last executing test programs: 27.516542175s ago: executing program 3 (id=2490): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) landlock_create_ruleset(&(0x7f00000000c0)={0x82, 0x2, 0x2, 0x4631, 0x4, 0x2}, 0x30, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) recvmmsg(r2, &(0x7f000000a400), 0x6fe, 0x10163, 0x0) r3 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50) 13.060494445s ago: executing program 2 (id=2521): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000000d000)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44040) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) socket(0x11, 0x3, 0x0) syz_emit_vhci(0x0, 0xf) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.1910857s ago: executing program 2 (id=2524): syz_io_uring_setup(0x38fa, &(0x7f0000000200)={0x0, 0x9943, 0x1000, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x3, r0, 0x0}]) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080), 0xa12) syz_usb_connect$uac3(0x3, 0x86, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100300000010820582054000010203010902740003010f6003080b0002010130000904000000010130000a2401050a00e58a000009040100000102300009040101010102300006240201000709050109100090060f0a2525040000000a040009040200ffff023000090402010101023000090506"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$inet(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) timer_create(0x2, 0x0, &(0x7f0000000040)) 8.444948146s ago: executing program 1 (id=2527): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0x10000}]}, 0xc, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x82801, 0x190) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) write(r3, &(0x7f0000000400)='4', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 7.575628528s ago: executing program 2 (id=2529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() inotify_init1(0x0) pselect6(0x40, &(0x7f0000000100)={0x3, 0x80000000, 0x5, 0xfff, 0x6, 0x1ff, 0x0, 0xa}, &(0x7f0000000140)={0x9, 0x6, 0x0, 0x100, 0xcf9, 0x0, 0x4, 0x7}, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.441771131s ago: executing program 0 (id=2530): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xc00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.184443727s ago: executing program 1 (id=2531): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004044) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xffffff2f, &(0x7f0000000040)=0x5) r1 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0x80dc5521, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x71cac2, 0x190) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r6, 0x400, 0x0) fcntl$setlease(r6, 0x400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) prlimit64(r3, 0xd, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 6.380171477s ago: executing program 0 (id=2532): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0x62) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000001540)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001500)={&(0x7f00000015c0)=ANY=[@ANYBLOB="74020000000205"], 0x274}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 5.302097992s ago: executing program 1 (id=2533): ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000340)={[{@nobarrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@data_writeback}, {@nomblk_io_submit}, {@data_ordered}, {@minixdf}]}, 0xbe, 0x472, &(0x7f00000004c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0xfff, 0x0, 0x38, 0x1, 0x37, 0x27, 0x2, 0x4, 0x73, [0x8, 0x8, 0x5, 0x80000, 0x15, 0x8, 0x4, 0x80000001]}}) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c0000000000019078"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000180)) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x800) r6 = dup(r5) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 4.461464303s ago: executing program 2 (id=2537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getrlimit(0xb, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x0, 0x6b3, 0x0, 0x1ff, 0xb0a, 0x8b79, 0x9}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r5, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x875, @empty, 0x2000a2}, 0x1c, 0x0}}], 0x1, 0x85) sendmmsg$sock(r5, &(0x7f0000008c40)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x80, 0x0}}], 0x1, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r7, 0x24, &(0x7f0000000000)={0x1, 0x1, 0x1f9, 0x0, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000540)={0x0, &(0x7f0000000500)}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x1) 3.216529273s ago: executing program 0 (id=2538): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0x10000}]}, 0xc, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x82801, 0x190) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) write(r3, &(0x7f0000000400)='4', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 3.216369103s ago: executing program 3 (id=2494): socket(0x840000000002, 0x3, 0x100) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0xe8202, 0x1c3) 2.304288905s ago: executing program 3 (id=2539): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) prlimit64(0x0, 0xd, &(0x7f0000000680)={0x200000000005, 0x8000000000200003}, 0x0) setpriority(0x0, 0x0, 0xffffffffffffffcd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2.286092315s ago: executing program 2 (id=2540): modify_ldt$write2(0x11, &(0x7f0000000100)={0x5, 0x20001000, 0xffffffffffffffff, 0x1}, 0x10) modify_ldt$read(0x0, 0xfffffffffffffffe, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000180)='./bus\x00', 0x10000, &(0x7f0000000100), 0xfe, 0x572, &(0x7f0000000240)="$eJzs3U1rVFcfAPD/nSS+JD4aQeRpFyXgohbrxCR9sdCFXZZWKrR7OyTXIJk4kpmISYXqom66KVIopdLSD9B9l9Iv0E8htIIUCe2imyl3cieO40wS42hG5/eDq+fcc6/nnrn3fzxnzgwTwMCayP4oRLwSEd8kEYdayoYjL5xYP27twbXZbEuiXv/0rySSfF/z+CT/eyzP/D8ifvsq4kTh8XqrK6sLpXI5Xcrzk7XFy5PVldWTFxdL8+l8eml6Zub02zPT7737zuMn791ZW98498/3n9z58PTXx9a+++Xe4VtJnIkDeVlrO57C9dbMREzkr8lInGk7cKoHlfWTZLcvgB0ZyuN8JLI+4FAM5VEPvPy+jIg6MKAS8Q8Dan0GkFmf2286D66/fLO8+x+sT4CabX/Y/mT9vZHY15gbja4lj8yMsldivAf1Z3X8+uftW9kWvXsfAmBL129ExKnh4Uf6v4PR0v/t3KltHNNeh/4Pnp872fjnzb0dxj+FjfFPdBj/jHWI3Z3YOv4L9zqfucNFoDbZ+O/96DT+21i0Gh/Kc/9rjPlGkgsXy2nWt2Xd5PEY2ZvlN1vPOb12t96trHX8l21Z/c2xYH4d94bbmjpXqpWeps2t7t+IeHWL8W/S4f5nr8e5bdZxNL39Wreyrdv/bNV/jni94/1/ONdJNl+fnGw8D5PNp+Jxf988+nu3+ne7/dn9H928/eNJ63pt9cnr+Gnfv2m3sokkXzR9wud/T/JZI70n33e1VKstTUXsST5u379x3o/N46YfHp+1//ixzvG/2fO/PyI+32b7bx652fXQfrj/c090/7sk6knXorsfffFDt/q31/+91Ugdz/dsp//rfKWjeenTPM0AAAAAAADQvwoRcSCSQnEjXSgUi+uf7zgSo4VypVo7caGyfGkuGt+VHY+RQnOle6zl8xBT+edhm/nptvxMRByOiG+H9jfyxdlKeW63Gw8AAAAAAAAAAAAAAAAAAAB9YqzL9/8zfwzt9tUBz5yf/IbBtWX89+KXnoC+5P9/GFziHwaX+IfBJf5hcIl/GFziHwaX+IfBJf4BAAAAAAAAAAAAAAAAAAAAAAAAAACgp86dPZtt9bUH12az/NyVleWFypWTc2l1obi4PFucrSxdLs5XKvPltDhbWdzq3ytXKpenpmP56mQtTWqT1ZXV84uV5Uu18xcXS/Pp+XTkubQKAAAAAAAAAAAAAAAAAAAAXizVldWFUrmcLr1ciULevG2fdTA/oR8u/sVKDPfHZUj0OLGLnRIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtPkvAAD//++oKfg=") ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) bpf$PROG_LOAD(0x2, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f000000f000/0x4000)=nil, r3, 0x3, 0x40010, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.996407062s ago: executing program 3 (id=2541): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0xc0000400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x24000025}, 0x4800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7050000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x2000000, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0), 0x1c) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) 1.515387514s ago: executing program 3 (id=2542): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setgroups(0x0, 0x0) 1.404366607s ago: executing program 1 (id=2543): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n', 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.335730258s ago: executing program 3 (id=2544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() inotify_init1(0x0) pselect6(0x40, &(0x7f0000000100)={0x3, 0x80000000, 0x5, 0xfff, 0x6, 0x1ff, 0x0, 0xa}, &(0x7f0000000140)={0x9, 0x6, 0x0, 0x100, 0xcf9, 0x0, 0x4, 0x7}, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 249.021535ms ago: executing program 2 (id=2545): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) socket$inet(0x2, 0x2, 0x4) setrlimit(0x0, &(0x7f0000001b80)={0x0, 0x9}) prlimit64(0x0, 0x0, &(0x7f0000002540)={0x2, 0x6}, &(0x7f0000002580)) 245.191485ms ago: executing program 1 (id=2546): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 0s ago: executing program 1 (id=2547): socket(0x840000000002, 0x3, 0x100) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0xe8202, 0x1c3) kernel console output (not intermixed with test programs): ][ T5776] team0: Port device team_slave_0 added [ 81.440769][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.461362][ T5776] team0: Port device team_slave_1 added [ 81.489447][ T5779] team0: Port device team_slave_0 added [ 81.499016][ T5779] team0: Port device team_slave_1 added [ 81.527178][ T5778] team0: Port device team_slave_0 added [ 81.536719][ T5778] team0: Port device team_slave_1 added [ 81.562196][ T5777] team0: Port device team_slave_0 added [ 81.569209][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.576271][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.607563][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.650013][ T5777] team0: Port device team_slave_1 added [ 81.657386][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.665369][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.691692][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.709902][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.717175][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.745918][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.758031][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.765259][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.792025][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.804951][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.812253][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.838491][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.868773][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.875876][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.902076][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.000938][ T5778] hsr_slave_0: entered promiscuous mode [ 82.021959][ T5778] hsr_slave_1: entered promiscuous mode [ 82.031244][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.041997][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.069411][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.088487][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.101493][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.127872][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.143102][ T5790] Bluetooth: hci2: command tx timeout [ 82.164036][ T5776] hsr_slave_0: entered promiscuous mode [ 82.171758][ T5776] hsr_slave_1: entered promiscuous mode [ 82.178272][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.186309][ T5776] Cannot create hsr debugfs directory [ 82.236657][ T5779] hsr_slave_0: entered promiscuous mode [ 82.244561][ T5779] hsr_slave_1: entered promiscuous mode [ 