './file1' not supported [ 1221.580204][T21938] loop4: detected capacity change from 0 to 512 [ 1221.607493][T21938] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1221.617982][T21938] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038 (0x7fffffff) [ 1222.687106][T21954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4954'. [ 1222.697554][ T14] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 1222.763376][T21957] raw_sendmsg: syz.3.4955 forgot to set AF_INET. Fix it! [ 1222.772722][T21958] IPVS: length: 8 != 4173008 [ 1223.058039][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.077786][ T14] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1223.177943][ T14] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1223.197207][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1223.218916][ T14] usb 5-1: SerialNumber: syz [ 1223.236633][T21974] random: crng reseeded on system resumption [ 1223.268778][ T14] cdc_ether 5-1:1.0: skipping garbage [ 1223.276936][ T14] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 1223.599679][ T3637] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1223.608809][ T3637] Bluetooth: hci2: Injecting HCI hardware error event [ 1223.620329][ T3651] Bluetooth: hci2: hardware error 0x00 [ 1226.224689][T16929] usb 5-1: USB disconnect, device number 41 [ 1226.291941][T21994] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4968'. [ 1226.323755][ T3651] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1226.455561][T21996] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4969'. [ 1226.512288][T21096] EXT4-fs (loop4): unmounting filesystem. [ 1226.984814][T22021] loop2: detected capacity change from 0 to 256 [ 1227.006817][T22021] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1227.031011][T22025] random: crng reseeded on system resumption [ 1227.266728][T22027] overlayfs: filesystem on './file1' not supported [ 1227.594496][T22036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4984'. [ 1227.726853][ T3714] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1228.552370][T22045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4988'. [ 1228.879248][ T3714] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.960164][ T3714] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1229.390277][ T3714] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1229.406882][ T3714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1229.417105][ T3714] usb 1-1: SerialNumber: syz [ 1229.489054][ T3714] cdc_ether 1-1:1.0: skipping garbage [ 1229.494657][ T3714] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1229.567260][T22064] random: crng reseeded on system resumption [ 1229.622000][T22067] loop2: detected capacity change from 0 to 256 [ 1229.674982][T22067] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1229.908872][T22070] overlayfs: filesystem on './file1' not supported [ 1229.952871][T22069] tmpfs: Unknown parameter 'usrquota' [ 1231.269713][T16929] usb 1-1: USB disconnect, device number 52 [ 1231.506978][T22085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5002'. [ 1231.675134][T22091] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5003'. [ 1231.723224][T22091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5003'. [ 1231.756975][T22061] loop4: detected capacity change from 0 to 40427 [ 1231.772057][T22061] F2FS-fs (loop4): invalid crc value [ 1232.530795][T22061] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 1232.854138][T22106] random: crng reseeded on system resumption [ 1233.055455][T22111] loop2: detected capacity change from 0 to 512 [ 1233.956866][T22117] loop4: detected capacity change from 0 to 256 [ 1234.030858][T22111] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1234.047335][T22117] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1234.057862][T22111] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038 (0x7fffffff) [ 1234.320157][T22116] overlayfs: filesystem on './file1' not supported [ 1234.383406][T22129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5015'. [ 1234.787753][T16929] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1235.770954][T22140] device syzkaller0 entered promiscuous mode [ 1235.791079][T22148] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5017'. [ 1235.998234][T16929] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 1236.046671][T16929] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1236.226998][T20268] EXT4-fs (loop2): unmounting filesystem. [ 1236.263848][T16929] usb 3-1: string descriptor 0 read error: -71 [ 1236.270690][T16929] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1236.283215][T16929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1236.388294][T16929] usb 3-1: can't set config #1, error -71 [ 1236.631195][T16929] usb 3-1: USB disconnect, device number 49 [ 1237.184209][T22168] tmpfs: Unknown parameter 'usrquota' [ 1238.646933][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.653762][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.553427][T22164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5026'. [ 1241.762203][T22188] Invalid ELF section header size [ 1241.766501][T22196] loop3: detected capacity change from 0 to 512 [ 1241.911699][T22196] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1242.294804][T22196] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038 (0x7fffffff) [ 1242.876138][T22212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5040'. [ 1242.923457][T22212] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5040'. [ 1243.017918][T12691] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1243.397851][T12691] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 1243.420781][T12691] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1243.552615][T12691] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1243.571973][T12691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1243.777561][T12691] usb 4-1: SerialNumber: syz [ 1243.808004][T22196] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1244.627985][T12691] usb 4-1: can't set config #1, error -71 [ 1244.655034][T12691] usb 4-1: USB disconnect, device number 35 [ 1244.682875][T21288] EXT4-fs (loop3): unmounting filesystem. [ 1245.900225][T22231] tmpfs: Unknown parameter 'usrquota' [ 1247.254198][T22250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5052'. [ 