last executing test programs: 2m45.784933112s ago: executing program 4 (id=181): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpm_return_int\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2m19.257663184s ago: executing program 4 (id=181): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpm_return_int\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1m48.006260976s ago: executing program 4 (id=181): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpm_return_int\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1m20.560057049s ago: executing program 4 (id=181): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpm_return_int\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 43.148883124s ago: executing program 4 (id=181): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpm_return_int\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 36.831807397s ago: executing program 0 (id=1243): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 35.811515927s ago: executing program 0 (id=1248): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="05030400d3fc02000000ab5d71acedd7c9560385dcb1894f84d7dc049806892f05ce811c88f7", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 34.996889719s ago: executing program 0 (id=1251): socket$kcm(0x2, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000, @void, @value}, 0x10) socket$kcm(0x2, 0x2, 0x73) 34.499821302s ago: executing program 0 (id=1253): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0000000000000000000000d1000000000000000000000005001b0011"], 0x24}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x32b, @tick=0x11}) 33.227923884s ago: executing program 0 (id=1257): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x0) 13.119190313s ago: executing program 2 (id=1294): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x8, &(0x7f00000004c0)={[{@shortname_win95}, {@shortname_win95}, {@fat=@sys_immutable}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@numtail}, {@numtail}, {@uni_xlate}, {@uni_xlate}, {@shortname_win95}, {@uni_xlate}]}, 0x1, 0x223, &(0x7f0000000280)="$eJzs3TFrE2EYB/CnttVSkHQQiiJ44uIU2op7ilQQA4qSQSeLTVGaWDAQ0KF180voV9DRVXAQV7+ACFIFF7t1ECLtxcbWi43U5Ir9/ZY+9H3/d897CQkXyJs7p+tLC8uNxfX1tRgbG4qRUpRiYygm4kgMR+pJZNgaLGWNAAAH3EarFd9aqbx7AQAGo+v7f+ZNPwDwP+jx/v/6AFsCAPrM5/8AcPjcvHX76my5PHcjScYi6k+blWYl/ZuOzy7G/ahFNaaiEN8jWtvS+vKV8txUsunzRFTqq+38arMyvDM/HYWYyM5PJ6md+dEYb+c/jEc1ZqIQJ7LzM5n5o3H+3C/nL0Yh3t+N5ajFQmxmO/mV6SS5dK28K39sax4AAAAAAAAAAAAAAAAAAAAAAPRDMdmWuX9PsdhtPM33vj/Q7v15RuLUSL5rBwAAAAAAAAAAAAAAAAAAgIOi8ejx0nytVn34p+LBuxdv9prTYzHUPu9+j7P/4vjZT8+6zRn+u+vzb4vXZ/K8LD0Wb9funbzQmLyYWxujEfH7f7o+tb4WIvrUz8tcH4ufq95z8uTz0vyrlY9fej3ywF+KAAAAAAAAAAAAAAAAAADg0Ot86TfvTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP53f/+9fkfcaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRwAAAP//st+ejg==") syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 11.683771383s ago: executing program 2 (id=1297): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000006780)=0xcf, 0x62) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x1f, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 10.348926222s ago: executing program 3 (id=1300): prlimit64(0x0, 0x8, &(0x7f0000000140), 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r1, 0xee01) r2 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000002700)={0x1, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000028c0)=""/264, 0x108}], 0x0}, 0x20) 10.215159338s ago: executing program 1 (id=1301): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 10.175243483s ago: executing program 2 (id=1302): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth0_to_team\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x0, 0x100000000}}) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) 9.799676822s ago: executing program 1 (id=1303): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc836], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4]}, 0x45c) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000001100)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800005]}, 0x45c) 9.282411196s ago: executing program 3 (id=1304): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) close(r0) 8.895098127s ago: executing program 1 (id=1305): sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES16], 0x4c}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 8.518502325s ago: executing program 3 (id=1306): creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000800)='c', 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, &(0x7f0000000080)=""/101, 0x65, &(0x7f0000000240)={&(0x7f0000000040)={'sha384\x00'}}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) 8.281125296s ago: executing program 2 (id=1307): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x1) 8.082757675s ago: executing program 1 (id=1308): syz_mount_image$tmpfs(&(0x7f0000002300), &(0x7f0000000040)='./file0\x00', 0x21408, 0x0, 0x0, 0x0, &(0x7f0000006380)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009ce6e7e68cce73c582dc6dfdbca736b027810cd2b2832a1b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 7.957179102s ago: executing program 4 (id=181): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpm_return_int\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.132573573s ago: executing program 0 (id=1257): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x0) 2.246741163s ago: executing program 1 (id=1309): prlimit64(0x0, 0x9, &(0x7f0000000000), 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020) 2.226737282s ago: executing program 2 (id=1310): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x2003, &(0x7f00000000c0), 0x20000000) 2.160256042s ago: executing program 3 (id=1311): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x1c, r1, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}}, 0x0) 1.705799244s ago: executing program 2 (id=1312): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1081a, &(0x7f0000000580)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c646d61736b3d3030303030303030303030303030303030332c6f626a5f757365723d2c7569643c00000000008f8d62f3716268a1047e8cb15feafbc0364b68fdcac2f44d852cc094275eeab9e17f4a63f6ac15f92a408809304241c454ece9675ff18b5389c2277224a53ef7e0d78f0000010000000000c564f743b368aa63367c491de145dea898e9f3e51f4f6a12f24a2e81", @ANYRESDEC=0xee01, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB=',rootcontext=sysadm_u,mask=MAY_READ,uid=', @ANYRESDEC=0x0, @ANYBLOB=',obj_role=#&),&\\,\x00'], 0x21, 0x14fd, &(0x7f0000003f40)="$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") mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./control\x00') 1.488991061s ago: executing program 1 (id=1313): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="20059f0000009d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000140)={0x40, 0x11, 0x2, "6390"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.453704656s ago: executing program 3 (id=1314): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008000, &(0x7f00000007c0)={[{@debug}, {@orlov}, {@nomblk_io_submit}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@resuid}, {@usrquota}, {@usrquota}]}, 0x1, 0x5ba, &(0x7f0000001bc0)="$eJzs3c1vVFUbAPDnTD8olPdtIUbFhTQxBhKlpQUMMS5gTxr8iBs3VloIUqChNVo0sSS4MTFujDFx5UL8L5TIlpWuXLhxZUiIGpYmjrkzc0tb7rS0THsr9/dLht57zlzOczt9eu6cnnMngMoayv6pReyLiJkUMZAWFuu6o1U51Hzevb8+OpM9UtTrr/+RIrXK8uen1tf+1sF9EfHTjyn2dj3Y7uz81QsT09NTV1r7I3MXZ0Zm568eOn9x4tzUualLYy+NHT929Njx0cMdO9dT1999f+DT8be+/frvNPrdr+MpTsTuVt3S8+iUoRhqfk92LC/Pvq/HO91YSbpa57P0JU7dJQbEuuSvX09EPBUD0RX3X7yB+OTVUoMDNlU9RdSBikryHyoqvw7I39uvfB9cK+WqBNgKd082BwAezP/u5thg9DXGBnbdS7F0WCdFRCdG5rI2bt8av3721vj12KRxOKDYwrWIeLoo/1MjNwcbo/hZ/teW5X92XXC69TUrf22D7Q+t2Jf/sHWa+d+3ofx/e0n+v7PB9uU/AAAAAAAAdM7NkxHxYtHf/2uL83+iYP5Pf0Sc6ED7a//9r3anA80ABe6ejHilcP5vLZ/9O9jV2vpfYz5ATzp7fnrqcET8PyIORs+ObH90lTYOfbb3q3Z1+fy//JG1f7s1F7AVx53uFetnJyfmJh71vIGIu9cinimc/5sW+/9U0P9nvw9mHrKNvc/fON2ubu38BzZL/ZuIA4X9f1p8Tlr9/hwjjeuBkfyq4EHPfvj59+3al/9Qnqz/37V6/g+mpffrmV1/G0fmu+vt6jZ6/d+b3mjccqa3VfbBxNzcldGI3nSqKytdVj62/pjhcZTnQ54vWf4ffG718b+i6/+dEbGw4v9Ofy5fU5x78p/+39rFo/+H8mT5P7mu/n/9G2M3Bn9o1/7D9f9HG339wVaJ8T9o+jJP097l5QXp2F1UtdXxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDjoBYRuyPVhhe3a7Xh4Yj+iHgidtWmL8/OvXD28nuXJrO6xuf/1/JP+h1o7qf88/8Hl+yPrdg/EhF7IuKLrp2N/eEzl6cnyz55AAAAAAAAAAAAAAAAAAAA2Cb626z/z/zeVXZ0wKbrLjsAoDQF+f9zGXEAW0//D9Ul/6G65D9Ul/yH6pL/UF3yH6pL/kN1yX8AAAAAAHis7Nl/85cUEQsv72w8Mr2tup5SIwM2W63sAIDSuMUPVJepP1Bd3uMDaY36vrYHrXXkambOPMLBAAAAAAAAAAAAAFA5B/ZZ/w9VZf0/VJf1/1Bd+fr//SXHAWw97/GBWGMlf+H6/zWPAgAAAAAAAAAAAAA6aXb+6oWJ6empKzbe3B5hbOVGvV7/OPsp2C7x/Mc38qnw2yWeR9oo9/cSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw378BAAD//2QiJqY=") chdir(&(0x7f0000000100)='./file0\x00') r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000700)='./file0\x00', 0x400097e) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 0s ago: executing program 3 (id=1315): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/100, 0x64}], 0x1) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) kernel console output (not intermixed with test programs): ng interface: batadv_slave_0 [ 889.341406][ T8824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.368224][ T8824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.553187][ T8824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.560403][ T8824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.587253][ T8824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.643102][ T8886] loop1: detected capacity change from 0 to 512 [ 889.708156][ T5184] Bluetooth: hci0: command tx timeout [ 889.712829][ T8886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 889.727228][ T8886] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 890.112392][ T8891] tipc: Enabled bearer , priority 10 [ 890.131561][ T8892] tipc: Disabling bearer [ 890.166395][ T8824] hsr_slave_0: entered promiscuous mode [ 890.244853][ T8824] hsr_slave_1: entered promiscuous mode [ 890.488385][ T6393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 891.802425][ T5184] Bluetooth: hci0: command tx timeout [ 892.577443][ T8824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 892.610626][ T8917] loop2: detected capacity change from 0 to 1024 [ 892.666517][ T8824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 892.768015][ T8824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 892.818543][ T8824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 893.213737][ T5241] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 893.413476][ T5241] usb 2-1: Using ep0 maxpacket: 16 [ 893.448463][ T5241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.459968][ T5241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.470206][ T5241] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 893.483738][ T5241] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 893.493292][ T5241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.524309][ T7807] hfsplus: b-tree write err: -5, ino 4 [ 893.526006][ T8922] loop3: detected capacity change from 0 to 24 [ 893.640176][ T5241] usb 2-1: config 0 descriptor?? [ 893.658903][ T8922] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 893.779094][ T8824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.893721][ T8824] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.953590][ T8922] loop3: detected capacity change from 24 to 0 [ 893.961586][ T8924] syz.3.961: attempt to access beyond end of device [ 893.961586][ T8924] loop3: rw=0, sector=18, nr_sectors = 2 limit=0 [ 894.033337][ T7848] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.041130][ T7848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.154403][ T7848] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.162368][ T7848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.242878][ T5241] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0010/input/input18 [ 894.507239][ T8824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 894.573214][ T5241] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 894.595608][ T5241] usb 2-1: USB disconnect, device number 17 [ 894.747495][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 896.054015][ T8923] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 896.102511][ T8936] loop2: detected capacity change from 0 to 256 [ 896.110997][ T8824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.244060][ T8923] usb 4-1: Using ep0 maxpacket: 8 [ 896.314276][ T8923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.325030][ T8923] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 896.334694][ T8923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.404061][ T8923] usb 4-1: config 0 descriptor?? [ 896.450768][ T8923] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 897.792984][ T8824] veth0_vlan: entered promiscuous mode [ 897.844920][ T8824] veth1_vlan: entered promiscuous mode [ 897.883036][ T8923] gspca_vc032x: reg_w err -71 [ 897.888255][ T8923] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 898.017279][ T8824] veth0_macvtap: entered promiscuous mode [ 898.047560][ T8824] veth1_macvtap: entered promiscuous mode [ 898.082017][ T8923] usb 4-1: USB disconnect, device number 16 [ 898.152117][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.163615][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.173840][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.184675][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.195002][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.205829][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.216072][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.226851][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.237037][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.251425][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.268127][ T8824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.289005][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.300526][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.310837][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.321814][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.332075][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.346517][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.357488][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.368311][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.378581][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.389466][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.405469][ T8824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.427722][ T8824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.437583][ T8824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.450651][ T8824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.460752][ T8824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.154880][ T8979] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 900.271952][ T5238] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 900.531876][ T5238] usb 3-1: Using ep0 maxpacket: 16 [ 900.632760][ T5238] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 900.641156][ T5238] usb 3-1: config 0 has no interface number 0 [ 900.648544][ T5238] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 901.119273][ T5238] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 901.129065][ T5238] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 901.137630][ T5238] usb 3-1: Product: syz [ 901.142172][ T5238] usb 3-1: SerialNumber: syz [ 901.167631][ T5238] usb 3-1: config 0 descriptor?? [ 901.178833][ T8980] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 901.723249][ T5238] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 901.737253][ T5238] usb 3-1: invalid MIDI in EP 0 [ 902.136300][ T5238] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 902.223800][ T5238] usb 3-1: USB disconnect, device number 9 [ 902.297135][ T9003] loop3: detected capacity change from 0 to 1024 [ 902.487995][ T9009] loop1: detected capacity change from 0 to 256 [ 902.769909][ T9009] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 902.899131][ T29] audit: type=1800 audit(1727413603.776:32): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.989" name="file1" dev="loop1" ino=1048712 res=0 errno=0 [ 904.658380][ T9028] loop1: detected capacity change from 0 to 64 [ 904.751966][ T7811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.760069][ T7811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.027483][ T7807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.035874][ T7807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.135930][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 905.143954][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 905.870029][ T9036] loop1: detected capacity change from 0 to 2048 [ 906.243984][ T9037] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 906.355866][ T29] audit: type=1800 audit(1727413607.166:33): pid=9036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.999" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 906.376910][ T29] audit: type=1800 audit(1727413607.176:34): pid=9036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.999" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 906.398149][ T29] audit: type=1800 audit(1727413607.196:35): pid=9036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.999" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 906.467781][ T9036] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 906.508191][ T7811] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.564311][ T9036] Remounting filesystem read-only [ 906.727985][ T7811] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.786478][ T6393] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 906.850515][ T7811] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.014370][ T7811] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.217523][ T7811] bridge_slave_1: left allmulticast mode [ 907.223910][ T7811] bridge_slave_1: left promiscuous mode [ 907.230536][ T7811] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.255451][ T7811] bridge_slave_0: left allmulticast mode [ 907.261391][ T7811] bridge_slave_0: left promiscuous mode [ 907.268576][ T7811] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.833850][ T7811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 907.863736][ T7811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 907.905250][ T7811] bond0 (unregistering): Released all slaves [ 908.520502][ T7811] hsr_slave_0: left promiscuous mode [ 908.554582][ T7811] hsr_slave_1: left promiscuous mode [ 908.577271][ T9048] loop2: detected capacity change from 0 to 128 [ 908.600160][ T7811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 908.608500][ T7811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.673431][ T7811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 908.681181][ T7811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.933564][ T7811] veth1_macvtap: left promiscuous mode [ 908.939407][ T7811] veth0_macvtap: left promiscuous mode [ 908.945699][ T7811] veth1_vlan: left promiscuous mode [ 908.951336][ T7811] veth0_vlan: left promiscuous mode [ 909.264093][ T9048] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 909.294759][ T5196] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 909.305925][ T5196] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 909.316808][ T5196] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 909.330456][ T5196] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 909.343838][ T5196] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 909.362302][ T9048] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 909.387285][ T5196] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 909.612356][ T5265] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 909.944805][ T7811] team0 (unregistering): Port device team_slave_1 removed [ 909.991157][ T5265] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 910.000921][ T5265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.068055][ T7811] team0 (unregistering): Port device team_slave_0 removed [ 910.079066][ T5265] usb 1-1: config 0 descriptor?? [ 910.087160][ T5238] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 910.282120][ T5238] usb 2-1: Using ep0 maxpacket: 32 [ 910.763878][ T7114] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 910.859760][ T5238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.872345][ T5238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.883211][ T5238] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 910.893054][ T5238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.985177][ T5265] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 911.095579][ T5238] usb 2-1: config 0 descriptor?? [ 911.405522][ T5265] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 911.416423][ T5265] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 911.436790][ T5265] usb 1-1: USB disconnect, device number 10 [ 911.642275][ T5196] Bluetooth: hci0: command tx timeout [ 911.673037][ T5238] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 911.701157][ T9051] chnl_net:caif_netlink_parms(): no params data found [ 911.854092][ T5238] ft260 0003:0403:6030.0011: chip code: 5e81 abf2 [ 912.122742][ T5238] ft260 0003:0403:6030.0011: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 912.352264][ T5241] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 912.371994][ T5269] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 912.501908][ T5238] ft260 0003:0403:6030.0011: failed to retrieve status: -71 [ 912.521576][ T5238] ft260 0003:0403:6030.0011: failed to reset I2C controller: -71 [ 912.559412][ T5238] usb 2-1: USB disconnect, device number 18 [ 912.746521][ T5241] usb 4-1: config 0 has no interfaces? [ 912.824005][ T5269] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 912.827980][ T9051] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.833457][ T5269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.833621][ T5269] usb 3-1: Product: syz [ 912.841197][ T9051] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.849003][ T5269] usb 3-1: Manufacturer: syz [ 912.854031][ T9051] bridge_slave_0: entered allmulticast mode [ 912.860384][ T5269] usb 3-1: SerialNumber: syz [ 912.863114][ T5241] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 912.868610][ T9051] bridge_slave_0: entered promiscuous mode [ 912.871078][ T5241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.902700][ T5241] usb 4-1: Product: syz [ 912.907222][ T5241] usb 4-1: Manufacturer: syz [ 912.912513][ T5241] usb 4-1: SerialNumber: syz [ 913.127394][ T5269] usb 3-1: config 0 descriptor?? [ 913.148213][ T5241] usb 4-1: config 0 descriptor?? [ 913.158607][ T9051] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.166578][ T9051] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.175038][ T9051] bridge_slave_1: entered allmulticast mode [ 913.184822][ T9051] bridge_slave_1: entered promiscuous mode [ 913.354687][ T9051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.466312][ T8923] usb 4-1: USB disconnect, device number 17 [ 913.515830][ T9051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.704877][ T5196] Bluetooth: hci0: command tx timeout [ 913.743673][ T9051] team0: Port device team_slave_0 added [ 913.769096][ T9051] team0: Port device team_slave_1 added [ 913.970425][ T9051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.979258][ T9051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 914.006057][ T9051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 914.479339][ T9094] loop0: detected capacity change from 0 to 1024 [ 914.558534][ T5269] usb 3-1: f81604_read: reg: 100e failed: -EPROTO [ 914.596053][ T5269] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 914.609856][ T9051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.617391][ T9051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 914.646681][ T9051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.807565][ T9094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 914.989034][ T5269] usb 3-1: USB disconnect, device number 10 [ 915.000700][ T5269] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 915.086974][ T5269] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 915.315083][ T8410] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /48/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 915.370326][ T8410] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 915.425804][ T9051] hsr_slave_0: entered promiscuous mode [ 915.493554][ T8410] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 915.507362][ T8410] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /48/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 915.533137][ T9051] hsr_slave_1: entered promiscuous mode [ 915.557655][ T8410] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 915.589735][ T8410] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 915.710509][ T9106] loop1: detected capacity change from 0 to 512 [ 915.781219][ T8410] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /48/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 915.831824][ T5196] Bluetooth: hci0: command tx timeout [ 915.872111][ T9106] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 915.879785][ T9106] UDF-fs: Scanning with blocksize 512 failed [ 915.906413][ T8410] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 916.002132][ T9106] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 916.009943][ T9106] UDF-fs: Scanning with blocksize 1024 failed [ 916.020275][ T9106] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 916.031231][ T9106] UDF-fs: Scanning with blocksize 2048 failed [ 916.066563][ T8410] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 916.104605][ T9106] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 916.129636][ T8410] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /48/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 916.197634][ T9106] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 916.233200][ T8410] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 916.321934][ T8410] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 916.342865][ T9110] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1026'. [ 916.394086][ T8410] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /48/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 916.520833][ T8410] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 916.574266][ T8410] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 916.606605][ T8410] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 916.630939][ T8410] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 916.689577][ T8410] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 916.748916][ T9112] loop3: detected capacity change from 0 to 128 [ 916.768593][ T8410] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 916.913262][ T29] audit: type=1804 audit(1727413617.786:36): pid=9112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1027" name="/newroot/234/file0/cgroup.controllers" dev="loop3" ino=1048718 res=1 errno=0 [ 916.957408][ T8410] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 917.483832][ T9122] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 917.665445][ T9051] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 917.693096][ T9051] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 917.755378][ T9051] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 917.788430][ T9051] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 917.873151][ T5196] Bluetooth: hci0: command tx timeout [ 918.063609][ T9126] loop2: detected capacity change from 0 to 512 [ 918.137113][ T9126] EXT4-fs: Ignoring removed nobh option [ 918.192691][ T5238] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 918.257142][ T9126] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 918.365677][ T9126] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 918.382803][ T9126] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #13: comm syz.2.1033: casefold flag without casefold feature [ 918.453463][ T9051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.489153][ T5238] usb 4-1: Using ep0 maxpacket: 16 [ 918.509945][ T5238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.524570][ T5238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.538113][ T5238] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 918.551537][ T5238] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 918.561150][ T5238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.584831][ T5238] usb 4-1: config 0 descriptor?? [ 918.593441][ T9126] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1033: couldn't read orphan inode 13 (err -117) [ 918.649632][ T9126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 918.663032][ T9051] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.694966][ T7807] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.702849][ T7807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.874736][ T7807] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.883035][ T7807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.016054][ T9099] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 919.111007][ T5238] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0012/input/input19 [ 919.251922][ T9051] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 919.262861][ T9051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 919.375479][ T5238] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 919.395521][ T5238] usb 4-1: USB disconnect, device number 18 [ 919.660224][ T7114] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.606182][ T7848] bond0: (slave netdevsim3): Releasing backup interface [ 920.650427][ T8410] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.690388][ T7848] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.117474][ T7848] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.273395][ T9147] loop1: detected capacity change from 0 to 64 [ 921.301372][ T9147] hfs: unable to locate alternate MDB [ 921.308174][ T9147] hfs: continuing without an alternate MDB [ 921.467838][ T7848] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.564991][ T9051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.664798][ T7848] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.824401][ T9149] loop3: detected capacity change from 0 to 2048 [ 921.884316][ T9149] EXT4-fs: Ignoring removed nobh option [ 922.245909][ T7848] bridge_slave_1: left allmulticast mode [ 922.252189][ T7848] bridge_slave_1: left promiscuous mode [ 922.258920][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.444313][ T9149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.457313][ T9149] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 922.486858][ T7848] bridge_slave_0: left allmulticast mode [ 922.493084][ T7848] bridge_slave_0: left promiscuous mode [ 922.499754][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.772584][ T9149] fs-verity: sha256 using implementation "sha256-generic" [ 923.418666][ T6401] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.439605][ T5184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 923.450467][ T7848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.459451][ T5184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 923.462598][ T5184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 923.513543][ T7848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.582279][ T7848] bond0 (unregistering): Released all slaves [ 923.608455][ T5184] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 923.696906][ T5184] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 923.744322][ T5184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 923.758879][ T7848] tipc: Disabling bearer [ 923.764662][ T7848] tipc: Left network mode [ 924.649092][ T9175] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1047'. [ 924.690785][ T7848] hsr_slave_0: left promiscuous mode [ 924.707123][ T7848] hsr_slave_1: left promiscuous mode [ 924.900084][ T7848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 924.909245][ T7848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.001279][ T7848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.009591][ T7848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.029469][ T7848] veth1_macvtap: left promiscuous mode [ 925.035403][ T7848] veth0_macvtap: left promiscuous mode [ 925.041376][ T7848] veth1_vlan: left promiscuous mode [ 925.049926][ T7848] veth0_vlan: left promiscuous mode [ 925.870778][ T5184] Bluetooth: hci1: command tx timeout [ 926.300491][ T7848] team0 (unregistering): Port device team_slave_1 removed [ 926.430072][ T7848] team0 (unregistering): Port device team_slave_0 removed [ 927.379638][ T9051] veth0_vlan: entered promiscuous mode [ 927.469033][ T9051] veth1_vlan: entered promiscuous mode [ 927.848422][ T9051] veth0_macvtap: entered promiscuous mode [ 927.890727][ T9162] chnl_net:caif_netlink_parms(): no params data found [ 927.952394][ T5184] Bluetooth: hci1: command tx timeout [ 927.963382][ T9051] veth1_macvtap: entered promiscuous mode [ 928.164472][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.175533][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.186212][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.198552][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.209389][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.220316][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.230513][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.244273][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.260486][ T9051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.470347][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.481422][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.491956][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.504300][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.514970][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.525897][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.536188][ T9051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.547133][ T9051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.566263][ T9051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.635786][ T9051] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.645099][ T9051] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.657557][ T9051] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.667640][ T9051] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.756457][ T9208] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1057'. [ 928.820255][ T9208] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1057'. [ 929.590066][ T9162] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.598078][ T9162] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.606188][ T9162] bridge_slave_0: entered allmulticast mode [ 929.618627][ T9162] bridge_slave_0: entered promiscuous mode [ 929.639143][ T9162] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.647083][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.655040][ T9162] bridge_slave_1: entered allmulticast mode [ 929.664603][ T9162] bridge_slave_1: entered promiscuous mode [ 929.853243][ T9162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.894569][ T9162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.082874][ T5184] Bluetooth: hci1: command tx timeout [ 930.355752][ T9162] team0: Port device team_slave_0 added [ 930.419804][ T9162] team0: Port device team_slave_1 added [ 930.609030][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.609234][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 930.609409][ T9162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.658812][ T9228] loop3: detected capacity change from 0 to 2048 [ 930.678034][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.678131][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 930.678295][ T9162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.731381][ T9230] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 930.982052][ C0] vkms_vblank_simulate: vblank timer overrun [ 931.044661][ T9162] hsr_slave_0: entered promiscuous mode [ 931.112759][ T9162] hsr_slave_1: entered promiscuous mode [ 931.118271][ T9162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 931.118364][ T9162] Cannot create hsr debugfs directory [ 932.106410][ T5196] Bluetooth: hci1: command tx timeout [ 932.947867][ T9162] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 933.003810][ T9162] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 933.085219][ T9162] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 933.134220][ T9162] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 933.304147][ T9253] loop3: detected capacity change from 0 to 764 [ 933.650949][ T9162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.703604][ T9162] 8021q: adding VLAN 0 to HW filter on device team0 [ 933.745668][ T7811] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.753567][ T7811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 933.897640][ T9162] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 933.908480][ T9162] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 933.988759][ T7811] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.996817][ T7811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.819059][ T9261] loop1: detected capacity change from 0 to 2048 [ 934.963837][ T9261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 934.977789][ T9261] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 935.348851][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1074'. [ 935.428468][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1074'. [ 935.472831][ T7807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.481122][ T7807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.509436][ T6393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.569889][ T9162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 935.610772][ T7833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.621928][ T7833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.645004][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1074'. [ 936.054219][ T9162] veth0_vlan: entered promiscuous mode [ 936.124497][ T9162] veth1_vlan: entered promiscuous mode [ 936.304580][ T9162] veth0_macvtap: entered promiscuous mode [ 936.358317][ T9162] veth1_macvtap: entered promiscuous mode [ 936.450492][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.462908][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.475048][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.485916][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.496077][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.509877][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.520198][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.531099][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.546530][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.558617][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.574657][ T9162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.806287][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.818169][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.830014][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.849055][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.860540][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.871400][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.881726][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.892593][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.902916][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.913698][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.929614][ T9162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.966533][ T9162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.975794][ T9162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.985174][ T9162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.994534][ T9162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.147818][ T3986] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.312393][ T3986] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.502867][ T3986] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.718371][ T3986] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.113855][ T3986] bridge_slave_1: left allmulticast mode [ 938.119905][ T3986] bridge_slave_1: left promiscuous mode [ 938.127018][ T3986] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.227223][ T3986] bridge_slave_0: left allmulticast mode [ 938.233469][ T3986] bridge_slave_0: left promiscuous mode [ 938.240190][ T3986] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.944181][ T3986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 939.082243][ T3986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 939.119033][ T3986] bond0 (unregistering): Released all slaves [ 939.801945][ T3986] hsr_slave_0: left promiscuous mode [ 939.817690][ T3986] hsr_slave_1: left promiscuous mode [ 939.836975][ T3986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 939.846853][ T3986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.885194][ T3986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 939.893453][ T3986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.950560][ T3986] veth1_macvtap: left promiscuous mode [ 939.956619][ T3986] veth0_macvtap: left promiscuous mode [ 939.962893][ T3986] veth1_vlan: left promiscuous mode [ 939.968517][ T3986] veth0_vlan: left promiscuous mode [ 940.760893][ T3986] team0 (unregistering): Port device team_slave_1 removed [ 940.886811][ T3986] team0 (unregistering): Port device team_slave_0 removed [ 941.589023][ T5265] kernel read not supported for file /admmidi2 (pid: 5265 comm: kworker/0:5) [ 