last executing test programs: 1m5.092664823s ago: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) 4.79533509s ago: executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="1c00238006000100df"], 0x38}}, 0x0) 4.79289219s ago: executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000000140)="6382", 0x5dc, 0x0, 0x0, 0x0) 4.778615702s ago: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0) 4.777440411s ago: executing program 1: open(&(0x7f00000001c0)='./bus\x00', 0x64342, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x1}, 0x1c}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000180), 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) 4.777276123s ago: executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setresuid(0xee01, 0xee01, 0x0) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 4.768519347s ago: executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) 4.727442312s ago: executing program 0: unshare(0x22020400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000002c0)=0x4, 0x4) 4.34405319s ago: executing program 2: socket$inet6(0xa, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='pstore\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 4.303521794s ago: executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000140)) socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000980)='8', 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 4.288632147s ago: executing program 1: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) pipe(&(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) getresuid(&(0x7f00000003c0)=0x0, &(0x7f0000000500), &(0x7f0000000380)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000700)={{{@in=@broadcast, @in6=@private0, 0x4e24, 0x1cf, 0x4e21, 0x7, 0xa, 0x20, 0x0, 0x2c, 0x0, r5}, {0x6, 0x7, 0x8, 0x6, 0x1, 0xffffffffffffffff, 0x4, 0x2}, {0x1, 0x8, 0x1f, 0x800}, 0xfffffffa, 0x6e6bbd, 0x2, 0x0, 0x4, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4d6, 0x33}, 0x0, @in=@empty, 0x0, 0x2, 0x1, 0x12, 0x9, 0x9, 0xa87e}}, 0xe8) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000340)={0xa}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4], 0x15) 4.154229129s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)={0x3c, r2, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x4}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}]}, 0x3c}}, 0x0) 3.732273774s ago: executing program 1: syz_emit_ethernet(0xb6, &(0x7f0000000200)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x80, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x14, "000000000400000126000400"}, {0x18, 0x1, "fe906d17efe3"}, {0x18, 0x1, "45976e75e433"}]}}}}}}, 0x0) 3.55811308s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x8, {0x8, 0x0, "47f882f4d105"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.091796822s ago: executing program 2: epoll_create1(0x0) ftruncate(0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x6256, 0x0, 0x0, 0x0, 0x0) 3.041103269s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=@ipv4_delroute={0x24, 0x19, 0x105, 0x0, 0x0, {0x2, 0x20, 0x0, 0x8, 0xff}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x18}}]}, 0x24}}, 0x0) 3.03803177s ago: executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x5a, 0x3788ddd56ac63d1f, 0x0, 0x0, {}, [@nested={0x4}]}, 0x18}}, 0x0) connect$inet(r1, &(0x7f0000001280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="84436b00ffffffff950000000000000018628e65b4bad0a56e6a000000000000bddfef327f4318bae9e5fb4c79305f256a6e311ad776254d7a3d16ae9125bc131c4d239d9311ec448b66135fb6f8c82ec4bf68e74dfeb22e2577d0f1773570b1e53839623c04520fefddbffc1442724cf75610195d8af4dc2fc2db77a38ce33db34c4e6fd7d3898b55376aaeb558c4f381eab91dac6d5acd8c281366"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000000c0)={0x1, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000140)=[{0x3, 0x2, 0xc, 0x2}, {0x2, 0x4, 0x5, 0x9}, {}, {0x0, 0x5, 0xa, 0x5}], 0x10, 0x3}, 0x90) connect$inet(r1, &(0x7f00000028c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0xba01}, 0x0) 2.364738769s ago: executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x40, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "cabee339084eeef16f162471f4"}]}]}, 0x40}}, 0x0) 2.1145807s ago: executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000280)=0x21004, 0x4) 1.899564104s ago: executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) 1.74577444s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018000010"], 0x4c}}, 0x0) 1.595697139s ago: executing program 2: unshare(0x22020400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000002c0)=0x4, 0x4) 1.20369102s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r2, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 973.643481ms ago: executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000140)) socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000980)='8', 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 970.214325ms ago: executing program 1: socket$inet6(0xa, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='pstore\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 789.333513ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)={0x3c, r2, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x4}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}]}, 0x3c}}, 0x0) 703.156004ms ago: executing program 4: syz_emit_ethernet(0xb6, &(0x7f0000000200)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x80, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x14, "000000000400000126000400"}, {0x18, 0x1, "fe906d17efe3"}, {0x18, 0x1, "45976e75e433"}]}}}}}}, 0x0) 667.145026ms ago: executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) 306.509785ms ago: executing program 2: epoll_create1(0x0) ftruncate(0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x6256, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4: io_uring_setup(0x79bf, &(0x7f0000000180)) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000007090400001202060000052406000005240020000d240f01000000000000000000090582020002"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x810, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESDEC, @ANYRES64], 0x1, 0xa1c, &(0x7f0000000d00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): 2(bridge_slave_1) entered blocking state [ 558.694630][ T8325] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.702379][ T8325] bridge_slave_1: entered allmulticast mode [ 558.711329][ T8325] bridge_slave_1: entered promiscuous mode [ 558.983809][ T8325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.994824][ T5084] Bluetooth: hci2: command tx timeout [ 559.043044][ T8325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.113298][ T8382] loop0: detected capacity change from 0 to 1024 [ 559.169499][ T8382] hfsplus: unable to parse mount options [ 559.219980][ T8325] team0: Port device team_slave_0 added [ 559.248807][ T8220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.288427][ T8325] team0: Port device team_slave_1 added [ 559.510152][ T8387] loop3: detected capacity change from 0 to 64 [ 559.521447][ T8220] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.532703][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.539877][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.566370][ T8325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.636798][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.644601][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.739248][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.747047][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.773231][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.782711][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.812109][ T8325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.536127][ T8325] hsr_slave_0: entered promiscuous mode [ 560.642019][ T8325] hsr_slave_1: entered promiscuous mode [ 560.695328][ T8325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.706783][ T8325] Cannot create hsr debugfs directory [ 561.063492][ T5084] Bluetooth: hci2: command tx timeout [ 561.404030][ T8405] loop4: detected capacity change from 0 to 1024 [ 561.837085][ T8408] loop0: detected capacity change from 0 to 512 [ 561.902208][ T8408] EXT4-fs: Ignoring removed nobh option [ 561.990724][ T8408] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.004035][ T8408] ext4 filesystem being mounted at /root/syzkaller-testdir554878087/syzkaller.76utsD/51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.090909][ T8408] EXT4-fs error (device loop0): ext4_generic_delete_entry:2676: inode #2: block 3: comm syz-executor.0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 562.119377][ T8408] EXT4-fs (loop0): Remounting filesystem read-only [ 562.211789][ T8220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.245846][ T8413] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.4'. [ 562.357188][ T7261] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 562.418392][ T8325] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 562.504882][ T8325] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 562.579142][ T8325] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 562.654182][ T8220] veth0_vlan: entered promiscuous mode [ 562.672055][ T8325] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 562.797992][ T8220] veth1_vlan: entered promiscuous mode [ 562.843260][ T8417] loop0: detected capacity change from 0 to 256 [ 563.120311][ T8220] veth0_macvtap: entered promiscuous mode [ 563.502475][ T8220] veth1_macvtap: entered promiscuous mode [ 563.668863][ T8422] loop0: detected capacity change from 0 to 64 [ 563.705854][ T8422] hfs: gid requires an argument [ 563.711326][ T8422] hfs: unable to parse mount options [ 563.748065][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.759651][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.769795][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.782750][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.793605][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.804382][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.819138][ T8220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.866980][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.880818][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.891593][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.902817][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.912967][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.923732][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.938614][ T8220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.629170][ T8220] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.638523][ T8220] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.647766][ T8220] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.656919][ T8220] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.856299][ T8325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.132049][ T8325] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.242092][ T6649] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.249790][ T6649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.425464][ T6649] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.433292][ T6649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.984483][ T8445] loop3: detected capacity change from 0 to 512 [ 567.030950][ T8445] EXT4-fs: Ignoring removed nobh option [ 567.770988][ T8456] loop3: detected capacity change from 0 to 256 [ 567.856131][ T8458] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 567.954565][ T8325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.504094][ T8325] veth0_vlan: entered promiscuous mode [ 568.542248][ T8325] veth1_vlan: entered promiscuous mode [ 568.632965][ T8467] loop3: detected capacity change from 0 to 256 [ 568.681233][ T8467] exfat: Unknown parameter 'iochrset' [ 568.809723][ T8325] veth0_macvtap: entered promiscuous mode [ 568.874525][ T8325] veth1_macvtap: entered promiscuous mode [ 569.028822][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.039631][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.049796][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.061596][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.072257][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.083121][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.093288][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.107058][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.123103][ T8325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.339164][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.350925][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.363680][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.375267][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.388332][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.400982][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.414150][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.425679][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.440531][ T8325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.493609][ T8325] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.502905][ T8325] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.515370][ T8325] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.525365][ T8325] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.527278][ T8489] loop0: detected capacity change from 0 to 512 [ 570.594269][ T8489] EXT4-fs: Ignoring removed nobh option [ 570.691754][ T8489] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.706550][ T8489] ext4 filesystem being mounted at /root/syzkaller-testdir554878087/syzkaller.76utsD/60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.954580][ T8489] EXT4-fs error (device loop0): ext4_generic_delete_entry:2676: inode #2: block 3: comm syz-executor.0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 571.051124][ T8489] EXT4-fs (loop0): Remounting filesystem read-only [ 571.331856][ T7261] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 572.354452][ T3720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.362652][ T3720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.410165][ T8514] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 572.429411][ T5130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.438019][ T5130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.387064][ T8534] loop0: detected capacity change from 0 to 512 [ 573.457883][ T8534] EXT4-fs: Ignoring removed