last executing test programs: 2m29.165709074s ago: executing program 3 (id=58): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x2, {0x7, 0x29, 0x7, 0x2300c29, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x40, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0xf, 0xcbff, 0x0, {0x5, 0x5, 0x3, 0x6c, 0x7, 0x6, 0x1, 0x6, 0x101, 0x4000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x2000) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) 2m28.887934143s ago: executing program 3 (id=62): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x89727a31546dcc44, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m28.678774143s ago: executing program 3 (id=65): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x34, 0x0, &(0x7f00000028c0)=[@request_death, @clear_death, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 2m28.498406122s ago: executing program 3 (id=68): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xd4000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m28.31633029s ago: executing program 3 (id=71): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000000880)={0x27, r2, 0x0, 0x6, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) close(r1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 2m27.882320204s ago: executing program 3 (id=75): socket$unix(0x1, 0x1, 0x0) r0 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x4005759, 0x0, 0x3, 0x7fe}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.time\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x2311, 0x5, 0x0, 0x0, 0x0) 2m12.751523575s ago: executing program 32 (id=75): socket$unix(0x1, 0x1, 0x0) r0 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x4005759, 0x0, 0x3, 0x7fe}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.time\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x2311, 0x5, 0x0, 0x0, 0x0) 3.829996515s ago: executing program 0 (id=2897): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x3a, 0x1, 0x0, 0x4b) 3.666123921s ago: executing program 0 (id=2903): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000000), 0x1, 0x4e9, &(0x7f00000000c0)="$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") 3.037509945s ago: executing program 0 (id=2915): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f00000001c0)={0x0, 0x80000000}, 0x0) 2.979369551s ago: executing program 0 (id=2916): r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000300)="0300f198aaae5a98ca0000", 0xb, 0x44000, &(0x7f0000000200)={0x11, 0x17, r1, 0x1, 0xfe, 0x6, @random="7483ccb17b06"}, 0x14) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4f, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x8}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@deltaction={0x14, 0x31, 0x10, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c810) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000001c0)={@dev}, &(0x7f00000002c0)=0x14) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 2.805747008s ago: executing program 0 (id=2918): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 1.473392821s ago: executing program 4 (id=2935): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0x2710}}) 1.304773468s ago: executing program 4 (id=2939): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:\x88\xfe\xf7\x01') 1.099351109s ago: executing program 4 (id=2944): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, 0x0, 0x0) 952.627664ms ago: executing program 4 (id=2948): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 798.475809ms ago: executing program 0 (id=2952): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000100)={[0x2]}, 0x8) 741.846405ms ago: executing program 5 (id=2953): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f000000a240)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x9, 0x1, 0x4, 0x3}}, 0x80, &(0x7f0000000680)=[{0x0}, {0x0}, {&(0x7f0000000140)="54a1e6fbef", 0x5}], 0x3}}, {{0x0, 0x0, &(0x7f00000011c0)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x20008044) 740.230475ms ago: executing program 1 (id=2963): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) futimesat(r2, 0x0, 0x0) 658.316923ms ago: executing program 1 (id=2954): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xffeffffe}, {0x16}]}, 0x10) 641.997995ms ago: executing program 2 (id=2955): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$TCSETSW(r2, 0x5403, 0x0) 595.09576ms ago: executing program 5 (id=2956): rt_sigaction(0xd, &(0x7f0000000080)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f0000000800)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 585.153961ms ago: executing program 4 (id=2957): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) 503.637459ms ago: executing program 5 (id=2958): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 502.886259ms ago: executing program 1 (id=2959): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)={0x20, 0x1a, 0x1, 0x70bd2a, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x4, 0x1d}]}, 0x20}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 499.314769ms ago: executing program 2 (id=2960): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 425.555226ms ago: executing program 1 (id=2961): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000bc0), &(0x7f0000000c00)=r1}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) 425.317097ms ago: executing program 4 (id=2962): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f870c0000002a9000070900be0083"], 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(r1, 0x40, 0x1d97, 0x1) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000000)='BBBBBB') pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 373.229152ms ago: executing program 5 (id=2964): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r2, 0xbff, 0x1, &(0x7f0000000040)="b2a11c9f", 0x4) 365.248973ms ago: executing program 2 (id=2965): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x20, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) 288.91267ms ago: executing program 1 (id=2966): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) 253.019464ms ago: executing program 5 (id=2967): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) clock_adjtime(0x6, 0x0) 166.139153ms ago: executing program 1 (id=2968): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 165.888003ms ago: executing program 2 (id=2969): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, &(0x7f0000000180)) 77.605882ms ago: executing program 2 (id=2970): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f000000a240)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x9, 0x1, 0x4, 0x3}}, 0x80, &(0x7f0000000680)=[{0x0}, {0x0}, {&(0x7f0000000140)="54a1e6fbef", 0x5}], 0x3}}, {{0x0, 0x0, &(0x7f00000011c0)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x20008044) 40.428715ms ago: executing program 5 (id=2971): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xd4000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a00000002000001"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 2 (id=2972): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000e3ffff840000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ink becomes ready [ 62.997401][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.006337][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.014984][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.024662][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.033724][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.055812][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.067176][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.077613][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.088696][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.100050][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.110647][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.121374][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.131803][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.142394][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.154282][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.164927][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.176233][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.184048][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.194945][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.205053][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.216999][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.227020][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.237953][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.248417][ T4293] Bluetooth: hci0: command 0x040f tx timeout [ 63.254391][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.254435][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.255970][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.268660][ T4293] Bluetooth: hci1: command 0x040f tx timeout [ 63.284370][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.299111][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.301909][ T4293] Bluetooth: hci2: command 0x040f tx timeout [ 63.311737][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.314149][ T4293] Bluetooth: hci3: command 0x040f tx timeout [ 63.323280][ T4243] Bluetooth: hci4: command 0x040f tx timeout [ 63.336436][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.361074][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.369655][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.375037][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.378608][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.396891][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.406011][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.414858][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.423810][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.432799][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.446921][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.456302][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.465548][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.475391][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.503544][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.512242][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.527712][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.542973][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.550016][ T4299] loop1: detected capacity change from 0 to 1024 [ 63.579678][ T4299] hfsplus: unable to parse mount options [ 63.593989][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.601906][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.618047][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.830124][ T4280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.866369][ T4280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.866980][ T404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.875509][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.898261][ T404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.905789][ T4280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.934717][ T4280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.945173][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.978581][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.991340][ T4309] Zero length message leads to an empty skb [ 64.005838][ T404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.033510][ T404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.064477][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.065510][ T4311] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.084309][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.114296][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.146397][ T404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.158419][ T404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.161511][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.207072][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.315632][ T4243] Bluetooth: hci1: command 0x0419 tx timeout [ 65.341181][ T4243] Bluetooth: hci0: command 0x0419 tx timeout [ 65.369069][ T4376] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 65.396747][ T4243] Bluetooth: hci4: command 0x0419 tx timeout [ 65.411633][ T4376] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 65.432599][ T4243] Bluetooth: hci3: command 0x0419 tx timeout [ 65.439899][ T4243] Bluetooth: hci2: command 0x0419 tx timeout [ 65.469056][ T4380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'. [ 65.484277][ T4380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'. [ 66.053118][ T4371] loop3: detected capacity change from 0 to 32768 [ 66.124844][ T4371] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.33 (4371) [ 66.187448][ T4366] loop1: detected capacity change from 0 to 40427 [ 66.223186][ T4223] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.248198][ T4371] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 66.275447][ T4366] F2FS-fs (loop1): invalid crc value [ 66.290092][ T4371] BTRFS info (device loop3): using free space tree [ 66.341857][ T4371] BTRFS info (device loop3): has skinny extents [ 66.359355][ T4366] F2FS-fs (loop1): Found nat_bits in checkpoint [ 66.582766][ T4223] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 66.594536][ T4223] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 66.612644][ T4223] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 66.613466][ T4366] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 66.629583][ T4223] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 66.650105][ T4223] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 66.743309][ T4371] BTRFS info (device loop3): enabling ssd optimizations [ 66.772835][ T4223] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 66.781899][ T4223] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 66.802576][ T4223] usb 5-1: Product: syz [ 66.806787][ T4223] usb 5-1: Manufacturer: syz [ 66.855024][ T4223] cdc_wdm 5-1:1.0: skipping garbage [ 66.860379][ T4223] cdc_wdm 5-1:1.0: skipping garbage [ 66.894036][ T4223] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 66.927673][ T4223] cdc_wdm 5-1:1.0: Unknown control protocol [ 66.996323][ T4188] attempt to access beyond end of device [ 66.996323][ T4188] loop1: rw=2049, want=45104, limit=40427 [ 67.187965][ T4390] loop0: detected capacity change from 0 to 32768 [ 67.253890][ T4223] usb 5-1: USB disconnect, device number 2 [ 67.262603][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 67.269571][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 67.275660][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 67.401128][ T4390] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.41 (4390) [ 67.520972][ T4390] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 67.537352][ T4390] BTRFS info (device loop0): using free space tree [ 67.545253][ T4390] BTRFS info (device loop0): has skinny