82.255320][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.268999][ T5779] Cannot create hsr debugfs directory [ 82.303025][ T5790] Bluetooth: hci3: command tx timeout [ 82.308993][ T5790] Bluetooth: hci1: command tx timeout [ 82.309032][ T5088] Bluetooth: hci0: command tx timeout [ 82.407042][ T5777] hsr_slave_0: entered promiscuous mode [ 82.415390][ T5777] hsr_slave_1: entered promiscuous mode [ 82.426470][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.434317][ T5777] Cannot create hsr debugfs directory [ 82.801537][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.813848][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.824091][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.836413][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.901264][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.919086][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.929399][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.940596][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.017390][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.031033][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.050313][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.062179][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.157402][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.175319][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.188161][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.200109][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.246241][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.306577][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.334580][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.356433][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.364215][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.399278][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.406522][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.431562][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.448866][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.474338][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.481475][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.503065][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.510265][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.535379][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.557752][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.564906][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.577217][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.584397][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.650331][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.665821][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.766523][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.820238][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.827478][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.878690][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.885901][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.120081][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.222911][ T5088] Bluetooth: hci2: command tx timeout [ 84.258279][ T5779] veth0_vlan: entered promiscuous mode [ 84.291667][ T5779] veth1_vlan: entered promiscuous mode [ 84.305767][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.318165][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.383169][ T5088] Bluetooth: hci1: command tx timeout [ 84.383608][ T5787] Bluetooth: hci3: command tx timeout [ 84.388613][ T5088] Bluetooth: hci0: command tx timeout [ 84.416127][ T5779] veth0_macvtap: entered promiscuous mode [ 84.429535][ T5779] veth1_macvtap: entered promiscuous mode [ 84.469193][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.491447][ T5778] veth0_vlan: entered promiscuous mode [ 84.519968][ T5777] veth0_vlan: entered promiscuous mode [ 84.534960][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.549882][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.568311][ T5778] veth1_vlan: entered promiscuous mode [ 84.575352][ T5777] veth1_vlan: entered promiscuous mode [ 84.616231][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.629726][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.641322][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.650237][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.674750][ T5777] veth0_macvtap: entered promiscuous mode [ 84.699426][ T5777] veth1_macvtap: entered promiscuous mode [ 84.737078][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.749582][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.761641][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.790962][ T5778] veth0_macvtap: entered promiscuous mode [ 84.803090][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.815024][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.826422][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.838402][ T5776] veth0_vlan: entered promiscuous mode [ 84.850073][ T5776] veth1_vlan: entered promiscuous mode [ 84.866108][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.875316][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.884489][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.894206][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.921467][ T5778] veth1_macvtap: entered promiscuous mode [ 84.978383][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.985951][ T5776] veth0_macvtap: entered promiscuous mode [ 84.999507][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.010899][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.020994][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.031445][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.041188][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.054748][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.069804][ T5776] veth1_macvtap: entered promiscuous mode [ 85.107180][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.120535][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.130879][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.141820][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.153675][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.179294][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.195162][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.205387][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.215855][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.225860][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.236592][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.249119][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.270559][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.280150][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.289764][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.298653][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.321399][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.332451][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.345214][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.355959][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.365997][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.376509][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.387760][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.405088][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.414272][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.437537][ T3444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.460195][ T3444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.489825][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.502593][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.511346][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.523522][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.590584][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.609767][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.735769][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.769517][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.809215][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.818458][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.939798][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.970639][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.993989][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.042418][ T5849] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.070641][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.302962][ T5088] Bluetooth: hci2: command tx timeout [ 86.462371][ T5790] Bluetooth: hci3: command tx timeout [ 86.468208][ T5790] Bluetooth: hci1: command tx timeout [ 86.476970][ T5088] Bluetooth: hci0: command tx timeout [ 87.046140][ T27] cfg80211: failed to load regulatory.db [ 88.502565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.515926][ T5787] Bluetooth: hci2: command tx timeout [ 88.543307][ T5787] Bluetooth: hci0: command tx timeout [ 88.548836][ T5088] Bluetooth: hci1: command tx timeout [ 88.554344][ T5790] Bluetooth: hci3: command tx timeout [ 89.222270][ T5844] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.581963][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 90.646121][ T5844] usb 3-1: device descriptor read/all, error -71 [ 90.739132][ T5879] syz.2.14[5879]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.769670][ T5879] loop2: detected capacity change from 0 to 1024 [ 90.791080][ T5879] ======================================================= [ 90.791080][ T5879] WARNING: The mand mount option has been deprecated and [ 90.791080][ T5879] and is ignored by this kernel. Remove the mand [ 90.791080][ T5879] option from the mount to silence this warning. [ 90.791080][ T5879] ======================================================= [ 90.894068][ T5879] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 90.965653][ T5879] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.14: lblock 2 mapped to illegal pblock 2 (length 1) [ 91.025868][ T5879] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 91.035039][ T5879] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 48: comm syz.2.14: lblock 0 mapped to illegal pblock 48 (length 1) [ 91.059762][ T5879] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 91.080707][ T5879] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.14: Failed to acquire dquot type 0 [ 91.113023][ T5879] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 91.151073][ T5879] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.14: mark_inode_dirty error [ 91.193252][ T5879] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 91.211350][ T5879] EXT4-fs (loop2): 1 orphan inode deleted [ 91.223348][ T62] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.259479][ T5879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.296867][ T62] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 91.305836][ T62] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 0 [ 91.399020][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.403723][ T5884] loop0: detected capacity change from 0 to 2048 [ 91.429349][ T3539] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.492307][ T3539] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 