nobh option [ 573.653271][ T8534] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.666770][ T8534] ext4 filesystem being mounted at /root/syzkaller-testdir554878087/syzkaller.76utsD/64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.833338][ T8534] EXT4-fs error (device loop0): ext4_generic_delete_entry:2676: inode #2: block 3: comm syz-executor.0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 573.843635][ T8533] loop2: detected capacity change from 0 to 4096 [ 573.890917][ T8534] EXT4-fs (loop0): Remounting filesystem read-only [ 574.115911][ T7261] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 574.402733][ T8551] loop4: detected capacity change from 0 to 64 [ 574.921225][ T8562] loop0: detected capacity change from 0 to 16 [ 574.958520][ T8562] erofs: (device loop0): mounted with root inode @ nid 36. [ 574.976005][ T8564] loop3: detected capacity change from 0 to 64 [ 574.989137][ T8562] syz-executor.0: attempt to access beyond end of device [ 574.989137][ T8562] loop0: rw=0, sector=1049272, nr_sectors = 32 limit=16 [ 575.004354][ T8562] syz-executor.0: attempt to access beyond end of device [ 575.004354][ T8562] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 575.018223][ T8562] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 16 of nid 36 [ 575.027257][ T8562] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 16 of nid 36 [ 575.159569][ T8562] syz-executor.0: attempt to access beyond end of device [ 575.159569][ T8562] loop0: rw=0, sector=1049272, nr_sectors = 32 limit=16 [ 575.174147][ T8562] syz-executor.0: attempt to access beyond end of device [ 575.174147][ T8562] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 575.189083][ T8562] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 16 of nid 36 [ 575.198735][ T8562] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 16 of nid 36 [ 575.241604][ T3720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.252994][ T3720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.480846][ T5140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.488905][ T5140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.661189][ T8569] loop2: detected capacity change from 0 to 1764 [ 575.838066][ T8574] loop0: detected capacity change from 0 to 512 [ 575.912388][ T8574] EXT4-fs: Ignoring removed nobh option [ 576.094698][ T8574] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.108413][ T8574] ext4 filesystem being mounted at /root/syzkaller-testdir554878087/syzkaller.76utsD/67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.154285][ T8574] EXT4-fs error (device loop0): ext4_generic_delete_entry:2676: inode #2: block 3: comm syz-executor.0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 576.222611][ T8574] EXT4-fs (loop0): Remounting filesystem read-only [ 576.309335][ T7261] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 576.630075][ T8589] loop3: detected capacity change from 0 to 64 [ 576.942470][ T8596] syz-executor.1 (8596): /proc/8595/oom_adj is deprecated, please use /proc/8595/oom_score_adj instead. [ 577.110725][ T8602] loop4: detected capacity change from 0 to 16 [ 577.140006][ T8602] erofs: (device loop4): mounted with root inode @ nid 36. [ 577.210821][ T8602] syz-executor.4: attempt to access beyond end of device [ 577.210821][ T8602] loop4: rw=0, sector=1049272, nr_sectors = 32 limit=16 [ 577.225672][ T8602] syz-executor.4: attempt to access beyond end of device [ 577.225672][ T8602] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 577.241968][ T8602] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 16 of nid 36 [ 577.251050][ T8602] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 16 of nid 36 [ 577.309674][ T8602] syz-executor.4: attempt to access beyond end of device [ 577.309674][ T8602] loop4: rw=0, sector=1049272, nr_sectors = 32 limit=16 [ 577.324504][ T8602] syz-executor.4: attempt to access beyond end of device [ 577.324504][ T8602] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 577.338854][ T8602] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 16 of nid 36 [ 577.348034][ T8602] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 16 of nid 36 [ 577.708241][ T8611] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 577.855868][ T8613] loop0: detected capacity change from 0 to 1764 [ 577.897548][ T8618] loop4: detected capacity change from 0 to 47 [ 578.007426][ T29] audit: type=1326 audit(1718175172.052:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa21ac7cea9 code=0x0 [ 578.147518][ T8622] loop3: detected capacity change from 0 to 16 [ 578.176372][ T8622] erofs: (device loop3): mounted with root inode @ nid 36. [ 578.382632][ T8626] loop4: detected capacity change from 0 to 64 [ 579.116050][ T8640] loop0: detected capacity change from 0 to 16 [ 579.181535][ T8640] erofs: (device loop0): mounted with root inode @ nid 36. [ 579.222187][ T8640] syz-executor.0: attempt to access beyond end of device [ 579.222187][ T8640] loop0: rw=0, sector=1049272, nr_sectors = 32 limit=16 [ 579.241654][ T8640] syz-executor.0: attempt to access beyond end of device [ 579.241654][ T8640] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 579.256818][ T8640] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 16 of nid 36 [ 579.266116][ T8640] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 16 of nid 36 [ 579.298113][ T8647] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 16 of nid 36 [ 579.311170][ T8647] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 16 of nid 36 [ 579.386594][ T8646] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 579.554154][ T4434] Bluetooth: hci3: command 0x0406 tx timeout [ 579.725326][ T8652] loop4: detected capacity change from 0 to 16 [ 579.801778][ T8655] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 579.815613][ T8652] erofs: (device loop4): mounted with root inode @ nid 36. [ 579.846534][ T8656] loop1: detected capacity change from 0 to 47 [ 580.029550][ T8657] loop2: detected capacity change from 0 to 1764 [ 580.310005][ T8661] loop0: detected capacity change from 0 to 1764 [ 580.335547][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 580.391040][ T8661] ISOFS: unable to read i-node block [ 580.396702][ T8661] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 580.894896][ T8676] loop3: detected capacity change from 0 to 16 [ 580.961865][ T8676] erofs: (device loop3): mounted with root inode @ nid 36. [ 581.004575][ T8676] bio_check_eod: 2 callbacks suppressed [ 581.004648][ T8676] syz-executor.3: attempt to access beyond end of device [ 581.004648][ T8676] loop3: rw=0, sector=1049272, nr_sectors = 32 limit=16 [ 581.025130][ T8676] syz-executor.3: attempt to access beyond end of device [ 581.025130][ T8676] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 581.038985][ T8676] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 16 of nid 36 [ 581.048102][ T8676] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 16 of nid 36 [ 581.131868][ T8676] syz-executor.3: attempt to access beyond end of device [ 581.131868][ T8676] loop3: rw=0, sector=1049272, nr_sectors = 32 limit=16 [ 581.146358][ T8676] syz-executor.3: attempt to access beyond end of device [ 581.146358][ T8676] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 581.160200][ T8676] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 16 of nid 36 [ 581.169472][ T8676] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 16 of nid 36 [ 581.199817][ T8678] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 581.333016][ T8683] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 581.365939][ T8684] loop2: detected capacity change from 0 to 16 [ 581.407667][ T8684] erofs: (device loop2): mounted with root inode @ nid 36. [ 581.635796][ T8686] loop4: detected capacity change from 0 to 47 [ 581.893268][ T8691] loop3: detected capacity change from 0 to 1764 [ 582.008438][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 582.757400][ T8709] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.1'. [ 582.786610][ T8711] loop4: detected capacity change from 0 to 16 [ 582.856401][ T8711] erofs: (device loop4): mounted with root inode @ nid 36. [ 582.881835][ T8713] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 582.916552][ T8711] syz-executor.4: attempt to access beyond end of device [ 582.916552][ T8711] loop4: rw=0, sector=1049272, nr_sectors = 32 limit=16 [ 582.936408][ T8711] syz-executor.4: attempt to access beyond end of device [ 582.936408][ T8711] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 582.951854][ T8711] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 16 of nid 36 [ 582.961114][ T8711] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 16 of nid 36 [ 583.052130][ T8716] syz-executor.4: attempt to access beyond end of device [ 583.052130][ T8716] loop4: rw=0, sector=1049272, nr_sectors = 32 limit=16 [ 583.067014][ T8716] syz-executor.4: attempt to access beyond end of device [ 583.067014][ T8716] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 583.080850][ T8716] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 16 of nid 36 [ 583.090106][ T8716] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 16 of nid 36 [ 583.109579][ T29] audit: type=1804 audit(1718175176.419:21): pid=8715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir554878087/syzkaller.76utsD/79/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 583.583643][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 583.855973][ T8728] loop4: detected capacity change from 0 to 1764 [ 583.860214][ T8730] loop1: detected capacity change from 0 to 1024 [ 584.403043][ T8743] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 585.299667][ T8750] loop3: detected capacity change from 0 to 8192 [ 585.327121][ T8750] REISERFS warning (device loop3): super-6507 reiserfs_parse_options: bad value auto+conv for -oresize [ 585.327121][ T8750] [ 585.494915][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 585.968671][ T8771] loop2: detected capacity change from 0 to 256 [ 586.138715][ T8771] loop2: detected capacity change from 0 to 512 [ 586.356872][ T8781] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 587.302237][ T8792] loop1: detected capacity change from 0 to 4096 [ 587.370138][ T8803] loop2: detected capacity change from 0 to 1024 [ 587.719053][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 [ 587.802085][ T8807] loop4: detected capacity change from 0 to 128 [ 588.035466][ T8801] loop0: detected capacity change from 0 to 8192 [ 588.109845][ T8801] REISERFS warning (device loop0): super-6507 reiserfs_parse_options: bad value auto+conv for -oresize [ 588.109845][ T8801] [ 588.216261][ T8812] loop2: detected capacity change from 0 to 2048 [ 588.310186][ T8817] loop3: detected capacity change from 0 to 64 [ 589.098530][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 589.587768][ T8822] loop4: detected capacity change from 0 to 32768 [ 589.759277][ T8835] loop1: detected capacity change from 0 to 1024 [ 590.899370][ T8839] loop3: detected capacity change from 0 to 32768 [ 590.933257][ T8839] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 590.941842][ T8839] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 591.000975][ T8839] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 1ms [ 591.161783][ T8849] loop1: detected capacity change from 0 to 256 [ 591.816725][ T8853] loop0: detected capacity change from 0 to 2048 [ 591.893932][ T8848] loop2: detected capacity change from 0 to 40427 [ 591.907986][ T5130] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 591.915063][ T5130] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 592.166432][ T8853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.738578][ T8860] loop1: detected capacity change from 0 to 4096 [ 592.830370][ T5130] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 915ms [ 592.838414][ T5130] gfs2: fsid=syz:syz.0: jid=0: Done [ 592.844492][ T8839] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 592.924714][ T7261] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 593.427775][ T7261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.217710][ T8871] loop4: detected capacity change from 0 to 32768 [ 594.375043][ T8880] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 595.246556][ T8887] loop0: detected capacity change from 0 to 7 [ 595.268241][ T8886] loop2: detected capacity change from 0 to 1024 [ 595.291010][ T8887] Dev loop0: unable to read RDB block 7 [ 595.297055][ T8887] loop0: AHDI p3 p4 [ 595.301486][ T8887] loop0: partition table partially beyond EOD, truncated [ 595.309018][ T8887] loop0: p3 start 6514546 is beyond EOD, truncated [ 595.718100][ T8890] loop4: detected capacity change from 0 to 2048 [ 596.796235][ T8898] loop2: detected capacity change from 0 to 40427 [ 596.859295][ T8900] loop0: detected capacity change from 0 to 4096 [ 596.941128][ T8900] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 597.386982][ T8900] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 598.237036][ T8911] loop4: detected capacity change from 0 to 32768 [ 599.251812][ T8933] loop4: detected capacity change from 0 to 512 [ 599.569338][ T29] audit: type=1326 audit(1718175189.779:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ab4e7cea9 code=0x0 [ 600.627225][ T8943] loop4: detected capacity change from 0 to 40427 [ 600.730737][ T8949] loop1: detected capacity change from 0 to 2048 [ 601.379051][ T8957] loop2: detected capacity change from 0 to 1024 [ 601.392167][ T8957] EXT4-fs: Ignoring removed oldalloc option [ 601.398946][ T8957] ext4: Unknown parameter 'fsuuid' [ 603.888219][ T9001] loop2: detected capacity change from 0 to 1024 [ 603.965496][ T9001] EXT4-fs: Ignoring removed oldalloc option [ 603.972453][ T9001] ext4: Unknown parameter 'fsuuid' [ 604.812663][ T9012] loop0: detected capacity change from 0 to 4096 [ 605.140749][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 605.612105][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.623608][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 605.636921][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 605.647732][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.712192][ T25] usb 5-1: config 0 descriptor?? [ 606.202479][ T25] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 606.230184][ T25] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 606.320959][ T25] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 606.594112][ T25] usb 5-1: USB disconnect, device number 6 [ 606.855697][ T9048] loop3: detected capacity change