1247.289860][T22250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5052'. [ 1247.859829][T22260] loop3: detected capacity change from 0 to 512 [ 1247.983734][T22260] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1248.007877][T22260] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038 (0x7fffffff) [ 1248.367816][T16929] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1248.686640][T22268] loop2: detected capacity change from 0 to 1024 [ 1248.738022][T16929] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 1248.761924][T22268] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1248.784875][T16929] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1248.898115][T16929] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1248.914384][T16929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1248.923857][T16929] usb 4-1: SerialNumber: syz [ 1249.103713][T22268] loop2: detected capacity change from 0 to 8192 [ 1249.128201][T22260] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1250.355767][T22281] Invalid ELF section header size [ 1250.484584][T22260] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1250.617235][T22289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5065'. [ 1250.628832][T22289] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5065'. [ 1250.907252][T22297] loop4: detected capacity change from 0 to 512 [ 1250.960637][T16929] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1251.047194][T22297] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1251.086481][T22297] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1251.187147][T22297] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.5069: Failed to acquire dquot type 0 [ 1251.241583][T22297] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1251.297801][T22297] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1251.307225][T22297] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.5069: Failed to acquire dquot type 0 [ 1251.404555][T22297] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1251.421280][T22297] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1251.577881][T22297] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.5069: Failed to acquire dquot type 0 [ 1251.969738][ T26] audit: type=1804 audit(1725102463.952:918): pid=22314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5057" name="/newroot/41/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 1251.997475][T22297] EXT4-fs (loop4): 1 orphan inode deleted [ 1252.005870][T22297] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1252.029336][T22297] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038 (0x7fffffff) [ 1252.132573][T22297] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1252.170051][T22297] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1252.279458][T22297] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.5069: Failed to acquire dquot type 0 [ 1253.136664][T12691] usb 4-1: USB disconnect, device number 36 [ 1253.144984][T12691] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 1253.215253][T21288] EXT4-fs (loop3): unmounting filesystem. [ 1253.274070][T21096] EXT4-fs (loop4): unmounting filesystem. [ 1253.478870][T16929] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1253.717939][T16929] usb 1-1: Using ep0 maxpacket: 8 [ 1253.744548][T22344] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1253.936582][T22343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5079'. [ 1254.233673][T22343] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5079'. [ 1254.388049][T16929] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.498105][T16929] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1254.519887][T16929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1255.167927][T16929] usb 1-1: SerialNumber: syz [ 1255.174408][T16929] usb 1-1: config 0 descriptor?? [ 1255.258482][T22359] loop2: detected capacity change from 0 to 16 [ 1255.279782][T22359] erofs: (device loop2): mounted with root inode @ nid 36. [ 1255.297834][T16929] usb 1-1: can't set config #0, error -71 [ 1255.332156][T16929] usb 1-1: USB disconnect, device number 53 [ 1257.206955][T22377] loop2: detected capacity change from 0 to 512 [ 1257.326405][T22377] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1257.354629][T22377] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038 (0x7fffffff) [ 1257.894131][T16929] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 1257.967864][T16928] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1258.182927][T22399] Invalid ELF section header size [ 1258.262108][T16929] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 1258.292498][T16929] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1258.347975][T16928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1258.380910][T16928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.413284][T16928] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1258.439470][T16928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.457914][T16929] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1258.469413][T16929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1258.498183][T16928] usb 4-1: config 0 descriptor?? [ 1258.514781][T16929] usb 3-1: SerialNumber: syz [ 1258.561388][T22377] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1258.784469][T22377] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1259.000280][T16928] hid-steam 0003:28DE:1142.0029: : USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1259.096312][T16928] hid-steam 0003:28DE:1142.002A: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1259.227987][T16928] hid-steam 0003:28DE:1142.0029: Steam wireless receiver connected [ 1259.246410][T16928] usb 4-1: USB disconnect, device number 37 [ 1259.261767][T16929] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1259.355493][T16928] hid-steam 0003:28DE:1142.0029: Steam wireless receiver disconnected [ 1259.808518][ T26] audit: type=1804 audit(1725102471.792:919): pid=22422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5087" name="/newroot/104/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 1261.427842][ T26] audit: type=1326 audit(1725102473.382:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22447 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1261.482488][ T26] audit: type=1326 audit(1725102473.402:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22447 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1261.567726][ T26] audit: type=1326 audit(1725102473.412:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22447 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1261.598344][T12026] usb 3-1: USB disconnect, device number 50 [ 1261.605207][T12026] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 1261.637430][T22408] loop4: detected capacity change from 0 to 40427 [ 1261.669556][T20268] EXT4-fs (loop2): unmounting filesystem. [ 1261.703653][T22408] F2FS-fs (loop4): Unrecognized mount option "ÿ" or missing value [ 1261.830899][T22458] program syz.1.5103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1262.004415][ T26] audit: type=1326 audit(1725102473.412:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22447 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1262.549259][ T26] audit: type=1326 audit(1725102473.412:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22447 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1262.574242][ T26] audit: type=1326 audit(1725102473.412:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22447 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1262.698295][ T26] audit: type=1326 audit(1725102473.412:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22447 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1262.773807][ T26] audit: type=1326 audit(1725102473.412:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22447 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1262.832329][ T26] audit: type=1326 audit(1725102473.412:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22447 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1263.312299][T22475] Invalid ELF section header size [ 1263.445343][T22489] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5112'. [ 1264.915221][T22504] loop2: detected capacity change from 0 to 256 [ 1265.210463][T22504] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1265.365522][T22514] program syz.4.5117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1265.612209][T22502] overlayfs: filesystem on './file1' not supported [ 1265.744796][T22513] device pim6reg1 entered promiscuous mode [ 1266.455427][T22530] loop4: detected capacity change from 0 to 1024 [ 1266.491186][T22530] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 1266.590174][T22535] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5126'. [ 1268.135398][T22530] loop4: detected capacity change from 0 to 8192 [ 1268.379244][T22548] program syz.2.5131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1269.217273][T22557] loop2: detected capacity change from 0 to 256 [ 1269.226760][T22558] device pim6reg1 entered promiscuous mode [ 1269.262466][T21285] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1269.262591][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1269.262602][ T26] audit: type=1326 audit(1725102481.252:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22555 comm="syz.1.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1269.289756][T22557] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1269.543291][ T26] audit: type=1326 audit(1725102481.252:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22555 comm="syz.1.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1269.569379][T22557] overlayfs: filesystem on './file1' not supported [ 1269.646741][T22568] loop3: detected capacity change from 0 to 512 [ 1269.836415][T22577] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5141'. [ 1270.541896][ T26] audit: type=1326 audit(1725102481.252:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22555 comm="syz.1.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1270.565873][ T26] audit: type=1326 audit(1725102481.832:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22570 comm="syz.0.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e7379eb9 code=0x7ffc0000 [ 1270.641076][T22568] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1270.687954][T22568] ext4 filesystem being mounted at /48/bus supports timestamps until 2038 (0x7fffffff) [ 1270.688905][ T26] audit: type=1326 audit(1725102481.832:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22570 comm="syz.0.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e7379eb9 code=0x7ffc0000 [ 1270.782901][ T26] audit: type=1326 audit(1725102481.872:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22570 comm="syz.0.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb4e7379eb9 code=0x7ffc0000 [ 1270.800972][T22590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5145'. [ 1270.855287][T22591] program syz.4.5143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1271.475185][ T26] audit: type=1326 audit(1725102481.892:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22570 comm="syz.0.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e7379eb9 code=0x7ffc0000 [ 1271.694107][ T26] audit: type=1326 audit(1725102481.912:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22570 comm="syz.0.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e7379eb9 code=0x7ffc0000 [ 1271.746361][T22600] loop4: detected capacity change from 0 to 764 [ 1272.087317][ T26] audit: type=1326 audit(1725102481.932:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22570 comm="syz.0.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fb4e7379eb9 code=0x7ffc0000 [ 1272.418898][T22604] loop2: detected capacity change from 0 to 512 [ 1272.431749][ T26] audit: type=1326 audit(1725102481.932:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22570 comm="syz.0.