last executing test programs: 1m1.193207148s ago: executing program 3 (id=2730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400100bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x640}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000076e000/0x4000)=nil, 0x400000, 0x0, 0x2}) 59.225861136s ago: executing program 0 (id=2735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_procfs(0x0, &(0x7f0000002180)='net/netstat\x00') read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) 57.800244595s ago: executing program 0 (id=2736): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0xb, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x8) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r2, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0x3840, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 54.370766952s ago: executing program 0 (id=2744): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x100400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x0, 0x0, 0xe0) creat(0x0, 0x0) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xc331f16018615cb, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) 39.618948274s ago: executing program 2 (id=2772): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x14927e, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 37.903587214s ago: executing program 1 (id=2774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 37.617299097s ago: executing program 4 (id=2775): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f000058f000/0x3000)=nil, 0x3000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) 34.54097602s ago: executing program 2 (id=2777): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') pread64(r3, &(0x7f0000004c40)=""/98, 0x62, 0x7760) 34.539668034s ago: executing program 1 (id=2787): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 32.422889169s ago: executing program 1 (id=2778): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f000058f000/0x3000)=nil, 0x3000, 0x9) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) execve(0x0, 0x0, 0x0) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) 32.29979165s ago: executing program 4 (id=2779): syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x6b, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x1, 0x7, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "9e"}, {0x5, 0x24, 0x0, 0xccde}, {0xd, 0x24, 0xf, 0x1, 0xffffff06, 0x7ff, 0x8001, 0x7}, [@obex={0x5, 0x24, 0x15, 0x40}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x2, [0x1]}, @dmm={0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3c7, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x41, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xd9, 0x0, 0x81}}}}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000600)=""/140) ioctl$EVIOCGSND(r0, 0x801c581f, 0x0) syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000140)=""/188) syz_open_dev$evdev(&(0x7f0000000c00), 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x8201) 30.707607731s ago: executing program 2 (id=2780): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x6) read$msr(r0, &(0x7f00000003c0)=""/102392, 0x18ff8) ioperm(0x0, 0xc5de, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 29.303342093s ago: executing program 5 (id=2782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 8.619047801s ago: executing program 3 (id=2749): socket$packet(0x11, 0x0, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) open(0x0, 0x0, 0x146) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8) 8.617445571s ago: executing program 1 (id=2795): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x0, 0x10, 0x1, "9e"}, 0x0, 0x0, 0x0, 0x0}) 8.616135336s ago: executing program 2 (id=2796): socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x6, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x1, 0xa70b, 0x7}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r2) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x125, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) 8.597120513s ago: executing program 4 (id=2797): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='environ\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000167000/0x2000)=nil, &(0x7f00007ce000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) io_uring_setup(0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fsopen(0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 8.586228411s ago: executing program 5 (id=2798): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000180000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='fsi_master_gpio_out\x00', r0}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'vxcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x110) finit_module(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) fgetxattr(0xffffffffffffffff, &(0x7f0000000300)=@known='system.posix_acl_default\x00', &(0x7f0000000340)=""/24, 0x18) 6.470597991s ago: executing program 3 (id=2783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="0cc4c53e52cd4f1e2787e1cd1e55684e749d3b21ae068680fadc5cc648c79186f3d98ccd3a5b1732936dcf74538ffc97a9f82112023f2567972515712c7ec4e0ed2220f5425ba6ed76928e28b07ec50b135954b94c32030210aa0e2f4645f46be81d746c6b", 0x65}, {&(0x7f0000000340)="9c89ca312f027074ae7d79f183f678fc695c50a34d0e4133881f084b6d440ab6868186a9eabf0b8e5760adbc5a349da9d1620af787745bee2d6d2e6a84ee1fe7132e692fed0e0fe948d775263f5b67a91c4bd74ceeb68e733b2389262377b79861ddf5d86ca1a6388ab7257d5f1271a35a8c79a96e3e28f094fdfa96736ef41516bd3fbec3fd955247007a18dd527d224592b6fc09a05d5628e73b", 0x7fffef9b}], 0x2}, 0x0) 6.4703757s ago: executing program 4 (id=2784): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000340)=""/181, 0xb5}], 0x1, 0x0, 0x0) 6.468171126s ago: executing program 2 (id=2800): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/183, 0xb7}], 0x1}, 0x0) shutdown(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5}]}, 0x24}}, 0x0) 6.467245607s ago: executing program 5 (id=2801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1004000, &(0x7f0000000280)=ANY=[@ANYBLOB="747970653dd88d17102c6e6c733d61736369692c00b65c5e80ee881a8017a99080db5f384bdecc38aad57f2265deb9bc09ceaa37a446dd9779c499df84c71ac5709884f5a46a6157a859efa0011b98ed9e0084e7f30840308a546dfc131f58f11e2885d3d93d1ea670d769ec2f0aa0c9e9bc2dce36eb80f93e9c66e51cd63047e63897ad645ff9e1c43c323948225427a038840483468e20afe97ee11df867f724292017e27da8ee18b36e12ec848a02f157f0c97084870848c3f5101666aeeb41"], 0x4, 0x5ce, &(0x7f00000006c0)="$eJzs3U9rHOcdB/DvrNay5IKjJHbitoGKlP6horZW67ZJwVQtpugQSsCvQNTrWHitBGlTlByKXfxCUoLeQC+55OCDz+1LEPRYKPRURC8uMzu72tiyLCWSdh1/Pvaz8zz7zPzmN7+dGWlXAgV4aa0spPkwRVYW3tsqxzvb7e7OdvvuoJ/kbJJG9T/NsvvPZOpBMp9+y3eTFHW44ln7ufbF5818ef9Gf9SoW7X+1EHbHc69umW5TnL5GOM9+sbxiuERlkGvD4JPgsfP958T3P3UCcbmCIpnvBZzybkkM/V9YHDiNk43u+M3MRcgAAAAnKBXdrObrZwfdx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIqn//n9Rt8agP59i8Pf/p+vnUvdfaA/HnQAAAAAAAAAAHIMf7GY3Wzk/GD8uqp/5v10NLlSP38nH2UwnG7mcrayml1420koyNxJoemu119toHWLLpX23XDqd4wUAAAAAAACAb6m/ZGXv5/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAJimSqv6jahUF/Lo1mkpkk0+V695J/DPovsofjTgAAAABOwSu72c1Wzg/Gj4vqPf8b1fv+mXyc9fSyll666eRm9VlA/11/Y2e73d3Zbt8t29Nxf/vvI6VRRUz/s4f993ypWmM2t7JWPXM5f8yH6eZmGtWWpUuDfPbP636ZU/Gb2iEzu1kvi6T4fv1pyGSYqypyZliRxTq3shqvHlyJI746T+6plcbwk58LJ1Dzc/WyrPnMRNd8aeTse+PgSiQ/uvbf9dvd9Tu3b20uTM4hfU1PVqI9Uok3X6pKLFaVuDgcr+T3uZGFzOf9bGQtf8pqeulkPter3mp9PpePcwdXavkro/efl8l0/br076JHy+ntatvzWcsf8mFuppNfZilX805a+VX17+rIK3zxEFd942hX/Q9/WndeS4rZ/nJClHV9daSuo/fcuWpu9Jm9Kr12/PfG5vfqzlRSNIc5TYInK9EaqcTrB1fir4/Lx83u+p2N26sfHXJ/P6mX5VeJsxP1VWK6Pnub1eirZ0c59/q+c61q7sJwrvHU3MXh3POu1On6e7inIy1Vc2/uO9eu5i6NzO33/RYAE+/cz85Nz/5r9u+zn80+mL09+97M786+c/at6Zx5dObXzcWpHzfeKv6Wz/Lnvff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA17f5yad3VrvdzoaOjo7OsDPuOxOn4Urv7kdXNj/59Odrd1c/6HzQWW8v/mLp3XZr6d2rV26tdTuL/cdxp8kJ2bvox50JAAAAAAAAAAAAR3Eav0467mMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgxbGykObDFGktXl4sxzvb7W7ZBv29NRtJmuXyf8nUg2Q+/Za5kXDFs/Zz7YvPm/ny/o29WI3B+lMHbXc49+qW5TrJ5WOM9+gbxyuGR1gGvT4IDuP2/wAAAP//wg8dzA==") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80dc5521, &(0x7f0000002300)=""/4115) 4.492343682s ago: executing program 0 (id=2760): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"], 0x0}, 0x90) fdatasync(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', 0x0}) 4.414838437s ago: executing program 3 (id=2785): r0 = socket(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) memfd_create(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5}}}]}, 0x48}}, 0x0) set_mempolicy(0x0, 0x0, 0x0) 3.758786342s ago: executing program 4 (id=2786): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd217cbfff43790f000138", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='xen_cpu_write_idt_entry\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r4, &(0x7f0000000d40), 0x0}, 0x20) 3.713888615s ago: executing program 1 (id=2789): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) getdents(r0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) getdents(r2, 0x0, 0x5e) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r3, 0xfffffffffffffffb, 0x2) getdents(r3, 0x0, 0x0) 3.712498087s ago: executing program 5 (id=2790): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x2) 3.550255345s ago: executing program 0 (id=2791): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3.301116258s ago: executing program 2 (id=2792): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 3.161537014s ago: executing program 1 (id=2793): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_submit(0x0, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000005c0)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x1, 0x923, 0x8, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "86e8a1f751037d3a0de93ffce945b1c350e135408c9217da4bf5e2b2c03538fdb728f233387f6c038ae5ef81cc32a0f29dd7384cb8f5773b5f9aa94c63b1a502"}}, 0x80}}, 0x20000040) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) 3.089278016s ago: executing program 3 (id=2794): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) io_setup(0x6, &(0x7f0000000240)) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$video4linux(&(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000000)={0x9, 0x8}) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) semop(0x0, &(0x7f0000000000)=[{}], 0x1) 2.978248505s ago: executing program 5 (id=2799): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x204a, 0xffffffffffffffff, 0x89, '\x00', 0x0, 0xffffffffffffffff, 0x80000000, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000008c0)={[{@nobh}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@resuid}, {@dioread_nolock}, {@usrjquota}, {@discard}, {@jqfmt_vfsv1}]}, 0xfc, 0x564, &(0x7f0000002bc0)="$eJzs3c9rHFUcAPDvbLL9rU2hFPUggR6s1G6axB8VPNSjaLGg97ok01Cy6ZbspjSxYHuwFy9SBBEL4h/gyYvH4j/gX1HQQpES9OAlMpvZdNPdTbbJtkm7nw9M8t7M7L757sz38WbfLhvAwBrN/hQiXo2Ib5OIwy3bhiPfOLq63/LD61PZksTKymd/J5Hk65r7J/n/g3nllYj4/euIk4X2dmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sw7kxPvv/du32J98/y/P3x696Mz3xxf/v6X+0duJ3E2DuXbWuPYhhutldEYzV+TYpx9bMfxPjS2myQ7fQBsyVCe58XI+oDDMZRnPfDi+yoiVoABlch/GFDNcUDz3r5P98HPjQcfrt4Atcc/vPreSOxr3BsdWE7W3Rll97sjfWg/a+O3v+7czpbo3/sQAJu6cTMiTg8Pt/d/Sd7/bd3pHvZ5vA39Hzw7d7Pxz1udxj+FtfFPdBj/HOyQu1uxef4X7vehma6y8d8HHce/a5NWI0N57aXGmK+YXLxUSbO+7eWIOBHFvVl9o/mcM8v3Vtav+XWt1Dr+y5as/eZYMD+O+8N71z96ulwvbzfupgc3I17rOP5N1s5/0uH8Z6/H+R7bOJbeeb3bts3jf7pWfo54o+P5fzSjlWw8PznWuB7GmldFu39uHfujW/s9xF/sY7htsvN/YOP4R5LW+dpat2fqPm/0077/0m7btnr970k+b5T35Ouulev1+fGIPckn7esnHj22WW/un8V/4vjG/V+n639/RHzRNeL1bh291XXXnb7+s/inn+j8P3nh3sdf/tit/d7O/9uN0ol8TS/9X68HuJ3XDgAAAAAAAHabQkQciqRQWisXCqXS6uc7jsaBQqVaq5+8WF24PB2N78qORLHQnOk+3PJ5iPH887DN+sRj9cmIOBIR3w3tb9RLU9XK9E4HDwAAAAAAAAAAAAAAAAAAALvEwYh9nb7/n/lzaKePDnjq2n66QeLDwOj+0y35ln780hOwK3XPf+BFJ/9hcMl/GFzyHwaX/IfBJf9hcMl/GFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAPrq/Llz2bKy/PD6VFafvrq4MFu9emo6rc2W5hamSlPV+SulmWp1ppKWpqpzmz1fpVq9Mj4RC9fG6mmtPlZbXLowV124XL9waa48k15Ii88kKgAAAAAAAAAAAAAAAAAAAHi+1BaXZsuVSjqvoLClwvDuOAyFPhd2umcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEf+DwAA//9MBzmC") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r3, &(0x7f0000000300)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0xa02, 0x0, 0x0) 1.331618677s ago: executing program 0 (id=2802): socket$packet(0x11, 0x0, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) open(0x0, 0x0, 0x146) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8) 1.05475894s ago: executing program 4 (id=2803): futex(0x0, 0x8, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000300)=""/132, 0x84) 222.258679ms ago: executing program 3 (id=2804): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001d00)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000aa2000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 0s ago: executing program 5 (id=2805): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) getsockopt(r1, 0x4, 0x80000001, &(0x7f0000000580)=""/4096, &(0x7f00000001c0)=0x1000) prctl$PR_SET_VMA(0x35, 0x0, &(0x7f000098b000/0x2000)=nil, 0x2000, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000280), 0x6, 0x40400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x121002) write$evdev(r3, &(0x7f00000001c0)=[{{}, 0x2, 0xf}], 0x18) kernel console output (not intermixed with test programs): P: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1076.328980][ T25] usb 4-1: 0:2 : does not exist [ 1076.440360][ T25] usb 4-1: USB disconnect, device number 13 [ 1076.493141][T12577] loop5: detected capacity change from 0 to 128 [ 1076.774813][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 1076.806286][T12584] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1077.000948][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2087'. [ 1078.834886][ T5245] Bluetooth: hci4: command 0x1003 tx timeout [ 1078.845313][ T4620] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1078.946390][T12597] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2089'. [ 1078.965611][T12597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2089'. [ 1079.008670][T12597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.052151][T12597] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.059494][T12597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.080878][T12603] loop3: detected capacity change from 0 to 256 [ 1079.176611][T12603] vfat: Bad value for 'nfs' [ 1079.451252][T12613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1079.458542][T12613] IPv6: NLM_F_CREATE should be set when creating new route [ 1079.705087][ T5296] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1079.838396][T12620] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 0, id = 0 [ 1079.929721][ T5296] usb 4-1: Using ep0 maxpacket: 16 [ 1079.956967][ T5296] usb 4-1: config 0 has an invalid interface number: 127 but max is 1 [ 1079.986760][ T5296] usb 4-1: config 0 has no interface number 1 [ 1080.024470][ T5296] usb 4-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 1080.051791][ T5296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.099276][ T5296] usb 4-1: Product: syz [ 1080.103742][ T5296] usb 4-1: Manufacturer: syz [ 1080.123734][ T5296] usb 4-1: SerialNumber: syz [ 1080.166743][ T5296] usb 4-1: config 0 descriptor?? [ 1080.591448][ T5294] usb 4-1: USB disconnect, device number 14 [ 1081.510644][T12650] loop2: detected capacity change from 0 to 256 [ 1081.583118][T12650] exfat: Unknown parameter '26' [ 1082.059364][T12657] loop3: detected capacity change from 0 to 128 [ 1082.167822][ T29] audit: type=1800 audit(1725839158.454:183): pid=12657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2109" name="bus" dev="loop3" ino=1048790 res=0 errno=0 [ 1082.308041][ T29] audit: type=1800 audit(1725839158.504:184): pid=12657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2109" name="bus" dev="loop3" ino=1048790 res=0 errno=0 [ 1082.742856][ T7626] kworker/u8:6: attempt to access beyond end of device [ 1082.742856][ T7626] loop3: rw=1, sector=129, nr_sectors = 1 limit=128 [ 1087.153687][T12697] loop2: detected capacity change from 0 to 2048 [ 1087.181962][ T29] audit: type=1326 audit(1725839163.464:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.0.2133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8be77cef9 code=0x0 [ 1087.391093][T12699] loop4: detected capacity change from 0 to 4096 [ 1087.995406][T12707] loop2: detected capacity change from 0 to 8192 [ 1088.541582][T12714] loop4: detected capacity change from 0 to 256 [ 1088.584102][T12714] exfat: Unknown parameter '26' [ 1088.593771][T12716] fuse: Bad value for 'fd' [ 1088.958937][T12720] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 0, id = 0 [ 1089.801086][T12732] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2130'. [ 1089.955530][T12732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2130'. [ 1090.000112][T12732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.057380][T12732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.064803][T12732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.146971][T12735] loop0: detected capacity change from 0 to 256 [ 1090.192431][T12735] vfat: Bad value for 'nfs' [ 1090.664664][ T5296] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1090.934850][ T5296] usb 1-1: Using ep0 maxpacket: 16 [ 1090.975582][ T5296] usb 1-1: config 0 has an invalid interface number: 127 but max is 1 [ 1091.041694][ T5296] usb 1-1: config 0 has no interface number 1 [ 1091.078796][ T5296] usb 1-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 1091.118923][ T5296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.147538][ T5296] usb 1-1: Product: syz [ 1091.174693][ T5296] usb 1-1: Manufacturer: syz [ 1091.193110][ T5296] usb 1-1: SerialNumber: syz [ 1091.243043][ T5296] usb 1-1: config 0 descriptor?? [ 1091.726168][ T2862] usb 1-1: USB disconnect, device number 16 [ 1092.758684][ T47] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1093.001091][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 1093.084075][ T47] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1093.153684][ T47] usb 2-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 1093.204773][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.294319][ T47] usb 2-1: config 0 descriptor?? [ 1093.330447][ T47] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1094.011017][T12768] loop4: detected capacity change from 0 to 128 [ 1094.225309][ T5296] usb 2-1: USB disconnect, device number 13 [ 1094.756327][ T5245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1094.769103][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1094.782485][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1094.792969][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1094.801510][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1094.809288][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1095.598565][T12779] loop1: detected capacity change from 0 to 2048 [ 1095.643949][T12784] loop3: detected capacity change from 0 to 256 [ 1095.678684][T12784] exfat: Unknown parameter '26' [ 1095.813634][T12787] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1096.039739][T12779] overlayfs: upper fs does not support tmpfile. [ 1096.145943][T12779] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1096.304644][T12779] overlayfs: failed to set xattr on upper [ 1096.325075][T12779] overlayfs: ...falling back to redirect_dir=nofollow. [ 1096.331954][T12779] overlayfs: ...falling back to index=off. [ 1096.364672][T12779] overlayfs: ...falling back to uuid=null. [ 1096.450665][ T5245] Bluetooth: hci6: sending frame failed (-49) [ 1096.458863][ T4620] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1096.524818][T12790] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1096.914948][ T4620] Bluetooth: hci4: command tx timeout [ 1096.941646][T12770] chnl_net:caif_netlink_parms(): no params data found [ 1098.982469][T12770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.010830][ T4620] Bluetooth: hci4: command tx timeout [ 1099.078734][T12770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.146085][T12770] bridge_slave_0: entered allmulticast mode [ 1099.226448][T12770] bridge_slave_0: entered promiscuous mode [ 1099.260192][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2151'. [ 1099.587631][T12770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.629838][T12770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.711378][T12770] bridge_slave_1: entered allmulticast mode [ 1099.788307][T12770] bridge_slave_1: entered promiscuous mode [ 1100.125410][T12817] 8021q: adding VLAN 0 to HW filter on device team1 [ 1100.153827][T12817] bond0: (slave team1): Enslaving as an active interface with an up link [ 1100.709058][T12770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1101.095299][ T4620] Bluetooth: hci4: command tx timeout [ 1101.222121][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.418777][T12770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.019440][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.398615][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.540439][T12770] team0: Port device team_slave_0 added [ 1102.581063][T12834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1102.588404][T12834] IPv6: NLM_F_CREATE should be set when creating new route [ 1102.596310][ T47] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1102.821945][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 1102.927841][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1102.947918][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.994940][ T47] usb 3-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 1103.038759][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.052586][T12770] team0: Port device team_slave_1 added [ 1103.124852][ T47] usb 3-1: config 0 descriptor?? [ 1103.138610][ T47] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1103.171604][ T4620] Bluetooth: hci4: command tx timeout [ 1103.648112][T12770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.699958][T12770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.766697][T12425] usb 3-1: USB disconnect, device number 17 [ 1103.834944][T12770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1103.872578][ T7625] Bluetooth: hci1: Frame reassembly failed (-84) [ 1103.925581][T12843] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1103.973659][T12770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.038070][T12770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.218833][T12770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.006561][T12364] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1105.026944][T12364] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1105.039363][T12364] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1105.062199][T12364] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1105.070414][T12364] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1105.080687][T12364] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1105.197570][T12770] hsr_slave_0: entered promiscuous mode [ 1105.306858][T12770] hsr_slave_1: entered promiscuous mode [ 1105.336685][T12770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1105.344273][T12770] Cannot create hsr debugfs directory [ 1105.373014][ T36] bridge_slave_1: left allmulticast mode [ 1105.387774][ T36] bridge_slave_1: left promiscuous mode [ 1105.393718][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.467853][ T36] bridge_slave_0: left allmulticast mode [ 1105.473536][ T36] bridge_slave_0: left promiscuous mode [ 1105.482120][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.592175][T12364] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1105.621705][T12364] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1105.636460][T12364] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1105.665435][T12364] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1105.685726][T12364] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1105.693402][T12364] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1105.884990][ T5245] Bluetooth: hci1: command 0x1003 tx timeout [ 1105.893361][ T4620] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1106.311598][T12852] fuse: Bad value for 'fd' [ 1106.524642][ T5296] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1106.743460][ T5296] usb 4-1: Using ep0 maxpacket: 16 [ 1106.780652][ T5296] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1106.806642][ T5296] usb 4-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 1106.820418][ T5296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.861305][ T5296] usb 4-1: config 0 descriptor?? [ 1106.963032][ T5296] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1107.156470][ T4620] Bluetooth: hci6: command tx timeout [ 1107.558678][ T5296] usb 4-1: USB disconnect, device number 15 [ 1107.839371][ T4620] Bluetooth: hci0: command tx timeout [ 1108.327687][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1108.420890][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1108.504289][ T36] bond0 (unregistering): Released all slaves [ 1109.235415][ T4620] Bluetooth: hci6: command tx timeout [ 1109.878536][ T4620] Bluetooth: hci0: command tx timeout [ 1111.315477][ T4620] Bluetooth: hci6: command tx timeout [ 1111.468614][ T36] hsr_slave_0: left promiscuous mode [ 1111.505905][ T36] hsr_slave_1: left promiscuous mode [ 1111.562678][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.594638][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.616204][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1111.652621][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.740422][ T36] veth1_macvtap: left promiscuous mode [ 1111.758423][ T36] veth0_macvtap: left promiscuous mode [ 1111.765287][ T36] veth1_vlan: left promiscuous mode [ 1111.773213][ T36] veth0_vlan: left promiscuous mode [ 1111.954993][ T4620] Bluetooth: hci0: command tx timeout [ 1113.168598][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1113.243486][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1113.405038][ T4620] Bluetooth: hci6: command tx timeout [ 1114.054620][ T4620] Bluetooth: hci0: command tx timeout [ 1114.212243][T12770] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.363311][T12770] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.528702][T12770] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.688900][T12770] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.948552][T12845] chnl_net:caif_netlink_parms(): no params data found [ 1115.086009][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.189101][T12847] chnl_net:caif_netlink_parms(): no params data found [ 1115.269690][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.430394][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.600316][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.703344][T12770] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1115.721510][T12845] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.735801][T12845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.743005][T12845] bridge_slave_0: entered allmulticast mode [ 1115.752835][T12845] bridge_slave_0: entered promiscuous mode [ 1115.789837][T12770] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1115.804767][T12770] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1115.818977][T12845] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.845354][T12845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.852614][T12845] bridge_slave_1: entered allmulticast mode [ 1115.871370][T12845] bridge_slave_1: entered promiscuous mode [ 1115.882194][T12847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.889797][T12847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.897200][T12847] bridge_slave_0: entered allmulticast mode [ 1115.905549][T12847] bridge_slave_0: entered promiscuous mode [ 1115.915570][T12770] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1115.989694][T12847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.998695][T12847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.007504][T12847] bridge_slave_1: entered allmulticast mode [ 1116.017018][T12847] bridge_slave_1: entered promiscuous mode [ 1116.063913][T12845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.083813][T12845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.204962][T12847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.296286][T12845] team0: Port device team_slave_0 added [ 1116.315914][T12847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.345836][ T36] bridge_slave_1: left allmulticast mode [ 1116.351509][ T36] bridge_slave_1: left promiscuous mode [ 1116.359171][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.371296][ T36] bridge_slave_0: left allmulticast mode [ 1116.377939][ T36] bridge_slave_0: left promiscuous mode [ 1116.388251][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.406296][ T36] bridge_slave_1: left allmulticast mode [ 1116.411950][ T36] bridge_slave_1: left promiscuous mode [ 1116.418441][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.430486][ T36] bridge_slave_0: left allmulticast mode [ 1116.442722][ T36] bridge_slave_0: left promiscuous mode [ 1116.448912][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.528097][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1117.541665][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.557064][ T36] bond0 (unregistering): Released all slaves [ 1117.757886][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1117.770991][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.784897][ T36] bond0 (unregistering): Released all slaves [ 1117.862281][T12845] team0: Port device team_slave_1 added [ 1118.123317][T12845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.130611][T12845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.157832][T12845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.184270][T12845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.191960][T12845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.220288][T12845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1118.249653][T12847] team0: Port device team_slave_0 added [ 1118.262398][T12847] team0: Port device team_slave_1 added [ 1118.463879][T12847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.470948][T12847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.499306][T12847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.573929][T12847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.581909][T12847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.608618][T12847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1118.671383][T12845] hsr_slave_0: entered promiscuous mode [ 1118.679548][T12845] hsr_slave_1: entered promiscuous mode [ 1118.843349][T12847] hsr_slave_0: entered promiscuous