from 0 to 128 [ 607.094484][ T29] audit: type=1800 audit(1718175197.339:23): pid=9048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 607.341088][ T43] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 607.641755][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 607.761620][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.773135][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.783454][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 607.796701][ T43] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 607.810363][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.863506][ T43] usb 3-1: config 0 descriptor?? [ 607.986874][ T9058] loop0: detected capacity change from 0 to 4096 [ 608.354666][ T43] ryos 0003:1E7D:31CE.000B: unbalanced collection at end of report description [ 608.428885][ T43] ryos 0003:1E7D:31CE.000B: parse failed [ 608.440282][ T43] ryos 0003:1E7D:31CE.000B: probe with driver ryos failed with error -22 [ 608.547939][ T43] usb 3-1: USB disconnect, device number 10 [ 609.294649][ T9081] loop4: detected capacity change from 0 to 128 [ 609.537988][ T29] audit: type=1800 audit(1718175199.769:24): pid=9081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 609.691251][ T5142] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 609.802643][ T9091] loop1: detected capacity change from 0 to 256 [ 610.068985][ T5142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.080618][ T5142] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 610.094025][ T5142] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 610.103591][ T5142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.135589][ T5142] usb 4-1: config 0 descriptor?? [ 610.627565][ T5142] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 610.687496][ T5142] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 610.709760][ T5142] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 610.959731][ T9115] loop0: detected capacity change from 0 to 128 [ 611.018418][ T9115] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 611.054839][ T9115] syz-executor.0: attempt to access beyond end of device [ 611.054839][ T9115] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 611.069418][ T9115] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 611.078464][ T9115] syz-executor.0: attempt to access beyond end of device [ 611.078464][ T9115] loop0: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 611.097850][ T9115] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 611.108093][ T9115] syz-executor.0: attempt to access beyond end of device [ 611.108093][ T9115] loop0: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 611.116359][ T9118] loop2: detected capacity change from 0 to 164 [ 611.122506][ T9115] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 611.122629][ T9115] syz-executor.0: attempt to access beyond end of device [ 611.122629][ T9115] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 611.122772][ T9115] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 611.160934][ T9115] syz-executor.0: attempt to access beyond end of device [ 611.160934][ T9115] loop0: rw=0, sector=6491542, nr_sectors = 2 limit=128 [ 611.175186][ T9115] Buffer I/O error on dev loop0, logical block 3245771, async page read [ 611.184230][ T9115] syz-executor.0: attempt to access beyond end of device [ 611.184230][ T9115] loop0: rw=0, sector=17668342, nr_sectors = 2 limit=128 [ 611.203578][ T9115] Buffer I/O error on dev loop0, logical block 8834171, async page read [ 611.213895][ T9115] syz-executor.0: attempt to access beyond end of device [ 611.213895][ T9115] loop0: rw=0, sector=26932834, nr_sectors = 2 limit=128 [ 611.228188][ T9115] Buffer I/O error on dev loop0, logical block 13466417, async page read [ 611.237046][ T9115] syz-executor.0: attempt to access beyond end of device [ 611.237046][ T9115] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 611.251467][ T9115] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 611.262949][ T9115] syz-executor.0: attempt to access beyond end of device [ 611.262949][ T9115] loop0: rw=0, sector=6491548, nr_sectors = 2 limit=128 [ 611.264389][ T43] usb 4-1: USB disconnect, device number 14 [ 611.277511][ T9115] Buffer I/O error on dev loop0, logical block 3245774, async page read [ 611.297390][ T9115] syz-executor.0: attempt to access beyond end of device [ 611.297390][ T9115] loop0: rw=0, sector=17669878, nr_sectors = 2 limit=128 [ 611.313165][ T9115] Buffer I/O error on dev loop0, logical block 8834939, async page read [ 611.828125][ T9123] loop1: detected capacity change from 0 to 128 [ 614.215706][ T9144] loop1: detected capacity change from 0 to 1024 [ 614.322495][ T9144] EXT4-fs: Ignoring removed oldalloc option [ 614.329290][ T9144] ext4: Unknown parameter 'fsuuid' [ 615.673745][ T9152] loop1: detected capacity change from 0 to 164 [ 616.169151][ T9162] loop4: detected capacity change from 0 to 128 [ 618.362261][ T9178] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 619.086268][ T43] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 619.390975][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 619.513031][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.524628][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.534834][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 619.548088][ T43] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 619.557494][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.664497][ T43] usb 3-1: config 0 descriptor?? [ 620.184471][ T43] ryos 0003:1E7D:31CE.000D: unbalanced collection at end of report description [ 620.269998][ T43] ryos 0003:1E7D:31CE.000D: parse failed [ 620.276632][ T43] ryos 0003:1E7D:31CE.000D: probe with driver ryos failed with error -22 [ 620.448496][ T25] usb 3-1: USB disconnect, device number 11 [ 620.548004][ T9192] loop1: detected capacity change from 0 to 164 [ 622.711768][ T9209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 622.719283][ T9209] IPv6: NLM_F_CREATE should be set when creating new route [ 622.726875][ T9209] IPv6: NLM_F_CREATE should be set when creating new route [ 624.427595][ T9223] Bluetooth: Invalid esc byte 0x00 [ 624.675779][ T9225] loop4: detected capacity change from 0 to 1024 [ 625.669202][ T9234] loop1: detected capacity change from 0 to 64 [ 628.629062][ T9257] Bluetooth: Invalid esc byte 0x00 [ 629.737086][ T9259] loop3: detected capacity change from 0 to 32768 [ 631.573647][ T9267] loop3: detected capacity change from 0 to 64 [ 635.673112][ T9283] loop3: detected capacity change from 0 to 32768 [ 635.784591][ T9293] loop2: detected capacity change from 0 to 64 [ 636.492177][ T9300] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 636.521303][ T9297] loop4: detected capacity change from 0 to 256 [ 636.574624][ T9303] loop1: detected capacity change from 0 to 16 [ 637.358967][ T9317] loop3: detected capacity change from 0 to 1024 [ 637.480278][ T9317] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) [ 638.296558][ T9332] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 638.915119][ T9330] loop1: detected capacity change from 0 to 32768 [ 639.752801][ T9343] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.4'. [ 641.048471][ T9363] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 641.511222][ T9369] loop3: detected capacity change from 0 to 256 [ 641.952407][ T9372] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.2'. [ 642.898977][ T9375] loop1: detected capacity change from 0 to 32768 [ 643.077724][ T9382] loop2: detected capacity change from 0 to 2048 [ 643.536752][ T4434] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 643.597635][ T4434] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 643.636085][ T4434] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 643.712973][ T4434] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 643.734072][ T4434] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 643.743797][ T4434] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 643.846265][ T9389] loop4: detected capacity change from 0 to 128 [ 644.192400][ T9399] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 644.257656][ T29] audit: type=1800 audit(1718175234.419:25): pid=9389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1946 res=0 errno=0 [ 645.234449][ T9408] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.4'. [ 645.240685][ T9401] loop1: detected capacity change from 0 to 32768 [ 645.754131][ T9386] chnl_net:caif_netlink_parms(): no params data found [ 645.889814][ T5084] Bluetooth: hci1: command tx timeout [ 646.565984][ T9423] loop1: detected capacity change from 0 to 2048 [ 647.331128][ T9386] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.345231][ T9386] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.353064][ T9386] bridge_slave_0: entered allmulticast mode [ 647.362481][ T9386] bridge_slave_0: entered promiscuous mode [ 647.473806][ T9386] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.482071][ T9386] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.489871][ T9386] bridge_slave_1: entered allmulticast mode [ 647.499058][ T9386] bridge_slave_1: entered promiscuous mode [ 647.514089][ T9436] loop1: detected capacity change from 0 to 1024 [ 647.528237][ T9432] loop3: detected capacity change from 0 to 4096 [ 647.731944][ T9386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.813210][ T9386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.945794][ T5084] Bluetooth: hci1: command tx timeout [ 648.172274][ T9386] team0: Port device team_slave_0 added [ 648.229583][ T9386] team0: Port device team_slave_1 added [ 648.481905][ T9386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.489070][ T9386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.516534][ T9386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.609848][ T9386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.617209][ T9386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.643522][ T9386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.180385][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 [ 649.274836][ T9386] hsr_slave_0: entered promiscuous mode [ 649.413721][ T9386] hsr_slave_1: entered promiscuous mode [ 649.501726][ T9386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.509515][ T9386] Cannot create hsr debugfs directory [ 649.647612][ T9446] loop2: detected capacity change from 0 to 32768 [ 650.028423][ T5084] Bluetooth: hci1: command tx timeout [ 650.720744][ T9459] loop3: detected capacity change from 0 to 2048 [ 650.791060][ T9386] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.006478][ T9386] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.233078][ T9386] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.508377][ T9386] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.835242][ T9469] loop4: detected capacity change from 0 to 256 [ 652.018291][ T9386] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 652.111518][ T5084] Bluetooth: hci1: command tx timeout [ 652.163201][ T9475] loop2: detected capacity change from 0 to 64 [ 652.291791][ T9386] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 652.423472][ T9386] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 652.536090][ T9386] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 653.447830][ T9491] loop4: detected capacity change from 0 to 256 [ 653.599924][ T9491] exfat: Deprecated parameter 'utf8' [ 653.606328][ T9491] exfat: Deprecated parameter 'utf8' [ 653.698245][ T9485] loop1: detected capacity change from 0 to 32768 [ 654.139249][ T29] audit: type=1800 audit(1718175244.279:26): pid=9491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 654.390299][ T9386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.716280][ T9386] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.806931][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.814734][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.954605][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.962385][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.497384][ T9501] loop2: detected capacity change from 0 to 1024 [ 656.076512][ T9505] loop3: detected capacity change from 0 to 32768 [ 656.511345][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 656.633718][ T9495] loop1: detected capacity change from 0 to 4096 [ 656.781831][ T9495] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 656.864932][ T9506] Bluetooth: hci3: invalid length 0, exp 2 for type 30 [ 657.409249][ T9495] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 657.667785][ T9524] loop3: detected capacity change from 0 to 64 [ 658.147568][ T9386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.794187][ T9386] veth0_vlan: entered promiscuous mode [ 659.076121][ T9386] veth1_vlan: entered promiscuous mode [ 659.196046][ T9530] loop1: detected capacity change from 0 to 32768 [ 659.822142][ T9386] veth0_macvtap: entered promiscuous mode [ 659.986397][ T9386] veth1_macvtap: entered promiscuous mode [ 660.197409][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.208459][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.218686][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.229608][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.245180][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.257403][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.267576][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.278340][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.288461][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.299339][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.314994][ T9386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.386677][ T29] audit: type=1326 audit(1718175250.639:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9537 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa21ac7cea9 code=0x0 [ 660.573724][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.584632][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.594792][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.605545][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.615711][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.626998][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.637136][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.653005][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.665042][ T9386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.675812][ T9386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.691491][ T9386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.277443][ T9543] loop3: detected capacity change from 0 to 32768 [ 661.578031][ T9386] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.587328][ T9386] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.596493][ T9386] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.606294][ T9386] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.750844][ T9567] loop2: detected capacity change from 0 to 32768 [ 664.814827][ T9588] loop2: detected capacity change from 0 to 16 [ 665.944717][ T9605] loop2: detected capacity change from 0 to 64 [ 666.583187][ T4434] Bluetooth: hci5: command 0x0406 tx timeout [ 668.124699][ T4434] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 668.136679][ T4434] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 668.146422][ T4434] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 668.164916][ T4434] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 668.176622][ T4434] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 668.186284][ T4434] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 668.363366][ T9620] loop1: detected capacity change from 0 to 4096 [ 668.446996][ T9620] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 668.662005][ T2871] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.862390][ T9620] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 669.054940][ T2871] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.211367][ T2871] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.377507][ T2871] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.446465][ T9639] loop4: detected capacity change from 0 to 1024 [ 669.781284][ T9643] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 669.932056][ T2871] bridge_slave_1: left allmulticast mode [ 669.938048][ T2871] bridge_slave_1: left promiscuous mode [ 669.945363][ T2871] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.031566][ T2871] bridge_slave_0: left allmulticast mode [ 670.037462][ T2871] bridge_slave_0: left promiscuous mode [ 670.045179][ T2871] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.341913][ T4434] Bluetooth: hci6: command tx timeout [ 670.865662][ T2871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.918311][ T2871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.943451][ T2871] bond0 (unregistering): Released all slaves [ 671.135308][ T9624] chnl_net:caif_netlink_parms(): no params data found [ 671.331244][ T9655] loop4: detected capacity change from 0 to 512 [ 671.641478][ T9655] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 671.652387][ T9655] tipc: Started in network mode [ 671.657468][ T9655] tipc: Node identity 746f7571, cluster identity 4711 [ 671.665246][ T9655] tipc: Node number set to 1953461617 [ 671.695350][ T6649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.703699][ T6649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.271137][ T2871] hsr_slave_0: left promiscuous mode [ 672.312832][ T2871] hsr_slave_1: left promiscuous mode [ 672.380887][ T2871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.388639][ T2871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.409211][ T9666] loop2: detected capacity change from 0 to 256 [ 672.417424][ T9664] loop1: detected capacity change from 0 to 4096 [ 672.419112][ T2871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 672.435537][ T2871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.443379][ T4434] Bluetooth: hci6: command tx timeout [ 672.529040][ T2871] veth1_macvtap: left promiscuous mode [ 672.535397][ T2871] veth0_macvtap: left promiscuous mode [ 672.541503][ T2871] veth1_vlan: left promiscuous mode [ 672.547073][ T2871] veth0_vlan: left promiscuous mode [ 673.813825][ T9678] loop1: detected capacity change from 0 to 1024 [ 673.846853][ T9678] EXT4-fs: Ignoring removed nobh option [ 673.969197][ T2871] team0 (unregistering): Port device team_slave_1 removed [ 674.049943][ T2871] team0 (unregistering): Port device team_slave_0 removed [ 674.334693][ T9677] loop2: detected capacity change from 0 to 4096 [ 674.463100][ T3319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.473850][ T3319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.523783][ T4434] Bluetooth: hci6: command tx timeout [ 675.336489][ T9687] loop4: detected capacity change from 0 to 2048 [ 675.504309][ T9624] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.512156][ T9624] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.519909][ T9624] bridge_slave_0: entered allmulticast mode [ 675.529108][ T9624] bridge_slave_0: entered promiscuous mode [ 675.663646][ T9624] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.671705][ T9624] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.679528][ T9624] bridge_slave_1: entered allmulticast mode [ 675.688701][ T9624] bridge_slave_1: entered promiscuous mode [ 676.060714][ T9624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.105737][ T9624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.256792][ T9699] loop2: detected capacity change from 0 to 512 [ 676.403133][ T9697] loop4: detected capacity change from 0 to 2048 [ 676.504103][ T9624] team0: Port device team_slave_0 added [ 676.579793][ T9624] team0: Port device team_slave_1 added [ 676.582420][ T5084] Bluetooth: hci6: command tx timeout [ 676.682162][ T9699] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 676.691959][ T9699] tipc: Started in network mode [ 676.697034][ T9699] tipc: Node identity 746f7571, cluster identity 4711 [ 676.704251][ T9699] tipc: Node number set to 1953461617 [ 676.726971][ T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 676.849757][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 676.940064][ T9624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.947709][ T9624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.975589][ T9624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.061457][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 677.152596][ T9624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.159877][ T9624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.186344][ T9624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.201361][ T25] usb 2-1: config 0 interface 0 altsetting 63 has an invalid endpoint descriptor of length 3, skipping [ 677.213203][ T25] usb 2-1: config 0 interface 0 altsetting 63 has an invalid endpoint with address 0x0, skipping [ 677.224100][ T25] usb 2-1: config 0 interface 0 altsetting 63 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 677.240771][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 677.271433][ T9705] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 677.471778][ T25] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice= 2.86 [ 677.481398][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.489643][ T25] usb 2-1: Product: syz [ 677.494164][ T25] usb 2-1: Manufacturer: syz [ 677.498983][ T25] usb 2-1: SerialNumber: syz [ 677.563065][ T25] usb 2-1: config 0 descriptor?? [ 677.633036][ T25] empeg 2-1:0.0: empeg converter detected [ 677.639203][ T25] usb 2-1: active config #0 != 1 ?? [ 677.683731][ T9624] hsr_slave_0: entered promiscuous mode [ 677.715692][ T9708] loop4: detected capacity change from 0 to 16 [ 677.767642][ T9624] hsr_slave_1: entered promiscuous mode [ 677.809161][ T9624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 677.817066][ T9624] Cannot create hsr debugfs directory [ 677.876582][ T25] usb 2-1: USB disconnect, device number 17 [ 677.891649][ T29] audit: type=1800 audit(1718175268.179:28): pid=9708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=1955 res=0 errno=0 [ 678.969325][ T9721] loop2: detected capacity change from 0 to 64 [ 679.048290][ T9716] loop4: detected capacity change from 0 to 4096 [ 679.497484][ T9624] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 679.587997][ T9624] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 679.679257][ T9624] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 679.805309][ T9624] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 680.991353][ T9624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.123388][ T9624] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.244272][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.252073][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.368667][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.376507][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.383751][ T9744] loop4: detected capacity change from 0 to 4096 [ 681.936923][ T9757] loop1: detected capacity change from 0 to 128 [ 683.441592][ T9624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.520224][ T9774] loop2: detected capacity change from 0 to 1024 [ 683.885042][ T9624] veth0_vlan: entered promiscuous mode [ 683.988310][ T9779] loop4: detected capacity change from 0 to 64 [ 684.013267][ T9624] veth1_vlan: entered promiscuous mode [ 684.313690][ T9624] veth0_macvtap: entered promiscuous mode [ 684.388774][ T9624] veth1_macvtap: entered promiscuous mode [ 684.683729][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.694622][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.705224][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.722131][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.734069][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.744849][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.755069][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.765860][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.776011][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.787357][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.802602][ T9624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.889807][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.903773][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.921765][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.935449][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.945956][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.956772][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.966928][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.977725][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.999760][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.014063][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.036686][ T9624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.241293][ T9789] loop2: detected capacity change from 0 to 128 [ 685.362806][ T9624] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.375244][ T9624] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.385693][ T9624] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.394835][ T9624] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.114344][ T5084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 686.125614][ T5084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 686.146626][ T5084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 686.168934][ T5084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 686.196421][ T5084] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 686.212064][ T5084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 687.699368][ T9795] chnl_net:caif_netlink_parms(): no params data found [ 688.076515][ T3720] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.323072][ T9816] loop4: detected capacity change from 0 to 32768 [ 688.329981][ T9819] loop2: detected capacity change from 0 to 128 [ 688.343183][ T5084] Bluetooth: hci4: command tx timeout [ 688.462897][ T3720] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.802318][ T3720] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.995407][ T3720] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.331326][ T3720] bridge_slave_1: left allmulticast mode [ 689.337319][ T3720] bridge_slave_1: left promiscuous mode [ 689.343980][ T3720] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.399487][ T3720] bridge_slave_0: left allmulticast mode [ 689.405550][ T3720] bridge_slave_0: left promiscuous mode [ 689.415337][ T3720] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.659310][ T5130] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 689.964303][ T3720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.017955][ T3720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.054728][ T3720] bond0 (unregistering): Released all slaves [ 690.117488][ T5130] usb 5-1: Using ep0 maxpacket: 32 [ 690.292276][ T5130] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.304064][ T5130] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.314287][ T5130] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 690.323685][ T5130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.392962][ T5130] usb 5-1: config 0 descriptor?? [ 690.471601][ T5084] Bluetooth: hci4: command tx timeout [ 690.767821][ T9795] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.777649][ T9795] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.785607][ T9795] bridge_slave_0: entered allmulticast mode [ 690.795052][ T9795] bridge_slave_0: entered promiscuous mode [ 690.914353][ T5130] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 690.921608][ T5130] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 690.928665][ T5130] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 690.935901][ T5130] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 690.943044][ T5130] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 690.950100][ T5130] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 690.959954][ T5130] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 690.969245][ T5130] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 691.031701][ T9795] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.039395][ T9795] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.047419][ T9795] bridge_slave_1: entered allmulticast mode [ 691.051184][ T5130] arvo 0003:1E7D:30D4.