extents [ 67.952666][ T4390] BTRFS info (device loop0): enabling ssd optimizations [ 68.147019][ T4468] loop2: detected capacity change from 0 to 2048 [ 68.287225][ T155] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 68.352154][ T26] audit: type=1326 audit(1763228071.598:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4478 comm="syz.1.44" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f103130d6c9 code=0x0 [ 68.403280][ T4481] capability: warning: `syz.3.58' uses deprecated v2 capabilities in a way that may be insecure [ 68.409230][ T4468] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.529967][ T4468] EXT4-fs error (device loop2): ext4_xattr_ibody_get:603: inode #15: comm syz.2.53: corrupted in-inode xattr [ 68.602923][ T4468] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2229: inode #15: comm syz.2.53: corrupted in-inode xattr [ 69.291517][ T4515] loop2: detected capacity change from 0 to 8 [ 69.912022][ T4531] loop4: detected capacity change from 0 to 512 [ 69.951418][ T4533] ======================================================= [ 69.951418][ T4533] WARNING: The mand mount option has been deprecated and [ 69.951418][ T4533] and is ignored by this kernel. Remove the mand [ 69.951418][ T4533] option from the mount to silence this warning. [ 69.951418][ T4533] ======================================================= [ 70.005853][ T4531] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.105684][ T4534] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 70.479579][ T26] audit: type=1326 audit(1763228073.728:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x50000 [ 70.557738][ T26] audit: type=1326 audit(1763228073.768:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x50000 [ 70.682556][ T26] audit: type=1326 audit(1763228073.768:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x50000 [ 70.792892][ T26] audit: type=1326 audit(1763228073.768:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x50000 [ 70.912527][ T26] audit: type=1326 audit(1763228073.768:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x50000 [ 71.006919][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.013674][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.024445][ T26] audit: type=1326 audit(1763228073.768:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x50000 [ 71.160848][ T26] audit: type=1326 audit(1763228073.768:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x50000 [ 71.269936][ T26] audit: type=1326 audit(1763228073.768:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x50000 [ 71.382666][ T26] audit: type=1326 audit(1763228073.768:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x50000 [ 71.692496][ T1112] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.952186][ T4585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.100'. [ 72.113037][ T1112] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.127872][ T1112] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.167085][ T1112] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 72.195280][ T1112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.240979][ T1112] usb 1-1: config 0 descriptor?? [ 72.777227][ T1112] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 73.155316][ T4604] loop4: detected capacity change from 0 to 32768 [ 73.199743][ T4604] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 scanned by syz.4.107 (4604) [ 73.242319][ T4604] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 73.269185][ T4604] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 73.292271][ T4604] BTRFS info (device loop4): use lzo compression, level 0 [ 73.308340][ T4604] BTRFS info (device loop4): using free space tree [ 73.322842][ T4604] BTRFS info (device loop4): has skinny extents [ 73.358218][ T26] kauditd_printk_skb: 2772 callbacks suppressed [ 73.358231][ T26] audit: type=1326 audit(1763228076.608:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x50000 [ 73.475133][ T26] audit: type=1326 audit(1763228076.648:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x50000 [ 73.545781][ T26] audit: type=1326 audit(1763228076.648:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x50000 [ 73.571733][ T26] audit: type=1326 audit(1763228076.648:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x50000 [ 73.571747][ T4604] BTRFS info (device loop4): enabling ssd optimizations [ 73.595241][ T26] audit: type=1326 audit(1763228076.648:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x50000 [ 73.633758][ T26] audit: type=1326 audit(1763228076.648:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x50000 [ 73.667267][ T26] audit: type=1326 audit(1763228076.648:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x50000 [ 73.764432][ T26] audit: type=1326 audit(1763228076.648:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x50000 [ 73.789742][ T4604] fs-verity: sha256 using implementation "sha256-avx2" [ 73.834082][ T4604] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4) [ 73.861421][ T26] audit: type=1326 audit(1763228076.648:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x50000 [ 73.941489][ T26] audit: type=1326 audit(1763228076.648:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x50000 [ 74.112665][ T1112] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 74.130290][ T1112] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 74.151402][ T1112] pyra: probe of 0003:1E7D:2CF6.0001 failed with error -71 [ 74.208611][ T1112] usb 1-1: USB disconnect, device number 2 [ 74.323866][ T4648] loop2: detected capacity change from 0 to 1024 [ 74.411052][ T4647] fido_id[4647]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 74.463264][ T4648] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 74.503431][ T4648] EXT4-fs (loop2): orphan cleanup on readonly fs [ 74.510750][ T4648] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz.2.118: Freeing blocks not in datazone - block = 0, count = 4096 [ 74.553341][ T4648] EXT4-fs (loop2): 1 orphan inode deleted [ 74.572602][ T4648] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,prjquota,noquota,auto_da_alloc,nobarrier,,errors=continue. Quota mode: writeback. [ 75.106781][ T4679] syz.1.132 uses obsolete (PF_INET,SOCK_PACKET) [ 75.399174][ T4695] x_tables: duplicate entry at hook 1 [ 75.523479][ T4706] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.691049][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.107175][ T4731] loop0: detected capacity change from 0 to 512 [ 76.116430][ T4173] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.291044][ T4731] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.351036][ T4731] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.373237][ T4173] usb 5-1: Using ep0 maxpacket: 8 [ 76.492778][ T4173] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.526187][ T4173] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 76.546116][ T4173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.618536][ T4173] usb 5-1: config 0 descriptor?? [ 76.688265][ T4173] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 76.900752][ T4747] syz.0.158 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 78.136964][ T4781] kvm: pic: non byte read [ 78.165958][ T4761] loop0: detected capacity change from 0 to 32768 [ 78.310367][ T4761] XFS (loop0): Mounting V5 Filesystem [ 78.365225][ T4793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.442588][ T4173] gspca_vc032x: reg_w err -71 [ 78.447475][ T4173] vc032x: probe of 5-1:0.0 failed with error -71 [ 78.471337][ T4173] usb 5-1: USB disconnect, device number 3 [ 78.571199][ T4793] syz.1.178 (4793) used greatest stack depth: 20160 bytes left [ 78.590299][ T4761] XFS (loop0): Ending clean mount [ 78.628885][ T4761] XFS (loop0): Quotacheck needed: Please wait. [ 78.701612][ T4761] XFS (loop0): Quotacheck: Done. [ 78.972589][ T4231] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.991359][ T4811] netlink: 'syz.1.184': attribute type 12 has an invalid length. [ 79.034736][ T4182] XFS (loop0): Unmounting Filesystem [ 79.179133][ T4816] netlink: 36 bytes leftover after parsing attributes in process `syz.1.188'. [ 79.212763][ T4231] usb 3-1: Using ep0 maxpacket: 8 [ 79.372696][ T4231] usb 3-1: unable to get BOS descriptor or descriptor too short [ 79.452696][ T4231] usb 3-1: config 4 interface 0 has no altsetting 0 [ 79.692683][ T4231] usb 3-1: string descriptor 0 read error: -22 [ 79.722555][ T4231] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 79.731624][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.815900][ T4231] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 79.857383][ T4231] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 79.922032][ T4231] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 79.957180][ T4231] usb 3-1: media controller created [ 80.017545][ T4802] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 80.035308][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.132764][ T4231] zl10353_read_register: readreg error (reg=127, ret==0) [ 80.140148][ T4857] netlink: 'syz.1.207': attribute type 12 has an invalid length. [ 80.179088][ T4859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.208'. [ 80.234226][ T4231] usb 3-1: USB disconnect, device number 2 [ 81.234828][ T1109] cfg80211: failed to load regulatory.db [ 81.416934][ T4920] 9pnet: p9_fd_create_unix (4920): problem connecting socket: ./file0: -111 [ 82.170929][ T4919] loop0: detected capacity change from 0 to 32768 [ 82.318651][ T4919] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 82.487734][ T4919] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 82.612581][ T4958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 82.668339][ T4959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.675883][ T4959] IPv6: NLM_F_CREATE should be set when creating new route [ 82.774874][ T4961] netlink: 37 bytes leftover after parsing attributes in process `syz.4.255'. [ 82.824021][ T4958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.831288][ T4958] IPv6: NLM_F_CREATE should be set when creating new route [ 82.852892][ T4182] ocfs2: Unmounting device (7,0) on (node local) [ 83.280363][ T4978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.257'. [ 83.331497][ T4978] netlink: 'syz.0.257': attribute type 20 has an invalid length. [ 83.374870][ T4978] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.384220][ T4978] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.393072][ T4978] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.401819][ T4978] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.474344][ T4978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.257'. [ 83.498154][ T4978] netlink: 'syz.0.257': attribute type 20 has an invalid length. [ 83.737331][ T4987] netlink: 52 bytes leftover after parsing attributes in process `syz.4.266'. [ 84.278633][ T5011] device sit0 entered promiscuous mode [ 84.332382][ T5011] netlink: 'syz.2.278': attribute type 1 has an invalid length. [ 84.392757][ T5011] netlink: 1 bytes leftover after parsing attributes in process `syz.2.278'. [ 84.594838][ T5023] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.720045][ T5030] ªªªªªª: renamed from vlan0 [ 84.816885][ T5035] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.872782][ T5035] FAT-fs (loop2): unable to read boot sector [ 85.922101][ T5047] chnl_net:caif_netlink_parms(): no params data found [ 86.249856][ T5047] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.294953][ T5047] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.343569][ T5047] device bridge_slave_0 entered promiscuous mode [ 86.378273][ T5047] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.410169][ T5047] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.447164][ T5047] device bridge_slave_1 entered promiscuous mode [ 86.506976][ T5069] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 86.545687][ T5069] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 86.555800][ T5076] loop4: detected capacity change from 0 to 32768 [ 86.564192][ T5047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.583085][ T5076] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.303 (5076) [ 86.605526][ T5047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.625121][ T5076] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 86.643694][ T5076] BTRFS info (device loop4): force zlib compression, level 3 [ 86.674572][ T5076] BTRFS info (device loop4): enabling ssd optimizations [ 86.681821][ T5047] team0: Port device team_slave_0 added [ 86.682597][ T4652] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.702567][ T5076] BTRFS info (device loop4): allowing degraded mounts [ 86.713487][ T5047] team0: Port device team_slave_1 added [ 86.740571][ T5076] BTRFS info (device loop4): force clearing of disk cache [ 86.759083][ T5076] BTRFS info (device loop4): using free space tree [ 86.799514][ T5076] BTRFS info (device loop4): has skinny extents [ 86.830966][ T5047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.839977][ T5047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.872980][ T5047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.884469][ T5104] overlayfs: failed to get inode (-116) [ 86.897821][ T5047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.911311][ T5104] overlayfs: failed to get inode (-116) [ 86.913674][ T5047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.944498][ T5047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.102406][ T5047] device hsr_slave_0 entered promiscuous mode [ 87.120885][ T5076] BTRFS info (device loop4): clearing free space tree [ 87.136453][ T5047] device hsr_slave_1 entered promiscuous mode [ 87.153125][ T5047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.158753][ T5076] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 87.160721][ T5047] Cannot create hsr debugfs directory [ 87.188072][ T5076] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 87.296070][ T5076] BTRFS info (device loop4): creating free space tree [ 87.305603][ T5076] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 87.317463][ T1112] Bluetooth: hci5: command 0x0409 tx timeout [ 87.334670][ T5076] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 87.393694][ T5076] BTRFS info (device loop4): checking UUID tree [ 87.469505][ T5047] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.491580][ T5047] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.543359][ T5047] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.578871][ T5047] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.722701][ T4428] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.906808][ T5149] netlink: 44 bytes leftover after parsing attributes in process `syz.0.322'. [ 87.944026][ T5047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.015860][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.029699][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.069155][ T5047] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.096704][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.114243][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.133144][ T4428] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 88.152086][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.152825][ T4428] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 88.159231][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.186379][ T4428] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 88.211337][ T4428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.243012][ T5133] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 88.290221][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.322199][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.351426][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.421767][ T404] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.428911][ T404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.541963][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.553775][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.585000][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.604712][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.635954][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.670811][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.689892][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.713931][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.750237][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.780825][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.814940][ T5160] usb 2-1: USB disconnect, device number 2 [ 88.829278][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.869916][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.137580][ T5154] loop0: detected capacity change from 0 to 32768 [ 89.198913][ T5154] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.325 (5154) [ 89.209380][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.236708][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.251403][ T5047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.265115][ T5154] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 89.310074][ T5154] BTRFS info (device loop0): using free space tree [ 89.371003][ T5154] BTRFS info (device loop0): has skinny extents [ 89.402822][ T5160] Bluetooth: hci5: command 0x041b tx timeout [ 89.453334][ T4652] usb 3-1: unable to get BOS descriptor or descriptor too short [ 89.542593][ T4652] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 89.550201][ T4652] usb 3-1: can't read configurations, error -71 [ 89.698052][ T5154] BTRFS info (device loop0): enabling ssd optimizations [ 89.995860][ T5211] loop1: detected capacity change from 0 to 512 [ 90.002577][ T4652] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 90.034882][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.054005][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.113555][ T5047] device veth0_vlan entered promiscuous mode [ 90.140591][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.153649][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.185175][ T5047] device veth1_vlan entered promiscuous mode [ 90.201165][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.218183][ T5211] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.264944][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.377310][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.459496][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.502115][ T5047] device veth0_macvtap entered promiscuous mode [ 90.527936][ T5047] device veth1_macvtap entered promiscuous mode [ 90.529676][ T4652] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 90.552898][ T4652] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.571129][ T4652] usb 3-1: Product: syz [ 90.580792][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.581256][ T4652] usb 3-1: Manufacturer: syz [ 90.612559][ T4652] usb 3-1: SerialNumber: syz [ 90.614359][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.625984][ T4652] usb 3-1: config 0 descriptor?? [ 90.647633][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.663767][ T4652] ch341 3-1:0.0: ch341-uart converter detected [ 90.688699][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.712840][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.732544][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.743103][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.753697][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.819534][ T5047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.885562][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.905905][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.922986][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.931678][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.944679][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.995655][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.028988][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.093830][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.114518][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.132537][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.176433][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.197240][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.241407][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.288319][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.300884][ T5047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.330944][ T5047] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.340302][ T5047] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.396724][ T5047] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.415845][ T5239] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 91.422588][ T5047] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.461273][ T5239] overlayfs: missing 'lowerdir' [ 91.477718][ T5158] Bluetooth: hci5: command 0x040f tx timeout [ 91.498249][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.531410][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.740669][ T5150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.774641][ T5150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.806102][ T5246] loop1: detected capacity change from 0 to 8 [ 91.825280][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.865088][ T404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.910137][ T404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.939177][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.968407][ T5246] SQUASHFS error: lzo decompression failed, data probably corrupt [ 91.982815][ T4652] ch341-uart ttyUSB0: break control not supported, using simulated break [ 92.005882][ T5246] SQUASHFS error: Failed to read block 0x91: -5 [ 92.038565][ T5246] SQUASHFS error: Unable to read metadata cache entry [8f] [ 92.043633][ T4652] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 92.054983][ T5250] block device autoloading is deprecated and will be removed. [ 92.109715][ T5246] SQUASHFS error: Unable to read inode 0x11f [ 92.552928][ T5158] usb 3-1: USB disconnect, device number 4 [ 92.557081][ T5271] loop1: detected capacity change from 0 to 512 [ 92.610826][ T5158] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 92.630033][ T5158] ch341 3-1:0.0: device disconnected [ 92.647734][ T5276] netlink: 80 bytes leftover after parsing attributes in process `syz.2.356'. [ 92.674161][ T5271] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.870226][ T5284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'. [ 93.194267][ T5287] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 93.212569][ T5287] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 93.384106][ T5299] loop0: detected capacity change from 0 to 2048 [ 93.497507][ T5299] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.566169][ T5160] Bluetooth: hci5: command 0x0419 tx timeout [ 93.796155][ T5316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.373'. [ 94.363384][ T5349] netlink: 44 bytes leftover after parsing attributes in process `syz.5.387'. [ 95.334523][ T5389] loop5: detected capacity change from 0 to 512 [ 95.394785][ T5389] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.479329][ T5392] loop4: detected capacity change from 0 to 2048 [ 95.550480][ T5392] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.151090][ T5422] x_tables: duplicate entry at hook 1 [ 96.263522][ T5426] loop0: detected capacity change from 0 to 512 [ 96.313743][ T5426] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.881865][ T5443] device sit0 entered promiscuous mode [ 96.935100][ T5444] loop2: detected capacity change from 0 to 32768 [ 96.955740][ T5443] netlink: 'syz.1.429': attribute type 1 has an invalid length. [ 96.972714][ T5443] netlink: 1 bytes leftover after parsing attributes in process `syz.1.429'. [ 97.013181][ T5444] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 97.121173][ T5444] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 97.213809][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 97.213821][ T26] audit: type=1800 audit(1763228100.468:2821): pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.430" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 97.413483][ T5444] syz.2.430 (5444) used greatest stack depth: 18824 bytes left [ 97.640255][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 98.008965][ T5447] loop0: detected capacity change from 0 to 32768 [ 98.090255][ T5447] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.432 (5447) [ 98.140409][ T5447] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 98.186108][ T5447] BTRFS info (device loop0): metadata ratio 2 [ 98.212295][ T5447] BTRFS info (device loop0): allowing degraded mounts [ 98.243717][ T5447] BTRFS info (device loop0): force zlib compression, level 3 [ 98.276871][ T5447] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 98.317684][ T5447] BTRFS info (device loop0): use zstd compression, level 3 [ 98.348537][ T5447] BTRFS info (device loop0): force clearing of disk cache [ 98.394393][ T5447] BTRFS info (device loop0): turning on flush-on-commit [ 98.422755][ T5447] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 98.474502][ T5447] BTRFS info (device loop0): trying to use backup root at mount time [ 98.521244][ T5447] BTRFS info (device loop0): using free space tree [ 98.548272][ T5447] BTRFS info (device loop0): has skinny extents [ 98.718694][ T5498] netlink: 36 bytes leftover after parsing attributes in process `syz.1.451'. [ 98.728737][ T5499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.452'. [ 99.013645][ T5447] BTRFS info (device loop0): enabling ssd optimizations [ 99.068965][ T5447] BTRFS info (device loop0): clearing free space tree [ 99.112576][ T5447] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 99.194585][ T5447] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 99.300615][ T5447] BTRFS info (device loop0): creating free space tree [ 99.315448][ T5447] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 99.352505][ T5447] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 101.445041][ T5552] netlink: 168 bytes leftover after parsing attributes in process `syz.5.468'. [ 103.174857][ T5603] syz.1.485 (5603): /proc/5600/oom_adj is deprecated, please use /proc/5600/oom_score_adj instead. [ 103.273068][ T5607] netlink: 'syz.5.486': attribute type 2 has an invalid length. [ 103.601148][ T5619] tipc: Started in network mode [ 103.628853][ T5619] tipc: Node identity 1ebb4482e1cf, cluster identity 4711 [ 103.690810][ T5622] futex_wake_op: syz.5.492 tries to shift op by 144; fix this program [ 103.713780][ T5619] tipc: Enabled bearer , priority 0 [ 103.914252][ T5623] device syzkaller0 entered promiscuous mode [ 104.157469][ T5618] tipc: Resetting bearer [ 104.301425][ T5618] tipc: Disabling bearer [ 104.861654][ T5662] capability: warning: `syz.1.511' uses 32-bit capabilities (legacy support in use) [ 105.788240][ T5699] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.202828][ T4173] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.752696][ T4173] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 106.766314][ T4173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.793187][ T4173] usb 1-1: Product: syz [ 106.801891][ T4173] usb 1-1: Manufacturer: syz [ 106.817153][ T4173] usb 1-1: SerialNumber: syz [ 106.851121][ T4173] usb 1-1: config 0 descriptor?? [ 106.903823][ T4173] ch341 1-1:0.0: ch341-uart converter detected [ 108.232796][ T4173] ch341-uart ttyUSB0: break control not supported, using simulated break [ 108.262092][ T4173] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 108.339227][ T5737] loop1: detected capacity change from 0 to 32768 [ 108.583367][ T5737] XFS (loop1): Mounting V5 Filesystem [ 108.711573][ T5792] netlink: 72 bytes leftover after parsing attributes in process `syz.2.572'. [ 108.736781][ T4173] usb 1-1: USB disconnect, device number 3 [ 108.768007][ T4173] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 108.785867][ T4173] ch341 1-1:0.0: device disconnected [ 108.963836][ T5737] XFS (loop1): Ending clean mount [ 108.984308][ T5737] XFS (loop1): Quotacheck needed: Please wait. [ 109.170401][ T26] audit: type=1326 audit(1763228112.418:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x7ffc0000 [ 109.206396][ T5737] XFS (loop1): Quotacheck: Done. [ 109.278397][ T26] audit: type=1326 audit(1763228112.428:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f300bbbc6c9 code=0x7ffc0000 [ 109.375710][ T5815] netlink: 56 bytes leftover after parsing attributes in process `syz.4.583'. [ 109.416714][ T26] audit: type=1326 audit(1763228112.428:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x7ffc0000 [ 109.422532][ T5815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.583'. [ 109.492793][ T26] audit: type=1326 audit(1763228112.438:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x7ffc0000 [ 109.576338][ T5815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 109.604531][ T26] audit: type=1326 audit(1763228112.438:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f300bbbc6c9 code=0x7ffc0000 [ 109.632966][ T4188] XFS (loop1): Unmounting Filesystem [ 109.641912][ T5815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 109.746085][ T26] audit: type=1326 audit(1763228112.448:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x7ffc0000 [ 109.799133][ T26] audit: type=1326 audit(1763228112.448:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x7ffc0000 [ 109.923165][ T26] audit: type=1326 audit(1763228112.448:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f300bbbc6c9 code=0x7ffc0000 [ 110.060702][ T26] audit: type=1326 audit(1763228112.448:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x7ffc0000 [ 110.145486][ T5838] overlayfs: missing 'lowerdir' [ 110.162733][ T26] audit: type=1326 audit(1763228112.448:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x7ffc0000 [ 110.521125][ T5845] smc: net device ip6tnl0 applied user defined pnetid SYZ1 [ 111.042149][ T5857] netlink: 51 bytes leftover after parsing attributes in process `syz.2.605'. [ 111.282230][ T5865] device sit0 entered promiscuous mode [ 111.351795][ T5865] netlink: 'syz.5.608': attribute type 1 has an invalid length. [ 111.449369][ T5865] netlink: 1 bytes leftover after parsing attributes in process `syz.5.608'. [ 111.751369][ T5888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 112.061526][ T5904] netlink: 44 bytes leftover after parsing attributes in process `syz.5.625'. [ 112.107884][ T5909] loop0: detected capacity change from 0 to 512 [ 112.123024][ T5904] netlink: 59 bytes leftover after parsing attributes in process `syz.5.625'. [ 112.209350][ T5909] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 112.247813][ T5909] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.628: Unimplemented hash flags: 0x0001 [ 112.301170][ T5909] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.628: Corrupt directory, running e2fsck is recommended [ 112.330560][ T5909] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.628: Unimplemented hash flags: 0x0001 [ 112.343810][ T5909] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.628: Corrupt directory, running e2fsck is recommended [ 112.374975][ T5919] loop5: detected capacity change from 0 to 128 [ 112.404017][ T5920] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.628: Unimplemented hash flags: 0x0001 [ 112.444112][ T5920] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.628: Corrupt directory, running e2fsck is recommended [ 112.504282][ T5909] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.628: Unimplemented hash flags: 0x0001 [ 112.522732][ T5909] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.628: Corrupt directory, running e2fsck is recommended [ 112.566483][ T5924] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.628: Unimplemented hash flags: 0x0001 [ 112.606073][ T5924] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.628: Corrupt directory, running e2fsck is recommended [ 112.693616][ T5920] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.628: path /109/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 112.828929][ T5919] attempt to access beyond end of device [ 112.828929][ T5919] loop5: rw=0, want=1041, limit=128 [ 113.787094][ T5967] loop0: detected capacity change from 0 to 764 [ 114.277734][ T5984] smc: net device ip6tnl0 applied user defined pnetid SYZ1 [ 114.807679][ T6009] loop5: detected capacity change from 0 to 764 [ 114.891616][ T6012] loop4: detected capacity change from 0 to 128 [ 115.111709][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 115.111722][ T26] audit: type=1800 audit(1763228118.358:2844): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.675" name="bus" dev="loop4" ino=1048593 res=0 errno=0 [ 115.348318][ T6012] attempt to access beyond end of device [ 115.348318][ T6012] loop4: rw=2049, want=1041, limit=128 [ 115.616774][ T6038] overlayfs: conflicting options: nfs_export=on,index=off [ 116.456595][ T6023] loop5: detected capacity change from 0 to 32768 [ 116.633318][ T6023] XFS (loop5): Mounting V5 Filesystem [ 116.680727][ T6083] loop2: detected capacity change from 0 to 1024 [ 116.758103][ T6083] EXT4-fs (loop2): Ignoring removed bh option [ 116.762849][ T6090] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.934389][ T6083] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 116.997288][ T6023] XFS (loop5): Ending clean mount [ 117.065033][ T6023] XFS (loop5): Quotacheck needed: Please wait. [ 117.109947][ T6101] netlink: 'syz.0.710': attribute type 4 has an invalid length. [ 117.152773][ T6101] __nla_validate_parse: 2 callbacks suppressed [ 117.152788][ T6101] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.710'. [ 117.170492][ T6023] XFS (loop5): Quotacheck: Done. [ 117.374906][ T5047] XFS (loop5): Unmounting Filesystem [ 117.724689][ T6126] sctp: [Deprecated]: syz.1.721 (pid 6126) Use of int in max_burst socket option deprecated. [ 117.724689][ T6126] Use struct sctp_assoc_value instead [ 117.843678][ T6128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.724'. [ 118.046353][ T6134] sctp: [Deprecated]: syz.0.737 (pid 6134) Use of int in max_burst socket option deprecated. [ 118.046353][ T6134] Use struct sctp_assoc_value instead [ 118.279204][ T6144] binder: 6143:6144 ioctl c018620b 0 returned -14 [ 118.590583][ T6162] loop1: detected capacity change from 0 to 512 [ 118.728537][ T6162] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 118.906524][ T6162] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.736: Unimplemented hash flags: 0x0001 [ 118.951780][ T6162] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.736: Corrupt directory, running e2fsck is recommended [ 119.053619][ T6182] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.736: Unimplemented hash flags: 0x0001 [ 119.073421][ T6182] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.736: Corrupt directory, running e2fsck is recommended [ 119.234306][ T6162] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.736: Unimplemented hash flags: 0x0001 [ 119.284354][ T6162] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.736: Corrupt directory, running e2fsck is recommended [ 119.331540][ T6189] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.736: Unimplemented hash flags: 0x0001 [ 119.432547][ T6189] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.736: Corrupt directory, running e2fsck is recommended [ 119.528546][ T6182] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.736: Unimplemented hash flags: 0x0001 [ 119.592736][ T6182] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.736: Corrupt directory, running e2fsck is recommended [ 119.723719][ T6212] netlink: 'syz.4.763': attribute type 4 has an invalid length. [ 119.731398][ T6212] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.763'. [ 120.549866][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.784'. [ 120.562677][ T5222] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 120.812635][ T5222] usb 3-1: Using ep0 maxpacket: 8 [ 120.932814][ T5222] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 120.946434][ T6274] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 120.966583][ T5222] usb 3-1: config 179 has no interface number 0 [ 120.992678][ T5222] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 121.028889][ T5222] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 121.089011][ T5222] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 121.132242][ T5222] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 121.171228][ T5222] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 121.225710][ T5222] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 121.254803][ T5222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.262990][ T6284] netlink: 'syz.1.798': attribute type 4 has an invalid length. [ 121.290319][ T6284] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.798'. [ 121.312877][ T6242] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.344487][ T5222] xpad: probe of 3-1:179.65 failed with error -5 [ 121.358862][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.800'. [ 121.589564][ T4223] usb 3-1: USB disconnect, device number 6 [ 121.767343][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 121.876723][ T6273] loop4: detected capacity change from 0 to 32768 [ 122.036658][ T6273] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 122.275238][ T6327] netlink: 168 bytes leftover after parsing attributes in process `syz.1.818'. [ 122.407496][ T4187] ocfs2: Unmounting device (7,4) on (node local) [ 123.448444][ T6391] xt_TCPMSS: Only works on TCP SYN packets [ 123.802929][ T6415] futex_wake_op: syz.4.860 tries to shift op by 144; fix this program [ 124.134980][ T6432] tipc: Started in network mode [ 124.139899][ T6432] tipc: Node identity 1e74e54e1be9, cluster identity 4711 [ 124.192598][ T6432] tipc: Enabled bearer , priority 0 [ 124.207522][ T6439] loop1: detected capacity change from 0 to 64 [ 124.375976][ T6441] device syzkaller0 entered promiscuous mode [ 124.521608][ T6431] tipc: Resetting bearer [ 124.703426][ T6461] netlink: 240 bytes leftover after parsing attributes in process `syz.0.880'. [ 124.714880][ T6431] tipc: Disabling bearer [ 125.954645][ T6512] netlink: 240 bytes leftover after parsing attributes in process `syz.2.916'. [ 126.889778][ T6560] tipc: Started in network mode [ 126.917780][ T6560] tipc: Node identity 36b327b6ccb7, cluster identity 4711 [ 126.967216][ T6560] tipc: Enabled bearer , priority 0 [ 127.109490][ T6567] device syzkaller0 entered promiscuous mode [ 127.229068][ T6559] tipc: Resetting bearer [ 127.319684][ T6584] loop2: detected capacity change from 0 to 64 [ 127.344484][ T6559] tipc: Disabling bearer [ 128.425759][ T6641] overlayfs: missing 'lowerdir' [ 128.465791][ T6647] loop4: detected capacity change from 0 to 16 [ 128.510644][ T6647] erofs: (device loop4): mounted with root inode @ nid 36. [ 128.608845][ T6647] attempt to access beyond end of device [ 128.608845][ T6647] loop4: rw=0, want=24, limit=16 [ 128.837314][ T26] audit: type=1326 audit(1763228132.088:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.1.972" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f103130d6c9 code=0x0 [ 128.993932][ T6670] loop4: detected capacity change from 0 to 512 [ 129.436761][ T26] audit: type=1326 audit(1763228132.688:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6689 comm="syz.4.985" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63871916c9 code=0x0 [ 129.578814][ T26] audit: type=1326 audit(1763228132.718:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eff8256c9 code=0x7ff00000 [ 129.669511][ T26] audit: type=1326 audit(1763228132.718:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eff8256c9 code=0x7ff00000 [ 129.707764][ T26] audit: type=1326 audit(1763228132.718:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eff8256c9 code=0x7ff00000 [ 129.737888][ T26] audit: type=1326 audit(1763228132.718:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eff8256c9 code=0x7ff00000 [ 129.793812][ T26] audit: type=1326 audit(1763228132.718:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eff8256c9 code=0x7ff00000 [ 129.877638][ T26] audit: type=1326 audit(1763228132.718:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eff8256c9 code=0x7ff00000 [ 129.982094][ T26] audit: type=1326 audit(1763228132.718:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eff8256c9 code=0x7ff00000 [ 130.054576][ T26] audit: type=1326 audit(1763228132.718:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eff8256c9 code=0x7ff00000 [ 130.606110][ T6759] overlayfs: failed to clone upperpath [ 130.909703][ T6777] loop5: detected capacity change from 0 to 512 [ 130.992202][ T6777] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 131.129074][ T6777] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 131.136903][ T6791] loop4: detected capacity change from 0 to 1024 [ 131.234230][ T6777] EXT4-fs (loop5): 1 truncate cleaned up [ 131.239988][ T6777] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.381255][ T6803] EXT4-fs error (device loop5): mb_free_blocks:1860: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 131.552004][ T5150] hfsplus: b-tree write err: -5, ino 3 [ 131.605264][ T6814] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1046'. [ 132.212342][ T6846] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1060'. [ 132.294666][ T6850] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1062'. [ 132.444327][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.450670][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.192543][ T5222] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 133.350514][ T6890] x_tables: duplicate entry at hook 2 [ 133.442629][ T5222] usb 1-1: Using ep0 maxpacket: 8 [ 133.562767][ T5222] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 133.582630][ T5222] usb 1-1: config 179 has no interface number 0 [ 133.589066][ T5222] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 133.621036][ T5222] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 133.653538][ T5222] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 133.688433][ T5222] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 133.738140][ T5222] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 133.802351][ T5222] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 133.823417][ T5222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.873391][ T6877] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 133.895610][ T5222] xpad: probe of 1-1:179.65 failed with error -5 [ 134.109316][ T4223] usb 1-1: USB disconnect, device number 4 [ 135.138499][ T6932] cgroup: none used incorrectly [ 135.331504][ T6945] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1108'. [ 135.594097][ T6952] mmap: syz.0.1109 (6952) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 135.730158][ T6937] chnl_net:caif_netlink_parms(): no params data found [ 135.821846][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 135.821855][ T26] audit: type=1326 audit(1763228139.068:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.1.1112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f103130d6c9 code=0x0 [ 136.150218][ T6937] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.157599][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.166605][ T6937] device bridge_slave_0 entered promiscuous mode [ 136.175653][ T6937] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.182895][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.190905][ T6937] device bridge_slave_1 entered promiscuous mode [ 136.265502][ T6937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.277512][ T6937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.386867][ T6937] team0: Port device team_slave_0 added [ 136.431022][ T6937] team0: Port device team_slave_1 added [ 136.552531][ T6937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.559546][ T6937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.685639][ T6937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.772580][ T6937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.799920][ T6937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.917662][ T6937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.104690][ T6937] device hsr_slave_0 entered promiscuous mode [ 137.153199][ T6937] device hsr_slave_1 entered promiscuous mode [ 137.175490][ T6937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.196000][ T6937] Cannot create hsr debugfs directory [ 137.322338][ T5158] Bluetooth: hci2: command 0x0409 tx timeout [ 137.501477][ T7017] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1140'. [ 137.610345][ T6937] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.841911][ T6937] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.059147][ T6937] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.169453][ T7045] process 'syz.2.1152' launched './file0' with NULL argv: empty string added [ 138.294750][ T6937] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.390876][ T7055] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1157'. [ 138.613614][ T6937] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 138.695179][ T6937] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 138.724724][ T6937] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 138.776054][ T6937] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 139.021114][ T7093] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1172'. [ 139.070853][ T7091] loop5: detected capacity change from 0 to 2048 [ 139.103960][ T6937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.139032][ T7096] bridge0: port 3(vlan2) entered blocking state [ 139.205791][ T7096] bridge0: port 3(vlan2) entered disabled state [ 139.254865][ T7096] device vlan2 entered promiscuous mode [ 139.260542][ T7096] device bond0 entered promiscuous mode [ 139.302949][ T7096] device bond_slave_0 entered promiscuous mode [ 139.309377][ T7096] device bond_slave_1 entered promiscuous mode [ 139.344116][ T7096] bridge0: port 3(vlan2) entered blocking state [ 139.350478][ T7096] bridge0: port 3(vlan2) entered forwarding state [ 139.402704][ T4649] Bluetooth: hci2: command 0x041b tx timeout [ 139.420247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.431085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.455145][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.518958][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.530722][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.541921][ T7100] device bridge_slave_0 left promiscuous mode [ 139.549355][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.580121][ T7100] device bridge_slave_1 left promiscuous mode [ 139.594691][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.643683][ T7100] bond0: (slave bond_slave_0): Releasing backup interface [ 139.683388][ T7100] device bond_slave_0 left promiscuous mode [ 139.723351][ T7100] bond0: (slave bond_slave_1): Releasing backup interface [ 139.752253][ T7100] device bond_slave_1 left promiscuous mode [ 139.790850][ T7121] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1187'. [ 139.832131][ T7123] loop0: detected capacity change from 0 to 2048 [ 139.867777][ T7100] team0: Port device team_slave_0 removed [ 139.902111][ T7100] team0: Port device team_slave_1 removed [ 139.940230][ T7100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.967691][ T7100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.017330][ T7100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.095288][ T7100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.171072][ T7100] device vlan2 left promiscuous mode [ 140.183327][ T7100] device bond0 left promiscuous mode [ 140.189272][ T7100] bridge0: port 3(vlan2) entered disabled state [ 140.210034][ T6937] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.274008][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.306492][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.542333][ T404] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.549481][ T404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.566402][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.579645][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.592074][ T404] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.599173][ T404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.616068][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.660403][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.679038][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.709869][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.749180][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.768391][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.777692][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.815139][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.831815][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.871823][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.896747][ T6937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.925708][ T7158] overlayfs: missing 'lowerdir' [ 140.932270][ T6937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.953501][ T7152] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1202'. [ 140.975577][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.004491][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.443455][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.451374][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.476506][ T6937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.483472][ T4223] Bluetooth: hci2: command 0x040f tx timeout [ 141.624682][ T7190] netlink: 'syz.5.1217': attribute type 39 has an invalid length. [ 141.668415][ T7190] device veth0_macvtap left promiscuous mode [ 141.909101][ T5150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.926074][ T5150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.936856][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1225'. [ 141.998833][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.009116][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.036572][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.044898][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.056905][ T6937] device veth0_vlan entered promiscuous mode [ 142.064271][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.072378][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.086478][ T6937] device veth1_vlan entered promiscuous mode [ 142.119291][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 142.128090][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 142.136919][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.146162][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.157448][ T6937] device veth0_macvtap entered promiscuous mode [ 142.169643][ T6937] device veth1_macvtap entered promiscuous mode [ 142.197172][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.218119][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.230542][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.248165][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.259758][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.278222][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.289934][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.309193][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.321575][ T6937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.338951][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.348737][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.357305][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.366860][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.379272][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.397623][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.409154][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.419946][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.430088][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.441161][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.453221][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.464183][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.474296][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.485591][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.497106][ T6937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.506007][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.516557][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.529194][ T6937] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.538430][ T6937] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.547631][ T6937] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.557772][ T6937] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.667157][ T404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.720843][ T404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.740634][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.751090][ T5150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.759788][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.770471][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.858894][ T7216] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1237'. [ 142.888993][ T7216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1237'. [ 142.919371][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 142.966279][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 143.086318][ T7226] loop4: detected capacity change from 0 to 2048 [ 143.298131][ T4223] Process accounting resumed [ 143.382717][ T1112] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 143.404291][ T7238] Process accounting resumed [ 143.562837][ T4223] Bluetooth: hci2: command 0x0419 tx timeout [ 143.762913][ T1112] usb 1-1: config 0 has no interfaces? [ 143.842817][ T1112] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 143.868665][ T1112] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 143.914052][ T1112] usb 1-1: Manufacturer: syz [ 143.934142][ T1112] usb 1-1: config 0 descriptor?? [ 144.175236][ T7228] udc-core: couldn't find an available UDC or it's busy [ 144.182218][ T7228] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 144.232977][ T1112] usb 1-1: USB disconnect, device number 5 [ 144.466014][ T7304] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1270'. [ 144.508971][ T7308] overlayfs: failed to clone upperpath [ 144.879148][ T7329] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1280'. [ 144.918363][ T7331] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1278'. [ 145.476243][ T7369] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1298'. [ 145.532725][ T7369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1298'. [ 145.583056][ T7369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1298'. [ 146.241834][ T4649] Process accounting resumed [ 146.302098][ T7415] Process accounting resumed [ 146.415545][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.424408][ T7427] bridge0: port 3(vlan0) entered blocking state [ 146.439899][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.442273][ T7427] bridge0: port 3(vlan0) entered disabled state [ 146.494325][ T7427] device vlan0 entered promiscuous mode [ 146.499904][ T7427] device bond0 entered promiscuous mode [ 146.617529][ T7427] device bond_slave_0 entered promiscuous mode [ 146.647993][ T7427] device bond_slave_1 entered promiscuous mode [ 146.663340][ T7427] bridge0: port 3(vlan0) entered blocking state [ 146.669661][ T7427] bridge0: port 3(vlan0) entered forwarding state [ 146.728800][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 146.806336][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.842115][ T7431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.881625][ T7431] device bridge_slave_0 left promiscuous mode [ 146.908369][ T7431] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.940245][ T7431] device bridge_slave_1 left promiscuous mode [ 146.950067][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.975197][ T7431] bond0: (slave bond_slave_0): Releasing backup interface [ 146.993292][ T7431] device bond_slave_0 left promiscuous mode [ 147.041924][ T7431] bond0: (slave bond_slave_1): Releasing backup interface [ 147.074751][ T7431] device bond_slave_1 left promiscuous mode [ 147.147692][ T7431] team0: Port device team_slave_0 removed [ 147.172962][ T7431] team0: Port device team_slave_1 removed [ 147.186880][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.220150][ T7431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.254131][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.290214][ T7431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.339142][ T7431] device vlan0 left promiscuous mode [ 147.394500][ T7431] device bond0 left promiscuous mode [ 147.400025][ T7431] bridge0: port 3(vlan0) entered disabled state [ 148.072604][ T7483] bridge0: port 3(vlan2) entered blocking state [ 148.099683][ T7483] bridge0: port 3(vlan2) entered disabled state [ 148.151475][ T7483] device vlan2 entered promiscuous mode [ 148.175387][ T7483] device bond0 entered promiscuous mode [ 148.180971][ T7483] device bond_slave_0 entered promiscuous mode [ 148.229711][ T7483] device bond_slave_1 entered promiscuous mode [ 148.253921][ T7483] bridge0: port 3(vlan2) entered blocking state [ 148.260354][ T7483] bridge0: port 3(vlan2) entered listening state [ 148.295260][ T7488] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.393606][ T7488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.401196][ T7488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.404932][ T7501] __nla_validate_parse: 10 callbacks suppressed [ 148.404944][ T7501] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1364'. [ 148.423746][ T7503] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1367'. [ 148.441389][ T7488] device bridge_slave_0 left promiscuous mode [ 148.469243][ T7488] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.534674][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1364'. [ 148.553546][ T7488] device bridge_slave_1 left promiscuous mode [ 148.567457][ T7488] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.608303][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'. [ 148.635305][ T7488] bond0: (slave bond_slave_0): Releasing backup interface [ 148.648823][ T7488] device bond_slave_0 left promiscuous mode [ 148.653729][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'. [ 148.730524][ T7488] bond0: (slave bond_slave_1): Releasing backup interface [ 148.760442][ T7488] device bond_slave_1 left promiscuous mode [ 148.943523][ T7520] overlayfs: missing 'lowerdir' [ 148.961591][ T7488] team0: Port device team_slave_0 removed [ 149.101244][ T7488] team0: Port device team_slave_1 removed [ 149.125711][ T7488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.171564][ T7488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.189785][ T7488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.215597][ T7488] device vlan2 left promiscuous mode [ 149.237323][ T7488] device bond0 left promiscuous mode [ 149.255994][ T7488] bridge0: port 3(vlan2) entered disabled state [ 149.313665][ T7525] netlink: 'syz.2.1386': attribute type 39 has an invalid length. [ 149.433555][ T7525] device veth0_macvtap left promiscuous mode [ 149.616966][ T5150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.671611][ T5150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.023227][ T7559] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1387'. [ 150.094679][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1387'. [ 150.115958][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1387'. [ 