mode [ 1118.853128][T12847] hsr_slave_1: entered promiscuous mode [ 1118.861309][T12847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1118.870026][T12847] Cannot create hsr debugfs directory [ 1119.157657][ T36] hsr_slave_0: left promiscuous mode [ 1119.164028][ T36] hsr_slave_1: left promiscuous mode [ 1119.172536][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.180306][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1119.196763][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1119.204169][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1119.221030][ T36] hsr_slave_0: left promiscuous mode [ 1119.233090][ T36] hsr_slave_1: left promiscuous mode [ 1119.256674][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.264078][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1119.272694][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1119.280175][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1119.350481][ T36] veth1_macvtap: left promiscuous mode [ 1119.356130][ T36] veth0_macvtap: left promiscuous mode [ 1119.361974][ T36] veth1_vlan: left promiscuous mode [ 1119.367487][ T36] veth0_vlan: left promiscuous mode [ 1119.374932][ T36] veth1_macvtap: left promiscuous mode [ 1119.380539][ T36] veth0_macvtap: left promiscuous mode [ 1119.386450][ T36] veth1_vlan: left promiscuous mode [ 1119.391847][ T36] veth0_vlan: left promiscuous mode [ 1120.615546][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1120.691352][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1122.125192][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1122.191660][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1123.477947][T12770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1123.542248][T12770] 8021q: adding VLAN 0 to HW filter on device team0 [ 1123.568767][ T7625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.576042][ T7625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1123.636143][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.643394][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.455136][T12845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1124.485821][T12845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1124.509431][T12770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1124.527143][T12845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1124.594237][T12845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1124.761158][T12847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1124.796977][T12847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1124.820275][T12847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1124.868572][T12847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1125.173843][T12845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.306924][T12770] veth0_vlan: entered promiscuous mode [ 1125.337028][T12845] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.372379][T12770] veth1_vlan: entered promiscuous mode [ 1125.403170][T12847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.422012][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.429223][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.470584][ T9064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.477891][ T9064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.571507][T12847] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.644462][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.651742][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.686455][ T7625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.693691][ T7625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.739291][T12770] veth0_macvtap: entered promiscuous mode [ 1125.769819][T12770] veth1_macvtap: entered promiscuous mode [ 1125.882575][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.889978][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.962655][T12770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1125.983110][T12770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.994480][T12770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.008085][T12770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.018369][T12770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.029177][T12770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.040479][T12770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.052897][T12770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.069223][T12770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1126.167917][T12770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.203757][T12770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.223589][T12770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.244943][T12770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.264942][T12770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.287300][T12770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.304544][T12770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.317048][T12770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.329560][T12770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1126.370344][T12770] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.396161][T12770] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.409902][T12770] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.421645][T12770] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.589608][T12845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.667531][ T7625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.677092][ T7625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.731893][T12847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.801952][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.814944][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.039202][T12845] veth0_vlan: entered promiscuous mode [ 1127.877970][T12847] veth0_vlan: entered promiscuous mode [ 1127.889476][T12845] veth1_vlan: entered promiscuous mode [ 1128.020816][T12847] veth1_vlan: entered promiscuous mode [ 1128.125944][T12845] veth0_macvtap: entered promiscuous mode [ 1128.190752][T12845] veth1_macvtap: entered promiscuous mode [ 1128.309708][T12847] veth0_macvtap: entered promiscuous mode [ 1128.331654][T12847] veth1_macvtap: entered promiscuous mode [ 1128.361975][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.404703][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.455067][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.470003][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.481480][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.513611][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.525906][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.547755][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.585870][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1128.622927][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.662978][T12845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.858669][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1128.915539][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1128.955161][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1129.000832][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.045310][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1129.067959][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.103399][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1129.130281][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.153301][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1129.195850][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.239973][T12845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1129.329141][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1129.389103][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.424821][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1129.461722][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.487624][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1129.519366][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.578614][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1129.624683][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.668302][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1129.691771][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.732305][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1129.784625][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1129.836185][T12847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1129.926598][T12845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.975042][T12845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.028224][T12845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.064581][T12845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.184211][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.268593][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.302592][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.351583][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.412447][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.451471][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.520196][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.606131][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.642634][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.681899][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.700573][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.720619][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.772804][T12847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1130.841285][T12847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.874393][T12847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.883527][T12847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.933576][T12847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.542002][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.591331][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.788284][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.826784][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.241512][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.258262][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.350955][ T9064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.465222][ T9064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.036241][ T29] audit: type=1326 audit(1725839209.324:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12944 comm="syz.4.2179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3081b7cef9 code=0x0 [ 1133.140408][T12948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2172'. [ 1133.924600][ T5296] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1134.124874][ T5296] usb 3-1: Using ep0 maxpacket: 8 [ 1134.152416][ T5296] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1134.202339][ T5296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.259991][ T5296] usb 3-1: config 0 descriptor?? [ 1136.186084][T12993] loop5: detected capacity change from 0 to 8 [ 1136.374829][T12993] loop5: detected capacity change from 0 to 8 [ 1136.593151][ T5296] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1136.632779][ T5296] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1136.684848][ T5296] usb 3-1: USB disconnect, device number 18 [ 1138.174156][T13009] loop2: detected capacity change from 0 to 8 [ 1140.493286][T13029] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1140.765064][ T5296] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1140.974651][ T5296] usb 1-1: Using ep0 maxpacket: 16 [ 1140.983354][ T5296] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1140.999822][ T5296] usb 1-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 1141.019641][ T5296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.073018][ T5296] usb 1-1: config 0 descriptor?? [ 1141.096863][ T5296] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1141.539512][ T25] usb 1-1: USB disconnect, device number 17 [ 1141.972693][T12366] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1141.987796][T12366] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1142.023817][T12366] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1142.044820][T12366] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1142.055053][T12366] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1142.074687][T12366] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1143.984774][T12366] Bluetooth: hci8: command 0x0406 tx timeout [ 1143.990869][T12360] Bluetooth: hci9: command 0x0406 tx timeout [ 1143.998028][T12362] Bluetooth: hci2: command 0x0406 tx timeout [ 1144.194791][ T4620] Bluetooth: hci1: command tx timeout [ 1145.940030][T13068] loop4: detected capacity change from 0 to 8 [ 1146.208347][T13068] loop4: detected capacity change from 0 to 8 [ 1146.274682][ T4620] Bluetooth: hci1: command tx timeout [ 1147.113724][T13037] chnl_net:caif_netlink_parms(): no params data found [ 1148.370122][ T4620] Bluetooth: hci1: command tx timeout [ 1149.951159][T13037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.988752][T13037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.019154][T13037] bridge_slave_0: entered allmulticast mode [ 1150.051974][T13037] bridge_slave_0: entered promiscuous mode [ 1150.095757][T13037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.103018][T13037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.142375][T13037] bridge_slave_1: entered allmulticast mode [ 1150.197211][T13037] bridge_slave_1: entered promiscuous mode [ 1150.434807][ T4620] Bluetooth: hci1: command tx timeout [ 1150.549276][T13037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1150.646349][T13037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.609673][T13037] team0: Port device team_slave_0 added [ 1152.714113][T13037] team0: Port device team_slave_1 added [ 1153.159321][T13132] loop0: detected capacity change from 0 to 8 [ 1153.161383][T13037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.213104][T13037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.379410][T13037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.469512][T13037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.515177][T13037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1154.133415][T13037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1154.504226][ T29] audit: type=1800 audit(1725839486.785:187): pid=13145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2241" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1154.772765][T13037] hsr_slave_0: entered promiscuous mode [ 1154.825388][T13037] hsr_slave_1: entered promiscuous mode [ 1154.891468][T13037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1154.903622][T13037] Cannot create hsr debugfs directory [ 1155.146059][ T29] audit: type=1326 audit(1725839487.435:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.0.2242" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8dc17cef9 code=0x0 [ 1157.429030][T13037] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.609118][T13170] netlink: 'syz.4.2250': attribute type 10 has an invalid length. [ 1157.742451][T13170] team0: Port device netdevsim0 added [ 1159.100058][T13037] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.401077][T13037] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.562453][T13037] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.809993][ T1122] bridge_slave_1: left allmulticast mode [ 1161.816000][ T1122] bridge_slave_1: left promiscuous mode [ 1161.821923][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.908728][ T1122] bridge_slave_0: left allmulticast mode [ 1161.914423][ T1122] bridge_slave_0: left promiscuous mode [ 1161.973930][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.840480][T13198] loop1: detected capacity change from 0 to 8 [ 1168.792284][T13236] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1168.931114][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1168.950964][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1168.977583][ T1122] bond0 (unregistering): Released all slaves [ 1169.296452][ T1122] IPVS: stopping backup sync thread 12720 ... [ 1172.642250][T13255] netlink: 'syz.0.2285': attribute type 2 has an invalid length. [ 1172.688832][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2285'. [ 1172.758963][T13037] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1172.814329][T13266] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.2274' sets config #4 [ 1172.841912][T13037] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1172.876970][T13037] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1172.926500][T13037] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1173.168710][T13258] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1173.194842][T13258] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 1173.266633][T13258] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1173.296822][T13258] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1173.398629][T13258] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1173.414331][T13258] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1173.493521][T13258] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1173.575253][T13258] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1173.612083][T13258] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1173.642913][T13258] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1173.667699][T13037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1173.717112][T13258] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1173.732299][T13258] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1173.809896][T13037] 8021q: adding VLAN 0 to HW filter on device team0 [ 1173.887655][ T29] audit: type=1800 audit(1725839762.184:189): pid=13276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2276" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1173.941995][ T1122] hsr_slave_0: left promiscuous mode [ 1173.985199][ T1122] hsr_slave_1: left promiscuous mode [ 1174.000058][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1174.017285][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1174.042756][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1174.076881][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1174.231517][ T1122] veth1_macvtap: left promiscuous mode [ 1174.843207][ T1122] veth0_macvtap: left promiscuous mode [ 1174.897926][ T1122] veth1_vlan: left promiscuous mode [ 1174.903503][ T1122] veth0_vlan: left promiscuous mode [ 1176.300255][T13303] loop4: detected capacity change from 0 to 8 [ 1176.720708][T13304] loop2: detected capacity change from 0 to 40427 [ 1181.230761][T13311] sched: RT throttling activated [ 1184.405197][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 1184.832716][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 1187.121790][T12364] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1187.146857][T12364] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1187.168465][T12364] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1187.214102][T12364] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1187.235049][T12364] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1187.268145][T12364] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1187.295672][ T4620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1187.316161][ T4620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1187.323817][ T4620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1187.344803][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.351163][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.363548][ T4620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1187.373702][ T4620] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1187.381410][ T4620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1187.517810][ T7626] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.525104][ T7626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1187.668315][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.675635][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1187.974985][T13037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1188.547920][T13037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.697254][T13347] chnl_net:caif_netlink_parms(): no params data found [ 1188.758823][ T1122] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.872549][T13037] veth0_vlan: entered promiscuous mode [ 1188.919798][ T1122] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.067253][ T1122] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.096198][T13037] veth1_vlan: entered promiscuous mode [ 1189.107330][T13347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.115004][T13347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.122205][T13347] bridge_slave_0: entered allmulticast mode [ 1189.133319][T13347] bridge_slave_0: entered promiscuous mode [ 1189.162477][T13347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.170538][T13347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.180101][T13347] bridge_slave_1: entered allmulticast mode [ 1189.193768][T13347] bridge_slave_1: entered promiscuous mode [ 1189.233334][ T1122] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.348959][T13347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1189.367829][T13347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1189.483473][T13347] team0: Port device team_slave_0 added [ 1189.485215][ T4620] Bluetooth: hci3: command tx timeout [ 1189.506256][T13037] veth0_macvtap: entered promiscuous mode [ 1189.522051][T13037] veth1_macvtap: entered promiscuous mode [ 1189.539782][T13347] team0: Port device team_slave_1 added [ 1189.650893][T13347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.658310][T13347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1189.686505][T13347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.744347][T13347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.752002][T13347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1189.778280][T13347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.829816][ T1122] bridge_slave_1: left allmulticast mode [ 1189.835803][ T1122] bridge_slave_1: left promiscuous mode [ 1189.841647][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.852644][ T1122] bridge_slave_0: left allmulticast mode [ 1189.865103][ T1122] bridge_slave_0: left promiscuous mode [ 1189.870939][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.530840][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1190.548345][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1190.562666][ T1122] bond0 (unregistering): Released all slaves [ 1190.665319][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.684585][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.694412][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.708878][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.719176][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.732164][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.742055][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.752638][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.763579][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.774380][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.784405][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.795299][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.825721][T13037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1190.920398][T13347] hsr_slave_0: entered promiscuous mode [ 1190.937170][T13347] hsr_slave_1: entered promiscuous mode [ 1190.943856][T13347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1190.951975][T13347] Cannot create hsr debugfs directory [ 1190.969118][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1190.980399][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.990743][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1191.004875][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.015190][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1191.025761][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.039746][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1191.050363][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.060629][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1191.071927][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.082137][T13037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1191.092628][T13037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.106687][T13037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1191.153800][T13037] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.166540][T13037] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.176358][T13037] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.185219][T13037] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.368518][ T1122] hsr_slave_0: left promiscuous mode [ 1191.377768][ T1122] hsr_slave_1: left promiscuous mode [ 1191.384213][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1191.394232][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1191.414001][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1191.422050][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1191.462781][ T1122] veth1_macvtap: left promiscuous mode [ 1191.468478][ T1122] veth0_macvtap: left promiscuous mode [ 1191.474218][ T1122] veth1_vlan: left promiscuous mode [ 1191.480722][ T1122] veth0_vlan: left promiscuous mode [ 1191.555160][ T4620] Bluetooth: hci3: command tx timeout [ 1192.680606][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 1192.795670][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 1193.639268][ T4620] Bluetooth: hci3: command tx timeout [ 1194.058069][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.076559][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.217801][ T7626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.225922][ T7626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.198475][T13347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1195.223916][T13347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1195.277000][T13347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1195.369074][T13347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1195.715563][ T4620] Bluetooth: hci3: command tx timeout [ 1195.811907][T13386] loop3: detected capacity change from 0 to 8 [ 1196.833143][T13347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1197.155881][T13347] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.229140][ T9064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.236373][ T9064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.258853][ T9064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.266085][ T9064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1198.206943][T13399] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1199.901286][ T29] audit: type=1800 audit(1725840044.186:190): pid=13412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2310" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1200.023956][T13347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1200.630050][ T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 1200.771657][T13347] veth0_vlan: entered promiscuous mode [ 1200.867541][T13423] input: syz0 as /devices/virtual/input/input45 [ 1200.889948][T13347] veth1_vlan: entered promiscuous mode [ 1201.069103][T13347] veth0_macvtap: entered promiscuous mode [ 1201.212096][T13347] veth1_macvtap: entered promiscuous mode [ 1201.392658][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.444954][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.510248][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.547156][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.597747][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.614605][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.637385][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.660149][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.681683][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.703523][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.722576][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.744738][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.904189][T13347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1201.953195][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.027776][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.068871][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.132810][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.167806][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.204220][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.266512][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.312812][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.360802][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.402444][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.432869][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.487727][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.588446][T13347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1202.618640][T13433] netlink: 'syz.2.2331': attribute type 10 has an invalid length. [ 1202.847718][T13433] team0: Port device netdevsim0 added [ 1202.932450][T13347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.963702][T13347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.018344][T13347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.073878][T13347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.925895][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1204.996577][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.348365][ T7626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.408892][ T7626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.960782][T13460] loop1: detected capacity change from 0 to 1764 [ 1206.155528][T13460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2327'. [ 1206.833181][ T4620] Bluetooth: hci3: unexpected cc 0x0403 length: 65 > 1 [ 1208.018764][T12341] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 1208.152330][T13489] input: syz0 as /devices/virtual/input/input46 [ 1208.158941][T12425] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1208.363858][T12425] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1208.408900][T12425] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1208.558927][T12425] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1208.569886][ T5908] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1208.600487][T12425] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1208.993833][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 