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e7379eb9 code=0x7ffc0000 [ 1272.495154][T21288] EXT4-fs (loop3): unmounting filesystem. [ 1272.502671][T22604] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1272.548125][T22604] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 1272.664984][T22609] loop4: detected capacity change from 0 to 256 [ 1272.715785][T22609] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1272.862379][T22611] overlayfs: filesystem on './file1' not supported [ 1272.874250][T22605] Invalid ELF section header size [ 1273.053295][T22619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5156'. [ 1273.143545][T22624] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5155'. [ 1274.998349][ T26] audit: type=1326 audit(1725102486.992:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22625 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1275.096097][ T26] audit: type=1326 audit(1725102486.992:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22625 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1275.124504][T22630] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5159'. [ 1275.162896][T22633] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1275.186089][ T26] audit: type=1326 audit(1725102486.992:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22625 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1275.220728][ T26] audit: type=1326 audit(1725102486.992:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22625 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1275.247111][ T26] audit: type=1326 audit(1725102487.012:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22625 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1275.455324][ T26] audit: type=1326 audit(1725102487.012:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22625 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1276.264348][T22647] device wg1 entered promiscuous mode [ 1276.312116][T22658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5170'. [ 1276.370327][T22656] loop2: detected capacity change from 0 to 2048 [ 1276.388064][ T26] audit: type=1326 audit(1725102487.012:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22625 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1276.426112][ T26] audit: type=1326 audit(1725102487.012:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22625 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1276.612834][T22656] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1276.618311][ T26] audit: type=1326 audit(1725102487.012:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22625 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90da979eb9 code=0x7ffc0000 [ 1276.708046][T22675] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5174'. [ 1276.711652][T22656] ext4 filesystem being mounted at /119/bus supports timestamps until 2038 (0x7fffffff) [ 1277.914404][ T26] audit: type=1326 audit(1725102487.302:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22632 comm="syz.0.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e7379eb9 code=0x7ffc0000 [ 1277.934448][T22677] loop3: detected capacity change from 0 to 1024 [ 1278.187900][T22677] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1278.668884][T20268] EXT4-fs (loop2): unmounting filesystem. [ 1278.937150][T22677] loop3: detected capacity change from 0 to 8192 [ 1279.012235][T21285] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1279.754423][T22677] Invalid ELF section header size [ 1279.817850][T22695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5183'. [ 1279.913056][T22695] loop2: detected capacity change from 0 to 1024 [ 1279.946009][T22695] EXT4-fs: quotafile must be on filesystem root [ 1280.025550][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 1280.025565][ T26] audit: type=1326 audit(1725102492.012:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22694 comm="syz.2.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6757778850 code=0x7ffc0000 [ 1280.066636][ T26] audit: type=1326 audit(1725102492.052:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22694 comm="syz.2.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6757779abb code=0x7ffc0000 [ 1280.977130][ T26] audit: type=1326 audit(1725102492.732:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22694 comm="syz.2.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6757778b4a code=0x7ffc0000 [ 1281.049536][ T26] audit: type=1326 audit(1725102492.732:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22694 comm="syz.2.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6757779eb9 code=0x7ffc0000 [ 1281.123262][ T26] audit: type=1326 audit(1725102492.792:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22694 comm="syz.2.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6757779eb9 code=0x7ffc0000 [ 1281.202021][ T26] audit: type=1326 audit(1725102492.822:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22694 comm="syz.2.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6757779eb9 code=0x7ffc0000 [ 1281.225052][T22723] loop2: detected capacity change from 0 to 1024 [ 1281.288490][T22723] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1281.334828][T22730] loop3: detected capacity change from 0 to 256 [ 1281.435077][T22730] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1282.137531][ T26] audit: type=1326 audit(1725102492.822:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22694 comm="syz.2.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6757779eb9 code=0x7ffc0000 [ 1282.201054][ T3651] Bluetooth: hci5: Invalid handle: 0x6161 > 0x0eff [ 1282.232216][T22723] loop2: detected capacity change from 0 to 8192 [ 1282.240588][ T26] audit: type=1326 audit(1725102492.822:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22694 comm="syz.2.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6757779eb9 code=0x7ffc0000 [ 1282.263389][ T26] audit: type=1326 audit(1725102492.822:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22694 comm="syz.2.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f6757779eb9 code=0x7ffc0000 [ 1282.286898][ T26] audit: type=1326 audit(1725102492.822:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22694 comm="syz.2.