91.522038][ T3539] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:11: Failed to release dquot type 0 [ 91.529903][ T5884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.559293][ T5778] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 91.591549][ T5884] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.615582][ T5778] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 91.726265][ T5778] EXT4-fs error (device loop2): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 91.886378][ T5884] fs-verity: sha256 using implementation "sha256-avx2" [ 92.618602][ T5884] syz.0.9 (5884) used greatest stack depth: 19472 bytes left [ 92.669687][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.095679][ T5904] loop0: detected capacity change from 0 to 16 [ 93.268354][ T5904] erofs: (device loop0): mounted with root inode @ nid 36. [ 93.432046][ T5844] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.658584][ T5787] Bluetooth: Wrong link type (-57) [ 93.709011][ T5907] raw_sendmsg: syz.0.19 forgot to set AF_INET. Fix it! [ 93.782669][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 93.914055][ T5844] usb 4-1: config 105 has an invalid interface number: 83 but max is 0 [ 94.116611][ T5844] usb 4-1: config 105 has no interface number 0 [ 94.261516][ T5844] usb 4-1: config 105 interface 83 altsetting 12 endpoint 0x9 has invalid wMaxPacketSize 0 [ 94.293812][ T5844] usb 4-1: config 105 interface 83 altsetting 12 has a duplicate endpoint with address 0x89, skipping [ 95.468441][ T5844] usb 4-1: config 105 interface 83 has no altsetting 0 [ 95.483946][ T5844] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=a5.63 [ 95.512956][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.530569][ T5844] usb 4-1: Product: syz [ 95.722487][ T5844] usb 4-1: Manufacturer: syz [ 95.727733][ T5844] usb 4-1: SerialNumber: syz [ 95.753035][ T5844] usb 4-1: can't set config #105, error -71 [ 96.495190][ T5844] usb 4-1: USB disconnect, device number 2 [ 99.152210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 99.583897][ T5936] loop3: detected capacity change from 0 to 16 [ 99.636915][ T5936] erofs: (device loop3): mounted with root inode @ nid 36. [ 100.492933][ T5787] Bluetooth: Wrong link type (-57) [ 102.603067][ T172] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.862586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 104.072262][ T172] usb 4-1: Using ep0 maxpacket: 16 [ 104.103383][ T172] usb 4-1: config 105 has an invalid interface number: 83 but max is 0 [ 104.111722][ T172] usb 4-1: config 105 has no interface number 0 [ 104.165998][ T172] usb 4-1: config 105 interface 83 altsetting 12 endpoint 0x9 has invalid wMaxPacketSize 0 [ 104.191949][ T172] usb 4-1: config 105 interface 83 altsetting 12 has a duplicate endpoint with address 0x89, skipping [ 104.222239][ T172] usb 4-1: config 105 interface 83 has no altsetting 0 [ 104.243262][ T172] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=a5.63 [ 104.256261][ T172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.281941][ T172] usb 4-1: Product: syz [ 104.286170][ T172] usb 4-1: Manufacturer: syz [ 104.290785][ T172] usb 4-1: SerialNumber: syz [ 105.913726][ T172] etas_es58x 4-1:105.83: Starting syz syz (Serial Number syz) [ 106.670543][ T172] usb 4-1: USB disconnect, device number 3 [ 106.697157][ T5971] loop2: detected capacity change from 0 to 2048 [ 106.833956][ T5971] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.198205][ T5977] loop2: detected capacity change from 0 to 16 [ 107.222420][ T5977] erofs: (device loop2): mounted with root inode @ nid 36. [ 107.410237][ T5787] Bluetooth: Wrong link type (-57) [ 111.952172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 113.637023][ T6014] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6014] [ 115.087560][ T6024] loop0: detected capacity change from 0 to 16 [ 115.190267][ T6024] erofs: (device loop0): mounted with root inode @ nid 36. [ 115.620384][ T5787] Bluetooth: Wrong link type (-57) [ 117.072117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 120.481390][ T6053] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6053] [ 121.244787][ T6063] loop1: detected capacity change from 0 to 16 [ 121.287472][ T6063] erofs: (device loop1): mounted with root inode @ nid 36. [ 121.497687][ T5787] Bluetooth: Wrong link type (-57) [ 126.721104][ T6089] Zero length message leads to an empty skb [ 127.312140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 129.970857][ T6099] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6099] [ 130.879775][ T6103] loop1: detected capacity change from 0 to 16 [ 130.900693][ T6103] erofs: (device loop1): mounted with root inode @ nid 36. [ 130.918389][ T6102] loop2: detected capacity change from 0 to 512 [ 131.119953][ T5787] Bluetooth: Wrong link type (-57) [ 131.391750][ T6105] 9pnet_fd: Insufficient options for proto=fd [ 131.562666][ T6102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.356411][ T6102] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.106685][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.302085][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.535285][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.582543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 135.670166][ T6135] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6135] [ 137.375967][ T6141] 9pnet_fd: Insufficient options for proto=fd [ 139.702509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 141.005910][ T6171] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6171] [ 141.177956][ T5787] Bluetooth: hci2: link tx timeout [ 141.184581][ T5787] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 144.123301][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 144.822560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 146.792256][ T6201] loop2: detected capacity change from 0 to 512 [ 146.873598][ T6201] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 146.963551][ T6201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.125619][ T6201] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.123406][ T6209] 9pnet_fd: Insufficient options for proto=fd [ 149.974663][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.758783][ T6244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.195122][ T6283] fuse: Bad value for 'fd' [ 160.207864][ T6283] process 'syz.3.123' launched './file0' with NULL argv: empty string added [ 160.591088][ T6291] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.742554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 165.791159][ T6311] loop2: detected capacity change from 0 to 512 [ 165.820116][ T6311] EXT4-fs: inline encryption not supported [ 165.872626][ T6311] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 165.932864][ T6311] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.128: corrupted in-inode xattr: e_value size too large [ 166.012223][ T6311] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.128: couldn't read orphan inode 15 (err -117) [ 166.086539][ T6311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.243647][ T6311] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #2: block 13: comm syz.2.128: lblock 0 mapped to illegal pblock 13 (length 1) [ 166.336373][ T6311] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #2: block 13: comm syz.2.128: lblock 0 mapped to illegal pblock 13 (length 1) [ 166.377968][ T6311] EXT4-fs warning (device loop2): ext4_empty_dir:3139: inode #2: lblock 0: comm syz.2.128: error -117 reading directory block [ 166.655220][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.796277][ T6339] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.115005][ T6370] loop2: detected capacity change from 0 to 8 [ 173.206053][ T6370] SQUASHFS error: Failed to read block 0x4de: -5 [ 173.243942][ T6370] SQUASHFS error: Failed to read block 0x4de: -5 [ 173.256093][ T28] audit: type=1800 audit(1786326380.905:2): pid=6370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.145" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 173.342887][ T6370] SQUASHFS error: Failed to read block 0x4de: -5 [ 173.351328][ T6370] SQUASHFS error: Failed to read block 0x4de: -5 [ 173.922244][ T6370] SQUASHFS error: Failed to read block 0x4de: -5 [ 173.928807][ T6370] SQUASHFS error: Failed to read block 0x4de: -5 [ 174.730849][ T6383] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6384] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6383] [ 176.038545][ T6390] loop0: detected capacity change from 0 to 512 [ 176.275840][ T6390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.305413][ T6390] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.429685][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.448457][ T6398] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.241653][ T5088] Bluetooth: hci3: link tx timeout [ 178.247299][ T5088] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 178.256548][ T5088] Bluetooth: hci3: link tx timeout [ 178.261695][ T5088] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 180.193354][ T6424] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6426] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6424] [ 180.861780][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 181.146386][ T6428] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6428] [ 183.023083][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 185.583413][ T6459] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.611711][ T6457] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6462] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6457] [ 186.892823][ T6470] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6470] [ 191.412544][ T6494] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.862198][ T6493] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6496] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6493] [ 192.700470][ T6502] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6502] [ 194.201075][ T6504] netlink: 36 bytes leftover after parsing attributes in process `syz.2.183'. [ 195.360463][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.366904][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.747395][ T28] audit: type=1326 audit(1786326403.405:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.3.178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b99e0d9 code=0x7ffc0000 [ 195.831992][ T28] audit: type=1326 audit(1786326403.435:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.3.178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b99e0d9 code=0x7ffc0000 [ 195.892365][ T28] audit: type=1326 audit(1786326403.435:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.3.178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b99e0d9 code=0x7ffc0000 [ 195.946373][ T28] audit: type=1326 audit(1786326403.435:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.3.178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b99e0d9 code=0x7ffc0000 [ 195.995201][ T28] audit: type=1326 audit(1786326403.455:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.3.178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc86b99e0d9 code=0x7ffc0000 [ 196.072099][ T28] audit: type=1326 