150.145384][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1387'. [ 150.311154][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1396'. [ 150.335391][ T26] audit: type=1326 audit(1763228153.588:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.4.1395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74303dd6c9 code=0x0 [ 150.804495][ T4173] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 151.222957][ T4173] usb 6-1: config 0 has no interfaces? [ 151.254810][ T7614] netlink: 'syz.4.1417': attribute type 39 has an invalid length. [ 151.301651][ T7614] device veth0_macvtap left promiscuous mode [ 151.309189][ T4173] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 151.334735][ T4173] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 151.354437][ T4173] usb 6-1: Manufacturer: syz [ 151.371527][ T4173] usb 6-1: config 0 descriptor?? [ 151.623485][ T7636] 9pnet: Insufficient options for proto=fd [ 151.669196][ T7581] udc-core: couldn't find an available UDC or it's busy [ 151.702608][ T7581] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 151.714875][ T4173] usb 6-1: USB disconnect, device number 2 [ 152.003693][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.017326][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.212078][ T7668] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 153.260457][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 153.744083][ T26] audit: type=1326 audit(1763228156.998:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7725 comm="syz.5.1470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff63d79b6c9 code=0x0 [ 153.899750][ T7736] __nla_validate_parse: 7 callbacks suppressed [ 153.899763][ T7736] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1484'. [ 154.080823][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'. [ 154.201523][ T7743] device team1 entered promiscuous mode [ 154.498522][ T26] audit: type=1326 audit(1763228157.748:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.2.1487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x0 [ 155.459947][ T7799] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1504'. [ 155.573834][ T7799] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1504'. [ 155.649545][ T7799] netlink: 'syz.2.1504': attribute type 4 has an invalid length. [ 155.805216][ T7815] loop5: detected capacity change from 0 to 512 [ 155.978485][ T7815] EXT4-fs (loop5): Test dummy encryption mode enabled [ 156.022086][ T7815] EXT4-fs (loop5): Ignoring removed oldalloc option [ 156.067692][ T7815] EXT4-fs (loop5): Ignoring removed nobh option [ 156.108217][ T7815] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 156.193837][ T7827] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1517'. [ 156.215653][ T7815] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 156.272519][ T7815] EXT4-fs (loop5): Remounting filesystem read-only [ 156.279664][ T7815] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 156.368593][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1519'. [ 156.390432][ T7815] EXT4-fs (loop5): 1 truncate cleaned up [ 156.414386][ T7815] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,quota,debug_want_extra_isize=0x000000000000002e,oldalloc,errors=remount-ro,nobh,. Quota mode: writeback. [ 156.467055][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 156.733940][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1525'. [ 156.846136][ T7846] device team1 entered promiscuous mode [ 156.902707][ T7852] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1526'. [ 157.194785][ T7861] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1530'. [ 157.235674][ T7861] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1530'. [ 157.277418][ T7861] netlink: 'syz.5.1530': attribute type 4 has an invalid length. [ 157.524301][ T7872] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 158.558826][ T26] audit: type=1326 audit(1763228161.808:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.5.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63d79b6c9 code=0x7ffc0000 [ 158.652768][ T26] audit: type=1326 audit(1763228161.858:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.5.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ff63d79b6c9 code=0x7ffc0000 [ 158.787519][ T26] audit: type=1326 audit(1763228161.868:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.5.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63d79b6c9 code=0x7ffc0000 [ 158.928353][ T26] audit: type=1326 audit(1763228161.868:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.5.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63d79b6c9 code=0x7ffc0000 [ 159.057670][ T26] audit: type=1326 audit(1763228161.868:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.5.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff63d79b6c9 code=0x7ffc0000 [ 159.182599][ T26] audit: type=1326 audit(1763228161.868:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.5.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63d79b6c9 code=0x7ffc0000 [ 159.282226][ T26] audit: type=1326 audit(1763228161.868:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.5.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63d79b6c9 code=0x7ffc0000 [ 159.364354][ T7960] __nla_validate_parse: 2 callbacks suppressed [ 159.364371][ T7960] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1574'. [ 159.392550][ T26] audit: type=1326 audit(1763228161.868:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.5.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff63d79b6c9 code=0x7ffc0000 [ 159.510898][ T26] audit: type=1326 audit(1763228161.868:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.5.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63d79b6c9 code=0x7ffc0000 [ 159.622818][ T26] audit: type=1326 audit(1763228161.868:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.5.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63d79b6c9 code=0x7ffc0000 [ 161.252910][ T5158] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 161.474068][ T8090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1632'. [ 161.648130][ T5158] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.668702][ T5158] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.681618][ T5158] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.702364][ T5158] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.733441][ T5158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.768790][ T5158] usb 5-1: config 0 descriptor?? [ 162.265887][ T5158] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 162.279545][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1652'. [ 162.306633][ T5158] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 162.657152][ T4425] usb 5-1: USB disconnect, device number 4 [ 162.662621][ C1] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -19 [ 162.682584][ T8150] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -19 [ 162.897495][ T8162] loop5: detected capacity change from 0 to 1024 [ 163.033509][ T8162] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 163.136815][ T8162] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.278962][ T8162] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1665: bg 0: block 112: padding at end of block bitmap is not set [ 163.407362][ T8162] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 163.482845][ T8162] EXT4-fs (loop5): This should not happen!! Data will be lost [ 163.482845][ T8162] [ 163.555057][ T8185] EXT4-fs error (device loop5): ext4_map_blocks:739: inode #15: block 1: comm syz.5.1665: lblock 1 mapped to illegal pblock 1 (length 1) [ 163.613517][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1683'. [ 163.631940][ T8202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1683'. [ 163.655068][ T8202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1683'. [ 163.728180][ T9] EXT4-fs error (device loop5): ext4_map_blocks:739: inode #15: comm kworker/u4:0: lblock 0 mapped to illegal pblock 0 (length 1) [ 163.800495][ T9] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 163.852465][ T9] EXT4-fs (loop5): This should not happen!! Data will be lost [ 163.852465][ T9] [ 163.978718][ T8219] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1692'. [ 164.745472][ T8268] binder: 8267:8268 ioctl c0306201 200000000280 returned -14 [ 164.801331][ T8273] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1718'. [ 164.963295][ T8282] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1721'. [ 165.026409][ T8282] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1721'. [ 165.070705][ T8282] netlink: 'syz.0.1721': attribute type 4 has an invalid length. [ 165.244241][ T8296] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1729'. [ 165.345406][ T8306] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 165.388498][ T8310] netlink: 'syz.0.1736': attribute type 5 has an invalid length. [ 166.451373][ T8374] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1768'. [ 167.041321][ T8407] binder: 8404:8407 ioctl c0306201 200000000080 returned -14 [ 167.220556][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1788'. [ 167.474264][ T8428] cgroup: name respecified [ 167.722217][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1798'. [ 168.053604][ T8450] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1805'. [ 168.646590][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1818'. [ 168.732362][ T8479] device team1 entered promiscuous mode [ 169.167268][ T8510] netlink: 'syz.5.1831': attribute type 4 has an invalid length. [ 169.390583][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 169.390596][ T26] audit: type=1326 audit(1763228172.638:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8521 comm="syz.4.1838" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74303dd6c9 code=0x0 [ 169.604150][ T8531] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1842'. [ 170.334185][ T8575] device ip6gre1 entered promiscuous mode [ 170.497929][ T8586] netlink: 'syz.0.1868': attribute type 10 has an invalid length. [ 170.518621][ T8586] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1868'. [ 170.637825][ T8586] team0: Port device geneve0 added [ 171.449490][ T8642] netlink: 'syz.0.1896': attribute type 27 has an invalid length. [ 171.632367][ T8651] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 171.636434][ T8655] netlink: 'syz.0.1901': attribute type 7 has an invalid length. [ 171.667906][ T8654] netlink: 'syz.4.1902': attribute type 27 has an invalid length. [ 171.689220][ T8651] overlayfs: missing 'lowerdir' [ 171.824457][ T8667] netlink: 'syz.0.1909': attribute type 21 has an invalid length. [ 171.872527][ T8667] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1909'. [ 172.471219][ T8701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1925'. [ 172.591597][ T8711] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1929'. [ 174.097754][ T8793] netlink: 37 bytes leftover after parsing attributes in process `syz.4.1968'. [ 174.353796][ T8801] tipc: Enabled bearer , priority 0 [ 174.509790][ T8801] device syzkaller0 entered promiscuous mode [ 174.672278][ T8800] tipc: Resetting bearer [ 174.805815][ T8800] tipc: Disabling bearer [ 175.105306][ T8844] tmpfs: Bad value for 'mpol' [ 175.264432][ T8856] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1997'. [ 175.698194][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2006'. [ 176.121100][ T26] audit: type=1326 audit(1763228179.368:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eff8256c9 code=0x50000 [ 176.249843][ T26] audit: type=1326 audit(1763228179.408:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eff8256c9 code=0x50000 [ 176.370314][ T8909] mip6: mip6_destopt_init_state: spi is not 0: 33554432 [ 176.409304][ T26] audit: type=1326 audit(1763228179.408:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eff8256c9 code=0x50000 [ 176.450783][ T5160] libceph: connect (1)[c::]:6789 error -101 [ 176.493560][ T5160] libceph: mon0 (1)[c::]:6789 connect error [ 176.511441][ T8915] ceph: No mds server is up or the cluster is laggy [ 176.513858][ T5160] libceph: connect (1)[c::]:6789 error -101 [ 176.524518][ T5160] libceph: mon0 (1)[c::]:6789 connect error [ 176.562088][ T26] audit: type=1326 audit(1763228179.408:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eff8256c9 code=0x50000 [ 176.584621][ T26] audit: type=1326 audit(1763228179.408:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eff8256c9 code=0x50000 [ 176.618776][ T26] audit: type=1326 audit(1763228179.418:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eff8256c9 code=0x50000 [ 176.643519][ T26] audit: type=1326 audit(1763228179.418:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eff8256c9 code=0x50000 [ 176.668136][ T26] audit: type=1326 audit(1763228179.418:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eff8256c9 code=0x50000 [ 176.692895][ T26] audit: type=1326 audit(1763228179.418:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eff8256c9 code=0x50000 [ 176.716595][ T26] audit: type=1326 audit(1763228179.418:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.0.