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6757779eb9 code=0x7ffc0000 [ 1282.341695][T21285] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1282.488971][T22723] Invalid ELF section header size [ 1283.729616][T22761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5207'. [ 1283.869945][T22761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5207'. [ 1283.934693][T22761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5207'. [ 1285.751969][T22808] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5220'. [ 1285.761083][T22808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5220'. [ 1286.220525][T22810] Invalid ELF section header size [ 1286.263995][T22815] loop2: detected capacity change from 0 to 256 [ 1286.373568][T22815] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1286.750559][T22826] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5225'. [ 1286.759795][T22826] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5225'. [ 1286.759845][T22826] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5225'. [ 1287.397564][T22843] loop2: detected capacity change from 0 to 2048 [ 1287.457586][T22845] loop4: detected capacity change from 0 to 512 [ 1287.505411][T22845] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1287.553142][T22843] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1287.562593][T22845] EXT4-fs (loop4): 1 truncate cleaned up [ 1287.575391][T22845] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1287.587002][T22843] ext4 filesystem being mounted at /132/bus supports timestamps until 2038 (0x7fffffff) [ 1287.743427][T21096] EXT4-fs (loop4): unmounting filesystem. [ 1288.569177][T20268] EXT4-fs (loop2): unmounting filesystem. [ 1289.062093][T22861] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5233'. [ 1289.071194][T22861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5233'. [ 1289.880241][T22878] loop2: detected capacity change from 0 to 256 [ 1289.988984][T22878] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1290.006780][T22881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5237'. [ 1290.030819][T22881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5237'. [ 1290.098311][T22881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5237'. [ 1292.318100][T22910] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5245'. [ 1292.327163][T22910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5245'. [ 1292.864491][T22921] loop4: detected capacity change from 0 to 256 [ 1292.871363][T22918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5249'. [ 1292.940684][T22921] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1293.154299][T22926] virtio-fs: tag <(null)> not found [ 1293.320060][T22926] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 1293.327180][T22926] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1293.357353][T22926] vhci_hcd vhci_hcd.0: Device attached [ 1293.394226][T22929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5253'. [ 1294.207754][T12691] vhci_hcd: vhci_device speed not set [ 1294.224914][T22937] Invalid ELF section header size [ 1294.287857][T12691] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 1294.345441][T22930] vhci_hcd: connection reset by peer [ 1294.352224][T11719] vhci_hcd: stop threads [ 1294.356491][T11719] vhci_hcd: release socket [ 1294.373100][T11719] vhci_hcd: disconnect device [ 1295.360838][T22954] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5261'. [ 1295.931304][T22958] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5262'. [ 1296.322172][T22968] loop4: detected capacity change from 0 to 256 [ 1296.414935][T22968] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1296.546259][T22969] autofs4:pid:22969:autofs_fill_super: called with bogus options [ 1297.549359][T22982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5267'. [ 1297.753991][T22988] loop2: detected capacity change from 0 to 1024 [ 1297.823497][T22988] ext4: Bad value for 'commit' [ 1297.905826][T22998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5273'. [ 1298.003662][T21285] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1298.040762][T22988] Bluetooth: MGMT ver 1.22 [ 1298.283373][T22988] loop2: detected capacity change from 0 to 128 [ 1298.540867][T22988] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1298.816316][T23008] loop3: detected capacity change from 0 to 2048 [ 1298.884976][T23011] loop4: detected capacity change from 0 to 164 [ 1298.933427][T23008] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1298.947938][T23008] ext4 filesystem being mounted at /72/bus supports timestamps until 2038 (0x7fffffff) [ 1298.968881][T21285] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1299.251526][T22988] FAT-fs (loop2): IO charset cp86å [ 1299.251526][T22988] not found [ 1299.437801][T12691] vhci_hcd: vhci_device speed not set [ 1300.155734][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.167167][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.487768][T23030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5281'. [ 1300.543894][T23032] loop4: detected capacity change from 0 to 1024 [ 1300.580943][T23032] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 1300.752680][T21288] EXT4-fs (loop3): unmounting filesystem. [ 1300.811573][T23043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5284'. [ 1300.855827][T23043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5284'. [ 1300.953641][T23032] loop4: detected capacity change from 0 to 8192 [ 1301.047837][T21285] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1301.157268][T23060] 9pnet_virtio: no channels available for device syz [ 1301.205285][T23060] overlayfs: './file1' not a directory [ 1301.309230][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 1301.310935][ T26] audit: type=1804 audit(1725102513.292:1036): pid=23060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5288" name="/newroot/74/file0/bus/bus/bus" dev="overlay" ino=420 res=1 errno=0 [ 1302.148673][T23069] Invalid ELF section header size [ 1302.316284][T23071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5291'. [ 1302.325485][ T3651] Bluetooth: hci5: command 0x0406 tx timeout [ 1302.401260][T23076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5293'. [ 1302.690171][T23085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5297'. [ 1302.777906][T23085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5297'. [ 1302.907275][T23090] loop2: detected capacity change from 0 to 1764 [ 1304.073342][T21285] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1304.478199][T23106] netlink: 'syz.3.5299': attribute type 1 has an invalid length. [ 1306.350941][T23119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5305'. [ 1306.499976][T23110] device syzkaller0 entered promiscuous mode [ 1306.828266][T23126] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5300'. [ 1307.385254][T23133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5309'. [ 1307.455975][T23133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5309'. [ 