942.042349][ T5184] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 942.073655][ T5184] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 942.083669][ T5184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 942.101062][ T5184] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 942.126149][ T5184] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 942.136388][ T5184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 943.373581][ T9316] chnl_net:caif_netlink_parms(): no params data found [ 944.185512][ T5184] Bluetooth: hci0: command tx timeout [ 944.873933][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.882216][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.927357][ T9316] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.936797][ T9316] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.944900][ T9316] bridge_slave_0: entered allmulticast mode [ 944.954629][ T9316] bridge_slave_0: entered promiscuous mode [ 945.012011][ T7793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.020239][ T7793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.058372][ T9316] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.066527][ T9316] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.074663][ T9316] bridge_slave_1: entered allmulticast mode [ 945.084346][ T9316] bridge_slave_1: entered promiscuous mode [ 945.388984][ T9316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.424093][ T9316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.761744][ T9316] team0: Port device team_slave_0 added [ 945.802948][ T9316] team0: Port device team_slave_1 added [ 945.865299][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1098'. [ 946.006464][ T9316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.013886][ T9316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.047104][ T9316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.073195][ T9316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.080477][ T9316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.107493][ T9316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.293725][ T5184] Bluetooth: hci0: command tx timeout [ 946.528067][ T9316] hsr_slave_0: entered promiscuous mode [ 946.580626][ T9316] hsr_slave_1: entered promiscuous mode [ 947.393032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 947.597736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 947.781374][ T9381] No such timeout policy "syz0" [ 947.802739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 947.812574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 948.344007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 948.373051][ T5184] Bluetooth: hci0: command tx timeout [ 948.866728][ T9316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 948.924593][ T9316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 949.074495][ T9405] input: syz1 as /devices/virtual/input/input21 [ 949.087652][ T9316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 949.192313][ T9316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 949.879398][ T9412] loop1: detected capacity change from 0 to 64 [ 950.340011][ T9316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.398594][ T9316] 8021q: adding VLAN 0 to HW filter on device team0 [ 950.466896][ T5184] Bluetooth: hci0: command tx timeout [ 950.473841][ T9417] 9pnet: p9_errstr2errno: server reported unknown error Ӯ֤jU7Ń 7 ےRV [ 950.543787][ T9316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 950.554588][ T9316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 950.643410][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.651173][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.677436][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.685337][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.684449][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1119'. [ 951.872170][ T5269] IPVS: starting estimator thread 0... [ 951.962846][ T9435] IPVS: using max 240 ests per chain, 12000 per kthread [ 952.346042][ T9316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.039525][ T9449] loop0: detected capacity change from 0 to 1024 [ 953.162161][ T9451] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 954.814866][ T9316] veth0_vlan: entered promiscuous mode [ 954.952023][ T9316] veth1_vlan: entered promiscuous mode [ 955.251753][ T9316] veth0_macvtap: entered promiscuous mode [ 955.319320][ T9316] veth1_macvtap: entered promiscuous mode [ 955.402287][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.413226][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.423791][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.434623][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.444840][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.455790][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.466089][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.476936][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.495861][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.506688][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.522724][ T9316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.545880][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.556716][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.566926][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.578141][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.592839][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.605395][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.615607][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.626477][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.636670][ T9316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.647479][ T9316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.663314][ T9316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.197265][ T9316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.206512][ T9316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.215793][ T9316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.229614][ T9316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.299720][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'. [ 958.054235][ T9484] loop0: detected capacity change from 0 to 256 [ 958.258547][ T9484] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 960.481022][ T9502] loop0: detected capacity change from 0 to 1024 [ 960.698105][ T9517] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 961.089073][ T9498] hfsplus: bad catalog entry type [ 961.437588][ T9521] loop2: detected capacity change from 0 to 1024 [ 962.009078][ T9521] syz.2.1152: attempt to access beyond end of device [ 962.009078][ T9521] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 962.325109][ T7811] hfsplus: b-tree write err: -5, ino 4 [ 962.538817][ T9531] batman_adv: batadv0: Adding interface: macvtap1 [ 962.549755][ T9531] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.577319][ T9531] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 962.701122][ T29] audit: type=1326 audit(1727413663.576:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 962.724309][ T29] audit: type=1326 audit(1727413663.576:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 962.889504][ T7807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.898078][ T7807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.917497][ T29] audit: type=1326 audit(1727413663.676:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 962.940421][ T29] audit: type=1326 audit(1727413663.676:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 962.966161][ T29] audit: type=1326 audit(1727413663.686:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 962.989176][ T29] audit: type=1326 audit(1727413663.686:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 963.011744][ T29] audit: type=1326 audit(1727413663.686:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 963.034202][ T29] audit: type=1326 audit(1727413663.686:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 963.061118][ T29] audit: type=1326 audit(1727413663.686:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 963.084214][ T29] audit: type=1326 audit(1727413663.686:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.3.1156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 963.157304][ T7807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.169308][ T7807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.833615][ T9544] loop1: detected capacity change from 0 to 256 [ 964.119918][ T9546] loop9: detected capacity change from 0 to 7 [ 964.163965][ T9546] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 964.169682][ T9546] loop9: partition table partially beyond EOD, truncated [ 964.177624][ T9546] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 964.536787][ T9554] syz.1.1164 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 965.513643][ T7807] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.583555][ T9561] loop1: detected capacity change from 0 to 2048 [ 965.693232][ T9561] NILFS (loop1): invalid segment: Sequence number mismatch [ 965.701018][ T9561] NILFS (loop1): trying rollback from an earlier position [ 965.713884][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1165'. [ 965.766614][ T7807] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.868141][ T9561] NILFS (loop1): recovery complete [ 965.957465][ T9564] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 966.120842][ T7807] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.345529][ T7807] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.615232][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 966.622250][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 966.717850][ T7807] bridge_slave_1: left allmulticast mode [ 966.724182][ T7807] bridge_slave_1: left promiscuous mode [ 966.730863][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.767521][ T7807] bridge_slave_0: left allmulticast mode [ 966.773920][ T7807] bridge_slave_0: left promiscuous mode [ 966.780543][ T7807] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.914829][ T7807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.027849][ T7807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.114123][ T7807] bond0 (unregistering): Released all slaves [ 968.380160][ T9574] loop3: detected capacity change from 0 to 1024 [ 968.601447][ T5196] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 968.625986][ T9574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 968.653520][ T5196] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 968.699632][ T5196] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 968.743833][ T5196] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 968.884341][ T5196] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 968.937359][ T5196] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 969.452193][ T7807] hsr_slave_0: left promiscuous mode [ 969.493293][ T7807] hsr_slave_1: left promiscuous mode [ 969.543678][ T7807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 969.551553][ T7807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.579325][ T9585] loop0: detected capacity change from 0 to 512 [ 969.603494][ T7807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 969.614910][ T7807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.624850][ T9585] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 969.716589][ T7807] veth1_macvtap: left promiscuous mode [ 969.722631][ T7807] veth0_macvtap: left promiscuous mode [ 969.728845][ T7807] veth1_vlan: left promiscuous mode [ 969.735999][ T7807] veth0_vlan: left promiscuous mode [ 969.904731][ T9585] EXT4-fs (loop0): 1 orphan inode deleted [ 969.910943][ T9585] EXT4-fs (loop0): 1 truncate cleaned up [ 969.923969][ T9585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 970.095176][ T9584] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 970.187188][ T9584] EXT4-fs (loop0): Remounting filesystem read-only [ 970.845398][ T9162] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.939851][ T7807] team0 (unregistering): Port device team_slave_1 removed [ 970.983006][ T9588] loop1: detected capacity change from 0 to 4096 [ 970.995618][ T5196] Bluetooth: hci0: command tx timeout [ 971.009809][ T9588] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 971.041021][ T7807] team0 (unregistering): Port device team_slave_0 removed [ 971.108514][ T9592] loop0: detected capacity change from 0 to 47 [ 971.791237][ T6401] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.510936][ T9578] chnl_net:caif_netlink_parms(): no params data found [ 973.064288][ T5196] Bluetooth: hci0: command tx timeout [ 973.127648][ T5184] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 973.153066][ T5184] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 973.165189][ T5184] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 973.201507][ T5269] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 973.211016][ T5184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 973.230152][ T5184] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 973.250676][ T5184] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 973.395889][ T5269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 973.410632][ T5269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 973.423056][ T5269] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 973.436448][ T5269] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 973.446394][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.671081][ T5269] usb 1-1: config 0 descriptor?? [ 973.679113][ T9599] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 974.198780][ T5269] plantronics 0003:047F:FFFF.0013: unknown main item tag 0xd [ 974.358419][ T5269] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 974.385575][ T9578] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.393661][ T9578] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.401833][ T9578] bridge_slave_0: entered allmulticast mode [ 974.411055][ T9578] bridge_slave_0: entered promiscuous mode [ 974.458765][ T5269] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 974.479841][ T9578] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.488339][ T9578] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.496379][ T9578] bridge_slave_1: entered allmulticast mode [ 974.505953][ T9578] bridge_slave_1: entered promiscuous mode [ 974.624150][ T6362] usb 1-1: USB disconnect, device number 11 [ 974.872763][ T9578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.915314][ T9624] ip6tnl1: entered allmulticast mode [ 974.981442][ T9578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.992406][ T9607] chnl_net:caif_netlink_parms(): no params data found [ 975.126980][ T9578] team0: Port device team_slave_0 added [ 975.169747][ T5196] Bluetooth: hci0: command tx timeout [ 975.190099][ T9578] team0: Port device team_slave_1 added [ 975.384110][ T5196] Bluetooth: hci2: command tx timeout [ 975.670739][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 975.678287][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.704804][ T9578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 975.793358][ T9631] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1190'. [ 975.825860][ T9631] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.889008][ T9631] bridge_slave_0 (unregistering): left allmulticast mode [ 975.897653][ T9631] bridge_slave_0 (unregistering): left promiscuous mode [ 975.905759][ T9631] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.938701][ T9630] loop0: detected capacity change from 0 to 1024 [ 976.029116][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.037673][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.069359][ T9578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.124051][ T9628] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1191'. [ 976.133921][ T9628] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1191'. [ 976.171993][ T9630] loop0: detected capacity change from 1024 to 0 [ 976.236273][ T3574] kworker/u8:15: attempt to access beyond end of device [ 976.236273][ T3574] loop0: rw=1, sector=206, nr_sectors = 8 limit=0 [ 976.250180][ T3574] hfsplus: b-tree write err: -5, ino 4 [ 976.264173][ T7807] kworker/u8:14: attempt to access beyond end of device [ 976.264173][ T7807] loop0: rw=2049, sector=206, nr_sectors = 8 limit=0 [ 976.329147][ T9630] syz.0.1192: attempt to access beyond end of device [ 976.329147][ T9630] loop0: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 976.528120][ T9578] hsr_slave_0: entered promiscuous mode [ 976.580047][ T9578] hsr_slave_1: entered promiscuous mode [ 976.887006][ T9162] syz-executor: attempt to access beyond end of device [ 976.887006][ T9162] loop0: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 976.907606][ T9162] syz-executor: attempt to access beyond end of device [ 976.907606][ T9162] loop0: rw=2049, sector=2, nr_sectors = 1 limit=0 [ 976.965193][ T9635] loop1: detected capacity change from 0 to 1024 [ 976.976483][ T9635] EXT4-fs: Ignoring removed nomblk_io_submit option [ 977.001039][ T9635] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 977.050978][ T9635] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c09c, mo2=0003] [ 977.069066][ T9607] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.077436][ T9607] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.078030][ T9635] System zones: 0-1, 3-36 [ 977.089482][ T9607] bridge_slave_0: entered allmulticast mode [ 977.101734][ T9607] bridge_slave_0: entered promiscuous mode [ 977.156939][ T9638] loop2: detected capacity change from 0 to 256 [ 977.185711][ T9635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 977.222900][ T9607] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.230709][ T9607] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.238938][ T9607] bridge_slave_1: entered allmulticast mode [ 977.243279][ T5196] Bluetooth: hci0: command tx timeout [ 977.248580][ T9607] bridge_slave_1: entered promiscuous mode [ 977.489626][ T5196] Bluetooth: hci2: command tx timeout [ 977.691376][ T6393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.711191][ T9607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.837079][ T9607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.065204][ T9641] IPv6: sit1: Disabled Multicast RS [ 978.324882][ T9607] team0: Port device team_slave_0 added [ 978.385391][ T9607] team0: Port device team_slave_1 added [ 978.678724][ T9607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.686245][ T9607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.713035][ T9607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.800352][ T9607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.807733][ T9607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.837751][ T9607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.332912][ T9607] hsr_slave_0: entered promiscuous mode [ 979.364532][ T9644] loop1: detected capacity change from 0 to 256 [ 979.370690][ T9607] hsr_slave_1: entered promiscuous mode [ 979.392799][ T9607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 979.400727][ T9607] Cannot create hsr debugfs directory [ 979.541031][ T9644] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 979.566585][ T5196] Bluetooth: hci2: command tx timeout [ 979.632547][ T9578] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 979.665528][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 979.665611][ T29] audit: type=1800 audit(1727413680.546:49): pid=9644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1199" name="file1" dev="loop1" ino=1048731 res=0 errno=0 [ 979.784996][ T9578] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 979.898439][ T9578] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 980.012499][ T9578] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 980.094629][ T5184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 980.106243][ T5184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 980.132601][ T5184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 980.330892][ T5184] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 980.400897][ T9607] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.406347][ T5184] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 980.421421][ T5184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 980.527128][ T9607] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.886959][ T9607] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.074263][ T9607] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.617585][ T9607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 981.630577][ T5196] Bluetooth: hci2: command tx timeout [ 981.776635][ T9607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 981.893705][ T9647] chnl_net:caif_netlink_parms(): no params data found [ 982.026482][ T9607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 982.094844][ T9607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 982.445432][ T9578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.509322][ T5196] Bluetooth: hci1: command tx timeout [ 982.654454][ T9669] loop1: detected capacity change from 0 to 512 [ 982.656343][ T9578] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.747529][ T3986] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.755513][ T3986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.994974][ T7807] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.002853][ T7807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.770739][ T9669] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 983.782627][ T9669] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 983.793310][ T9669] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.1206: Failed to acquire dquot type 1 [ 983.892660][ T9669] EXT4-fs (loop1): 1 truncate cleaned up [ 983.900660][ T9669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 983.914719][ T9669] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 983.996853][ T9647] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.004879][ T9647] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.013194][ T9647] bridge_slave_0: entered allmulticast mode [ 984.026139][ T9647] bridge_slave_0: entered promiscuous mode [ 984.055740][ T9647] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.063744][ T9647] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.072006][ T9647] bridge_slave_1: entered allmulticast mode [ 984.081814][ T9647] bridge_slave_1: entered promiscuous mode [ 984.111932][ T9678] overlayfs: failed to resolve './file1': -2 [ 984.277780][ T9607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 984.303147][ T9647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.437848][ T9647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.604221][ T6393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.635427][ T5196] Bluetooth: hci1: command tx timeout [ 984.700385][ T9607] 8021q: adding VLAN 0 to HW filter on device team0 [ 984.918155][ T9647] team0: Port device team_slave_0 added [ 984.958473][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.966317][ T7793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 985.077604][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.085454][ T7793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.113660][ T9647] team0: Port device team_slave_1 added [ 985.524514][ T9647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.531877][ T9647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.558571][ T9647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.579636][ T9647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.592793][ T9647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.621117][ T9647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.944625][ T9647] hsr_slave_0: entered promiscuous mode [ 985.974186][ T9647] hsr_slave_1: entered promiscuous mode [ 985.989775][ T9647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 986.002196][ T9647] Cannot create hsr debugfs directory [ 986.315345][ T9578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 986.672326][ T5196] Bluetooth: hci1: command tx timeout [ 987.422170][ T5243] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 987.599512][ T9647] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.604415][ T5243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.621997][ T5243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.634249][ T5243] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 987.646405][ T5243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.769589][ T5243] usb 2-1: config 0 descriptor?? [ 987.833885][ T9647] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.069826][ T9647] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.242953][ T9647] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.275799][ T5243] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 988.284263][ T5243] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 988.311502][ T5243] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0014/input/input23 [ 988.398612][ T5243] cm6533_jd 0003:0D8C:0022.0014: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 988.514014][ T9607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.545695][ T8923] usb 2-1: USB disconnect, device number 19 [ 988.774241][ T5196] Bluetooth: hci1: command tx timeout [ 988.831364][ T9647] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 988.910858][ T9647] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 989.022195][ T9647] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 989.133230][ T9647] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 989.324162][ T9607] veth0_vlan: entered promiscuous mode [ 989.443756][ T9578] veth0_vlan: entered promiscuous mode [ 989.537301][ T9607] veth1_vlan: entered promiscuous mode [ 989.595055][ T9578] veth1_vlan: entered promiscuous mode [ 989.700630][ T9708] loop2: detected capacity change from 0 to 2048 [ 990.035330][ T9607] veth0_macvtap: entered promiscuous mode [ 990.054114][ T9578] veth0_macvtap: entered promiscuous mode [ 990.081207][ T9607] veth1_macvtap: entered promiscuous mode [ 990.122494][ T9708] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 990.248345][ T9578] veth1_macvtap: entered promiscuous mode [ 990.392714][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.407752][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.418781][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.431435][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.442380][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.453185][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.463374][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.474207][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.484365][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.495370][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.516190][ T9607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 990.693456][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.704361][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.719428][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.730206][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.740557][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.751387][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.761856][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.772856][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.784239][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.795071][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.805286][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 990.819717][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.843682][ T9578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 990.943404][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 