audit(1786326403.455:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.3.178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b99e0d9 code=0x7ffc0000 [ 196.127606][ T28] audit: type=1326 audit(1786326403.455:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.3.178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b99e0d9 code=0x7ffc0000 [ 196.305652][ T6521] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6523] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6521] [ 197.042002][ T28] audit: type=1326 audit(1786326403.455:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.3.178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b99e0d9 code=0x7ffc0000 [ 197.131961][ T28] audit: type=1326 audit(1786326403.455:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.3.178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b99e0d9 code=0x7ffc0000 [ 197.190101][ T28] audit: type=1326 audit(1786326403.455:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.3.178" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fc86b99e0d9 code=0x7ffc0000 [ 197.600245][ T6527] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6527] [ 197.959160][ T6532] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6532] [ 200.709923][ T6542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.689324][ T6555] Bluetooth: MGMT ver 1.22 [ 202.702363][ T6555] Bluetooth: hci0: unsupported parameter 255 [ 202.708416][ T6555] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 204.249324][ T6565] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6565] [ 204.537185][ T6571] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6571] [ 207.055782][ T6584] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6586] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6584] [ 207.770975][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 207.779556][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 208.437467][ T6589] xt_CT: You must specify a L4 protocol and not use inversions on it [ 208.722198][ T5790] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 209.282533][ T6602] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6602] [ 210.491162][ T6608] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6608] [ 210.508887][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 211.828656][ T6610] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6613] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6610] [ 213.192150][ T5790] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 214.106506][ T6632] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6632] [ 215.107655][ T6643] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.252840][ T6645] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6645] [ 219.322542][ T6661] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6667] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6661] [ 219.760813][ T6671] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6671] [ 220.787209][ T6676] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.842837][ T6688] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6688] [ 222.865147][ T5790] Bluetooth: hci2: link tx timeout [ 222.870323][ T5790] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 224.942354][ T5088] Bluetooth: hci2: command 0x0406 tx timeout [ 226.856981][ T6708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.835140][ T6712] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6712] [ 229.187267][ T6723] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6723] [ 229.735627][ T6713] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6726] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6713] [ 232.221970][ T6753] xt_CT: You must specify a L4 protocol and not use inversions on it [ 233.251196][ T6756] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6756] [ 233.267325][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 234.502450][ T6763] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6763] [ 235.305168][ T6765] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6769] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6765] [ 236.012120][ T5790] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 237.603966][ T6778] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.902879][ T6804] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6806] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6804] [ 245.257150][ T6810] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6810] [ 245.273796][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 246.292377][ T5790] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 246.735756][ T6825] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.404088][ T6843] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6843] [ 251.845772][ T6853] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.896090][ T6854] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6854] [ 251.922797][ T5790] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 252.238275][ T5790] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 256.102318][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.108622][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.498259][ T6889] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6889] [ 260.193894][ T6904] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6904] [ 260.563907][ T5790] Bluetooth: hci1: link tx timeout [ 260.570125][ T5790] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 261.004485][ T5088] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 262.726566][ T5088] Bluetooth: hci1: command 0x0406 tx timeout [ 268.037131][ T6937] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6937] [ 268.053819][ T5790] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 268.326222][ T6942] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6942] [ 268.912312][ T6943] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.952222][ T5790] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 274.149460][ T6970] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6970] [ 274.168041][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 275.467329][ T5790] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 279.787492][ T6994] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6994] [ 279.858558][ T6995] xt_CT: You must specify a L4 protocol and not use inversions on it [ 282.122967][ T7008] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7008] [ 282.136660][ T5790] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 284.770643][ T7020] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7020] [ 285.593222][ T5790] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 286.079514][ T7031] xt_CT: You must specify a L4 protocol and not use inversions on it [ 295.022805][ T7074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 295.031225][ T7075] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7075] [ 303.801210][ T7136] xt_CT: You must specify a L4 protocol and not use inversions on it [ 312.684340][ T7182] xt_CT: You must specify a L4 protocol and not use inversions on it [ 317.809126][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.822944][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.134288][ T7222] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.689145][ T7267] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7269] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7267] [ 338.005788][ T7305] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7307] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7305] [ 349.074536][ T7355] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7357] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7355] [ 358.457823][ T7403] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7405] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7403] [ 369.605230][ T7450] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7467] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7450] [ 376.804485][ T7505] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7511] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7505] [ 379.114408][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.131986][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.617275][ T7557] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7563] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7557] [ 406.174516][ T7646] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7648] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7646] [ 413.310072][ T7689] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7691] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7689] [ 419.124658][ T7728] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7732] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7728] [ 424.252369][ T7757] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7761] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7757] [ 428.344635][ T7785] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7787] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7785] [ 434.032961][ T7820] warning: `syz.2.560' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 435.062238][ T7828] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7832] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7828] [ 440.605871][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.612371][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.665651][ T7875] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7877] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7875] [ 449.928448][ T7915] Bluetooth: hci0: unsupported parameter 255 [ 449.939052][ T7915] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 452.962238][ T7938] Bluetooth: hci0: unsupported parameter 255 [ 452.992028][ T7938] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 457.737842][ T7966] Bluetooth: hci0: unsupported parameter 255 [ 457.752034][ T7966] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 464.497285][ T8020] Bluetooth: hci0: unsupported parameter 255 [ 464.515429][ T8020] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 470.521125][ T8068] Bluetooth: hci0: unsupported parameter 255 [ 470.527516][ T8068] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 472.729555][ T8091] Bluetooth: hci0: unsupported parameter 255 [ 472.754199][ T8091] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 480.119316][ T8139] Bluetooth: hci0: unsupported parameter 255 [ 480.131550][ T8139] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 483.278776][ T8161] Bluetooth: hci0: unsupported parameter 255 [ 483.284913][ T8161] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 487.022614][ T8190] Bluetooth: hci0: unsupported parameter 255 [ 487.028759][ T8190] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 489.868343][ T8216] Bluetooth: hci0: unsupported parameter 255 [ 489.879883][ T8216] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 491.668371][ T8240] Bluetooth: hci0: unsupported parameter 255 [ 491.675233][ T8240] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 501.745896][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.752394][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 516.822635][ T8459] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8459] [ 516.838496][ T5790] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 524.609641][ T8510] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8510] [ 524.625875][ T5790] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 528.743079][ T8540] Driver unsupported XDP return value 0 on prog (id 63) dev N/A, expect packet loss! [ 530.559244][ T8555] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8555] [ 530.583312][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 534.901423][ T8575] sched: RT throttling activated [ 540.902781][ T8607] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8609] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8607] [ 541.062360][ T8603] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8603] [ 541.153044][ T5790] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 548.779162][ T8652] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8655] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8652] [ 552.412377][ T8672] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 554.089867][ T8686] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8688] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8686] [ 558.806402][ T8705] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 560.884914][ T8720] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8722] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8720] [ 563.162393][ T8738] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 563.195807][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.205881][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.625773][ T8768] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8768] [ 569.185703][ T8772] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 576.492682][ T8811] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8813] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8811] [ 577.629815][ T8817] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 580.505638][ T8841] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 581.481210][ T8857] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8860] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8857] [ 586.272923][ T8888] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8891] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8888] [ 586.946421][ T8892] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 590.024350][ T8917] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8919] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8917] [ 593.377705][ T8939] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 595.212265][ T8951] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8953] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8951] [ 600.457234][ T8981] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8983] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8981] [ 604.630860][ T9012] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[9016] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9012] [ 624.845342][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.851692][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 644.772805][ T9292] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9292] [ 644.860819][ T5790] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 648.793946][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 648.794036][ T28] audit: type=1326 audit(1786326856.455:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.0.1038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9a19e0d9 code=0x7ffc0000 [ 648.866519][ T28] audit: type=1326 audit(1786326856.455:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.0.1038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9a19e0d9 code=0x7ffc0000 [ 649.015160][ T28] audit: type=1326 audit(1786326856.465:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.0.1038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9a19e0d9 code=0x7ffc0000 [ 649.108246][ T9325] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9325] [ 649.135103][ T5790] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 649.232740][ T28] audit: type=1326 audit(1786326856.465:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.0.1038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0d9a19e0d9 code=0x7ffc0000 [ 649.690950][ T28] audit: type=1326 audit(1786326856.465:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.0.1038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9a19e0d9 code=0x7ffc0000 [ 650.487775][ T28] audit: type=1326 audit(1786326856.465:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.0.1038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9a19e0d9 code=0x7ffc0000 [ 650.522769][ T28] audit: type=1326 audit(1786326856.465:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.0.1038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d9a19e0d9 code=0x7ffc0000 [ 650.575803][ T28] audit: type=1326 audit(1786326856.465:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.0.1038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0d9a19e0d9 code=0x7ffc0000 [ 650.613791][ T28] audit: type=1326 audit(1786326856.465:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.0.1038" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0d9a19e0d9 code=0x7ffc0000 [ 656.242729][ T9371] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9371] [ 656.702089][ T5790] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 659.091791][ T9402] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9402] [ 659.116907][ T5790] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 659.797898][ T5790] Bluetooth: hci0: connection err: -111 [ 663.005588][ T9442] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9442] [ 663.112087][ T9409] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 667.194838][ T9484] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9484] [ 670.209761][ T9514] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9514] [ 672.555546][ T9409] Bluetooth: hci3: connection err: -111 [ 674.315010][ T9555] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9555] [ 677.859737][ T9409] Bluetooth: hci3: connection err: -111 [ 678.541776][ T9596] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9596] [ 678.569592][ T5088] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 682.291345][ T9626] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9626] [ 682.318633][ T5088] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 683.843128][ T9637] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1131'. [ 686.369934][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.376403][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.033341][ T9665] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9665] [ 688.059164][ T5088] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 693.479862][ T9713] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9713] [ 693.499616][ T5088] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 698.242557][ T9749] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9749] [ 698.262514][ T5088] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 704.872491][ T9820] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9820] [ 705.305697][ T5088] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 707.512681][ T9847] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9847] [ 707.689947][ T5088] Bluetooth: hci0: link tx timeout [ 707.696451][ T5088] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 709.752412][ T9409] Bluetooth: hci0: command 0x0406 tx timeout [ 710.998845][ T9888] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9888] [ 711.051998][ T5088] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 716.805833][ T9920] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9920] [ 716.882147][ T5088] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 718.732366][ T9926] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 722.819900][ T9956] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9956] [ 722.872068][ T5088] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 730.103353][T10007] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10007] [ 730.305271][ T5088] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 737.992992][T10039] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10039] [ 738.083240][ T5088] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 747.522864][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.531495][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.217009][ T28] audit: type=1800 audit(1786327010.755:41): pid=10458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1368" name="c_srate" dev="configfs" ino=19045 res=0 errno=0 [ 809.212494][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.321922][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.770684][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'. [ 811.779686][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1380'. [ 834.412544][ T5088] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 838.828611][ T5088] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 844.750558][ T9409] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 849.359427][ T9409] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 851.715965][T10825] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1472'. [ 854.620850][ T9409] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 870.448479][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.456492][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.138161][T11055] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1548'. [ 893.952208][T11197] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 896.607338][T11221] syz_tun: entered allmulticast mode [ 896.647006][T11220] syz_tun: left allmulticast mode [ 910.208968][T11352] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 913.977820][ T28] audit: type=1800 audit(1786327121.635:42): pid=11402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1671" name="c_srate" dev="configfs" ino=22550 res=0 errno=0 [ 916.680437][T11432] Core dump to core aborted: cannot preserve file permissions [ 917.452060][ T28] audit: type=1326 audit(1786327124.315:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.3.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b99e0d9 code=0x7ffc0000 [ 917.604158][ T28] audit: type=1326 audit(1786327124.315:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.3.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b99e0d9 code=0x7ffc0000 [ 917.630392][ T28] audit: type=1326 audit(1786327124.325:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.3.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b99e0d9 code=0x7ffc0000 [ 917.655995][ T28] audit: type=1326 audit(1786327124.325:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.3.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b99e0d9 code=0x7ffc0000 [ 917.680664][ T28] audit: type=1326 audit(1786327124.325:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.3.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc86b99e0d9 code=0x7ffc0000 [ 918.582328][ T28] audit: type=1326 audit(1786327124.325:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.3.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b99e0d9 code=0x7ffc0000 [ 918.772398][ T28] audit: type=1326 audit(1786327124.325:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.3.