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eff8256c9 code=0x50000 [ 176.784815][ T5158] libceph: connect (1)[c::]:6789 error -101 [ 176.790820][ T5158] libceph: mon0 (1)[c::]:6789 connect error [ 176.990629][ T8943] loop4: detected capacity change from 0 to 512 [ 177.051802][ T8943] EXT4-fs (loop4): Test dummy encryption mode enabled [ 177.085503][ T8943] EXT4-fs (loop4): Ignoring removed oldalloc option [ 177.112534][ T8943] EXT4-fs (loop4): Ignoring removed nobh option [ 177.118824][ T8943] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 177.194223][ T8943] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 177.247568][ T8943] EXT4-fs (loop4): Remounting filesystem read-only [ 177.282850][ T8943] EXT4-fs (loop4): 1 truncate cleaned up [ 177.341922][ T8943] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,quota,debug_want_extra_isize=0x000000000000002e,oldalloc,errors=remount-ro,nobh,. Quota mode: writeback. [ 177.498999][ T8968] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2048'. [ 178.235724][ T9003] loop5: detected capacity change from 0 to 512 [ 178.271680][ T9007] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2062'. [ 178.352093][ T9003] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 178.370754][ T9003] ext4 filesystem being mounted at /358/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.507398][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2069'. [ 179.510238][ T9019] loop4: detected capacity change from 0 to 32768 [ 179.643998][ T9019] ERROR: (device loop4): dtSearch: DT_GETPAGE: dtree page corrupt [ 179.643998][ T9019] [ 179.674526][ T9019] ERROR: (device loop4): remounting filesystem as read-only [ 179.692697][ T9019] jfs_lookup: dtSearch returned -5 [ 180.592642][ T4300] Bluetooth: hci0: command 0x0406 tx timeout [ 180.599071][ T4300] Bluetooth: hci3: command 0x0406 tx timeout [ 180.631796][ T4300] Bluetooth: hci1: command 0x0406 tx timeout [ 180.659626][ T4300] Bluetooth: hci4: command 0x0406 tx timeout [ 181.617347][ T9182] [U] ÿ [ 181.638176][ T26] kauditd_printk_skb: 94 callbacks suppressed [ 181.638191][ T26] audit: type=1107 audit(1763228184.888:3070): pid=9188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 182.041473][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2164'. [ 182.073830][ T9213] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2164'. [ 182.098356][ T9213] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2164'. [ 182.262391][ T9225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2168'. [ 183.241499][ T9280] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2204'. [ 183.289085][ T9280] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2204'. [ 183.342701][ T9280] netlink: 'syz.4.2204': attribute type 4 has an invalid length. [ 184.040181][ T9328] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 184.339631][ T9344] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2226'. [ 184.459200][ T9354] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2229'. [ 184.519696][ T9354] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2229'. [ 184.567074][ T9354] netlink: 'syz.2.2229': attribute type 4 has an invalid length. [ 185.079635][ T9391] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2247'. [ 185.503345][ T9409] netlink: 'syz.2.2260': attribute type 5 has an invalid length. [ 185.820248][ T9432] netlink: 'syz.1.2278': attribute type 5 has an invalid length. [ 186.207996][ T9458] cgroup: name respecified [ 187.329931][ T9525] binder: 9522:9525 ioctl c0306201 200000000080 returned -14 [ 187.440849][ T9533] cgroup: name respecified [ 187.612041][ T9545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2324'. [ 187.710780][ T26] audit: type=1326 audit(1763228190.958:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.0.2327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0eff8256c9 code=0x0 [ 187.860042][ T9561] fuse: Bad value for 'fd' [ 187.975937][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2337'. [ 188.004951][ T9571] cgroup: name respecified [ 188.152516][ T5160] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 188.542821][ T5160] usb 5-1: config 7 has an invalid interface number: 3 but max is 0 [ 188.556515][ T5160] usb 5-1: config 7 has no interface number 0 [ 188.583173][ T5160] usb 5-1: config 7 interface 3 has no altsetting 0 [ 188.772675][ T5160] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cd.d4 [ 188.787445][ T5160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.817289][ T5160] usb 5-1: Product: syz [ 188.833094][ T5160] usb 5-1: Manufacturer: syz [ 188.837722][ T5160] usb 5-1: SerialNumber: syz [ 189.192826][ T5160] usbtest 5-1:7.3: couldn't get endpoints, -71 [ 189.200335][ T5160] usbtest: probe of 5-1:7.3 failed with error -71 [ 189.254670][ T5160] usb 5-1: USB disconnect, device number 5 [ 189.283686][ T9633] fuse: Bad value for 'fd' [ 189.860145][ T9611] loop0: detected capacity change from 0 to 40427 [ 189.882360][ T9661] netlink: 'syz.4.2382': attribute type 27 has an invalid length. [ 189.942609][ T9611] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 189.956225][ T9611] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 190.005831][ T9611] F2FS-fs (loop0): invalid crc value [ 190.060042][ T9611] F2FS-fs (loop0): Found nat_bits in checkpoint [ 190.177214][ T9679] netlink: 'syz.4.2389': attribute type 7 has an invalid length. [ 190.190326][ T9680] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 190.248237][ T9611] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 190.278090][ T9611] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 190.282686][ T9680] overlayfs: missing 'lowerdir' [ 191.258361][ T9688] loop5: detected capacity change from 0 to 32768 [ 191.384659][ T9688] XFS (loop5): Mounting V5 Filesystem [ 191.560796][ T9688] XFS (loop5): Ending clean mount [ 191.592033][ T9688] XFS (loop5): Quotacheck needed: Please wait. [ 191.728439][ T9688] XFS (loop5): Quotacheck: Done. [ 191.895351][ T5047] XFS (loop5): Unmounting Filesystem [ 192.370198][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2419'. [ 192.830262][ T9779] virtiofs: Unexpected value for 'dax' [ 192.971478][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2437'. [ 193.143071][ T9798] loop5: detected capacity change from 0 to 1024 [ 193.319210][ T9798] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 193.371561][ T9798] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.642160][ T9830] binder: 9829:9830 ioctl c018620c 200000000000 returned -1 [ 193.877048][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.883463][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.004918][ T9845] tipc: Started in network mode [ 194.009867][ T9845] tipc: Node identity a6d7251a9a82, cluster identity 4711 [ 194.050066][ T9845] tipc: Enabled bearer , priority 0 [ 194.187897][ T9852] device syzkaller0 entered promiscuous mode [ 194.354144][ T9842] tipc: Resetting bearer [ 194.440772][ T9842] tipc: Disabling bearer [ 194.651583][ T9877] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2475'. [ 194.670486][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2475'. [ 194.720316][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2475'. [ 194.787119][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2475'. [ 194.974639][ T9889] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2483'. [ 195.167213][ T9905] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2492'. [ 196.525259][ T9939] x_tables: unsorted underflow at hook 1 [ 196.722494][ T4425] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 196.983340][ T4425] usb 1-1: Using ep0 maxpacket: 16 [ 197.103307][ T4425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.165287][ T4425] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 197.246548][ T4425] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 197.302427][ C1] sched: RT throttling activated [ 197.308177][ T4425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.440956][ T4425] usb 1-1: config 0 descriptor?? [ 197.477424][ T9965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2517'. [ 197.532598][ T9965] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2517'. [ 197.585232][ T9965] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2517'. [ 197.956825][ T4425] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 198.005131][ T4425] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 198.063058][ T4425] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 198.122658][ T4425] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 198.129898][ T4425] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 198.234870][ T4425] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 198.292137][ T4425] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 198.350906][ T4425] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 198.393672][ T4425] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 198.400900][ T4425] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 198.493777][ T4425] HID 045e:07da: Invalid code 65791 type 1 [ 198.530249][ T4425] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input10 [ 198.639401][ T4425] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 198.781645][ T26] audit: type=1326 audit(1763228202.028:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10008 comm="syz.2.2537" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f300bbbc6c9 code=0x0 [ 198.977138][ T5160] usb 1-1: USB disconnect, device number 6 [ 199.069684][T10019] __nla_validate_parse: 1 callbacks suppressed [ 199.069700][T10019] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2541'. [ 199.080162][T10021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2542'. [ 199.132304][T10021] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2542'. [ 199.160691][T10021] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2542'. [ 199.403258][T10033] netlink: 'syz.5.2547': attribute type 33 has an invalid length. [ 199.428245][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2547'. [ 200.184279][T10071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2566'. [ 200.205354][T10074] netlink: 2040 bytes leftover after parsing attributes in process `syz.2.2565'. [ 200.223289][T10071] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2566'. [ 200.233821][T10074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2565'. [ 200.252578][T10071] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2566'. [ 200.283392][T10073] tc_dump_action: action bad kind [ 201.095907][T10119] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 201.138198][T10119] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 201.212806][T10119] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 202.120630][T10181] netlink: 'syz.2.2620': attribute type 33 has an invalid length. [ 202.632682][ T4649] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 203.002797][ T4649] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.032409][ T4649] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.072690][ T4649] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 203.081772][ T4649] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.124545][ T4649] usb 1-1: config 0 descriptor?? [ 203.452780][ T26] audit: type=1326 audit(1763228206.708:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10259 comm="syz.4.2657" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74303dd6c9 code=0x0 [ 203.624733][ T4649] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 203.632001][ T4649] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 203.672505][ T4649] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 203.679906][ T4649] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 203.702561][ T4649] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 203.709840][ T4649] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 203.752516][ T4649] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 203.781830][ T4649] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 203.932687][ T4649] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 204.141380][T10298] loop5: detected capacity change from 0 to 1024 [ 204.214816][T10302] overlayfs: failed to clone upperpath [ 204.242853][T10298] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 204.274830][T10298] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 204.345588][T10298] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 204.354487][T10298] System zones: 0-1, 3-36 [ 204.389085][T10298] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 204.500090][T10298] EXT4-fs error (device loop5): __ext4_get_inode_loc:4327: comm syz.5.2675: Invalid inode table block 0 in block_group 0 [ 204.583892][T10198] cp2112 0003:10C4:EA90.0004: Error starting transaction: -38 [ 204.592996][ T4649] cp2112 0003:10C4:EA90.0004: error reading lock byte: -32 [ 204.632719][ T5160] usb 1-1: USB disconnect, device number 7 [ 204.663892][ T9923] EXT4-fs error (device loop5): __ext4_get_inode_loc:4327: comm kworker/u4:8: Invalid inode table block 0 in block_group 0 [ 204.829072][T10320] fido_id[10320]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 205.481173][T10358] __nla_validate_parse: 7 callbacks suppressed [ 205.481186][T10358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2702'. [ 205.838307][T10379] netlink: 'syz.1.2723': attribute type 4 has an invalid length. [ 206.425999][T10411] netlink: 'syz.4.2726': attribute type 10 has an invalid length. [ 206.492687][T10411] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2726'. [ 206.655161][T10411] team0: Port device geneve0 added [ 206.743464][T10428] fuse: Bad value for 'fd' [ 207.000393][ T26] audit: type=1326 audit(1763228210.248:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10440 comm="syz.5.2740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff63d79b6c9 code=0x0 [ 207.113349][T10446] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 207.149957][T10446] overlayfs: missing 'lowerdir' [ 207.525542][T10472] netlink: 'syz.2.2756': attribute type 21 has an invalid length. [ 207.609722][T10472] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2756'. [ 207.877454][T10494] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2768'. [ 207.881031][T10497] netlink: 'syz.1.2767': attribute type 7 has an invalid length. [ 208.043867][T10505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2771'. [ 208.897292][T10561] virtiofs: Unexpected value for 'dax' [ 209.070066][T10564] ceph: No mds server is up or the cluster is laggy [ 209.086331][T10575] cgroup: Invalid name [ 209.292686][ T4300] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 209.382751][ T4173] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 209.652846][ T4300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.692759][ T4300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.725370][ T4300] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 209.752682][ T4173] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.768534][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.782731][ T4173] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.817692][ T4300] usb 5-1: config 0 descriptor?? [ 209.984643][ T4173] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 210.001009][ T4173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.029582][ T4173] usb 1-1: Product: syz [ 210.032549][ T5158] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 210.048242][ T4173] usb 1-1: Manufacturer: syz [ 210.059005][ T4173] usb 1-1: SerialNumber: syz [ 210.081889][ T4173] usb 1-1: config 0 descriptor?? [ 210.133967][ T4173] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 210.156672][ T4173] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.205528][ T4173] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 210.219442][ T4173] usb 1-1: media controller created [ 210.265470][ T4173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.316294][ T4300] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 210.342116][ T4300] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 210.361928][ T4300] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 210.371999][ T4300] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 210.386698][ T4300] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 210.402255][ T4300] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 210.430106][ T4300] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 210.451438][ T4173] DVB: Unable to find symbol tda10046_attach() [ 210.461793][ T4173] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 210.480426][ T4300] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 210.499341][ T4173] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 210.503262][ T5158] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.558829][ T5158] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.591926][ T5158] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 210.612628][ T4300] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00 [ 210.615195][ T5158] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.639186][T10608] netlink: 37 bytes leftover after parsing attributes in process `syz.1.2817'. [ 210.666439][ T5158] usb 6-1: config 0 descriptor?? [ 210.706212][T10613] tmpfs: Bad value for 'mpol' [ 211.119236][T10635] overlayfs: missing 'lowerdir' [ 211.272857][ T4300] cp2112 0003:10C4:EA90.0005: error reading lock byte: -71 [ 211.301572][ T4300] usb 5-1: USB disconnect, device number 6 [ 211.364513][ T4173] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71 [ 211.374768][ T5158] usb 6-1: string descriptor 0 read error: -22 [ 211.402871][ T4173] usb 1-1: USB disconnect, device number 8 [ 211.476140][T10650] fido_id[10650]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 211.633957][ T5158] uclogic 0003:256C:006D.0006: interface is invalid, ignoring [ 211.876700][ T5158] usb 6-1: USB disconnect, device number 3 [ 211.950617][T10677] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 212.101198][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2855'. [ 212.132731][T10683] can: request_module (can-proto-0) failed. [ 213.179967][T10744] device sit0 entered promiscuous mode [ 213.229207][T10744] netlink: 'syz.0.2882': attribute type 1 has an invalid length. [ 213.303715][T10744] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2882'. [ 213.504333][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2890'. [ 213.822611][T10782] overlayfs: missing 'lowerdir' [ 213.900582][T10788] loop0: detected capacity change from 0 to 512 [ 214.051113][T10800] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2905'. [ 214.081903][T10788] EXT4-fs error (device loop0): ext4_quota_enable:6413: comm syz.0.2903: Bad quota inum: 1, type: 2 [ 214.122819][ T4425] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 214.157448][T10788] EXT4-fs warning (device loop0): ext4_enable_quotas:6461: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 214.225678][T10788] EXT4-fs (loop0): mount failed [ 214.347214][T10817] fuse: Bad value for 'fd' [ 214.392545][ T4425] usb 5-1: Using ep0 maxpacket: 16 [ 214.530790][ T4425] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.547600][ T4425] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.572152][ T4425] usb 5-1: config 0 interface 0 has no altsetting 0 [ 214.584621][ T4425] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 214.599214][ T4425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.615211][ T4425] usb 5-1: config 0 descriptor?? [ 214.629873][T10825] loop5: detected capacity change from 0 to 2048 [ 214.710607][T10825] EXT4-fs (loop5): Ignoring removed bh option [ 214.761521][T10825] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 214.831569][T10827] ceph: No mds server is up or the cluster is laggy [ 214.877057][T10786] loop4: detected capacity change from 0 to 164 [ 215.195159][ T4425] hid (null): report_id 1231045794 is invalid [ 215.226457][ T4425] hid (null): invalid report_size 472915548 [ 215.239027][ T4425] hid (null): report_id 0 is invalid [ 215.259449][ T4425] hid (null): invalid report_count 60065 [ 215.313063][ T4425] hid (null): unknown global tag 0xe [ 215.410716][ T4300] usb 5-1: USB disconnect, device number 7 [ 215.555863][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2926'. [ 215.927752][T10866] tc_dump_action: action bad kind [ 216.595254][T10894] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 216.682462][T10894] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 216.750830][T10894] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 216.985616][T10917] netlink: 'syz.1.2959': attribute type 29 has an invalid length. [ 217.322686][ T5158] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 217.340997][ T4425] libceph: connect (1)[c::]:6789 error -101 [ 217.349378][ T4425] libceph: mon0 (1)[c::]:6789 connect error [ 217.424044][T10936] ceph: No mds server is up or the cluster is laggy [ 217.532803][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2971'. [ 217.562850][ T27] INFO: task syz.3.75:4522 blocked for more than 143 seconds. [ 217.577064][ T27] Not tainted syzkaller #0 [ 217.586497][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 217.600497][ T27] task:syz.3.75 state:D stack:27712 pid: 4522 ppid: 4183 flags:0x00004000 [ 217.602550][ T5158] usb 5-1: Using ep0 maxpacket: 16 [ 217.624745][ T27] Call Trace: [ 217.640012][ T27] [ 217.651917][ T27] __schedule+0x11bb/0x4390 [ 217.660958][ T27] ? mark_lock+0x94/0x320 [ 217.678364][ T27] ? rcu_lock_acquire+0x30/0x30 [ 217.687733][ T27] ? __mutex_lock_common+0xc6c/0x2390 [ 217.698976][ T27] ? release_firmware_map_entry+0x190/0x190 [ 217.708444][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 217.716847][ T27] ? __mutex_trylock_common+0x80/0x250 [ 217.726824][ T27] ? rcu_lock_release+0x20/0x20 [ 217.741035][ T27] schedule+0x11b/0x1e0 [ 217.750918][ T27] schedule_preempt_disabled+0xf/0x20 [ 217.761165][ T27] __mutex_lock_common+0xc71/0x2390 [ 217.771266][ T27] ? io_uring_del_tctx_node+0xe8/0x2c0 [ 217.781093][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 217.790131][ T27] ? _raw_spin_unlock+0x24/0x40 [ 217.792714][ T5158] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.798959][ T27] ? xa_erase+0xdd/0x100 [ 217.816266][ T27] mutex_lock_nested+0x17/0x20 [ 217.824741][ T27] io_uring_del_tctx_node+0xe8/0x2c0 [ 217.831790][ T27] io_uring_cancel_generic+0x5ec/0x860 [ 217.842004][ T27] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 217.847661][ T5158] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 217.851638][ T27] ? __io_uring_cancel+0x10/0x10 [ 217.876558][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 217.891288][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 217.900498][ T5158] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 217.910255][ T27] ? init_wait_entry+0xd0/0xd0 [ 217.915959][ T27] ? _raw_spin_unlock+0x40/0x40 [ 217.919812][ T5158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.929367][ T27] ? __validate_process_creds+0x254/0x3f0 [ 217.935469][ T27] do_exit+0x24a/0x20a0 [ 217.940470][ T27] ? put_task_struct+0x80/0x80 [ 217.948805][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 217.964319][ T27] ? lock_chain_count+0x20/0x20 [ 217.965000][ T5158] usb 5-1: config 0 descriptor?? [ 217.983428][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 217.997824][ T27] do_group_exit+0x12e/0x300 [ 218.008442][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 218.018475][ T27] get_signal+0x6ca/0x12c0 [ 218.031260][ T27] arch_do_signal_or_restart+0xc1/0x1300 [ 218.042184][ T27] ? slab_free_freelist_hook+0xea/0x170 [ 218.060531][ T27] ? futex_exit_release+0x1c0/0x1c0 [ 218.080527][ T27] ? get_sigframe_size+0x10/0x10 [ 218.088615][ T27] ? exit_to_user_mode_loop+0x3b/0x130 [ 218.104847][ T27] exit_to_user_mode_loop+0x9e/0x130 [ 218.110859][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 218.126795][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 218.135953][ T27] do_syscall_64+0x58/0xa0 [ 218.140739][ T27] ? clear_bhb_loop+0x30/0x80 [ 218.152356][ T27] ? clear_bhb_loop+0x30/0x80 [ 218.167766][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.183451][ T27] RIP: 0033:0x7f234bc576c9 [ 218.191584][ T27] RSP: 002b:00007f2349e9d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 218.212742][ T27] RAX: fffffffffffffe00 RBX: 00007f234beae098 RCX: 00007f234bc576c9 [ 218.235455][ T27] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f234beae098 [ 218.249064][ T27] RBP: 00007f234beae090 R08: 0000000000000000 R09: 0000000000000000 [ 218.272276][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.293069][ T27] R13: 00007f234beae128 R14: 00007ffd3cca6320 R15: 00007ffd3cca6408 [ 218.313795][ T27] [ 218.320241][ T27] [ 218.320241][ T27] Showing all locks held in the system: [ 218.341923][ T27] 1 lock held by khungtaskd/27: [ 218.361267][ T27] #0: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 218.401967][ T27] 2 locks held by getty/3943: [ 218.411332][ T27] #0: ffff88802c0a4098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 218.455592][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 218.474154][ T5158] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 218.491939][ T5158] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 218.500496][ T27] 4 locks held by udevd/4436: [ 218.512070][ T27] #0: ffff88802a4c09e0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 218.512598][ T5158] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 218.541702][ T27] #1: ffff88808145b488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3c0 [ 218.551247][ T5158] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 218.567957][ T5158] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 218.567979][ T27] #2: ffff888031318008 [ 218.587642][ T5158] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 218.608625][ T27] (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3c0 [ 218.614181][ T5158] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 218.616699][ T27] #3: ffff88807c1231a8 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17a/0x330 [ 218.635967][ T5158] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 218.667277][ T27] 2 locks held by syz.3.75/4521: [ 218.672237][ T27] 1 lock held by syz.3.75/4522: [ 218.684105][ T5158] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 218.698151][ T27] #0: ffff888028d5c0a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_uring_del_tctx_node+0xe8/0x2c0 [ 218.701997][ T5158] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 218.735028][ T27] 6 locks held by kworker/0:18/5158: [ 218.754379][ T5158] HID 045e:07da: Invalid code 65791 type 1 [ 218.763411][ T27] 2 locks held by kworker/u4:8/9923: [ 218.780738][ T27] #0: ffff8880b903a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa5/0x140 [ 218.800092][ T5158] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0008/input/input11 [ 218.815981][ T27] #1: ffff8880b9127888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x4d6/0x810 [ 218.832099][ T5158] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 218.881137][ T27] [ 218.900897][ T27] ============================================= [ 218.900897][ T27] [ 218.936214][ T27] NMI backtrace for cpu 1 [ 218.940584][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 218.947797][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 218.957864][ T27] Call Trace: [ 218.961154][ T27] [ 218.964091][ T27] dump_stack_lvl+0x168/0x230 [ 218.968787][ T27] ? show_regs_print_info+0x20/0x20 [ 218.974006][ T27] ? load_image+0x3b0/0x3b0 [ 218.978528][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 218.983921][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 218.989053][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 218.994007][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 219.000179][ T27] ? _printk+0xcc/0x110 [ 219.004348][ T27] ? load_image+0x3b0/0x3b0 [ 219.008863][ T27] ? load_image+0x3b0/0x3b0 [ 219.013378][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 219.019461][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 219.025462][ T27] watchdog+0xe0f/0xe50 [ 219.029638][ T27] kthread+0x436/0x520 [ 219.033716][ T27] ? hungtask_pm_notify+0x40/0x40 [ 219.038748][ T27] ? kthread_blkcg+0xd0/0xd0 [ 219.043351][ T27] ret_from_fork+0x1f/0x30 [ 219.047789][ T27] [ 219.051608][ T27] Sending NMI from CPU 1 to CPUs 0: [ 219.057019][ C0] NMI backtrace for cpu 0 [ 219.057029][ C0] CPU: 0 PID: 155 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 219.057044][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 219.057053][ C0] Workqueue: bat_events batadv_nc_worker [ 219.057069][ C0] RIP: 0010:rcu_is_watching+0x5/0xa0 [ 219.057085][ C0] Code: 65 e8 5b 41 5e 41 5f 5d c3 e8 c7 bc 45 08 41 f7 c7 00 02 00 00 75 b8 eb b7 e8 a7 bc 45 08 0f 1f 80 00 00 00 00 41 57 41 56 53 <65> ff 05 8c be 9e 7e e8 9f cc 45 08 89 c3 83 f8 08 73 5c 49 bf 00 [ 219.057098][ C0] RSP: 0018:ffffc90001ec7a80 EFLAGS: 00000257 [ 219.057109][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff815bfaab [ 219.057119][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8d699d28 [ 219.057129][ C0] RBP: ffffc90001ec7bc0 R08: dffffc0000000000 R09: fffffbfff1ad33a6 [ 219.057144][ C0] R10: fffffbfff1ad33a6 R11: 1ffffffff1ad33a5 R12: ffffffff8c11c760 [ 219.057155][ C0] R13: 1ffff920003d8f60 R14: 0000000000000000 R15: dffffc0000000000 [ 219.057165][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 219.057178][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.057188][ C0] CR2: 00005636e216b3d0 CR3: 000000005e116000 CR4: 00000000003506f0 [ 219.057200][ C0] Call Trace: [ 219.057205][ C0] [ 219.057211][ C0] lock_acquire+0xcd/0x3f0 [ 219.057231][ C0] ? rcu_lock_release+0x5/0x20 [ 219.057245][ C0] ? read_lock_is_recursive+0x10/0x10 [ 219.057261][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 219.057283][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 219.057303][ C0] rcu_lock_acquire+0x2a/0x30 [ 219.057316][ C0] ? rcu_lock_acquire+0x5/0x30 [ 219.057327][ C0] batadv_nc_worker+0xc9/0x5c0 [ 219.057344][ C0] process_one_work+0x863/0x1000 [ 219.057365][ C0] ? worker_detach_from_pool+0x240/0x240 [ 219.057380][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 219.057397][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 219.057411][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 219.057426][ C0] ? wq_worker_running+0x97/0x170 [ 219.057440][ C0] worker_thread+0xaa8/0x12a0 [ 219.057467][ C0] kthread+0x436/0x520 [ 219.057480][ C0] ? rcu_lock_release+0x20/0x20 [ 219.057493][ C0] ? kthread_blkcg+0xd0/0xd0 [ 219.057507][ C0] ret_from_fork+0x1f/0x30 [ 219.057528][ C0] [ 219.078167][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 219.163870][ T5158] usb 5-1: USB disconnect, device number 8 [ 219.169643][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 219.169665][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 219.316843][ T27] Call Trace: [ 219.320135][ T27] [ 219.323084][ T27] dump_stack_lvl+0x168/0x230 [ 219.327793][ T27] ? show_regs_print_info+0x20/0x20 [ 219.333019][ T27] ? load_image+0x3b0/0x3b0 [ 219.337551][ T27] panic+0x2c9/0x7f0 [ 219.341453][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 219.347116][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 219.351635][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 219.357209][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 219.363382][ T27] watchdog+0xe4e/0xe50 [ 219.367558][ T27] kthread+0x436/0x520 [ 219.371634][ T27] ? hungtask_pm_notify+0x40/0x40 [ 219.376671][ T27] ? kthread_blkcg+0xd0/0xd0 [ 219.381279][ T27] ret_from_fork+0x1f/0x30 [ 219.385718][ T27] [ 219.389039][ T27] Kernel Offset: disabled [ 219.393378][ T27] Rebooting in 86400 seconds..