1307.704379][T23138] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5311'. [ 1310.697228][T23153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5316'. [ 1313.608388][T23166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5321'. [ 1313.617315][T23166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5321'. [ 1313.884600][T23171] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5323'. [ 1317.066346][T23184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5327'. [ 1317.104264][T21288] [ 1317.106624][T21288] ====================================================== [ 1317.113631][T21288] WARNING: possible circular locking dependency detected [ 1317.120637][T21288] 6.1.107-syzkaller #0 Not tainted [ 1317.125746][T21288] ------------------------------------------------------ [ 1317.132738][T21288] syz-executor/21288 is trying to acquire lock: [ 1317.138952][T21288] ffff88805ed4c130 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_conn_del+0x104/0x300 [ 1317.149371][T21288] [ 1317.149371][T21288] but task is already holding lock: [ 1317.156707][T21288] ffffffff8e650188 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 1317.166247][T21288] [ 1317.166247][T21288] which lock already depends on the new lock. [ 1317.166247][T21288] [ 1317.176630][T21288] [ 1317.176630][T21288] the existing dependency chain (in reverse order) is: [ 1317.185620][T21288] [ 1317.185620][T21288] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 1317.193328][T21288] lock_acquire+0x1f8/0x5a0 [ 1317.198338][T21288] __mutex_lock+0x132/0xd80 [ 1317.203342][T21288] hci_remote_features_evt+0x664/0xab0 [ 1317.209311][T21288] hci_event_packet+0xa9d/0x1510 [ 1317.214769][T21288] hci_rx_work+0x3cd/0xce0 [ 1317.219696][T21288] process_one_work+0x8a9/0x11d0 [ 1317.225135][T21288] worker_thread+0xa47/0x1200 [ 1317.230312][T21288] kthread+0x28d/0x320 [ 1317.234883][T21288] ret_from_fork+0x1f/0x30 [ 1317.239803][T21288] [ 1317.239803][T21288] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 1317.247075][T21288] lock_acquire+0x1f8/0x5a0 [ 1317.252087][T21288] __mutex_lock+0x132/0xd80 [ 1317.257119][T21288] sco_sock_connect+0x181/0x8f0 [ 1317.262476][T21288] __sys_connect+0x2c9/0x300 [ 1317.267571][T21288] __x64_sys_connect+0x76/0x80 [ 1317.272849][T21288] do_syscall_64+0x3b/0xb0 [ 1317.277768][T21288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1317.284167][T21288] [ 1317.284167][T21288] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}: [ 1317.293260][T21288] validate_chain+0x1661/0x5950 [ 1317.298609][T21288] __lock_acquire+0x125b/0x1f80 [ 1317.303960][T21288] lock_acquire+0x1f8/0x5a0 [ 1317.308963][T21288] lock_sock_nested+0x44/0x100 [ 1317.314228][T21288] sco_conn_del+0x104/0x300 [ 1317.319232][T21288] hci_conn_hash_flush+0x10e/0x2a0 [ 1317.324842][T21288] hci_dev_close_sync+0x9a9/0x1020 [ 1317.330453][T21288] hci_unregister_dev+0x207/0x500 [ 1317.335981][T21288] vhci_release+0x7f/0xd0 [ 1317.340817][T21288] __fput+0x3f6/0x8d0 [ 1317.345309][T21288] task_work_run+0x246/0x300 [ 1317.350397][T21288] do_exit+0xa73/0x26a0 [ 1317.355053][T21288] do_group_exit+0x202/0x2b0 [ 1317.360156][T21288] get_signal+0x16f7/0x17d0 [ 1317.365164][T21288] arch_do_signal_or_restart+0xb0/0x1a10 [ 1317.371296][T21288] exit_to_user_mode_loop+0x6a/0x100 [ 1317.377077][T21288] exit_to_user_mode_prepare+0xb1/0x140 [ 1317.383120][T21288] syscall_exit_to_user_mode+0x60/0x270 [ 1317.389164][T21288] do_syscall_64+0x47/0xb0 [ 1317.394082][T21288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1317.400478][T21288] [ 1317.400478][T21288] other info that might help us debug this: [ 1317.400478][T21288] [ 1317.410682][T21288] Chain exists of: [ 1317.410682][T21288] sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock [ 1317.410682][T21288] [ 1317.424920][T21288] Possible unsafe locking scenario: [ 1317.424920][T21288] [ 1317.432349][T21288] CPU0 CPU1 [ 1317.437693][T21288] ---- ---- [ 1317.443051][T21288] lock(hci_cb_list_lock); [ 1317.447533][T21288] lock(&hdev->lock); [ 1317.454095][T21288] lock(hci_cb_list_lock); [ 1317.461097][T21288] lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO); [ 1317.466981][T21288] [ 1317.466981][T21288] *** DEADLOCK *** [ 1317.466981][T21288] [ 1317.475187][T21288] 3 locks held by syz-executor/21288: [ 1317.480534][T21288] #0: ffff888028d110b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500 [ 1317.490448][T21288] #1: ffff888028d10078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 1317.500079][T21288] #2: ffffffff8e650188 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 1317.510080][T21288] [ 1317.510080][T21288] stack backtrace: [ 1317.515962][T21288] CPU: 0 PID: 21288 Comm: syz-executor Not tainted 6.1.107-syzkaller #0 [ 1317.524267][T21288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1317.534305][T21288] Call Trace: [ 1317.537575][T21288] [ 1317.540493][T21288] dump_stack_lvl+0x1e3/0x2cb [ 1317.545165][T21288] ? nf_tcp_handle_invalid+0x642/0x642 [ 1317.550611][T21288] ? print_circular_bug+0x12b/0x1a0 [ 1317.555784][T21288] check_noncircular+0x2fa/0x3b0 [ 1317.560698][T21288] ? stack_trace_snprint+0xe0/0xe0 [ 1317.565790][T21288] ? add_chain_block+0x850/0x850 [ 1317.570703][T21288] ? lockdep_lock+0x11f/0x2a0 [ 1317.575366][T21288] ? lockdep_unlock+0x165/0x300 [ 1317.580194][T21288] ? lockdep_lock+0x2a0/0x2a0 [ 1317.584846][T21288] ? _find_first_zero_bit+0xd0/0x100 [ 1317.590111][T21288] validate_chain+0x1661/0x5950 [ 1317.594942][T21288] ? reacquire_held_locks+0x660/0x660 [ 1317.600292][T21288] ? reacquire_held_locks+0x660/0x660 [ 1317.605651][T21288] ? mark_lock+0x9a/0x340 [ 1317.609962][T21288] ? __lock_acquire+0x125b/0x1f80 [ 1317.615143][T21288] ? mark_lock+0x9a/0x340 [ 1317.619449][T21288] __lock_acquire+0x125b/0x1f80 [ 1317.624295][T21288] lock_acquire+0x1f8/0x5a0 [ 1317.628863][T21288] ? sco_conn_del+0x104/0x300 [ 1317.633521][T21288] ? read_lock_is_recursive+0x10/0x10 [ 1317.638871][T21288] ? sco_conn_del+0xfa/0x300 [ 1317.643444][T21288] ? __lock_acquire+0x1f80/0x1f80 [ 1317.648449][T21288] ? do_raw_spin_lock+0x14a/0x370 [ 1317.653452][T21288] lock_sock_nested+0x44/0x100 [ 1317.658209][T21288] ? sco_conn_del+0x104/0x300 [ 1317.662885][T21288] sco_conn_del+0x104/0x300 [ 1317.667367][T21288] ? sco_connect_cfm+0xb10/0xb10 [ 1317.672284][T21288] hci_conn_hash_flush+0x10e/0x2a0 [ 