990.954471][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.964751][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 990.976055][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 990.988245][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.000202][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.035196][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.048183][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.058515][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.069450][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.086169][ T9607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.094617][ T9714] netlink: 'syz.1.1218': attribute type 4 has an invalid length. [ 991.103060][ T9714] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1218'. [ 991.187932][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.199082][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.209410][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.223948][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.234916][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.245842][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.256040][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.267003][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.277204][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.288059][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.298793][ T9578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.309661][ T9578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.330678][ T9578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.399913][ T9607] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.409193][ T9607] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.418581][ T9607] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.432673][ T9607] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.530952][ T9578] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.540380][ T9578] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.550014][ T9578] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.559278][ T9578] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.760178][ T9647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.913727][ T9719] loop2: detected capacity change from 0 to 64 [ 991.940975][ T9719] hfs: unable to change codepage [ 991.946430][ T9719] hfs: unable to parse mount options [ 992.008485][ T9647] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.137499][ T3986] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.145429][ T3986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.305738][ T3986] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.313726][ T3986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 992.325963][ T5243] psmouse serio4: Failed to reset mouse on : -5 [ 992.621436][ T9647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 992.899688][ T9729] loop1: detected capacity change from 0 to 16 [ 992.968037][ T9729] erofs: (device loop1): mounted with root inode @ nid 36. [ 993.086627][ T9729] overlayfs: failed to get redirect (-117) [ 993.907235][ T9740] loop1: detected capacity change from 0 to 256 [ 993.960279][ T9740] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 994.018037][ T9740] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 994.215350][ T9647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.770875][ T9647] veth0_vlan: entered promiscuous mode [ 994.902402][ T9647] veth1_vlan: entered promiscuous mode [ 995.444834][ T9647] veth0_macvtap: entered promiscuous mode [ 995.552560][ T9647] veth1_macvtap: entered promiscuous mode [ 995.795907][ T9647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.806835][ T9647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.817139][ T9647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.832382][ T9647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.842861][ T9647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.853733][ T9647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.863942][ T9647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.874709][ T9647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.884929][ T9647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.895789][ T9647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.906318][ T9647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.917139][ T9647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.930728][ T9647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.942346][ T9647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.961481][ T9647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.022122][ T5243] misc userio: Buffer overflowed, userio client isn't keeping up [ 996.372634][ T9647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.383536][ T9647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.393899][ T9647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.407366][ T9647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.417636][ T9647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.428577][ T9647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.438808][ T9647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.457564][ T9647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.469238][ T9647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.480086][ T9647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.490365][ T9647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.501389][ T9647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.511827][ T9647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.522758][ T9647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.539050][ T9647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 996.707013][ T9647] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.716319][ T9647] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.725650][ T9647] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.734971][ T9647] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.434525][ T5243] input: PS/2 Generic Mouse as /devices/serio4/input/input24 [ 997.853193][ T5243] psmouse serio4: Failed to enable mouse on [ 1000.423073][ T7848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.431198][ T7848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.511914][ T7793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.520144][ T7793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.662343][ T7807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.670458][ T7807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.968533][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.977972][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.780208][ T9805] loop1: detected capacity change from 0 to 1024 [ 1002.048720][ T7811] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.202978][ T7811] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.348420][ T3574] hfsplus: b-tree write err: -5, ino 4 [ 1002.398333][ T7811] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.583783][ T7811] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.834844][ T2619] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1003.019432][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.027923][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.158634][ T2619] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1003.170162][ T2619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.181834][ T2619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.192199][ T2619] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1003.267402][ T7811] bridge_slave_1: left allmulticast mode [ 1003.273747][ T7811] bridge_slave_1: left promiscuous mode [ 1003.280506][ T7811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.331191][ T7811] bridge_slave_0: left allmulticast mode [ 1003.337730][ T7811] bridge_slave_0: left promiscuous mode [ 1003.344633][ T7811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.384985][ T2619] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1003.395621][ T2619] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1003.410593][ T2619] usb 3-1: Manufacturer: syz [ 1003.431327][ T2619] usb 3-1: config 0 descriptor?? [ 1004.117075][ T2619] appleir 0003:05AC:8243.0015: unknown main item tag 0x0 [ 1004.140199][ T2619] appleir 0003:05AC:8243.0015: No inputs registered, leaving [ 1004.168564][ T2619] appleir 0003:05AC:8243.0015: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1004.234595][ T7811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1004.265526][ T7811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.287497][ T7811] bond0 (unregistering): Released all slaves [ 1004.340859][ T7848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.350447][ T7848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.822439][ T7811] hsr_slave_0: left promiscuous mode [ 1004.855777][ T7811] hsr_slave_1: left promiscuous mode [ 1004.875195][ T7811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1004.883220][ T7811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.899223][ T7811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1004.917899][ T7811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.958392][ T7811] veth1_macvtap: left promiscuous mode [ 1004.964499][ T7811] veth0_macvtap: left promiscuous mode [ 1004.970446][ T7811] veth1_vlan: left promiscuous mode [ 1004.976280][ T7811] veth0_vlan: left promiscuous mode [ 1005.650511][ T6362] usb 3-1: USB disconnect, device number 11 [ 1005.888167][ T7811] team0 (unregistering): Port device team_slave_1 removed [ 1005.975987][ T7811] team0 (unregistering): Port device team_slave_0 removed [ 1007.026221][ T29] audit: type=1326 audit(1727413707.816:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9825 comm="syz.1.1238" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x0 [ 1007.054408][ T5184] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1007.084371][ T5184] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1007.190330][ T9829] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1007.335477][ T5184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1007.356177][ T5184] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1007.368377][ T5184] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1007.378324][ T5184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1008.502663][ T9823] chnl_net:caif_netlink_parms(): no params data found [ 1009.314642][ T9853] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1009.739731][ T9823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.747645][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.765846][ T9823] bridge_slave_0: entered allmulticast mode [ 1009.775614][ T9823] bridge_slave_0: entered promiscuous mode [ 1009.781966][ T5196] Bluetooth: hci0: command tx timeout [ 1009.820159][ T9823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.834394][ T9823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.842509][ T9823] bridge_slave_1: entered allmulticast mode [ 1009.852556][ T9823] bridge_slave_1: entered promiscuous mode [ 1010.208504][ T9864] loop1: detected capacity change from 0 to 256 [ 1010.224802][ T9863] loop3: detected capacity change from 0 to 512 [ 1010.270937][ T9823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.325272][ T9863] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1010.325935][ T9823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.400290][ T9863] EXT4-fs (loop3): 1 truncate cleaned up [ 1010.408536][ T9863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1010.711200][ T9864] FAT-fs (loop1): Directory bread(block 64) failed [ 1010.718448][ T9864] FAT-fs (loop1): Directory bread(block 65) failed [ 1010.719055][ T9823] team0: Port device team_slave_0 added [ 1010.725616][ T9864] FAT-fs (loop1): Directory bread(block 66) failed [ 1010.725761][ T9864] FAT-fs (loop1): Directory bread(block 67) failed [ 1010.726038][ T9864] FAT-fs (loop1): Directory bread(block 68) failed [ 1010.726179][ T9864] FAT-fs (loop1): Directory bread(block 69) failed [ 1010.726466][ T9864] FAT-fs (loop1): Directory bread(block 70) failed [ 1010.764921][ T9823] team0: Port device team_slave_1 added [ 1010.768688][ T9864] FAT-fs (loop1): Directory bread(block 71) failed [ 1010.789066][ T9864] FAT-fs (loop1): Directory bread(block 72) failed [ 1010.798362][ T9864] FAT-fs (loop1): Directory bread(block 73) failed [ 1011.052509][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.059938][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.093239][ T9823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.196725][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.204355][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.231066][ T9823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.360442][ T9607] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.570642][ T9823] hsr_slave_0: entered promiscuous mode [ 1011.604666][ T9823] hsr_slave_1: entered promiscuous mode [ 1011.847403][ T7807] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.873964][ T5196] Bluetooth: hci0: command tx timeout [ 1011.895168][ T9879] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1012.202910][ T7807] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.427239][ T7807] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.609306][ T7807] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.058600][ T7807] bridge_slave_1: left allmulticast mode [ 1013.064849][ T7807] bridge_slave_1: left promiscuous mode [ 1013.071779][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.158927][ T7807] bridge_slave_0: left allmulticast mode [ 1013.165311][ T7807] bridge_slave_0: left promiscuous mode [ 1013.172307][ T7807] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.803128][ T7807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.863901][ T7807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.890644][ T7807] bond0 (unregistering): Released