1209.335588][T12425] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1209.354713][T12425] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1209.377963][ T5908] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1209.404657][ T5908] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1209.415159][ T5908] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1209.465788][T12425] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1209.503260][ T5908] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1209.518825][T12425] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1209.548213][T12425] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1209.566830][ T5908] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1209.601001][T12425] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1209.612277][ T5908] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1209.626762][T12425] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1209.641124][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.649714][T12425] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1209.668025][T12425] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1209.690050][T12425] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1209.700008][T12425] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1209.733054][T12425] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1209.743449][T12425] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1209.753063][T12425] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1209.764812][T12425] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1209.809601][T12425] usb 4-1: unable to read config index 6 descriptor/start: -71 [ 1209.818617][T12425] usb 4-1: can't read configurations, error -71 [ 1209.929960][ T5908] usb 2-1: usb_control_msg returned -32 [ 1209.969056][ T5908] usbtmc 2-1:16.0: can't read capabilities [ 1210.044809][T13503] loop4: detected capacity change from 0 to 8 [ 1210.934557][ T4620] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1210.943678][ T4620] Bluetooth: hci3: Injecting HCI hardware error event [ 1210.954857][ T4620] Bluetooth: hci3: hardware error 0x00 [ 1211.517585][T13509] loop5: detected capacity change from 0 to 1024 [ 1211.624446][T12425] usb 2-1: USB disconnect, device number 14 [ 1211.734818][T13359] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1211.998710][T13359] usb 5-1: not running at top speed; connect to a high speed hub [ 1212.049880][T13359] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.088273][T13359] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1212.559059][T13515] loop1: detected capacity change from 0 to 40427 [ 1212.617845][T13359] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1212.637384][T13359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.664741][T13359] usb 5-1: Product: చ [ 1212.669108][T13359] usb 5-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 1212.714622][T13515] F2FS-fs (loop1): invalid crc value [ 1212.796133][T13359] usb 5-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 1212.864450][T13515] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1213.012903][T13515] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1213.499321][ T4620] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1213.844886][T13359] usb 5-1: can't set config #1, error -71 [ 1213.903286][T13359] usb 5-1: USB disconnect, device number 13 [ 1214.118092][T13530] loop2: detected capacity change from 0 to 512 [ 1215.694884][T13545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2352'. [ 1216.304293][T13557] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2369'. [ 1216.506520][ T5220] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1216.717226][ T5220] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1216.750517][T13565] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.2358' sets config #4 [ 1216.762490][ T5220] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1216.762587][ T5220] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1216.762645][ T5220] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1216.764534][ T5220] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1216.874801][ T5220] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1216.905803][ T5220] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1216.917248][ T5220] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1216.926372][ T5220] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1217.215527][ T5220] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1217.227136][ T5220] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1218.497084][ T5220] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1218.522284][T13568] input: syz0 as /devices/virtual/input/input47 [ 1218.561054][ T5220] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1218.628342][ T5220] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1218.661829][ T5220] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1218.712005][ T5220] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1218.753009][ T5220] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1218.833259][ T5220] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1218.876382][ T5220] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1218.913369][ T5220] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1218.949282][ T5220] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1218.970292][T13578] Bluetooth: MGMT ver 1.23 [ 1219.023184][ T5220] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1219.072979][ T5220] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1219.124376][ T5220] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1219.172294][ T5220] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1219.349793][ T5220] usb 3-1: string descriptor 0 read error: -71 [ 1219.409012][ T5220] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1219.465028][T13584] loop3: detected capacity change from 0 to 1024 [ 1219.534133][T12845] syz-executor: attempt to access beyond end of device [ 1219.534133][T12845] loop1: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 1219.551656][ T5220] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1219.601926][T12845] syz-executor: attempt to access beyond end of device [ 1219.601926][T12845] loop1: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 1219.640007][T12845] F2FS-fs (loop1): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 1219.646231][ T5220] usb 3-1: config 0 descriptor?? [ 1219.661915][T12845] F2FS-fs (loop1): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 1219.678800][ T5220] usb 3-1: can't set config #0, error -71 [ 1219.738269][ T5220] usb 3-1: USB disconnect, device number 19 [ 1220.746208][T13601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2370'. [ 1221.776538][T13614] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1222.196721][T13619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2375'. [ 1222.667352][T13622] loop5: detected capacity change from 0 to 40427 [ 1224.558049][ T9064] hfsplus: b-tree write err: -5, ino 4 [ 1224.703827][T13637] loop4: detected capacity change from 0 to 128 [ 1224.829017][T13635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2382'. [ 1225.014880][T13635] vxcan3: entered promiscuous mode [ 1225.022400][T13642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2382'. [ 1225.360272][T13645] loop1: detected capacity change from 0 to 1024 [ 1225.883998][T13651] loop0: detected capacity change from 0 to 512 [ 1225.987149][T13651] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1226.091842][T13651] EXT4-fs (loop0): write access unavailable, skipping orphan cleanup [ 1226.126583][T13651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1227.189322][T13347] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1227.855695][T13670] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1228.203674][T13676] loop1: detected capacity change from 0 to 512 [ 1228.262477][T13675] loop2: detected capacity change from 0 to 1764 [ 1228.270139][T13676] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 1228.300462][T13676] EXT4-fs (loop1): mount failed [ 1228.356883][T13675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2394'. [ 1228.858869][T13683] loop0: detected capacity change from 0 to 256 [ 1228.940679][ T29] audit: type=1326 audit(1725840073.226:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13682 comm="syz.0.2409" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0753f7cef9 code=0x0 [ 1233.717341][T13720] netlink: 558 bytes leftover after parsing attributes in process `syz.5.2408'. [ 1234.352191][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1236.833633][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2423'. [ 1236.854216][T13767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2423'. [ 1236.914606][T13767] block nbd0: Unsupported socket: shutdown callout must be supported. [ 1237.532619][T13775] loop4: detected capacity change from 0 to 4096 [ 1237.604962][T13780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2428'. [ 1237.918728][T13782] veth1_macvtap: left promiscuous mode [ 1238.003251][T13785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2429'. [ 1238.706024][T13801] devpts: called with bogus options [ 1239.065196][T13805] xt_addrtype: ipv6 does not support BROADCAST matching [ 1239.828690][T13823] : renamed from veth0_vlan (while UP) [ 1241.219721][T13842] loop2: detected capacity change from 0 to 4096 [ 1241.539562][T13851] loop3: detected capacity change from 0 to 128 [ 1241.733306][T13853] loop2: detected capacity change from 0 to 256 [ 1242.614320][T13861] loop2: detected capacity change from 0 to 256 [ 1243.103926][T13863] loop0: detected capacity change from 0 to 2048 [ 1243.705557][ T5220] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1243.953624][ T5220] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1244.007768][ T5220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.045072][ T5220] usb 3-1: Product: syz [ 1244.084110][ T5220] usb 3-1: Manufacturer: syz [ 1244.104590][ T5220] usb 3-1: SerialNumber: syz [ 1244.130158][ T5220] usb 3-1: config 0 descriptor?? [ 1244.161097][ T5220] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 020 [ 1245.495099][ T5220] (null): failure reading functionality [ 1245.593764][ T5220] i2c i2c-1: connected i2c-tiny-usb device [ 1245.729762][T13359] usb 3-1: USB disconnect, device number 20 [ 1245.740259][T13873] overlayfs: statfs failed on './file0' [ 1245.987952][T13884] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2463'. [ 1246.459758][ T5298] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1246.857751][ T5298] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.924584][ T5298] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1246.991258][ T5298] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1247.060183][ T5298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1247.119597][ T5298] usb 6-1: SerialNumber: syz [ 1247.253356][ T29] audit: type=1804 audit(1725840091.506:192): pid=13900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2469" name="/newroot/86/bus/file0" dev="overlay" ino=534 res=1 errno=0 [ 1247.428539][ T5298] usb 6-1: 0:2 : does not exist [ 1247.715545][ T5298] usb 6-1: unit 255 not found! [ 1247.752829][ T5298] usb 6-1: 5:0: cannot get min/max values for control 1 (id 5) [ 1248.611445][ T5298] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1248.642038][ T5298] usb 6-1: USB disconnect, device number 12 [ 1248.777418][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.789754][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1248.980762][T13915] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 1249.675559][T13924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2478'. [ 1249.728405][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2478'. [ 1252.002465][T13960] loop3: detected capacity change from 0 to 512 [ 1252.144163][T13960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1252.222094][T13960] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1252.377264][T13037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1252.525041][ T5908] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1253.189545][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 1253.789731][ T5908] usb 6-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 1253.848263][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.211438][ T5908] usb 6-1: Product: syz [ 1254.215791][ T5908] usb 6-1: Manufacturer: syz [ 1254.220411][ T5908] usb 6-1: SerialNumber: syz [ 1254.245205][ T5908] usb 6-1: config 0 descriptor?? [ 1255.041233][ T5908] radio-si470x 6-1:0.0: could not find interrupt in endpoint [ 1255.055361][ T5908] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 1255.067429][ T5908] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1255.100915][ T5296] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1255.222174][T14005] loop2: detected capacity change from 0 to 128 [ 1255.290321][T13359] usb 6-1: USB disconnect, device number 13 [ 1255.334555][ T5296] usb 5-1: Using ep0 maxpacket: 16 [ 1255.386800][ T5296] usb 5-1: New USB device found, idVendor=54a5, idProduct=8b61, bcdDevice=cc.2e [ 1255.661713][ T5296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.761151][ T5296] usb 5-1: Product: syz [ 1255.991496][ T5296] usb 5-1: Manufacturer: syz [ 1256.101700][ T5296] usb 5-1: SerialNumber: syz [ 1256.175741][ T5296] usb 5-1: config 0 descriptor?? [ 1256.227103][ T5296] usb 5-1: can't set config #0, error -71 [ 1256.338639][ T5296] usb 5-1: USB disconnect, device number 14 [ 1256.476199][T14014] TCP: out of memory -- consider tuning tcp_mem [ 1259.167784][T14043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2513'. [ 1259.550175][ T5318] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1260.872383][ T5318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.918131][ T5318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1260.975701][ T5318] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1261.004826][ T5318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.023762][ T5318] usb 2-1: config 0 descriptor?? [ 1261.063487][T14055] loop3: detected capacity change from 0 to 16 [ 1261.074279][T14056] loop5: detected capacity change from 0 to 256 [ 1261.112793][T14055] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1261.595996][T14059] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1262.403570][ T5318] usb 2-1: language id specifier not provided by device, defaulting to English [ 1262.734013][T14068] syz.5.2523 (14068): attempted to duplicate a private mapping with mremap. This is not supported. [ 1262.947859][ T5318] uclogic 0003:256C:006D.0022: failed retrieving string descriptor #100: -71 [ 1262.973896][ T5318] uclogic 0003:256C:006D.0022: failed retrieving pen parameters: -71 [ 1263.009260][ T5318] uclogic 0003:256C:006D.0022: failed probing pen v1 parameters: -71 [ 1263.080543][ T5318] uclogic 0003:256C:006D.0022: failed probing parameters: -71 [ 1263.135235][ T5318] uclogic 0003:256C:006D.0022: probe with driver uclogic failed with error -71 [ 1263.233039][ T5318] usb 2-1: USB disconnect, device number 15 [ 1266.077736][T14096] loop3: detected capacity change from 0 to 512 [ 1266.277897][ T5220] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1266.300137][T14096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1266.330635][T14096] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1266.570619][ T5220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 1266.606954][ T5220] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 1266.649944][ T5220] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1266.694888][ T5220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.771957][ T5220] usb 1-1: config 0 descriptor?? [ 1266.794954][T14095] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1266.820738][ T5220] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1267.037494][ T5220] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 1267.059806][ T5220] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1267.096771][ T5220] usb 1-1: MIDIStreaming interface descriptor not found [ 1267.119892][T13037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1267.330689][ T5220] usb 1-1: USB disconnect, device number 18 [ 1267.844787][T12425] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1268.076481][T12425] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1268.113224][T12425] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1268.174564][T12425] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1268.234421][T12425] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1268.268847][T12425] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1268.300283][T12425] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1268.347149][T12425] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1268.394825][T12425] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1268.457940][T12425] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1268.520579][T12425] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1268.564611][T12425] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1268.635682][T12425] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1268.696642][T12425] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1268.730054][T12425] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1268.784081][T12425] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1268.861019][T12425] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1268.913208][T12425] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1268.944651][T12425] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1268.996822][ T5220] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1269.015024][T12425] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1269.052762][T12425] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1269.107908][T12425] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1269.187545][T12425] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1269.206998][T12425] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1269.226877][T12425] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1269.251612][ T5220] usb 2-1: Using ep0 maxpacket: 16 [ 1269.279235][ T5220] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1269.297670][T12425] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1269.324356][ T5220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.370654][T12425] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1269.398285][ T5220] usb 2-1: config 0 descriptor?? [ 1269.410062][T12425] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1269.433773][ T5220] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1269.449198][T12425] usb 4-1: Product: syz [ 1269.494957][T12425] usb 4-1: Manufacturer: syz [ 1269.499818][T14133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2540'. [ 1269.519576][T12425] usb 4-1: SerialNumber: syz [ 1269.546314][T12425] usb 4-1: config 0 descriptor?? [ 1269.676401][T12425] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1269.898192][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2540'. [ 1269.950276][ T5296] usb 4-1: USB disconnect, device number 18 [ 1269.975733][ T5296] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1270.242468][T12364] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1270.261023][T12364] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1270.271759][T12364] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1270.293505][T12364] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1270.303170][T12364] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1270.316709][T12364] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1271.997010][T14139] chnl_net:caif_netlink_parms(): no params data found [ 1272.069671][ T5220] gspca_sonixj: reg_w1 err -71 [ 1272.084155][ T5220] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1272.147187][ T5220] usb 2-1: USB disconnect, device number 16 [ 1272.446127][ T4620] Bluetooth: hci0: command tx timeout [ 1273.109903][T14171] loop0: detected capacity change from 0 to 256 [ 1273.179447][T14171] loop0: detected capacity change from 0 to 1024 [ 1273.212021][T14139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.244055][T14139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.271553][T14139] bridge_slave_0: entered allmulticast mode [ 1273.292295][T14139] bridge_slave_0: entered promiscuous mode [ 1273.324121][T14139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.334214][T14139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.354755][ T47] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1273.360967][T14139] bridge_slave_1: entered allmulticast mode [ 1273.402713][T14139] bridge_slave_1: entered promiscuous mode [ 1273.618195][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.649051][T14139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1273.679754][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.724303][ T47] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1273.732305][T14139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.764528][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.851810][ T47] usb 4-1: config 0 descriptor?? [ 1273.906980][T14139] team0: Port device team_slave_0 added [ 1273.932154][T14139] team0: Port device team_slave_1 added [ 1274.130128][T14139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.144521][T14139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1274.172741][T14139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1274.224917][T14139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.245499][T14139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1274.272985][T14139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1274.363701][ T47] hid (null): bogus close delimiter [ 1274.515571][ T4620] Bluetooth: hci0: command tx timeout [ 1274.576765][T14139] hsr_slave_0: entered promiscuous mode [ 1274.594137][ T47] usb 4-1: string descriptor 0 read error: -22 [ 1274.609336][T14139] hsr_slave_1: entered promiscuous mode [ 1274.619276][T14139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1274.636269][T14139] Cannot create hsr debugfs directory [ 1274.825204][ T47] uclogic 0003:256C:006D.0023: interface is invalid, ignoring [ 1275.038308][ T5296] usb 4-1: USB disconnect, device number 19 [ 1275.352205][T14139] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.512713][T14139] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.743807][T14139] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.605296][ T4620] Bluetooth: hci0: command tx timeout [ 1277.322615][T14139] team0: Port device netdevsim0 removed [ 1277.379616][T14139] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.587633][T14196] syz.4.2556[14196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1277.587856][T14196] syz.4.2556[14196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1278.570626][T14139] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1278.674959][ T4620] Bluetooth: hci0: command tx timeout [ 1278.800090][T14139] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1278.988567][T14139] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1279.067605][T14139] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1280.037342][T14139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1280.285514][T14139] 8021q: adding VLAN 0 to HW filter on device team0 [ 1280.346578][ T7625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.353785][ T7625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1280.477341][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.484681][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.260632][T14139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1284.727900][T14236] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 1285.469655][T14139] veth0_vlan: entered promiscuous mode [ 1286.823203][T14139] veth1_vlan: entered promiscuous mode [ 1287.937411][T14139] veth0_macvtap: entered promiscuous mode [ 1288.006559][T14139] veth1_macvtap: entered promiscuous mode [ 1288.163139][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.232107][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.304858][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.372182][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.403972][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.418571][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.500118][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.608066][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.641959][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.658192][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.677259][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.688407][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.767461][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.881542][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.986407][T14139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1289.101990][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.149185][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.170675][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.191474][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.201676][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.212849][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.223239][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.244664][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.276528][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.294608][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.314980][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.344624][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.369237][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.389549][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.418860][T14139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1289.462815][T14139] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.486722][T14139] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.506352][T14139] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.516199][T14139] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.876681][T11125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.886266][T11125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.013667][ T7625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.029662][ T7625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1291.854078][T14258] loop5: detected capacity change from 0 to 4096 [ 1292.463617][T14271] loop2: detected capacity change from 0 to 1024 [ 1295.328263][ T2862] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1295.465344][T14284] loop0: detected capacity change from 0 to 2048 [ 1295.564645][ T2862] usb 5-1: Using ep0 maxpacket: 16 [ 1295.599287][ T2862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1295.667348][ T2862] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1295.695013][ T2862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.709496][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2577'. [ 1295.722385][ T2862] usb 5-1: config 0 descriptor?? [ 1295.736056][T14289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2577'. [ 1295.761556][T14289] block nbd0: Unsupported socket: shutdown callout must be supported. [ 1295.776221][ T2862] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input48 [ 1296.101331][ T4667] bcm5974 5-1:0.0: could not read from device [ 1296.251425][T14275] bcm5974 5-1:0.0: could not read from device [ 1298.032073][ T4667] bcm5974 5-1:0.0: could not read from device [ 1298.043271][ T5298] usb 5-1: USB disconnect, device number 15 [ 1298.172435][ T4667] bcm5974 5-1:0.0: could not read from device [ 1298.453950][ T4667] bcm5974 5-1:0.0: could not read from device [ 1298.605129][T14326] loop0: detected capacity change from 0 to 4096 [ 1300.882600][T14351] netlink: 558 bytes leftover after parsing attributes in process `syz.0.2602'. [ 1301.206000][T14358] loop1: detected capacity change from 0 to 2048 [ 1301.386888][T14363] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1301.574517][T14367] veth1_macvtap: left promiscuous mode [ 1301.669643][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2618'. [ 1303.982045][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2608'. [ 1304.013767][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2608'. [ 1304.057378][T14392] block nbd0: Unsupported socket: shutdown callout must be supported. [ 1311.271352][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1311.284499][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1311.855650][T14453] veth1_macvtap: left promiscuous mode [ 1311.867492][T14450] loop5: detected capacity change from 0 to 2048 [ 1311.955126][T14454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2629'. [ 1312.521144][T14467] random: crng reseeded on system resumption [ 1313.848197][T14464] loop1: detected capacity change from 0 to 1024 [ 1314.677279][T14475] loop0: detected capacity change from 0 to 512 [ 1316.925417][T11125] hfsplus: b-tree write err: -5, ino 4 [ 1317.020960][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1317.160426][T14491] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 1317.418377][T14498] loop1: detected capacity change from 0 to 256 [ 1317.534764][T14498] FAT-fs (loop1): Directory bread(block 64) failed [ 1317.549747][T14498] FAT-fs (loop1): Directory bread(block 65) failed [ 1317.580257][T14498] FAT-fs (loop1): Directory bread(block 66) failed [ 1317.644694][T14498] FAT-fs (loop1): Directory bread(block 67) failed [ 1317.686633][T14498] FAT-fs (loop1): Directory bread(block 68) failed [ 1317.724572][T14498] FAT-fs (loop1): Directory bread(block 69) failed [ 1317.763424][T14498] FAT-fs (loop1): Directory bread(block 70) failed [ 1317.794712][T14498] FAT-fs (loop1): Directory bread(block 71) failed [ 1317.876118][T14498] FAT-fs (loop1): Directory bread(block 72) failed [ 1317.882723][T14498] FAT-fs (loop1): Directory bread(block 73) failed [ 1319.022054][ T29] audit: type=1326 audit(1725840163.306:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14496 comm="syz.1.2647" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89acd7cef9 code=0x0 [ 1319.275660][ T7626] kworker/u8:6: attempt to access beyond end of device [ 1319.275660][ T7626] loop1: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 1320.539599][ T29] audit: type=1804 audit(1725840164.826:194): pid=14521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2653" name="/newroot/130/bus/file0" dev="overlay" ino=766 res=1 errno=0 [ 1322.936384][T14547] loop4: detected capacity change from 0 to 1024 [ 1327.715833][T14566] loop3: detected capacity change from 0 to 1024 [ 1332.213597][T14593] loop3: detected capacity change from 0 to 512 [ 1335.026715][T14613] loop1: detected capacity change from 0 to 1024 [ 1336.508471][T14629] loop3: detected capacity change from 0 to 128 [ 1336.617937][T14629] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1336.648464][T14629] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1336.866991][T14629] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 1336.998682][T14629] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 1337.439514][T13037] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1337.840539][T14637] loop4: detected capacity change from 0 to 1024 [ 1338.180717][T14646] loop5: detected capacity change from 0 to 512 [ 1338.319924][T14646] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1338.411144][T14652] block nbd2: NBD_DISCONNECT [ 1338.437914][T14652] block nbd2: Disconnected due to user request. [ 1338.458722][T14646] EXT4-fs (loop5): write access unavailable, skipping orphan cleanup [ 1338.500187][T14652] block nbd2: shutting down sockets [ 1338.552425][T14646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1338.597599][ T36] hfsplus: b-tree write err: -5, ino 4 [ 1340.996957][T12770] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1343.558944][T14681] loop2: detected capacity change from 0 to 256 [ 1343.580360][T14676] loop5: detected capacity change from 0 to 512 [ 1343.586960][T14680] netlink: 'syz.3.2695': attribute type 10 has an invalid length. [ 1343.659467][T14680] bond0: (slave bond_slave_0): Releasing backup interface [ 1345.216900][T14692] loop2: detected capacity change from 0 to 128 [ 1347.966436][T14706] loop4: detected capacity change from 0 to 1024 [ 1348.401765][T14718] block nbd5: NBD_DISCONNECT [ 1348.480133][T14718] block nbd5: Disconnected due to user request. [ 1348.574599][T14718] block nbd5: shutting down sockets [ 1349.365206][T14731] netlink: 'syz.1.2712': attribute type 10 has an invalid length. [ 1349.613708][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.928935][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.991832][T14731] bond0: (slave bond_slave_0): Releasing backup interface [ 1350.038884][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.141948][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.187090][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.249385][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.301896][T14745] binder: 14739:14745 ioctl c0306201 20000380 returned -14 [ 1356.284653][T14759] loop5: detected capacity change from 0 to 2048 [ 1356.895112][T14763] loop1: detected capacity change from 0 to 512 [ 1356.979302][T14763] EXT4-fs: Ignoring removed mblk_io_submit option [ 1357.036195][T14763] EXT4-fs: Ignoring removed mblk_io_submit option [ 1357.098454][T14763] EXT4-fs: Ignoring removed i_version option [ 1357.150866][T14763] ext4: Unknown parameter 'pcr' [ 1357.677058][ T47] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1357.916833][ T47] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.979341][ T47] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1358.055287][ T47] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1358.068330][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1358.094206][ T47] usb 2-1: SerialNumber: syz [ 1358.410888][ T47] usb 2-1: 0:2 : does not exist [ 1358.488178][ T47] usb 2-1: USB disconnect, device number 17 [ 1358.683624][T14779] loop0: detected capacity change from 0 to 16 [ 1358.765393][T14779] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1359.676529][T14788] binder: 14785:14788 ioctl c0306201 20000380 returned -14 [ 1360.837103][T14790] xt_addrtype: ipv6 does not support BROADCAST matching [ 1363.613319][T14800] loop5: detected capacity change from 0 to 1024 [ 1365.407483][T14810] loop1: detected capacity change from 0 to 2048 [ 1365.632772][T14822] loop4: detected capacity change from 0 to 512 [ 1369.681847][T14851] binder: 14846:14851 ioctl c0306201 20000380 returned -14 [ 1371.645973][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.652379][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1373.190492][T12364] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1373.212735][T12364] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1373.222257][T12364] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1373.248509][T12364] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1373.256839][T12364] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1373.270421][T12364] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1374.388344][T14870] loop4: detected capacity change from 0 to 256 [ 1374.647619][ T29] audit: type=1326 audit(1725840218.926:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14869 comm="syz.4.2755" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3081b7cef9 code=0x0 [ 1375.407591][ T4620] Bluetooth: hci1: command tx timeout [ 1375.681042][ T8677] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.009680][T14886] : renamed from veth0_vlan (while UP) [ 1376.341304][ T8677] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.459698][T14892] veth1_macvtap: left promiscuous mode [ 1376.550132][T14896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2762'. [ 1377.161306][ T8677] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.474690][ T4620] Bluetooth: hci1: command tx timeout [ 1377.629837][ T8677] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.755099][T12364] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1377.770081][T12364] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1377.935083][T12364] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1377.997523][T12364] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1378.018750][T12364] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1378.029819][T12364] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1379.579175][ T4620] Bluetooth: hci1: command tx timeout [ 1380.115281][ T4620] Bluetooth: hci3: command tx timeout [ 1380.688127][T14928] random: crng reseeded on system resumption [ 1381.684601][ T4620] Bluetooth: hci1: command tx timeout [ 1382.195440][ T4620] Bluetooth: hci3: command tx timeout [ 1384.575586][ T8677] bridge_slave_1: left allmulticast mode [ 1384.581299][ T8677] bridge_slave_1: left promiscuous mode [ 1384.594909][ T4620] Bluetooth: hci3: command tx timeout [ 1385.397845][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.592414][ T8677] bridge_slave_0: left allmulticast mode [ 1385.604502][ T8677] bridge_slave_0: left promiscuous mode [ 1385.610464][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.521981][ T4620] Bluetooth: hci3: command tx timeout [ 1387.756525][T14953] loop5: detected capacity change from 0 to 1024 [ 1388.275213][T12425] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1389.327994][T12425] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 1389.394531][T12425] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1389.465542][T12425] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1389.493030][T12425] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.511652][T12425] usb 5-1: Product: syz [ 1389.516330][T12425] usb 5-1: Manufacturer: syz [ 1389.520936][T12425] usb 5-1: SerialNumber: syz [ 1389.531863][T14956] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1389.798185][T14956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.823928][T14956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.017584][T14969] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 1390.525047][T12425] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 1390.624289][T12425] usb 5-1: USB disconnect, device number 16 [ 1392.713158][ T8677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1392.737116][ T8677] bond0 (unregistering): Released all slaves [ 1393.139889][T14863] chnl_net:caif_netlink_parms(): no params data found [ 1393.692718][T14906] chnl_net:caif_netlink_parms(): no params data found [ 1393.735653][ T8677] hsr_slave_0: left promiscuous mode [ 1393.742731][ T8677] hsr_slave_1: left promiscuous mode [ 1393.760254][ T8677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1393.773645][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1393.802406][ T8677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1393.814725][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1393.854202][ T8677] veth1_macvtap: left promiscuous mode [ 1393.860041][ T8677] veth0_macvtap: left promiscuous mode [ 1393.866382][ T8677] veth1_vlan: left promiscuous mode [ 1393.872116][ T8677] veth0_vlan: left promiscuous mode [ 1394.195472][ T4620] Bluetooth: hci0: command 0x0406 tx timeout [ 1395.566885][ T8677] team0 (unregistering): Port device team_slave_1 removed [ 1395.672772][ T8677] team0 (unregistering): Port device team_slave_0 removed [ 1397.476353][T14863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.493584][T14863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.531816][T14863] bridge_slave_0: entered allmulticast mode [ 1397.558724][T14863] bridge_slave_0: entered promiscuous mode [ 1397.590763][T14863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.616109][T14863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.625014][T14863] bridge_slave_1: entered allmulticast mode [ 1397.635424][T14863] bridge_slave_1: entered promiscuous mode [ 1397.991493][T14863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1398.090995][T14906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.099974][T14906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.109631][T14906] bridge_slave_0: entered allmulticast mode [ 1398.145151][T14906] bridge_slave_0: entered promiscuous mode [ 1398.186845][T14863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1398.337924][T14906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.355405][T14906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.362727][T14906] bridge_slave_1: entered allmulticast mode [ 1398.381002][T14906] bridge_slave_1: entered promiscuous mode [ 1398.431368][T14863] team0: Port device team_slave_0 added [ 1398.448395][T14863] team0: Port device team_slave_1 added [ 1398.656463][T14863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1398.663497][T14863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1398.691304][T14863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1398.712383][T14863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1398.731367][T14863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1398.758200][T14863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1398.780794][T14906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1398.855279][T14906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1399.016089][ T8677] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.210396][ T8677] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.352393][T14906] team0: Port device team_slave_0 added [ 1399.447957][T14863] hsr_slave_0: entered promiscuous mode [ 1399.463155][T14863] hsr_slave_1: entered promiscuous mode [ 1399.473398][T14863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1399.483374][T14863] Cannot create hsr debugfs directory [ 1399.547384][ T8677] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.591811][T14906] team0: Port device team_slave_1 added [ 1399.792399][ T8677] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.885226][T14906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1399.893444][T14906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.922378][T14906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1399.952443][T14906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1399.960055][T14906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.986702][T14906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1400.402335][T14906] hsr_slave_0: entered promiscuous mode [ 1400.420715][T14906] hsr_slave_1: entered promiscuous mode [ 1400.433648][T14906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1400.454066][T14906] Cannot create hsr debugfs directory [ 1401.004158][ T8677] bridge_slave_1: left allmulticast mode [ 1401.010210][ T8677] bridge_slave_1: left promiscuous mode [ 1401.018201][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.068576][ T8677] bridge_slave_0: left allmulticast mode [ 1401.077345][ T8677] bridge_slave_0: left promiscuous mode [ 1401.085359][ T8677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.108695][ T8677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1402.133323][ T8677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1402.163551][ T8677] bond0 (unregistering): Released all slaves [ 1403.137784][ T8677] hsr_slave_0: left promiscuous mode [ 1403.147106][ T8677] hsr_slave_1: left promiscuous mode [ 1403.154034][ T8677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1403.162831][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1403.177806][ T8677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1403.186078][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.232878][ T8677] veth0_macvtap: left promiscuous mode [ 1403.247351][ T8677] veth1_vlan: left promiscuous mode [ 1403.255798][ T8677] veth0_vlan: left promiscuous mode [ 1404.826325][ T8677] team0 (unregistering): Port device team_slave_1 removed [ 1404.959807][ T8677] team0 (unregistering): Port device team_slave_0 removed [ 1406.659383][T14863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1406.751002][T14863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1406.782820][T14863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1406.840957][T14863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1407.364127][T14863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1407.566674][T14863] 8021q: adding VLAN 0 to HW filter on device team0 [ 1407.674904][T14906] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1407.690990][T14906] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1407.739895][T11125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.747212][T11125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1407.775883][T14906] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1407.807677][T11353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.814918][T11353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.852141][T14906] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1408.645641][T14906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1408.820317][T14906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1408.891349][ T8677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.898734][ T8677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1408.991479][T11353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.998791][T11353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1409.148322][T14863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1409.544656][T14863] veth0_vlan: entered promiscuous mode [ 1409.598067][T14863] veth1_vlan: entered promiscuous mode [ 1409.843910][T14863] veth0_macvtap: entered promiscuous mode [ 1409.889283][T14863] veth1_macvtap: entered promiscuous mode [ 1410.003596][T14863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.042103][T14863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.052851][T14863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.067002][T14863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.080467][T14863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.096997][T14863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.109529][T14863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.123671][T14863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.136439][T14863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.148786][T14863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.159136][T14863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.172546][T14863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.186850][T14863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1410.239015][T14863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.249781][T14863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.263949][T14863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.279127][T14863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.293150][T14863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.306760][T14863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.316751][T14863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.329019][T14863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.338929][T14863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.349736][T14863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.361219][T14863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.384472][T14863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.404341][T14863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1410.443321][T14863] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.454673][T14863] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.463424][T14863] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.478414][T14863] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.632083][T14906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1410.934250][T11353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.945572][T11353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1411.168422][T14906] veth0_vlan: entered promiscuous mode [ 1411.175389][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1411.183244][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1411.253410][T14906] veth1_vlan: entered promiscuous mode [ 1411.591961][ T29] audit: type=1326 audit(1725840255.876:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14992 comm="syz.5.