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 691.056411][ T9795] bridge_slave_1: entered promiscuous mode [ 691.141108][ T3720] hsr_slave_0: left promiscuous mode [ 691.153649][ T5130] arvo 0003:1E7D:30D4.000E: couldn't init struct arvo_device [ 691.164742][ T5130] arvo 0003:1E7D:30D4.000E: couldn't install keyboard [ 691.180096][ T3720] hsr_slave_1: left promiscuous mode [ 691.214941][ T5130] arvo 0003:1E7D:30D4.000E: probe with driver arvo failed with error -71 [ 691.229247][ T3720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 691.237186][ T3720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.261018][ T5130] usb 5-1: USB disconnect, device number 8 [ 691.278999][ T3720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 691.286951][ T3720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.320216][ T3720] veth1_macvtap: left promiscuous mode [ 691.326225][ T3720] veth0_macvtap: left promiscuous mode [ 691.334903][ T3720] veth1_vlan: left promiscuous mode [ 691.340537][ T3720] veth0_vlan: left promiscuous mode [ 692.489821][ T3720] team0 (unregistering): Port device team_slave_1 removed [ 692.544453][ T3720] team0 (unregistering): Port device team_slave_0 removed [ 692.580833][ T5084] Bluetooth: hci4: command tx timeout [ 693.146826][ T9795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.233646][ T9795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.473197][ T9795] team0: Port device team_slave_0 added [ 693.523229][ T9863] loop4: detected capacity change from 0 to 128 [ 693.580765][ T9795] team0: Port device team_slave_1 added [ 693.965041][ T9795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.972389][ T9795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.998799][ T9795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.205407][ T9795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.214106][ T9795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.245201][ T9795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.660794][ T5084] Bluetooth: hci4: command tx timeout [ 694.672606][ T9795] hsr_slave_0: entered promiscuous mode [ 694.693320][ T9795] hsr_slave_1: entered promiscuous mode [ 694.761736][ T9795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 694.769501][ T9795] Cannot create hsr debugfs directory [ 695.057867][ T9873] loop4: detected capacity change from 0 to 4096 [ 695.230822][ T9881] loop2: detected capacity change from 0 to 64 [ 695.813517][ T29] audit: type=1804 audit(1718175286.029:29): pid=9884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3305947448/syzkaller.Jfu7Gx/8/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 695.906101][ T6475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.914671][ T6475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.057461][ T2871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.067606][ T2871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.361300][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 696.665692][ T9795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 696.755554][ T9795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 696.763827][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 696.826094][ T9795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 696.891005][ T9795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 696.892756][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.916037][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.926277][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 696.935775][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.995974][ T10] usb 3-1: config 0 descriptor?? [ 697.546255][ T10] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 697.554925][ T10] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 697.563267][ T10] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 697.570327][ T10] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 697.577537][ T10] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 697.586444][ T10] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 697.593645][ T10] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 697.600899][ T10] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 697.631519][ T9899] loop4: detected capacity change from 0 to 256 [ 697.774987][ T10] arvo 0003:1E7D:30D4.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 697.851107][ T10] arvo 0003:1E7D:30D4.000F: couldn't init struct arvo_device [ 697.858889][ T10] arvo 0003:1E7D:30D4.000F: couldn't install keyboard [ 697.913485][ T10] arvo 0003:1E7D:30D4.000F: probe with driver arvo failed with error -71 [ 698.039094][ T10] usb 3-1: USB disconnect, device number 12 [ 698.317170][ T9795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.494489][ T9795] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.590275][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.598067][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.727866][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.735723][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.928258][ T9909] loop2: detected capacity change from 0 to 512 [ 699.222808][ T9911] syzkaller0: entered promiscuous mode [ 699.228524][ T9911] syzkaller0: entered allmulticast mode [ 699.599920][ T9916] loop2: detected capacity change from 0 to 1024 [ 699.819384][ T9916] overlayfs: overlapping lowerdir path [ 700.655963][ T9795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.805987][ T9933] loop2: detected capacity change from 0 to 512 [ 700.821089][ T5132] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 701.103703][ T9795] veth0_vlan: entered promiscuous mode [ 701.155837][ T9795] veth1_vlan: entered promiscuous mode [ 701.233929][ T5132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.245456][ T5132] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 701.259993][ T5132] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 701.269471][ T5132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.292799][ T5132] usb 5-1: config 0 descriptor?? [ 701.478419][ T9795] veth0_macvtap: entered promiscuous mode [ 701.564026][ T9795] veth1_macvtap: entered promiscuous mode [ 701.764362][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.775145][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.785623][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.796535][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.806642][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.821633][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.832891][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.843642][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.854022][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.868182][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.884519][ T9795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.938431][ T5132] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 701.959732][ T5132] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 702.001560][ T5132] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 702.194946][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.206111][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.216249][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.231188][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.242468][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.253167][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.263330][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.274025][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.284115][ T9795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.294817][ T9795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.310158][ T9795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.371756][ T9945] loop3: detected capacity change from 0 to 256 [ 702.399949][ T5132] usb 5-1: USB disconnect, device number 9 [ 702.457616][ T9795] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.468731][ T9795] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.478844][ T9795] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.489250][ T9795] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.678526][ T9950] loop2: detected capacity change from 0 to 1024 [ 703.357792][ T9961] loop2: detected capacity change from 0 to 16 [ 703.827784][ T9967] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 704.528005][ T9976] loop4: detected capacity change from 0 to 736 [ 705.239467][ T9985] loop2: detected capacity change from 0 to 256 [ 706.195752][ T6475] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.361947][ T6475] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.541646][ T6475] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.716833][ T6475] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.172522][ T6475] bridge_slave_1: left allmulticast mode [ 707.173919][T10006] loop3: detected capacity change from 0 to 256 [ 707.178328][ T6475] bridge_slave_1: left promiscuous mode [ 707.191514][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.247995][T10006] exfat: Deprecated parameter 'namecase' [ 707.254744][T10006] exfat: Deprecated parameter 'utf8' [ 707.260681][T10006] exfat: Deprecated parameter 'namecase' [ 707.266602][T10006] exfat: Deprecated parameter 'utf8' [ 707.283902][ T6475] bridge_slave_0: left allmulticast mode [ 707.289856][ T6475] bridge_slave_0: left promiscuous mode [ 707.296582][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.986586][ T6475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.038752][ T6475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.065988][ T6475] bond0 (unregistering): Released all slaves [ 708.132016][T10008] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 708.405407][ T6475] tipc: Left network mode [ 709.143677][ T29] audit: type=1326 audit(1718175299.339:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10010 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3a47cea9 code=0x7fc00000 [ 709.166915][ T29] audit: type=1326 audit(1718175299.339:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10010 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec3a47cea9 code=0x7fc00000 [ 709.193301][ T29] audit: type=1326 audit(1718175299.339:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10010 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3a47cea9 code=0x7fc00000 [ 709.216618][ T29] audit: type=1326 audit(1718175299.339:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10010 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3a47cea9 code=0x7fc00000 [ 709.239861][ T29] audit: type=1326 audit(1718175299.339:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10010 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3a47cea9 code=0x7fc00000 [ 709.263069][ T29] audit: type=1326 audit(1718175299.339:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10010 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3a47cea9 code=0x7fc00000 [ 709.288861][ T29] audit: type=1326 audit(1718175299.339:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10010 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3a47cea9 code=0x7fc00000 [ 709.313837][ T29] audit: type=1326 audit(1718175299.339:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10010 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3a47cea9 code=0x7fc00000 [ 709.343886][ T6475] hsr_slave_0: left promiscuous mode [ 709.392466][ T6475] hsr_slave_1: left promiscuous mode [ 709.412452][ T6475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.420152][ T6475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.490300][ T6475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.500788][ T6475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.621335][ T6475] veth1_macvtap: left promiscuous mode [ 709.627087][ T6475] veth0_macvtap: left promiscuous mode [ 709.633973][ T6475] veth1_vlan: left promiscuous mode [ 709.639515][ T6475] veth0_vlan: left promiscuous mode [ 710.111782][ T9836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 710.120380][ T9836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 710.128954][ T9836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 710.140236][ T9836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 710.150364][ T9836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 710.162412][ T9836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 710.652409][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 [ 710.953102][ T6475] team0 (unregistering): Port device team_slave_1 removed [ 711.010531][ T6475] team0 (unregistering): Port device team_slave_0 removed [ 711.796556][T10039] loop2: detected capacity change from 0 to 256 [ 712.151413][T10041] loop3: detected capacity change from 0 to 256 [ 712.227768][T10041] exfat: Deprecated parameter 'namecase' [ 712.233979][T10041] exfat: Deprecated parameter 'utf8' [ 712.239670][T10041] exfat: Deprecated parameter 'namecase' [ 712.245671][T10041] exfat: Deprecated parameter 'utf8' [ 712.260948][ T9836] Bluetooth: hci0: command tx timeout [ 712.487676][T10046] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 712.610816][ T3319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.618857][ T3319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.722681][ T781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.731496][ T781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.876309][T10024] chnl_net:caif_netlink_parms(): no params data found [ 713.080637][T10050] loop2: detected capacity change from 0 to 512 [ 713.120051][T10050] EXT4-fs: Ignoring removed nobh option [ 713.737059][T10060] loop2: detected capacity change from 0 to 256 [ 713.911944][T10056] loop1: detected capacity change from 0 to 4096 [ 714.091054][ T29] audit: type=1326 audit(1718175304.329:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3a47cea9 code=0x7fc00000 [ 714.118611][ T29] audit: type=1326 audit(1718175304.329:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10053 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fec3a47cea9 code=0x7fc00000 [ 714.341373][ T9836] Bluetooth: hci0: command tx timeout [ 714.442841][T10024] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.450694][T10024] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.458440][T10024] bridge_slave_0: entered allmulticast mode [ 714.468390][T10024] bridge_slave_0: entered promiscuous mode [ 714.558451][T10024] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.566400][T10024] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.574317][T10024] bridge_slave_1: entered allmulticast mode [ 714.583389][T10024] bridge_slave_1: entered promiscuous mode [ 714.743784][T10024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.832230][T10024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.082040][T10073] loop3: detected capacity change from 0 to 736 [ 715.108260][T10024] team0: Port device team_slave_0 added [ 715.184955][T10024] team0: Port device team_slave_1 added [ 715.345933][T10070] loop2: detected capacity change from 0 to 4096 [ 715.444960][T10024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.452586][T10024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.478878][T10024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.622813][T10077] loop1: detected capacity change from 0 to 256 [ 715.625334][T10024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.641912][T10024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.669511][T10024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.117315][T10024] hsr_slave_0: entered promiscuous mode [ 716.212283][T10024] hsr_slave_1: entered promiscuous mode [ 716.259723][T10079] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 716.304894][T10081] loop1: detected capacity change from 0 to 256 [ 716.361611][T10081] exfat: Deprecated parameter 'namecase' [ 716.367628][T10081] exfat: Deprecated parameter 'utf8' [ 716.373526][T10081] exfat: Deprecated parameter 'namecase' [ 716.379433][T10081] exfat: Deprecated parameter 'utf8' [ 716.443846][ T9836] Bluetooth: hci0: command tx timeout [ 716.837397][T10083] loop2: detected capacity change from 0 to 512 [ 716.959817][T10083] EXT4-fs: Ignoring removed nobh option [ 717.126013][ T6475] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.385349][ T6475] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.465230][ T6475] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.589541][ T6475] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.676576][T10088] loop2: detected capacity change from 0 to 1024 [ 717.869053][T10088] overlayfs: failed to resolve './file0': -2 [ 717.950008][ T6475] bridge_slave_1: left allmulticast mode [ 717.956407][ T6475] bridge_slave_1: left promiscuous mode [ 717.963173][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.059620][ T6475] bridge_slave_0: left allmulticast mode [ 718.065732][ T6475] bridge_slave_0: left promiscuous mode [ 718.072818][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.525420][ T9836] Bluetooth: hci0: command tx timeout [ 718.816906][ T6475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.917312][ T6475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.966756][ T6475] bond0 (unregistering): Released all slaves [ 719.289145][T10098] loop1: detected capacity change from 0 to 256 [ 720.308791][T10102] loop1: detected capacity change from 0 to 2048 [ 720.317554][ T5084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 720.391613][ T5084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 720.409939][ T6475] hsr_slave_0: left promiscuous mode [ 720.425930][ T5084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 720.462180][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 720.475451][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 720.484418][ T6475] hsr_slave_1: left promiscuous mode [ 720.485543][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 720.538792][ T6475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.546674][ T6475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.804305][ T6475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.813212][ T6475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.931684][ T6475] veth1_macvtap: left promiscuous mode [ 720.937591][ T6475] veth0_macvtap: left promiscuous mode [ 720.943664][ T6475] veth1_vlan: left promiscuous mode [ 720.949207][ T6475] veth0_vlan: left promiscuous mode [ 722.398775][ T6475] team0 (unregistering): Port device team_slave_1 removed [ 722.506317][ T6475] team0 (unregistering): Port device team_slave_0 removed [ 722.830918][ T9836] Bluetooth: hci2: command tx timeout [ 722.898164][T10113] loop1: detected capacity change from 0 to 512 [ 722.921071][T10024] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 723.133968][T10024] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 723.251043][T10024] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 723.354335][T10024] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 724.717990][T10103] chnl_net:caif_netlink_parms(): no params data found [ 724.900633][ T9836] Bluetooth: hci2: command tx timeout [ 725.059700][T10024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.268947][T10024] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.362979][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.370793][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.489145][T10141] loop1: detected capacity change from 0 to 2048 [ 725.519894][ T6649] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.527705][ T6649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.855292][T10024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 726.088225][T10144] loop2: detected capacity change from 0 to 2048 [ 726.127506][T10103] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.135355][T10103] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.143183][T10103] bridge_slave_0: entered allmulticast mode [ 726.152229][T10103] bridge_slave_0: entered promiscuous mode [ 726.273059][T10103] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.280929][T10103] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.294353][T10103] bridge_slave_1: entered allmulticast mode [ 726.303498][T10103] bridge_slave_1: entered promiscuous mode [ 726.667158][T10103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.812204][T10103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.981124][ T9836] Bluetooth: hci2: command tx timeout [ 727.135618][T10103] team0: Port device team_slave_0 added [ 727.249493][T10103] team0: Port device team_slave_1 added [ 727.932715][T10103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.942485][T10103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.968870][T10103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.048615][T10103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.055928][T10103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.082422][T10103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.015357][T10103] hsr_slave_0: entered promiscuous mode [ 729.061593][ T9836] Bluetooth: hci2: command tx timeout [ 729.102250][T10103] hsr_slave_1: entered promiscuous mode [ 729.165889][T10103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 729.173772][T10103] Cannot create hsr debugfs directory [ 729.226153][T10024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.531942][T10159] loop1: detected capacity change from 0 to 4096 [ 731.295196][T10103] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 731.343752][T10103] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 731.383151][T10103] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 731.483144][T10103] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 732.275804][T10024] veth0_vlan: entered promiscuous mode [ 732.374103][T10024] veth1_vlan: entered promiscuous mode [ 732.726958][T10024] veth0_macvtap: entered promiscuous mode [ 732.778278][T10024] veth1_macvtap: entered promiscuous mode [ 732.962187][T10103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.019707][T10024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.031556][T10024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.042738][T10024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.056696][T10024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.067658][T10024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.078369][T10024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.088454][T10024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.099156][T10024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.114208][T10024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.230286][T10103] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.259086][T10024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.270471][T10024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.280654][T10024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.291485][T10024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.301643][T10024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.312404][T10024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.322532][T10024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.333287][T10024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.348086][T10024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.443636][ T6649] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.451397][ T6649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.471110][ T6649] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.478774][ T6649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.689602][T10024] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.698902][T10024] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.710350][T10024] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.720104][T10024] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.043241][T10103] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 735.189271][T10192] loop2: detected capacity change from 0 to 8192 [ 736.588626][T10192] loop2: detected capacity change from 0 to 512 [ 736.798922][T10103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.236741][T10103] veth0_vlan: entered promiscuous mode [ 737.387571][T10103] veth1_vlan: entered promiscuous mode [ 737.683403][T10103] veth0_macvtap: entered promiscuous mode [ 737.793245][T10103] veth1_macvtap: entered promiscuous mode [ 737.997976][T10103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.008990][T10103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.019480][T10103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.031402][T10103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.041582][T10103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.052366][T10103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.066486][T10103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.078392][T10103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.088547][T10103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.099400][T10103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.117414][T10103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.222403][T10103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.233540][T10103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.243733][T10103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.254513][T10103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.267678][T10103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.280803][T10103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.291322][T10103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.302063][T10103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.312202][T10103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.322955][T10103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.337989][T10103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.523286][T10103] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.532749][T10103] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.541868][T10103] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.551002][T10103] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.245140][T10245] loop2: detected capacity change from 0 to 64 [ 741.205635][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.214468][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.712988][ T2382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.722150][ T2382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.622132][T10263] loop1: detected capacity change from 0 to 4096 [ 742.643642][T10267] loop4: detected capacity change from 0 to 256 [ 743.758822][T10264] loop2: detected capacity change from 0 to 8192 [ 743.958837][T10264] REISERFS warning (device loop2): super-6508 reiserfs_parse_options: bad value 0xfffffffffffffe00 for -ocommit [ 743.958837][T10264] [ 744.051009][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 744.051086][ T29] audit: type=1800 audit(1718175334.119:47): pid=10263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 746.242837][T10277] loop1: detected capacity change from 0 to 2048 [ 747.163268][T10303] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 747.174368][T10303] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 747.716416][T10315] ðÿÿÿÿÿÿÿ: entered promiscuous mode [ 747.798616][ T3361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.807423][ T3361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.036910][ T3361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.045211][ T3361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.023796][T10329] loop2: detected capacity change from 0 to 2048 [ 751.773018][T10356] openvswitch: ðÿÿÿÿÿÿÿ: Dropping previously announced user features [ 753.243312][T10365] loop3: detected capacity change from 0 to 512 [ 757.264756][T10386] ðÿÿÿÿÿÿÿ: entered promiscuous mode [ 759.039798][T10396] Bluetooth: MGMT ver 1.22 [ 762.486450][T10415] loop4: detected capacity change from 0 to 1764 [ 763.832559][ T29] audit: type=1326 audit(1718175353.979:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccb27cea9 code=0x7ffc0000 [ 763.855816][ T29] audit: type=1326 audit(1718175353.979:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccb27cea9 code=0x7ffc0000 [ 763.886944][ T29] audit: type=1326 audit(1718175354.069:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdccb27cea9 code=0x7ffc0000 [ 763.912482][ T29] audit: type=1326 audit(1718175354.119:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccb27cea9 code=0x7ffc0000 [ 763.935761][ T29] audit: type=1326 audit(1718175354.119:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccb27cea9 code=0x7ffc0000 [ 764.059556][ T29] audit: type=1326 audit(1718175354.249:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdccb27cea9 code=0x7ffc0000 [ 764.089070][ T29] audit: type=1326 audit(1718175354.249:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdccb27cea9 code=0x7ffc0000 [ 764.114305][ T29] audit: type=1326 audit(1718175354.279:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdccb27a627 code=0x7ffc0000 [ 764.137475][ T29] audit: type=1326 audit(1718175354.289:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdccb2402e9 code=0x7ffc0000 [ 764.160630][ T29] audit: type=1326 audit(1718175354.299:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdccb27a627 code=0x7ffc0000 [ 767.067563][T10448] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 767.971615][T10454] loop4: detected capacity change from 0 to 2048 [ 768.934857][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 769.012078][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 769.064428][T10462] loop1: detected capacity change from 0 to 2048 [ 769.160300][T10462] EXT4-fs: Ignoring removed bh option [ 769.166262][T10462] EXT4-fs: Ignoring removed nomblk_io_submit option [ 769.270042][T10454] hpfs: filesystem error: improperly stopped; already mounted read-only [ 769.279808][T10454] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 769.288085][T10454] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 7b318cc4 [ 770.825684][T10481] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 770.915104][T10479] netem: unknown loss type 8 [ 770.919943][T10479] netem: change failed [ 771.971011][ T5130] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 772.077192][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 [ 772.345494][ T5130] usb 5-1: Using ep0 maxpacket: 8 [ 772.481607][ T5130] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 772.489996][ T5130] usb 5-1: config 0 has no interface number 0 [ 772.751853][ T5130] usb 5-1: New USB device found, idVendor=2040, idProduct=7213, bcdDevice=31.d3 [ 772.761300][ T5130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.769627][ T5130] usb 5-1: Product: syz [ 772.775081][ T5130] usb 5-1: Manufacturer: syz [ 772.779905][ T5130] usb 5-1: SerialNumber: syz [ 772.816841][T10499] loop1: detected capacity change from 0 to 128 [ 772.847139][ T5130] usb 5-1: config 0 descriptor?? [ 773.212839][ T5130] usb 5-1: USB disconnect, device number 10 [ 773.331924][T10497] loop3: detected capacity change from 0 to 4096 [ 775.146736][T10505] loop2: detected capacity change from 0 to 40427 [ 778.123424][T10521] loop1: detected capacity change from 0 to 32768 [ 780.631093][ T5084] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 780.685562][ T5084] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 780.695816][ T5084] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 780.711596][ T5084] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 780.724430][ T5084] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 780.733702][ T5084] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 781.193714][T10528] loop4: detected capacity change from 0 to 4096 [ 782.834692][ T5084] Bluetooth: hci6: command tx timeout [ 783.099429][T10534] chnl_net:caif_netlink_parms(): no params data found [ 784.901964][ T5084] Bluetooth: hci6: command tx timeout [ 786.027460][T10576] loop1: detected capacity change from 0 to 64 [ 786.076071][T10534] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.084042][T10534] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.101598][T10534] bridge_slave_0: entered allmulticast mode [ 786.114458][T10534] bridge_slave_0: entered promiscuous mode [ 786.313754][T10534] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.321668][T10534] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.329541][T10534] bridge_slave_1: entered allmulticast mode [ 786.338856][T10534] bridge_slave_1: entered promiscuous mode [ 786.984204][ T5084] Bluetooth: hci6: command tx timeout [ 787.411057][ T781] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 787.747668][T10534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.856510][ T3319] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.961497][ T781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.972849][ T781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.982998][ T781] usb 2-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.00 [ 787.992396][ T781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.054125][T10534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.082546][ T781] usb 2-1: config 0 descriptor?? [ 788.197508][ T3319] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.667383][ T781] wacom 0003:056A:0035.0011: unknown main item tag 0x0 [ 788.835331][ T781] wacom 0003:056A:0035.0011: hidraw0: USB HID v0.00 Device [HID 056a:0035] on usb-dummy_hcd.1-1/input0 [ 788.865881][ T3319] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.935599][T10586] loop2: detected capacity change from 0 to 4096 [ 788.991957][ T781] usb 2-1: USB disconnect, device number 18 [ 789.064732][ T5084] Bluetooth: hci6: command tx timeout [ 789.225309][T10534] team0: Port device team_slave_0 added [ 789.414832][ T3319] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.555689][T10534] team0: Port device team_slave_1 added [ 790.091740][T10534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.098907][T10534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.126286][T10534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.474936][T10534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.482170][T10534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.515967][T10534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.535188][ T3319] bridge_slave_1: left allmulticast mode [ 790.559636][ T3319] bridge_slave_1: left promiscuous mode [ 790.578772][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.719831][ T3319] bridge_slave_0: left allmulticast mode [ 790.738851][ T3319] bridge_slave_0: left promiscuous mode [ 790.756286][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.920108][ T3319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.668101][ T3319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.836024][T10604] loop3: detected capacity change from 0 to 512 [ 792.883698][ T3319] bond0 (unregistering): Released all slaves [ 792.991461][T10596] netem: unknown loss type 8 [ 792.996435][T10596] netem: change failed [ 793.499003][ T3319] ðÿÿÿÿÿÿÿ: left promiscuous mode [ 793.952249][T10534] hsr_slave_0: entered promiscuous mode [ 794.057042][T10534] hsr_slave_1: entered promiscuous mode [ 794.153291][T10610] VFS: could not find a valid V7 on nullb0. [ 794.162719][T10534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 794.170839][T10534] Cannot create hsr debugfs directory [ 794.271528][ T9836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 794.286410][ T9836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 794.311953][ T9836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 794.513122][ T9836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 794.530113][ T9836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 794.572505][ T9836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 795.559135][ T3319] hsr_slave_0: left promiscuous mode [ 795.681364][ T3319] hsr_slave_1: left promiscuous mode [ 795.741380][ T3319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 795.749198][ T3319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.842192][ T3319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 795.849912][ T3319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.050246][ T3319] veth1_macvtap: left promiscuous mode [ 796.056096][ T3319] veth0_macvtap: left promiscuous mode [ 796.062100][ T3319] veth1_vlan: left promiscuous mode [ 796.067639][ T3319] veth0_vlan: left promiscuous mode [ 796.821538][ T9836] Bluetooth: hci0: command tx timeout [ 797.584193][T10638] loop3: detected capacity change from 0 to 512 [ 798.529309][ T3319] team0 (unregistering): Port device team_slave_1 removed [ 798.565260][T10640] loop1: detected capacity change from 0 to 32768 [ 798.748180][ T3319] team0 (unregistering): Port device team_slave_0 removed [ 799.175742][ T9836] Bluetooth: hci0: command tx timeout [ 800.334143][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 800.334226][ T29] audit: type=1326 audit(1718175390.569:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10645 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdccb27cea9 code=0x0 [ 800.899787][T10534] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.185470][T10534] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.221163][ T9836] Bluetooth: hci0: command tx timeout [ 801.361302][T10611] chnl_net:caif_netlink_parms(): no params data found [ 801.488133][T10534] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.747754][T10534] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.525511][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 802.834899][T10534] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 802.902444][T10671] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 802.972199][T10534] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 803.122885][T10534] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 803.242143][T10534] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 803.326698][ T5084] Bluetooth: hci0: command tx timeout [ 803.618051][T10680] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 804.267001][T10611] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.274868][T10611] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.282741][T10611] bridge_slave_0: entered allmulticast mode [ 804.291993][T10611] bridge_slave_0: entered promiscuous mode [ 804.543087][T10611] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.551097][T10611] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.558967][T10611] bridge_slave_1: entered allmulticast mode [ 804.579099][T10611] bridge_slave_1: entered promiscuous mode [ 805.303115][ T9836] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 805.416699][T10685] loop1: detected capacity change from 0 to 40427 [ 805.784905][ T29] audit: type=1326 audit(1718175395.909:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10686 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa21ac7cea9 code=0x0 [ 806.060918][T10685] sctp: [Deprecated]: syz-executor.1 (pid 10685) Use of struct sctp_assoc_value in delayed_ack socket option. [ 806.060918][T10685] Use struct sctp_sack_info instead [ 806.085247][T10611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.210340][T10611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.863449][T10611] team0: Port device team_slave_0 added [ 808.094442][T10611] team0: Port device team_slave_1 added [ 808.335743][T10611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.343142][T10611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.373702][T10611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.500350][T10611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.520942][T10611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.552630][T10611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.655042][T10534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.916257][T10534] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.993387][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 809.274456][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.282244][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.458652][T10611] hsr_slave_0: entered promiscuous mode [ 809.502076][T10611] hsr_slave_1: entered promiscuous mode [ 809.571656][ T3319] bridge_slave_1: left allmulticast mode [ 809.577738][ T3319] bridge_slave_1: left promiscuous mode [ 809.584563][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.668484][ T3319] bridge_slave_0: left allmulticast mode [ 809.674587][ T3319] bridge_slave_0: left promiscuous mode [ 809.682113][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.957250][ T9836] Bluetooth: hci4: command 0x0406 tx timeout [ 810.507071][ T3319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.569081][ T3319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.626220][ T3319] bond0 (unregistering): Released all slaves [ 810.678422][T10710] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 810.762073][T10716] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 810.937884][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.945663][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.139297][ T3319] hsr_slave_0: left promiscuous mode [ 812.207503][ T3319] hsr_slave_1: left promiscuous mode [ 812.249497][ T3319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.262045][ T3319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.296357][ T3319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 812.315778][ T3319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.466523][ T3319] veth1_macvtap: left promiscuous mode [ 812.476731][ T3319] veth0_macvtap: left promiscuous mode [ 812.486840][ T3319] veth1_vlan: left promiscuous mode [ 812.496659][ T3319] veth0_vlan: left promiscuous mode [ 813.625158][ T5130] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 813.972040][ T3319] team0 (unregistering): Port device team_slave_1 removed [ 814.032744][ T3319] team0 (unregistering): Port device team_slave_0 removed [ 814.368709][ T5130] usb 2-1: Using ep0 maxpacket: 32 [ 814.731928][ T5130] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 814.742237][ T5130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.751206][ T5130] usb 2-1: Product: syz [ 814.755603][ T5130] usb 2-1: Manufacturer: syz [ 814.764371][ T5130] usb 2-1: SerialNumber: syz [ 814.853513][ T5130] usb 2-1: config 0 descriptor?? [ 815.226466][ T5130] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 019 [ 815.396203][ T5140] usb 2-1: USB disconnect, device number 19 [ 816.339849][T10611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 816.473323][T10611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 816.634216][T10611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 816.696677][T10534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.735889][T10611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 817.279068][T10763] 9pnet_fd: Insufficient options for proto=fd [ 817.467112][T10534] veth0_vlan: entered promiscuous mode [ 817.637139][T10534] veth1_vlan: entered promiscuous mode [ 818.177284][T10534] veth0_macvtap: entered promiscuous mode [ 818.333095][T10534] veth1_macvtap: entered promiscuous mode [ 818.432683][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 818.485509][ T5140] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 818.783224][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.794265][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.804385][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.814557][ T5140] usb 4-1: Using ep0 maxpacket: 16 [ 818.815334][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.832046][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.843298][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.854441][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.869441][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.885476][T10534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.990001][ T5140] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 819.004496][ T5140] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 819.014837][T10611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.029684][ T5140] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 819.044061][ T5140] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 819.058308][ T5140] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 819.075206][ T5140] usb 4-1: config 1 interface 0 has no altsetting 0 [ 819.087177][ T5140] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 819.100852][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.178147][T10611] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.278118][ T5140] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 819.405190][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.413048][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.447690][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.462877][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.477466][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.489129][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.501864][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.516846][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.531207][T10534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.546065][T10534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.572445][T10534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.657541][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.665278][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.827213][T10534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.836522][T10534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.845992][T10534] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.855088][T10534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.950286][T10772] loop3: detected capacity change from 0 to 2048 [ 820.328675][T10785] loop2: detected capacity change from 0 to 128 [ 820.473042][T10785] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 820.689768][ T5140] scsi host1: usb-storage 4-1:1.0 [ 820.866672][T10785] syz-executor.2: attempt to access beyond end of device [ 820.866672][T10785] loop2: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 820.867230][ T5140] usb 4-1: USB disconnect, device number 15 [ 820.881470][T10785] syz-executor.2: attempt to access beyond end of device [ 820.881470][T10785] loop2: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 820.993544][T10792] loop1: detected capacity change from 0 to 128 [ 821.188696][T10790] FAT-fs (loop2): FAT read failed (blocknr 128) [ 822.972165][T10611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.628604][T10815] 9pnet_fd: Insufficient options for proto=fd [ 824.573540][T10829] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 824.785713][T10833] loop1: detected capacity change from 0 to 128 [ 824.904064][T10833] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 825.327950][T10833] syz-executor.1: attempt to access beyond end of device [ 825.327950][T10833] loop1: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 825.342326][T10833] syz-executor.1: attempt to access beyond end of device [ 825.342326][T10833] loop1: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 825.956457][T10831] loop2: detected capacity change from 0 to 40427 [ 827.108216][T10831] evm: overlay not supported [ 827.247737][T10611] veth0_vlan: entered promiscuous mode [ 827.383321][T10611] veth1_vlan: entered promiscuous mode [ 827.690253][T10611] veth0_macvtap: entered promiscuous mode [ 827.795340][T10611] veth1_macvtap: entered promiscuous mode [ 827.919698][T10611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.930844][T10611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.941013][T10611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.951788][T10611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.961886][T10611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.979091][T10611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.991463][T10611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.002225][T10611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.012411][T10611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.023211][T10611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.038375][T10611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 828.097073][T10611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.108522][T10611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.118705][T10611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.129488][T10611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.139767][T10611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.150562][T10611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.160813][T10611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.172605][T10611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.187033][T10611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.198922][T10611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.215462][T10611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 828.321796][T10611] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.331064][T10611] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.340085][T10611] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.362436][T10611] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.409090][ T3720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.417267][ T3720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.682180][ T2382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.690239][ T2382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.666423][ T3319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.674579][ T3319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.833384][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.841584][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.174924][T10873] loop4: detected capacity change from 0 to 64 [ 833.518896][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 [ 837.668497][ T29] audit: type=1800 audit(1718175427.919:79): pid=10879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1958 res=0 errno=0 [ 837.946456][ T6649] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 838.337965][T10891] kernel profiling enabled (shift: 8) [ 838.599517][ T6649] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 838.618850][ T6649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.634039][ T6649] usb 5-1: Product: syz [ 838.638433][ T6649] usb 5-1: Manufacturer: syz [ 838.648278][ T6649] usb 5-1: SerialNumber: syz [ 838.710049][ T6649] usb 5-1: config 0 descriptor?? [ 838.767853][ T6649] ch341 5-1:0.0: ch341-uart converter detected [ 839.056327][ T6649] usb 5-1: failed to receive control message: -71 [ 839.068217][ T6649] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 839.203160][ T6649] usb 5-1: USB disconnect, device number 11 [ 839.215653][ T6649] ch341 5-1:0.0: device disconnected [ 839.450914][ T43] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 839.882958][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.895360][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.905698][ T43] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 839.915237][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.980183][ T43] usb 4-1: config 0 descriptor?? [ 840.532788][ T43] logitech-djreceiver 0003:046D:C71B.0012: unknown main item tag 0x0 [ 840.709591][T10910] can0: slcan on ptm0. [ 840.722488][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 840.846143][ T6649] usb 4-1: USB disconnect, device number 16 [ 841.007295][T10909] can0 (unregistered): slcan off ptm0. [ 842.245947][ T6649] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 842.430467][ C0] ===================================================== [ 842.437733][ C0] BUG: KMSAN: uninit-value in profile_tick+0x1ae/0x1b0 [ 842.444827][ C0] profile_tick+0x1ae/0x1b0 [ 842.449563][ C0] tick_nohz_handler+0x588/0x690 [ 842.454734][ C0] __hrtimer_run_queues+0x56f/0xe40 [ 842.460173][ C0] hrtimer_interrupt+0x3ab/0x1490 [ 842.465420][ C0] __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 842.471572][ C0] sysvec_apic_timer_interrupt+0x7e/0x90 [ 842.477426][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 842.483667][ C0] _raw_spin_unlock_irqrestore+0x33/0x60 [ 842.489543][ C0] complete+0x2a0/0x450 [ 842.493943][ C0] usb_api_blocking_completion+0x7b/0xc0 [ 842.499860][ C0] __usb_hcd_giveback_urb+0x508/0x770 [ 842.505482][ C0] usb_giveback_urb_bh+0x368/0x720 [ 842.510786][ C0] process_scheduled_works+0xa81/0x1bd0 [ 842.516569][ C0] bh_worker+0x6cb/0xab0 [ 842.521040][ C0] workqueue_softirq_action+0x165/0x190 [ 842.526853][ C0] tasklet_action+0x14/0x40 [ 842.531594][ C0] handle_softirqs+0x1d8/0x810 [ 842.536579][ C0] run_ksoftirqd+0x29/0x50 [ 842.541248][ C0] smpboot_thread_fn+0x555/0xa60 [ 842.546395][ C0] kthread+0x3e2/0x540 [ 842.550677][ C0] ret_from_fork+0x6d/0x90 [ 842.555291][ C0] ret_from_fork_asm+0x1a/0x30 [ 842.560282][ C0] [ 842.562697][ C0] Local variable tx created at: [ 842.567654][ C0] ieee80211_get_buffered_bc+0x44/0x970 [ 842.573439][ C0] mac80211_hwsim_beacon_tx+0x63b/0xb40 [ 842.579265][ C0] [ 842.581694][ C0] CPU: 0 PID: 16 Comm: ksoftirqd/0 Tainted: G W 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 842.592911][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 842.603155][ C0] ===================================================== [ 842.610213][ C0] Disabling lock debugging due to kernel taint [ 842.616488][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 842.623047][ C0] CPU: 0 PID: 16 Comm: ksoftirqd/0 Tainted: G B W 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 842.634279][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 842.644480][ C0] Call Trace: [ 842.647866][ C0] [ 842.650821][ C0] dump_stack_lvl+0x216/0x2d0 [ 842.655716][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 842.661747][ C0] dump_stack+0x1e/0x30 [ 842.666112][ C0] panic+0x4e2/0xcd0 [ 842.670225][ C0] ? kmsan_get_metadata+0xf1/0x1d0 [ 842.675543][ C0] kmsan_report+0x2d5/0x2e0 [ 842.680242][ C0] ? stack_depot_save_flags+0x2c/0x6e0 [ 842.685941][ C0] ? kmsan_get_metadata+0x146/0x1d0 [ 842.691330][ C0] ? __msan_warning+0x95/0x120 [ 842.696261][ C0] ? profile_tick+0x1ae/0x1b0 [ 842.701147][ C0] ? tick_nohz_handler+0x588/0x690 [ 842.706479][ C0] ? __hrtimer_run_queues+0x56f/0xe40 [ 842.712066][ C0] ? hrtimer_interrupt+0x3ab/0x1490 [ 842.717465][ C0] ? __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 842.723755][ C0] ? sysvec_apic_timer_interrupt+0x7e/0x90 [ 842.729766][ C0] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 842.736153][ C0] ? _raw_spin_unlock_irqrestore+0x33/0x60 [ 842.742176][ C0] ? complete+0x2a0/0x450 [ 842.746697][ C0] ? usb_api_blocking_completion+0x7b/0xc0 [ 842.752687][ C0] ? __usb_hcd_giveback_urb+0x508/0x770 [ 842.758435][ C0] ? usb_giveback_urb_bh+0x368/0x720 [ 842.763887][ C0] ? process_scheduled_works+0xa81/0x1bd0 [ 842.769795][ C0] ? bh_worker+0x6cb/0xab0 [ 842.774398][ C0] ? workqueue_softirq_action+0x165/0x190 [ 842.780320][ C0] ? tasklet_action+0x14/0x40 [ 842.785190][ C0] ? handle_softirqs+0x1d8/0x810 [ 842.790307][ C0] ? run_ksoftirqd+0x29/0x50 [ 842.795084][ C0] ? smpboot_thread_fn+0x555/0xa60 [ 842.800372][ C0] ? kthread+0x3e2/0x540 [ 842.804799][ C0] ? ret_from_fork+0x6d/0x90 [ 842.809564][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 842.814707][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 842.820720][ C0] ? kmsan_get_metadata+0x146/0x1d0 [ 842.826121][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 842.832123][ C0] ? kmsan_get_metadata+0x146/0x1d0 [ 842.837506][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 842.843495][ C0] ? kmsan_get_metadata+0x146/0x1d0 [ 842.848858][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 842.854859][ C0] __msan_warning+0x95/0x120 [ 842.859608][ C0] profile_tick+0x1ae/0x1b0 [ 842.864305][ C0] ? complete+0x2a0/0x450 [ 842.868907][ C0] tick_nohz_handler+0x588/0x690 [ 842.874057][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 842.879741][ C0] __hrtimer_run_queues+0x56f/0xe40 [ 842.885199][ C0] hrtimer_interrupt+0x3ab/0x1490 [ 842.890435][ C0] ? __pfx_hrtimer_interrupt+0x10/0x10 [ 842.896087][ C0] ? __pfx_hrtimer_interrupt+0x10/0x10 [ 842.901733][ C0] __sysvec_apic_timer_interrupt+0xa6/0x3a0 [ 842.907860][ C0] sysvec_apic_timer_interrupt+0x7e/0x90 [ 842.913690][ C0] [ 842.916713][ C0] [ 842.919747][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 842.925966][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x33/0x60 [ 842.932566][ C0] Code: 56 53 49 89 f6 48 89 fb e8 ca 48 bf f2 48 89 df e8 d2 3a bf f2 c6 00 00 c6 03 00 41 f7 c6 00 02 00 00 74 01 fb be 04 00 00 00 <48> c7 c7 08 5d 0a 00 e8 e1 3c bf f2 65 ff 0d 92 95 85 70 74 09 5b [ 842.952358][ C0] RSP: 0018:ffff888102ac3878 EFLAGS: 00000206 [ 842.958572][ C0] RAX: ffff888043943670 RBX: ffff888044143670 RCX: 0000000043d43670 [ 842.966682][ C0] RDX: ffff888043d43670 RSI: 0000000000000004 RDI: ffff888044143670 [ 842.974792][ C0] RBP: ffff888102ac3888 R08: ffffea000000000f R09: 0000000000000000 [ 842.982908][ C0] R10: 0000000000000000 R11: ffffffff81735990 R12: ffff8880441435f0 [ 842.991012][ C0] R13: 0000000000000000 R14: 0000000000000296 R15: 0000000000000000 [ 842.999112][ C0] ? __pfx_check_preempt_wakeup_fair+0x10/0x10 [ 843.005488][ C0] ? _raw_spin_unlock_irqrestore+0x1e/0x60 [ 843.011468][ C0] complete+0x2a0/0x450 [ 843.015810][ C0] usb_api_blocking_completion+0x7b/0xc0 [ 843.021629][ C0] ? __pfx_usb_api_blocking_completion+0x10/0x10 [ 843.028248][ C0] __usb_hcd_giveback_urb+0x508/0x770 [ 843.033834][ C0] ? kmsan_get_metadata+0x146/0x1d0 [ 843.039216][ C0] usb_giveback_urb_bh+0x368/0x720 [ 843.044501][ C0] ? __pfx_usb_giveback_urb_bh+0x10/0x10 [ 843.050294][ C0] process_scheduled_works+0xa81/0x1bd0 [ 843.056054][ C0] bh_worker+0x6cb/0xab0 [ 843.060504][ C0] workqueue_softirq_action+0x165/0x190 [ 843.066264][ C0] ? __pfx_tasklet_action+0x10/0x10 [ 843.071669][ C0] tasklet_action+0x14/0x40 [ 843.076370][ C0] handle_softirqs+0x1d8/0x810 [ 843.081324][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 843.087312][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 843.093291][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 843.098597][ C0] run_ksoftirqd+0x29/0x50 [ 843.103197][ C0] smpboot_thread_fn+0x555/0xa60 [ 843.108321][ C0] kthread+0x3e2/0x540 [ 843.112568][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 843.118209][ C0] ? __pfx_kthread+0x10/0x10 [ 843.122978][ C0] ret_from_fork+0x6d/0x90 [ 843.127559][ C0] ? __pfx_kthread+0x10/0x10 [ 843.132340][ C0] ret_from_fork_asm+0x1a/0x30 [ 843.137305][ C0] [ 843.140690][ C0] Kernel Offset: disabled [ 843.145073][ C0] Rebooting in 86400 seconds..