all slaves [ 1013.954849][ T5196] Bluetooth: hci0: command tx timeout [ 1014.132464][ T2619] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1014.372750][ T2619] usb 2-1: Using ep0 maxpacket: 16 [ 1014.387831][ T2619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1014.399519][ T2619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1014.409975][ T2619] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1014.419687][ T2619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.506282][ T2619] usb 2-1: config 0 descriptor?? [ 1014.690300][ T7807] hsr_slave_0: left promiscuous mode [ 1014.721805][ T7807] hsr_slave_1: left promiscuous mode [ 1014.753760][ T7807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1014.762110][ T7807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.817362][ T7807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1014.825453][ T7807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.843659][ T5184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1014.881460][ T5184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1014.891219][ T5184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1014.905475][ T5184] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1014.917183][ T5184] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1014.928073][ T5184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1014.990733][ T9884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.000254][ T7807] veth1_macvtap: left promiscuous mode [ 1015.006145][ T7807] veth0_macvtap: left promiscuous mode [ 1015.012207][ T7807] veth1_vlan: left promiscuous mode [ 1015.017833][ T7807] veth0_vlan: left promiscuous mode [ 1015.112635][ T9884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.440080][ T2619] hid (null): bogus close delimiter [ 1015.456141][ T2619] hid (null): invalid report_count 58028 [ 1015.462278][ T2619] hid (null): unknown global tag 0xd [ 1015.503172][ T9894] 9pnet: p9_errstr2errno: server reported unknown error x瞇F [ 1015.562217][ T2619] hid-generic 0003:0158:0100.0016: unknown main item tag 0x0 [ 1015.570254][ T2619] hid-generic 0003:0158:0100.0016: unknown main item tag 0x0 [ 1015.578574][ T2619] hid-generic 0003:0158:0100.0016: bogus close delimiter [ 1015.586275][ T2619] hid-generic 0003:0158:0100.0016: item 0 0 2 10 parsing failed [ 1015.669463][ T2619] hid-generic 0003:0158:0100.0016: probe with driver hid-generic failed with error -22 [ 1015.750029][ T2619] usb 2-1: USB disconnect, device number 20 [ 1016.044375][ T5184] Bluetooth: hci0: command tx timeout [ 1016.266263][ T7807] team0 (unregistering): Port device team_slave_1 removed [ 1016.363020][ T7807] team0 (unregistering): Port device team_slave_0 removed [ 1016.582142][ T2619] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1016.976868][ T2619] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.989522][ T2619] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1016.999587][ T2619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.030494][ T5184] Bluetooth: hci1: command tx timeout [ 1017.154359][ T2619] usb 4-1: config 0 descriptor?? [ 1017.380990][ T9716] usb 4-1: USB disconnect, device number 19 [ 1017.677382][ T9823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1017.853707][ T9823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1017.973345][ T9823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1018.044084][ T9823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1018.393136][ T9891] chnl_net:caif_netlink_parms(): no params data found [ 1019.081776][ T5184] Bluetooth: hci1: command tx timeout [ 1019.198100][ T9823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.259754][ T9823] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.294518][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.302452][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.447376][ T9823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1019.459292][ T9823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1019.515806][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.523730][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.975947][ T5269] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1020.547268][ T9891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.555294][ T9891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.563475][ T9891] bridge_slave_0: entered allmulticast mode [ 1020.573427][ T9891] bridge_slave_0: entered promiscuous mode [ 1020.590414][ T9891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.598443][ T9891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.614354][ T9891] bridge_slave_1: entered allmulticast mode [ 1020.624229][ T9891] bridge_slave_1: entered promiscuous mode [ 1020.692645][ T29] audit: type=1326 audit(1727413721.556:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.1.1274" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 1020.722025][ T29] audit: type=1326 audit(1727413721.556:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.1.1274" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 1020.744875][ T29] audit: type=1326 audit(1727413721.556:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.1.1274" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 1020.768587][ T29] audit: type=1326 audit(1727413721.556:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.1.1274" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 1020.790629][ C1] vkms_vblank_simulate: vblank timer overrun [ 1020.797492][ T29] audit: type=1326 audit(1727413721.556:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.1.1274" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 1020.819589][ C1] vkms_vblank_simulate: vblank timer overrun [ 1020.829618][ T29] audit: type=1326 audit(1727413721.556:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.1.1274" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 1020.853347][ T29] audit: type=1326 audit(1727413721.556:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.1.1274" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 1020.875776][ T29] audit: type=1326 audit(1727413721.556:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.1.1274" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 1020.898379][ T29] audit: type=1326 audit(1727413721.556:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9929 comm="syz.1.1274" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7fc00000 [ 1020.920470][ C1] vkms_vblank_simulate: vblank timer overrun [ 1021.011480][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.026669][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.037752][ T5269] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1021.051235][ T5269] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1021.060877][ T5269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.090725][ T5269] usb 3-1: config 0 descriptor?? [ 1021.196064][ T5184] Bluetooth: hci1: command tx timeout [ 1021.285310][ T9891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.334995][ T9891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.674464][ T9891] team0: Port device team_slave_0 added [ 1021.706086][ T5269] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 1021.709928][ T9939] loop1: detected capacity change from 0 to 128 [ 1021.713888][ T5269] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 1021.745316][ T5269] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 1021.762608][ T5269] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1021.844736][ T9891] team0: Port device team_slave_1 added [ 1022.092926][ T9891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.100282][ T9891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.126620][ C1] vkms_vblank_simulate: vblank timer overrun [ 1022.136227][ T9891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.261413][ T9823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1022.308672][ T9891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.317103][ T9891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.343492][ C1] vkms_vblank_simulate: vblank timer overrun [ 1022.355833][ T9891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.925504][ T9891] hsr_slave_0: entered promiscuous mode [ 1022.984364][ T9891] hsr_slave_1: entered promiscuous mode [ 1023.047434][ T9891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1023.055803][ T9891] Cannot create hsr debugfs directory [ 1023.304506][ T5184] Bluetooth: hci1: command tx timeout [ 1026.478591][ T9891] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1026.633371][ T9891] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1026.824198][ T9891] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1026.926338][ T9823] veth0_vlan: entered promiscuous mode [ 1027.023978][ T9891] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1027.188224][ T9823] veth1_vlan: entered promiscuous mode [ 1027.578084][ T9823] veth0_macvtap: entered promiscuous mode [ 1027.608435][ T9967] loop3: detected capacity change from 0 to 256 [ 1027.652431][ T9823] veth1_macvtap: entered promiscuous mode [ 1027.897099][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.908051][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.918325][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.929238][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.939392][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.952094][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.963252][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.974147][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.984135][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1027.984429][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 1028.003701][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.014590][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.027078][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.038374][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.054860][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1028.205412][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.216412][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.226867][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.237701][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.247992][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.258917][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.273346][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.284759][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.299528][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.311329][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.321663][ T9823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1028.333276][ T9823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.352983][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1028.395820][ T5269] usb 3-1: USB disconnect, device number 12 [ 1028.660381][ T9823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.669805][ T9823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.679429][ T9823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.688672][ T9823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.046031][ T9891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.132665][ T9975] tipc: Started in network mode [ 1029.137919][ T9975] tipc: Node identity ac1414aa, cluster identity 4711 [ 1029.151922][ T9975] tipc: Enabled bearer , priority 10 [ 1029.174259][ T9891] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.271107][ T7833] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.279003][ T7833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.300303][ T7833] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.308202][ T7833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.529749][ T9891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1030.271902][ T5269] tipc: Node number set to 2886997162 [ 1030.572566][ T9891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.375049][ T9995] loop1: detected capacity change from 0 to 2048 [ 1031.386118][ T9891] veth0_vlan: entered promiscuous mode [ 1031.418178][ T9995] hpfs: filesystem error: invalid number of hotfixes: 0, used: 1; already mounted read-only [ 1031.439669][ T9995] hpfs: filesystem error: improperly stopped [ 1031.446988][ T9995] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1031.455231][ T9995] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 1031.528254][ T9891] veth1_vlan: entered promiscuous mode [ 1031.882869][ T9995] loop1: detected capacity change from 0 to 256 [ 1032.016113][ T9891] veth0_macvtap: entered promiscuous mode [ 1032.062399][ T9995] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 1032.109378][ T9891] veth1_macvtap: entered promiscuous mode [ 1032.308241][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.319265][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.329647][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.340491][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.352915][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.365539][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.375836][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.392439][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.407385][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.418317][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.433990][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.449046][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.459480][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.470306][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.635692][ T9891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.664376][T10003] loop2: detected capacity change from 0 to 256 [ 