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43dbb7cef9 code=0x7ffc0000 [ 1411.680730][ T29] audit: type=1326 audit(1725840255.876:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14992 comm="syz.5.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43dbb7cef9 code=0x7ffc0000 [ 1411.738410][T14998] Invalid ELF header magic: != ELF [ 1411.772106][T14906] veth0_macvtap: entered promiscuous mode [ 1411.841018][ T29] audit: type=1326 audit(1725840255.906:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14992 comm="syz.5.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43dbb7cef9 code=0x7ffc0000 [ 1411.955819][ T5296] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1411.958506][T14906] veth1_macvtap: entered promiscuous mode [ 1411.970744][ T29] audit: type=1326 audit(1725840255.916:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14992 comm="syz.5.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43dbb7cef9 code=0x7ffc0000 [ 1412.047959][ T29] audit: type=1326 audit(1725840255.926:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14992 comm="syz.5.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43dbb7cef9 code=0x7ffc0000 [ 1412.146149][ T29] audit: type=1326 audit(1725840255.926:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14992 comm="syz.5.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43dbb7cef9 code=0x7ffc0000 [ 1412.195195][ T5296] usb 2-1: Using ep0 maxpacket: 8 [ 1412.221416][ T5296] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1412.254831][ T29] audit: type=1326 audit(1725840255.926:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14992 comm="syz.5.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43dbb7cef9 code=0x7ffc0000 [ 1412.284605][ T5296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.304823][ T5296] usb 2-1: Product: syz [ 1412.309047][ T5296] usb 2-1: Manufacturer: syz [ 1412.313655][ T5296] usb 2-1: SerialNumber: syz [ 1412.384870][ T29] audit: type=1326 audit(1725840255.926:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14992 comm="syz.5.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43dbb7cef9 code=0x7ffc0000 [ 1412.431108][ T5296] usb 2-1: config 0 descriptor?? [ 1412.454870][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.485335][ T29] audit: type=1326 audit(1725840255.936:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14992 comm="syz.5.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43dbb7cef9 code=0x7ffc0000 [ 1412.577413][ T29] audit: type=1326 audit(1725840255.936:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14992 comm="syz.5.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43dbb7cef9 code=0x7ffc0000 [ 1412.579469][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.742931][ T5296] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1412.774198][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.825038][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.845890][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.893186][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.907766][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1412.936116][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.013419][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1413.049871][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.060157][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1413.080943][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.091432][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1413.104825][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.118528][T14906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1413.198868][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.215907][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.258193][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.273911][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.284613][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.295295][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.306529][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.319089][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.332889][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.393765][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.458663][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.496739][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.526618][T14906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.574360][T14906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.608798][T14906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1413.662280][T14906] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.671940][T14906] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.681678][T14906] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.700743][T14906] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.033603][T15009] loop5: detected capacity change from 0 to 1024 [ 1415.113346][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1415.147038][ T5296] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1415.194673][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1415.212723][ T5296] usb 2-1: USB disconnect, device number 18 [ 1415.261690][ T8677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1415.289157][ T8677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1416.498631][T15026] loop1: detected capacity change from 0 to 16 [ 1416.555986][T15026] erofs: (device loop1): mounted with root inode @ nid 36. [ 1416.671850][T15025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.756402][T15025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.899390][T12845] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46 [ 1417.011655][T12845] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1418.631783][T12845] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1418.891831][T15038] loop5: detected capacity change from 0 to 1024 [ 1418.951076][T15038] EXT4-fs: Ignoring removed nobh option [ 1419.699693][T15050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2793'. [ 1420.069709][T15048] ------------[ cut here ]------------ [ 1420.076212][T15048] name '82416' [ 1420.095274][T15048] WARNING: CPU: 0 PID: 15048 at fs/proc/generic.c:711 remove_proc_entry+0x1d1/0x540 [ 1420.107274][T15048] Modules linked in: [ 1420.111184][T15048] CPU: 0 UID: 0 PID: 15048 Comm: syz.1.2793 Not tainted 6.11.0-rc6-syzkaller-00363-g89f5e14d05b4 #0 [ 1420.123984][T15048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1420.134607][T15048] RIP: 0010:remove_proc_entry+0x1d1/0x540 [ 1420.140369][T15048] Code: ff e8 63 3c 68 ff 48 c7 c7 80 db ff 8d e8 37 1f f4 08 e8 52 3c 68 ff 90 48 8b 74 24 18 48 c7 c7 40 f1 60 8b e8 70 88 2a ff 90 <0f> 0b 90 90 e9 fa 00 00 00 e8 31 3c 68 ff 4d 85 e4 74 c4 e8 27 3c [ 1420.160339][T15048] RSP: 0018:ffffc900036bfc80 EFLAGS: 00010286 [ 1420.166613][T15048] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff814e1d09 [ 1420.175085][T15048] RDX: ffff88802f745a00 RSI: ffffffff814e1d16 RDI: 0000000000000001 [ 1420.183076][T15048] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1420.191199][T15048] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888028a6f508 [ 1420.202341][T15048] R13: 0000000000000005 R14: ffff888028a6f548 R15: ffff888028a6f548 [ 1420.212017][T15048] FS: 0000555573e88500(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 1420.221382][T15048] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1420.228110][T15048] CR2: 0000000020005000 CR3: 000000006bb56000 CR4: 0000000000350ef0 [ 1420.236126][T15048] Call Trace: [ 1420.239407][T15048] [ 1420.242341][T15048] ? show_regs+0x8c/0xa0 [ 1420.246666][T15048] ? __warn+0xe5/0x3c0 [ 1420.250764][T15048] ? remove_proc_entry+0x1d1/0x540 [ 1420.255965][T15048] ? report_bug+0x3c0/0x580 [ 1420.260493][T15048] ? handle_bug+0x3d/0x70 [ 1420.264884][T15048] ? exc_invalid_op+0x17/0x50 [ 1420.269579][T15048] ? asm_exc_invalid_op+0x1a/0x20 [ 1420.276183][T15048] ? __warn_printk+0x199/0x350 [ 1420.280976][T15048] ? __warn_printk+0x1a6/0x350 [ 1420.285821][T15048] ? remove_proc_entry+0x1d1/0x540 [ 1420.291013][T15048] ? __pfx_remove_proc_entry+0x10/0x10 [ 1420.297096][T15048] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1420.305532][T15048] ? bcm_release+0x200/0x8d0 [ 1420.310153][T15048] ? __local_bh_enable_ip+0xa4/0x120 [ 1420.317176][T15048] bcm_release+0x27b/0x8d0 [ 1420.321624][T15048] __sock_release+0xb3/0x270 [ 1420.326314][T15048] ? __pfx_sock_close+0x10/0x10 [ 1420.331184][T15048] sock_close+0x1c/0x30 [ 1420.335433][T15048] __fput+0x40b/0xbb0 [ 1420.339467][T15048] ? _raw_spin_unlock_irq+0x23/0x50 [ 1420.344808][T15048] task_work_run+0x151/0x250 [ 1420.349475][T15048] ? __pfx_task_work_run+0x10/0x10 [ 1420.354722][T15048] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 1420.360861][T15048] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1420.366694][T15048] do_syscall_64+0xda/0x250 [ 1420.371236][T15048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1420.377209][T15048] RIP: 0033:0x7f89acd7cef9 [ 1420.381634][T15048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1420.401325][T15048] RSP: 002b:00007fff745c2998 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1420.412054][T15048] RAX: 0000000000000000 RBX: 00007f89acf37a80 RCX: 00007f89acd7cef9 [ 1420.421702][T15048] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1420.429732][T15048] RBP: 00007f89acf37a80 R08: 00007f89acf22000 R09: 00007fff745c2c8f [ 1420.438615][T15048] R10: 00000000003ffc40 R11: 0000000000000246 R12: 000000000015ac6b [ 1420.446644][T15048] R13: 00007fff745c2aa0 R14: 0000000000000032 R15: ffffffffffffffff [ 1420.454688][T15048] [ 1420.457713][T15048] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1420.464991][T15048] CPU: 0 UID: 0 PID: 15048 Comm: syz.1.2793 Not tainted 6.11.0-rc6-syzkaller-00363-g89f5e14d05b4 #0 [ 1420.475761][T15048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1420.485816][T15048] Call Trace: [ 1420.489095][T15048] [ 1420.492026][T15048] dump_stack_lvl+0x3d/0x1f0 [ 1420.496636][T15048] panic+0x6dc/0x7c0 [ 1420.500557][T15048] ? __pfx_panic+0x10/0x10 [ 1420.504996][T15048] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1420.510650][T15048] ? show_trace_log_lvl+0x363/0x500 [ 1420.515891][T15048] ? check_panic_on_warn+0x1f/0xb0 [ 1420.521033][T15048] ? remove_proc_entry+0x1d1/0x540 [ 1420.526171][T15048] check_panic_on_warn+0xab/0xb0 [ 1420.531138][T15048] __warn+0xf1/0x3c0 [ 1420.535062][T15048] ? remove_proc_entry+0x1d1/0x540 [ 1420.540208][T15048] report_bug+0x3c0/0x580 [ 1420.544559][T15048] handle_bug+0x3d/0x70 [ 1420.548724][T15048] exc_invalid_op+0x17/0x50 [ 1420.553241][T15048] asm_exc_invalid_op+0x1a/0x20 [ 1420.558107][T15048] RIP: 0010:remove_proc_entry+0x1d1/0x540 [ 1420.563856][T15048] Code: ff e8 63 3c 68 ff 48 c7 c7 80 db ff 8d e8 37 1f f4 08 e8 52 3c 68 ff 90 48 8b 74 24 18 48 c7 c7 40 f1 60 8b e8 70 88 2a ff 90 <0f> 0b 90 90 e9 fa 00 00 00 e8 31 3c 68 ff 4d 85 e4 74 c4 e8 27 3c [ 1420.583472][T15048] RSP: 0018:ffffc900036bfc80 EFLAGS: 00010286 [ 1420.589549][T15048] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff814e1d09 [ 1420.597526][T15048] RDX: ffff88802f745a00 RSI: ffffffff814e1d16 RDI: 0000000000000001 [ 1420.605501][T15048] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1420.613476][T15048] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888028a6f508 [ 1420.621453][T15048] R13: 0000000000000005 R14: ffff888028a6f548 R15: ffff888028a6f548 [ 1420.629441][T15048] ? __warn_printk+0x199/0x350 [ 1420.634228][T15048] ? __warn_printk+0x1a6/0x350 [ 1420.639026][T15048] ? __pfx_remove_proc_entry+0x10/0x10 [ 1420.644516][T15048] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1420.650169][T15048] ? bcm_release+0x200/0x8d0 [ 1420.654781][T15048] ? __local_bh_enable_ip+0xa4/0x120 [ 1420.660089][T15048] bcm_release+0x27b/0x8d0 [ 1420.664533][T15048] __sock_release+0xb3/0x270 [ 1420.669139][T15048] ? __pfx_sock_close+0x10/0x10 [ 1420.674007][T15048] sock_close+0x1c/0x30 [ 1420.678182][T15048] __fput+0x40b/0xbb0 [ 1420.682189][T15048] ? _raw_spin_unlock_irq+0x23/0x50 [ 1420.687416][T15048] task_work_run+0x151/0x250 [ 1420.692040][T15048] ? __pfx_task_work_run+0x10/0x10 [ 1420.697184][T15048] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 1420.703277][T15048] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1420.708939][T15048] do_syscall_64+0xda/0x250 [ 1420.713488][T15048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1420.719420][T15048] RIP: 0033:0x7f89acd7cef9 [ 1420.723850][T15048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1420.743471][T15048] RSP: 002b:00007fff745c2998 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1420.751895][T15048] RAX: 0000000000000000 RBX: 00007f89acf37a80 RCX: 00007f89acd7cef9 [ 1420.759871][T15048] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1420.767846][T15048] RBP: 00007f89acf37a80 R08: 00007f89acf22000 R09: 00007fff745c2c8f [ 1420.775822][T15048] R10: 00000000003ffc40 R11: 0000000000000246 R12: 000000000015ac6b [ 1420.783796][T15048] R13: 00007fff745c2aa0 R14: 0000000000000032 R15: ffffffffffffffff [ 1420.791789][T15048] [ 1420.795022][T15048] Kernel Offset: disabled [ 1420.799556][T15048] Rebooting in 86400 seconds..