1317.677390][T21288] hci_dev_close_sync+0x9a9/0x1020 [ 1317.682502][T21288] hci_unregister_dev+0x207/0x500 [ 1317.687510][T21288] vhci_release+0x7f/0xd0 [ 1317.691820][T21288] ? vhci_open+0x360/0x360 [ 1317.696229][T21288] __fput+0x3f6/0x8d0 [ 1317.700191][T21288] task_work_run+0x246/0x300 [ 1317.704845][T21288] ? kasan_quarantine_put+0xd4/0x220 [ 1317.710121][T21288] ? task_work_cancel+0x2e0/0x2e0 [ 1317.715236][T21288] ? kmem_cache_free+0x292/0x510 [ 1317.720155][T21288] ? do_exit+0xa6e/0x26a0 [ 1317.724464][T21288] do_exit+0xa73/0x26a0 [ 1317.728606][T21288] ? put_task_struct+0x80/0x80 [ 1317.733349][T21288] ? get_signal+0x137e/0x17d0 [ 1317.738021][T21288] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1317.743996][T21288] ? print_irqtrace_events+0x210/0x210 [ 1317.749451][T21288] ? _raw_spin_lock_irq+0xdb/0x110 [ 1317.754543][T21288] do_group_exit+0x202/0x2b0 [ 1317.759116][T21288] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1317.764298][T21288] ? lockdep_hardirqs_on+0x94/0x130 [ 1317.769484][T21288] get_signal+0x16f7/0x17d0 [ 1317.773983][T21288] ? pipe_wait_writable+0x590/0x590 [ 1317.779169][T21288] ? ptrace_notify+0x370/0x370 [ 1317.783917][T21288] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1317.789906][T21288] ? wake_bit_function+0x210/0x210 [ 1317.795000][T21288] arch_do_signal_or_restart+0xb0/0x1a10 [ 1317.800612][T21288] ? vfs_read+0x553/0xbf0 [ 1317.804920][T21288] ? kernel_read+0x1f0/0x1f0 [ 1317.809488][T21288] ? __fput+0x6c6/0x8d0 [ 1317.813625][T21288] ? get_sigframe_size+0x10/0x10 [ 1317.818547][T21288] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1317.824508][T21288] ? ksys_read+0x252/0x2c0 [ 1317.828900][T21288] ? exit_to_user_mode_loop+0x39/0x100 [ 1317.834419][T21288] exit_to_user_mode_loop+0x6a/0x100 [ 1317.839680][T21288] exit_to_user_mode_prepare+0xb1/0x140 [ 1317.845198][T21288] syscall_exit_to_user_mode+0x60/0x270 [ 1317.850725][T21288] do_syscall_64+0x47/0xb0 [ 1317.855122][T21288] ? clear_bhb_loop+0x45/0xa0 [ 1317.859781][T21288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1317.865662][T21288] RIP: 0033:0x7fc6849788fc [ 1317.870056][T21288] Code: Unable to access opcode bytes at 0x7fc6849788d2. [ 1317.877048][T21288] RSP: 002b:00007ffca0077440 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1317.885438][T21288] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fc6849788fc [ 1317.893387][T21288] RDX: 0000000000000028 RSI: 00007ffca00774f0 RDI: 00000000000000f9 [ 1317.901331][T21288] RBP: 00007ffca007749c R08: 0000000000000000 R09: 0079746972756365 [ 1317.909279][T21288] R10: 00007fc684ae87e0 R11: 0000000000000246 R12: 00005555633075eb [ 1317.917226][T21288] R13: 0000555563307590 R14: 000000000013ed52 R15: 00007ffca00774f0 [ 1317.925176][T21288] [ 1318.177867][T23190] overlayfs: './bus' not a directory [ 1318.540073][ T3652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1318.547330][ T3652] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1318.555061][ T3652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1318.563616][ T3652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1318.570966][ T3652] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1318.578307][ T3652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1318.747418][T23176] loop4: detected capacity change from 0 to 40427 [ 1318.801812][T23189] chnl_net:caif_netlink_parms(): no params data found [ 1318.807867][T23176] F2FS-fs (loop4): invalid crc value [ 1318.892405][T23176] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1318.932112][T23189] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.940061][T23176] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1318.952732][T23189] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.998768][T23189] device bridge_slave_0 entered promiscuous mode [ 1319.006825][T23189] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.014521][T23189] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.022588][T23189] device bridge_slave_1 entered promiscuous mode [ 1319.052161][T23189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1319.062796][T23189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1319.082543][T23189] team0: Port device team_slave_0 added [ 1319.090599][T23189] team0: Port device team_slave_1 added [ 1319.109325][T23189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1319.116277][T23189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1319.143140][T23189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1319.300798][T23189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1319.310121][T23189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1319.338752][T23189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1319.376522][T23189] device hsr_slave_0 entered promiscuous mode [ 1319.384497][T23189] device hsr_slave_1 entered promiscuous mode [ 1319.435771][T21096] syz-executor: attempt to access beyond end of device [ 1319.435771][T21096] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1319.534742][T23189] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.631858][T23189] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.682487][T23189] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.731461][T23189] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.812562][T23189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1319.826519][T23189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1319.834831][T23189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1319.842926][T23189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1319.883997][T23189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.895068][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1319.904192][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1319.912792][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1319.925098][T23189] 8021q: adding VLAN 0 to HW filter on device team0 [ 