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b99e0d9 code=0x7ffc0000 [ 918.796652][ T28] audit: type=1326 audit(1786327124.325:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.3.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b99e0d9 code=0x7ffc0000 [ 918.912530][ T28] audit: type=1326 audit(1786327124.325:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.3.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86b99e0d9 code=0x7ffc0000 [ 924.209090][ T9409] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 928.508619][ T9409] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 931.825276][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.832294][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.639338][ T9409] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 942.547880][ T9409] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 945.095014][ T9409] Bluetooth: hci3: connection err: -111 [ 948.971603][ T5088] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 952.430274][ T5088] Bluetooth: hci1: unknown advertising packet type: 0x30 [ 952.430331][ T5088] Bluetooth: hci1: unknown advertising packet type: 0x6f [ 955.291631][ T5088] Bluetooth: hci3: connection err: -111 [ 955.852773][T11744] futex_wake_op: syz.3.1777 tries to shift op by 144; fix this program [ 957.371912][ T9409] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 957.844607][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 957.844621][ T28] audit: type=1800 audit(1786327165.505:57): pid=11761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1778" name="c_srate" dev="configfs" ino=23073 res=0 errno=0 [ 960.325655][T11777] Bluetooth: MGMT ver 1.22 [ 961.204799][ T9409] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 962.658495][ T9409] Bluetooth: hci0: connection err: -111 [ 964.851528][ T28] audit: type=1800 audit(1786327172.505:58): pid=11818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1798" name="c_srate" dev="configfs" ino=23143 res=0 errno=0 [ 965.775410][ T5088] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 967.335743][ T5088] Bluetooth: hci0: connection err: -111 [ 971.412052][T11878] syz.3.1819 uses obsolete (PF_INET,SOCK_PACKET) [ 971.846396][ T28] audit: type=1800 audit(1786327179.475:59): pid=11884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1817" name="c_srate" dev="configfs" ino=23789 res=0 errno=0 [ 972.207894][T11843] Bluetooth: hci3: connection err: -111 [ 974.987750][T11843] Bluetooth: hci3: connection err: -111 [ 975.011588][ T28] audit: type=1800 audit(1786327182.665:60): pid=11928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1833" name="c_srate" dev="configfs" ino=23295 res=0 errno=0 [ 978.264325][ T9409] Bluetooth: hci0: connection err: -111 [ 978.478562][T11970] fuse: Bad value for 'fd' [ 978.685316][ T28] audit: type=1800 audit(1786327186.345:61): pid=11976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1842" name="c_srate" dev="configfs" ino=23390 res=0 errno=0 [ 980.869810][ T28] audit: type=1800 audit(1786327188.525:62): pid=11990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1854" name="c_srate" dev="configfs" ino=23403 res=0 errno=0 [ 981.800635][T11843] Bluetooth: hci0: connection err: -111 [ 987.462349][T11843] Bluetooth: hci2: connection err: -111 [ 989.900688][T11843] Bluetooth: hci1: connection err: -111 [ 992.393838][T11843] Bluetooth: hci0: connection err: -111 [ 992.444307][ T28] audit: type=1800 audit(1786327200.105:63): pid=12124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1893" name="c_srate" dev="configfs" ino=24626 res=0 errno=0 [ 993.342794][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.355175][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.119391][ T9409] Bluetooth: hci1: connection err: -111 [ 1001.862672][T11843] Bluetooth: hci1: connection err: -111 [ 1004.994072][T12260] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1944'. [ 1005.116253][ T9409] Bluetooth: hci2: connection err: -111 [ 1007.791431][T12285] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1954'. [ 1012.912412][ T9409] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 1013.339702][ T9409] Bluetooth: hci1: connection err: -111 [ 1014.858549][ T28] audit: type=1800 audit(1786327222.515:64): pid=12353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1971" name="c_srate" dev="configfs" ino=25000 res=0 errno=0 [ 1017.744225][ T9409] Bluetooth: hci1: connection err: -111 [ 1020.101952][ T9409] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1022.497695][T12420] futex_wake_op: syz.0.1992 tries to shift op by -1; fix this program [ 1025.891517][ T9409] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1030.879851][ T9409] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1031.261991][ T28] audit: type=1800 audit(1786327238.905:65): pid=12483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2018" name="c_srate" dev="configfs" ino=25226 res=0 errno=0 [ 1031.885006][T12488] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2014'. [ 1032.982035][T11843] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1037.146209][T11843] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1037.394030][T12533] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2032'. [ 1037.472794][ T28] audit: type=1800 audit(1786327245.135:66): pid=12536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2028" name="c_srate" dev="configfs" ino=25313 res=0 errno=0 [ 1037.742199][T11843] Bluetooth: hci0: command 0x0406 tx timeout [ 1037.749726][ T9409] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1043.721994][T12571] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2045'. [ 1045.851984][ T9409] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1046.661274][T12589] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2049'. [ 1047.885543][ T28] audit: type=1800 audit(1786327255.525:67): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2052" name="c_srate" dev="configfs" ino=25421 res=0 errno=0 [ 1048.073934][T12605] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2055'. [ 1050.324061][ T9409] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1052.592423][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2059'. [ 1052.800226][T12641] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2066'. [ 1053.956095][ T28] audit: type=1800 audit(1786327261.615:68): pid=12653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2069" name="c_srate" dev="configfs" ino=25696 res=0 errno=0 [ 1054.716522][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.725533][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.711487][ T28] audit: type=1800 audit(1786327268.365:69): pid=12708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2088" name="c_srate" dev="configfs" ino=25561 res=0 errno=0 [ 1063.982242][ T9409] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 1064.853166][ T28] audit: type=1800 audit(1786327272.445:70): pid=12736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2098" name="c_srate" dev="configfs" ino=25600 res=0 errno=0 [ 1065.452041][ T28] audit: type=1800 audit(1786327273.105:71): pid=12744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2102" name="c_srate" dev="configfs" ino=26643 res=0 errno=0 [ 1069.433076][T12776] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 1098.532763][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2220'. [ 1099.541437][T13098] hsr_slave_1 (unregistering): left promiscuous mode [ 1100.657370][T13127] capability: warning: `syz.2.2231' uses deprecated v2 capabilities in a way that may be insecure [ 1102.647579][ T28] audit: type=1800 audit(1786327310.295:72): pid=13147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2236" name="c_srate" dev="configfs" ino=27291 res=0 errno=0 [ 1106.659190][ T28] audit: type=1800 audit(1786327314.315:73): pid=13188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2249" name="c_srate" dev="configfs" ino=27331 res=0 errno=0 [ 1107.751198][T13194] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2252'. [ 1109.673321][T13206] fuse: Bad value for 'fd' [ 1112.986161][ T28] audit: type=1800 audit(1786327320.625:74): pid=13239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2263" name="c_srate" dev="configfs" ino=27383 res=0 errno=0 [ 1116.146144][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.158567][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.998660][ T28] audit: type=1800 audit(1786327324.655:75): pid=13279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2275" name="c_srate" dev="configfs" ino=26457 res=0 errno=0 [ 1117.720287][T13287] ip_tables: iptables: counters copy to user failed while replacing table [ 1124.262008][ T28] audit: type=1800 audit(1786327331.915:76): pid=13346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2292" name="c_srate" dev="configfs" ino=27579 res=0 errno=0 [ 1130.311993][ T28] audit: type=1800 audit(1786327337.965:77): pid=13399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2308" name="c_srate" dev="configfs" ino=27652 res=0 errno=0 [ 1133.677452][ T3539] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.953223][T11843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1133.963212][T11843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1133.971175][T11843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1133.981716][ T3539] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.004405][T11843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1134.012980][T11843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1134.021274][T11843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1134.320743][ T3539] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.987067][ T3539] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.749414][T13429] chnl_net:caif_netlink_parms(): no params data found [ 1136.102938][T11843] Bluetooth: hci0: command tx timeout [ 1136.109961][ T28] audit: type=1800 audit(1786327343.655:78): pid=13456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2319" name="c_srate" dev="configfs" ino=27885 res=0 errno=0 [ 1137.423112][T13469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2321'. [ 1137.634372][T13429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.641568][T13429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.670930][T13429] bridge_slave_0: entered allmulticast mode [ 1137.706322][T13429] bridge_slave_0: entered promiscuous mode [ 1138.041697][T13429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.061723][T13429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.105251][T13429] bridge_slave_1: entered allmulticast mode [ 1138.901996][T11843] Bluetooth: hci0: command tx timeout [ 1138.926973][T13429] bridge_slave_1: entered promiscuous mode [ 1139.932763][T13429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1139.965640][T13429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1140.942764][T11843] Bluetooth: hci0: command tx timeout [ 1141.291199][T13429] team0: Port device team_slave_0 added [ 1142.014360][T13429] team0: Port device team_slave_1 added [ 1142.315845][ T28] audit: type=1800 audit(1786327349.965:79): pid=13507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2329" name="c_srate" dev="configfs" ino=27964 