1032.687357][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.704014][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.716429][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.727284][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.737564][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.748436][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.758749][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.769531][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.779853][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.790825][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.808527][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.819439][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.829723][ T9891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.840649][ T9891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.857386][ T9891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1033.016297][T10005] netlink: 'syz.3.1295': attribute type 11 has an invalid length. [ 1033.027457][ T9891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.038828][ T9891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.049478][ T9891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.059790][ T9891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.942326][T10015] loop3: detected capacity change from 0 to 8 [ 1035.058489][T10030] ptrace attach of "./syz-executor exec"[6393] was attempted by "  !kR\x0c>nS;A\x1b]0\x09\x1b\x0d)B4hL$*g~R xpR<\x1b\x1b%8\x0ac6;x\x0da\x09/X\x07\x22r'gW¨t*\x0c1\x0d;`3Jbo0Lw8Ynp|e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 u'\x1b(c)iBx}n$D[13OÛ:.o\x0d8D IAcp\x5cUC*T#nvbIkݻBk/AnV\x1b1bB[k~}$Qd[\x0cavi1N/pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`/V~eW\x22R$IFlc+5p$?8ea\x0c !S /ugypA`B\x0cVdy!Mۈ2Э{F5_`Πw [ 1035.537654][T10036] input: syz1 as /devices/virtual/input/input25 [ 1035.629134][ C1] vkms_vblank_simulate: vblank timer overrun [ 1035.784566][ T3986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.792726][ T3986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1036.073944][ T7848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.082334][ T7848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1036.618931][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1305'. [ 1037.262177][ T5238] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1037.309625][ T3986] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.442020][ T5238] usb 4-1: Using ep0 maxpacket: 32 [ 1037.455503][ T5238] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1037.464763][ T5238] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1037.474011][ T5238] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1037.483423][ T5238] usb 4-1: config 1 has no interface number 0 [ 1037.487495][ T3986] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.489706][ T5238] usb 4-1: config 1 interface 1 altsetting 0 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 1037.489900][ T5238] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x87 has invalid maxpacket 32912, setting to 1024 [ 1037.532043][ T5238] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1037.546934][ T5238] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1037.557287][ T5238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.760538][T10055] 9pnet: p9_errstr2errno: server reported unknown error słm6' Ҳ* [ 1037.979790][ T3986] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.017844][ T5238] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1038.150488][ T3986] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.226122][ T5238] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 1038.235486][ T5238] snd_usb_pod 4-1:1.1: invalid control EP [ 1038.241732][ T5238] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 1038.248752][ T5238] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1038.258986][ T5238] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1038.672881][ T9716] usb 4-1: USB disconnect, device number 20 [ 1038.822560][ T3986] bridge_slave_1: left allmulticast mode [ 1038.828622][ T3986] bridge_slave_1: left promiscuous mode [ 1038.843120][ T3986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.900876][ T3986] bridge_slave_0: left allmulticast mode [ 1038.907168][ T3986] bridge_slave_0: left promiscuous mode [ 1038.914120][ T3986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.556652][ T3986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.585620][ T3986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.604676][ T3986] bond0 (unregistering): Released all slaves [ 1039.869122][ T7793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.877371][ T7793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.937893][ T7793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.947118][ T7793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.524327][ T3986] hsr_slave_0: left promiscuous mode [ 1040.542343][ T3986] hsr_slave_1: left promiscuous mode [ 1040.586974][ T3986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1040.595402][ T3986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.615244][ T3986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.623451][ T3986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.672923][ T3986] veth1_macvtap: left promiscuous mode [ 1040.683287][ T3986] veth0_macvtap: left promiscuous mode [ 1040.689294][ T3986] veth1_vlan: left promiscuous mode [ 1040.695103][ T3986] veth0_vlan: left promiscuous mode [ 1041.731449][ T3986] team0 (unregistering): Port device team_slave_1 removed [ 1041.857735][ T3986] team0 (unregistering): Port device team_slave_0 removed [ 1042.835674][ T7848] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.043516][ T7848] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.060486][ T5196] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1043.074959][ T5196] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1043.096370][ T5196] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1043.140615][ T5196] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1043.160811][ T5196] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1043.175072][ T5196] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1043.218000][ T7848] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.351339][ T7848] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.992456][ T7848] bridge_slave_1: left allmulticast mode [ 1043.998407][ T7848] bridge_slave_1: left promiscuous mode [ 1044.005306][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.036346][ T5184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1044.053210][ T5184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1044.071923][ T5184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1044.123434][ T7848] bridge_slave_0: left allmulticast mode [ 1044.129393][ T7848] bridge_slave_0: left promiscuous mode [ 1044.137186][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.169535][ T5184] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1044.182102][ T5184] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1044.193690][ T5184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1044.318584][T10074] loop3: detected capacity change from 0 to 1024 [ 1044.395485][T10074] EXT4-fs: Ignoring removed orlov option [ 1044.401488][T10074] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1044.479023][T10074] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 1044.506122][T10074] System zones: 0-1, 3-36 [ 1044.560998][T10074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1044.723570][ T7848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1044.729108][T10083] loop2: detected capacity change from 0 to 256 [ 1044.743543][T10083] exfat: Deprecated parameter 'utf8' [ 1044.749342][T10083] exfat: Deprecated parameter 'namecase' [ 1044.756164][T10083] exfat: Deprecated parameter 'namecase' [ 1044.762288][T10083] exfat: Deprecated parameter 'utf8' [ 1044.843954][ T7848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1044.844247][T10083] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1044.968456][ T2619] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1044.998639][ T7848] bond0 (unregistering): Released all slaves [ 1045.063392][ T9607] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.307701][ T5184] Bluetooth: hci0: command tx timeout [ 1045.320975][ T2619] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1045.331544][ T2619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.359227][ T2619] usb 2-1: config 0 descriptor?? [ 1045.627815][T10079] ===================================================== [ 1045.635282][T10079] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xbc/0x110 [ 1045.642898][T10079] _copy_to_user+0xbc/0x110 [ 1045.647634][T10079] raw_ioctl+0x3d28/0x5440 [ 1045.652823][T10079] __se_compat_sys_ioctl+0x785/0x1080 [ 1045.658526][T10079] __ia32_compat_sys_ioctl+0x93/0xe0 [ 1045.664270][T10079] ia32_sys_call+0x32a2/0x40d0 [ 1045.669321][T10079] __do_fast_syscall_32+0xb0/0x110 [ 1045.675047][T10079] do_fast_syscall_32+0x38/0x80 [ 1045.680110][T10079] do_SYSENTER_32+0x1f/0x30 [ 1045.684989][T10079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1045.691755][T10079] [ 1045.698990][T10079] Uninit was created at: [ 1045.704713][T10079] __kmalloc_noprof+0x661/0xf30 [ 1045.709824][T10079] raw_ioctl+0x3bc5/0x5440 [ 1045.714618][T10079] __se_compat_sys_ioctl+0x785/0x1080 [ 1045.720233][T10079] __ia32_compat_sys_ioctl+0x93/0xe0 [ 1045.725930][T10079] ia32_sys_call+0x32a2/0x40d0 [ 1045.731008][T10079] __do_fast_syscall_32+0xb0/0x110 [ 1045.737187][T10079] do_fast_syscall_32+0x38/0x80 [ 1045.743034][T10079] do_SYSENTER_32+0x1f/0x30 [ 1045.747848][T10079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1045.755324][T10079] [ 1045.757782][T10079] Byte 0 of 1 is uninitialized [ 1045.764185][T10079] Memory access of size 1 starts at ffff888046d26530 [ 1045.771030][T10079] Data copied to user address 00000000f5754550 [ 1045.778167][T10079] [ 1045.780636][T10079] CPU: 1 UID: 0 PID: 10079 Comm: syz.1.1313 Not tainted 6.11.0-syzkaller-10729-g13882369ceb9 #0 [ 1045.792431][T10079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1045.807848][T10079] ===================================================== [ 1045.816638][T10079] Disabling lock debugging due to kernel taint [ 1045.823628][T10079] Kernel panic - not syncing: kmsan.panic set ... [ 1045.830224][T10079] CPU: 1 UID: 0 PID: 10079 Comm: syz.1.1313 Tainted: G B 6.11.0-syzkaller-10729-g13882369ceb9 #0 [ 1045.842478][T10079] Tainted: [B]=BAD_PAGE [ 1045.846784][T10079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1045.857030][T10079] Call Trace: [ 1045.860464][T10079] [ 1045.863541][T10079] dump_stack_lvl+0x216/0x2d0 [ 1045.868442][T10079] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1045.874570][T10079] dump_stack+0x1e/0x30 [ 1045.878925][T10079] panic+0x4e2/0xcf0 [ 1045.883089][T10079] ? kmsan_get_metadata+0x61/0x1c0 [ 1045.888510][T10079] kmsan_report+0x2c7/0x2d0 [ 1045.893329][T10079] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1045.899435][T10079] ? kmsan_internal_check_memory+0x48c/0x560 [ 1045.905688][T10079] ? kmsan_copy_to_user+0xd5/0xf0 [ 1045.910991][T10079] ? _copy_to_user+0xbc/0x110 [ 1045.915920][T10079] ? raw_ioctl+0x3d28/0x5440 [ 1045.920768][T10079] ? __se_compat_sys_ioctl+0x785/0x1080 [ 1045.926655][T10079] ? __ia32_compat_sys_ioctl+0x93/0xe0 [ 1045.932369][T10079] ? ia32_sys_call+0x32a2/0x40d0 [ 1045.937575][T10079] ? __do_fast_syscall_32+0xb0/0x110 [ 1045.943095][T10079] ? do_fast_syscall_32+0x38/0x80 [ 1045.948348][T10079] ? do_SYSENTER_32+0x1f/0x30 [ 1045.953242][T10079] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1045.960052][T10079] ? kmsan_get_metadata+0x13e/0x1c0 [ 1045.965550][T10079] ? kmsan_get_metadata+0x13e/0x1c0 [ 1045.971050][T10079] ? kmsan_get_metadata+0x13e/0x1c0 [ 1045.976523][T10079] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1045.982629][T10079] ? _raw_spin_lock_irqsave+0x35/0xc0 [ 1045.988266][T10079] ? filter_irq_stacks+0x60/0x1a0 [ 1045.993578][T10079] ? kmsan_get_metadata+0x13e/0x1c0 [ 1045.999095][T10079] ? kmsan_get_metadata+0x13e/0x1c0 [ 1046.004567][T10079] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1046.010667][T10079] kmsan_internal_check_memory+0x48c/0x560 [ 1046.016785][T10079] kmsan_copy_to_user+0xd5/0xf0 [ 1046.021903][T10079] ? should_fail_usercopy+0x2e/0x40 [ 1046.027360][T10079] _copy_to_user+0xbc/0x110 [ 1046.032112][T10079] raw_ioctl+0x3d28/0x5440 [ 1046.036804][T10079] ? kmsan_get_metadata+0x13e/0x1c0 [ 1046.042303][T10079] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1046.048416][T10079] ? do_vfs_ioctl+0x14fc/0x3e80 [ 1046.053563][T10079] ? kmsan_get_metadata+0x60/0x1c0 [ 1046.058968][T10079] ? __pfx_raw_ioctl+0x10/0x10 [ 1046.064007][T10079] __se_compat_sys_ioctl+0x785/0x1080 [ 1046.069641][T10079] ? kmsan_get_metadata+0x13e/0x1c0 [ 1046.075137][T10079] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1046.081744][T10079] ? kmsan_get_metadata+0x13e/0x1c0 [ 1046.087248][T10079] __ia32_compat_sys_ioctl+0x93/0xe0 [ 1046.092821][T10079] ia32_sys_call+0x32a2/0x40d0 [ 1046.097912][T10079] __do_fast_syscall_32+0xb0/0x110 [ 1046.103272][T10079] do_fast_syscall_32+0x38/0x80 [ 1046.108336][T10079] do_SYSENTER_32+0x1f/0x30 [ 1046.113051][T10079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1046.119674][T10079] RIP: 0023:0xf7fd5579 [ 1046.123930][T10079] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1046.143813][T10079] RSP: 002b:00000000f5754504 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1046.152468][T10079] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0085504 [ 1046.160636][T10079] RDX: 00000000f5754548 RSI: 00000000f745bff4 RDI: 0000000000000001 [ 1046.168801][T10079] RBP: 00000000f745bff4 R08: 0000000000000000 R09: 0000000000000000 [ 1046.176962][T10079] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1046.185122][T10079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1046.193299][T10079] [ 1046.196787][T10079] Kernel Offset: disabled [ 1046.201196][T10079] Rebooting in 86400 seconds..