1319.934300][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1319.942891][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1319.952266][T11740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.959366][T11740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1319.966907][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1319.982287][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1319.990846][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1320.000760][T11740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.007890][T11740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1320.017427][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1320.031563][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1320.046794][T23189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1320.057506][T23189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1320.070671][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1320.079436][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1320.087803][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1320.096229][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1320.105825][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1320.113702][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1320.192705][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1320.200863][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1320.211249][T23189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.229191][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1320.238130][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1320.252410][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1320.261148][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1320.273912][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1320.282060][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1320.290693][T23189] device veth0_vlan entered promiscuous mode [ 1320.300344][T23189] device veth1_vlan entered promiscuous mode [ 1320.318757][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1320.326600][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1320.335609][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1320.344560][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1320.354565][T23189] device veth0_macvtap entered promiscuous mode [ 1320.368603][T23189] device veth1_macvtap entered promiscuous mode [ 1320.379800][T23189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.392276][T23189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.402207][T23189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.413059][T23189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.423091][T23189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.433531][T23189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.444111][T23189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.454908][T23189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.464739][T23189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1320.475341][T23189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.486124][T23189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1320.494238][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1320.502901][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1320.512563][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1320.521025][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1320.532451][T23189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1320.543166][T23189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.553999][T23189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1320.566452][T23189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.576300][T23189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1320.586774][T23189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.596942][T23189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1320.607386][T23189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.618092][T23189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1320.628532][T23189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.638465][ T3652] Bluetooth: hci4: command tx timeout [ 1320.644731][T23189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1320.658767][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1320.667192][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1320.677973][T23189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.686750][T23189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.696366][T23189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.705305][T23189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.734663][ T3922] device hsr_slave_0 left promiscuous mode [ 1320.741050][ T3922] device hsr_slave_1 left promiscuous mode [ 1320.747184][ T3922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1320.755235][ T3922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1320.763358][ T3922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1320.770961][ T3922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1320.778632][ T3922] device bridge_slave_1 left promiscuous mode [ 1320.784955][ T3922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.793224][ T3922] device bridge_slave_0 left promiscuous mode [ 1320.799533][ T3922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.809312][ T3922] device veth1_macvtap left promiscuous mode [ 1320.815496][ T3922] device veth0_macvtap left promiscuous mode [ 1320.821862][ T3922] device veth1_vlan left promiscuous mode [ 1320.827615][ T3922] device veth0_vlan left promiscuous mode [ 1320.961227][ T3922] team0 (unregistering): Port device team_slave_1 removed [ 1320.992288][ T3922] team0 (unregistering): Port device team_slave_0 removed [ 1321.017020][ T3922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1321.044913][ T3922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1321.092995][ T3922] bond0 (unregistering): Released all slaves [ 1321.143218][T23189] ieee80211 phy56: Selected rate control algorithm 'minstrel_ht' [ 1321.160066][T11719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1321.160783][T23189] ieee80211 phy57: Selected rate control algorithm 'minstrel_ht' [ 1321.173070][T11719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1321.185534][T11743] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1321.197087][T11719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1321.205954][T11719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1321.213721][T11743] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1322.717782][ T3652] Bluetooth: hci4: command tx timeout [ 1324.797744][ T3652] Bluetooth: hci4: command tx timeout [ 1326.877739][ T3652] Bluetooth: hci4: command tx timeout