res=0 errno=0 [ 1142.554610][T13429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.607781][T13429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1142.772073][T13429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.024228][T11843] Bluetooth: hci0: command tx timeout [ 1143.152415][T13429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1143.159423][T13429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.247260][T13429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.705243][T13429] hsr_slave_0: entered promiscuous mode [ 1143.739525][T13429] hsr_slave_1: entered promiscuous mode [ 1143.772114][T13429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1143.798240][T13429] Cannot create hsr debugfs directory [ 1143.815886][ T3539] hsr_slave_0: left promiscuous mode [ 1143.872039][ T3539] hsr_slave_1: left promiscuous mode [ 1144.020928][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1144.731431][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1144.740976][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1144.758309][ T3539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1144.767540][T13533] ip_tables: iptables: counters copy to user failed while replacing table [ 1144.778512][ T3539] bridge_slave_1: left allmulticast mode [ 1144.785575][ T3539] bridge_slave_1: left promiscuous mode [ 1144.812890][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.839318][ T3539] bridge_slave_0: left allmulticast mode [ 1144.861413][ T3539] bridge_slave_0: left promiscuous mode [ 1144.898436][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.960158][ T3539] veth1_macvtap: left promiscuous mode [ 1144.972458][ T3539] veth0_macvtap: left promiscuous mode [ 1144.982294][ T3539] veth1_vlan: left promiscuous mode [ 1144.987931][ T3539] veth0_vlan: left promiscuous mode [ 1146.846857][ T3539] team0 (unregistering): Port device team_slave_1 removed [ 1146.884051][ T3539] team0 (unregistering): Port device team_slave_0 removed [ 1146.932493][ T3539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.982096][ T3539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1147.348844][ T3539] bond0 (unregistering): Released all slaves [ 1148.056440][ T28] audit: type=1800 audit(1786327355.715:80): pid=13568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2337" name="c_srate" dev="configfs" ino=28060 res=0 errno=0 [ 1149.365645][T13580] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1153.137724][ T28] audit: type=1800 audit(1786327360.795:81): pid=13612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2347" name="c_srate" dev="configfs" ino=28130 res=0 errno=0 [ 1154.321703][T13429] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1155.170735][T13429] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1155.215110][T13429] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1155.238434][T13429] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1155.487875][T13429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.599464][T13429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.630805][ T4495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.638984][ T4495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.764006][ T9062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.771241][ T9062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.356353][T13429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1156.490908][T13429] veth0_vlan: entered promiscuous mode [ 1156.537730][T13429] veth1_vlan: entered promiscuous mode [ 1157.347553][T13429] veth0_macvtap: entered promiscuous mode [ 1157.376470][T13429] veth1_macvtap: entered promiscuous mode [ 1157.427425][T13429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.446556][T13429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.460069][T13429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.480339][T13429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.490754][T13429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.506755][T13429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.624501][T13429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1157.651054][ T28] audit: type=1800 audit(1786327365.225:82): pid=13667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2356" name="c_srate" dev="configfs" ino=28446 res=0 errno=0 [ 1157.695740][T13429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.738330][T13429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.760482][T13429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1158.059419][T13429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.341875][T13429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1158.371892][T13429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.404814][T13429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1158.468054][T13429] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.498716][T13429] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.520528][T13429] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.542231][T13429] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.622541][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.639011][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.702549][ T3539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.710863][ T3539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.229316][ T28] audit: type=1800 audit(1786327369.885:83): pid=13716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2365" name="c_srate" dev="configfs" ino=29751 res=0 errno=0 [ 1163.804546][ T9409] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1163.815965][ T9409] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1163.843736][ T9409] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1163.861395][ T9409] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1163.870189][ T9409] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1163.879815][ T9409] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1164.020743][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.214337][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.356120][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.678018][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.116749][T13728] chnl_net:caif_netlink_parms(): no params data found [ 1165.992314][ T9409] Bluetooth: hci3: command tx timeout [ 1166.826725][T13770] loop1: detected capacity change from 0 to 128 [ 1166.929926][T13770] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1166.954117][T13770] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1167.129645][T13728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.160512][T13728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.168980][T13728] bridge_slave_0: entered allmulticast mode [ 1167.176370][T13728] bridge_slave_0: entered promiscuous mode [ 1167.185845][T13728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.193574][T13728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.200837][T13728] bridge_slave_1: entered allmulticast mode [ 1167.208213][T13728] bridge_slave_1: entered promiscuous mode [ 1167.334674][T13728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1167.376791][T13728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1167.597155][T13728] team0: Port device team_slave_0 added [ 1167.664579][T13728] team0: Port device team_slave_1 added [ 1167.758595][T13429] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1167.831350][T13728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1167.872772][T13728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1167.899178][T13728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1168.033611][T13728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1168.050945][T13728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1168.082514][ T9409] Bluetooth: hci3: command tx timeout [ 1168.130654][ T28] audit: type=1800 audit(1786327375.785:84): pid=13804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2377" name="c_srate" dev="configfs" ino=29251 res=0 errno=0 [ 1168.169326][T13728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1168.485945][T13728] hsr_slave_0: entered promiscuous mode [ 1168.539454][T13728] hsr_slave_1: entered promiscuous mode [ 1168.563248][T13728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1168.582361][T13728] Cannot create hsr debugfs directory [ 1168.902641][ T62] hsr_slave_0: left promiscuous mode [ 1168.913974][ T62] hsr_slave_1: left promiscuous mode [ 1169.077579][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1169.124878][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1169.159408][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1169.260651][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1169.392458][ T62] bridge_slave_1: left allmulticast mode [ 1169.492774][ T62] bridge_slave_1: left promiscuous mode [ 1169.609213][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.800156][ T62] bridge_slave_0: left allmulticast mode [ 1169.829722][ T62] bridge_slave_0: left promiscuous mode [ 1169.856039][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.933806][ T62] veth1_macvtap: left promiscuous mode [ 1169.941934][ T62] veth0_macvtap: left promiscuous mode [ 1169.952094][ T62] veth1_vlan: left promiscuous mode [ 1169.957462][ T62] veth0_vlan: left promiscuous mode [ 1170.147864][ T9409] Bluetooth: hci3: command tx timeout [ 1170.618108][T13841] loop1: detected capacity change from 0 to 128 [ 1170.663205][T13841] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1170.706400][T13841] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1171.237170][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1171.279041][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1171.340790][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1171.420232][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1171.533038][T13429] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1172.295776][ T9409] Bluetooth: hci3: command tx timeout [ 1174.263830][ T62] bond0 (unregistering): Released all slaves [ 1174.920433][ T28] audit: type=1800 audit(1786327382.575:85): pid=13871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2389" name="c_srate" dev="configfs" ino=29938 res=0 errno=0 [ 1175.470427][T13885] fuse: Bad value for 'fd' [ 1175.530884][T13728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1175.558042][T13728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1175.595120][T13728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1175.626875][T13728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1175.868782][T13728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1175.919079][T13728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1175.958471][T13570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.965690][T13570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.004243][T13570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.011483][T13570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1177.538291][T13728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1177.585650][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.595349][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.689203][T13728] veth0_vlan: entered promiscuous mode [ 1177.717522][T13728] veth1_vlan: entered promiscuous mode [ 1177.815794][T13728] veth0_macvtap: entered promiscuous mode [ 1177.838905][T13728] veth1_macvtap: entered promiscuous mode [ 1177.888861][T13728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1177.921904][T13728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.942911][T13728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1177.961985][T13728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.973861][T13927] loop1: detected capacity change from 0 to 128 [ 1177.982382][T13728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.010237][T13728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.063923][T13728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1178.084219][T13927] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1178.145918][T13728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1178.176465][T13927] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1178.181963][T13728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.205502][T13728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1178.340682][T13728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.396157][T13728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1178.440577][T13728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.487646][T13728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1178.728707][T13728] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.864096][T13728] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.888624][T13728] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.912005][T13728] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.928930][T13429] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1181.219908][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.259076][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.347823][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.386455][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.952046][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1182.162140][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 1182.179549][ T27] usb 1-1: config 105 has an invalid interface number: 83 but max is 0 [ 1182.190770][ T27] usb 1-1: config 105 has no interface number 0 [ 1182.200198][ T27] usb 1-1: config 105 interface 83 altsetting 12 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1182.224970][ T27] usb 1-1: config 105 interface 83 altsetting 12 has a duplicate endpoint with address 0x89, skipping [ 1182.247432][ T27] usb 1-1: config 105 interface 83 has no altsetting 0 [ 1182.269943][ T27] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=a5.63 [ 1182.291398][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.312275][ T27] usb 1-1: Product: syz [ 1182.316492][ T27] usb 1-1: Manufacturer: syz [ 1182.321099][ T27] usb 1-1: SerialNumber: syz [ 1182.378691][T13962] loop1: detected capacity change from 0 to 8192 [ 1182.440218][T13962] loop1: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 1182.457455][T13962] loop1: p4 size 16776960 extends beyond EOD, truncated [ 1182.806988][ T28] audit: type=1800 audit(1786327390.465:86): pid=13964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2409" name="c_srate" dev="configfs" ino=30283 res=0 errno=0 [ 1183.972224][ T27] etas_es58x 1-1:105.83: Starting syz syz (Serial Number syz) [ 1184.024337][ T27] usb 1-1: USB disconnect, device number 2 [ 1186.349252][T13725] udevd[13725]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1186.349309][T13860] udevd[13860]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 1186.372742][T13681] udevd[13681]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1186.385723][T13757] udevd[13757]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1186.737847][T13996] udevd[13996]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 1186.792384][T13997] udevd[13997]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 1186.815622][T13681] udevd[13681]: inotify_add_watch(7, /dev/loop1p13, 10) failed: No such file or directory [ 1186.861764][T13998] udevd[13998]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 1186.875407][T13725] udevd[13725]: inotify_add_watch(7, /dev/loop1p15, 10) failed: No such file or directory [ 1186.889146][T13757] udevd[13757]: inotify_add_watch(7, /dev/loop1p16, 10) failed: No such file or directory [ 1189.224411][ T28] audit: type=1800 audit(1786327396.855:87): pid=14021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2418" name="c_srate" dev="configfs" ino=30373 res=0 errno=0 [ 1189.657839][T14024] loop0: detected capacity change from 0 to 512 [ 1189.733218][T14024] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1189.758899][T11843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1189.767916][T11843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1189.777342][T11843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1189.786322][T11843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1189.793980][T11843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1189.802238][T11843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1189.844880][T14024] EXT4-fs: Mount option(s) incompatible with ext2 [ 1191.902684][ T9409] Bluetooth: hci2: command tx timeout [ 1191.926793][T14038] loop1: detected capacity change from 0 to 256 [ 1191.957957][T13570] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.479458][T13570] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.428119][T13570] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.684597][T14048] loop0: detected capacity change from 0 to 1764 [ 1194.302509][ T9409] Bluetooth: hci2: command tx timeout [ 1194.517791][T13570] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.583479][T14026] chnl_net:caif_netlink_parms(): no params data found [ 1195.018939][T14026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.060394][T14026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.068444][T14026] bridge_slave_0: entered allmulticast mode [ 1195.081608][T14026] bridge_slave_0: entered promiscuous mode [ 1195.856566][T14026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.941574][T14026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.000596][T14026] bridge_slave_1: entered allmulticast mode [ 1196.024504][T14026] bridge_slave_1: entered promiscuous mode [ 1196.100421][T14026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.120893][T14026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1196.364869][T14026] team0: Port device team_slave_0 added [ 1196.393510][T14026] team0: Port device team_slave_1 added [ 1196.411942][ T9409] Bluetooth: hci2: command tx timeout [ 1197.498495][T14089] loop0: detected capacity change from 0 to 512 [ 1197.505969][T14089] ext4: Unknown parameter 'fsname' [ 1197.548115][T14026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.561019][T13681] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1197.772155][T14101] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1198.769939][ T9409] Bluetooth: hci2: command tx timeout [ 1198.797844][T14026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1198.982266][T14026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1199.660666][T14026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1199.708398][T14026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1199.769451][T14026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1199.854199][T14026] hsr_slave_0: entered promiscuous mode [ 1199.882354][T14026] hsr_slave_1: entered promiscuous mode [ 1199.916623][T14026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1199.943118][T14026] Cannot create hsr debugfs directory [ 1207.749875][T13570] hsr_slave_0: left promiscuous mode [ 1207.852172][T13570] hsr_slave_1: left promiscuous mode [ 1207.913149][T13570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1207.939190][T13570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.975789][T13570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1207.992122][T13570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1208.052568][T13570] bridge_slave_1: left allmulticast mode [ 1208.058244][T13570] bridge_slave_1: left promiscuous mode [ 1208.092420][T13570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.133075][T13570] bridge_slave_0: left allmulticast mode [ 1208.138781][T13570] bridge_slave_0: left promiscuous mode [ 1208.173084][T13570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.964115][T13570] veth1_macvtap: left promiscuous mode [ 1208.970889][T13570] veth0_macvtap: left promiscuous mode [ 1208.983040][T13570] veth1_vlan: left promiscuous mode [ 1208.988394][T13570] veth0_vlan: left promiscuous mode [ 1209.285828][T14183] loop1: detected capacity change from 0 to 8 [ 1210.762026][T14197] loop0: detected capacity change from 0 to 1024 [ 1210.779729][T14197] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1210.852017][T14197] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1210.931390][T14197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1211.834926][T13728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.923783][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2472'. [ 1211.990523][T13570] team0 (unregistering): Port device team_slave_1 removed [ 1212.077458][T13570] team0 (unregistering): Port device team_slave_0 removed [ 1212.125896][T13570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1212.170471][T13570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1212.337650][T11156] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1212.559965][T11156] usb 1-1: Using ep0 maxpacket: 16 [ 1212.578977][T11156] usb 1-1: config 105 has an invalid interface number: 83 but max is 0 [ 1212.587479][T11156] usb 1-1: config 105 has no interface number 0 [ 1212.595939][T11156] usb 1-1: config 105 interface 83 altsetting 12 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1212.606114][T11156] usb 1-1: config 105 interface 83 altsetting 12 has a duplicate endpoint with address 0x89, skipping [ 1212.608629][T13570] bond0 (unregistering): Released all slaves [ 1212.617731][T11156] usb 1-1: config 105 interface 83 has no altsetting 0 [ 1212.637769][T11156] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=a5.63 [ 1212.647346][T11156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.658333][T11156] usb 1-1: Product: syz [ 1212.684930][T11156] usb 1-1: Manufacturer: syz [ 1212.690092][T11156] usb 1-1: SerialNumber: syz [ 1213.528641][T14226] loop1: detected capacity change from 0 to 512 [ 1213.557494][T14226] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1213.632051][T14226] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1213.667975][T14226] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1213.699900][T14226] EXT4-fs (loop1): 1 truncate cleaned up [ 1213.723332][T14226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1214.616175][T14026] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1215.575277][T11156] etas_es58x 1-1:105.83: Starting syz syz (Serial Number syz) [ 1215.601961][T14026] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1215.619684][T13429] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1215.622518][T14026] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1215.636550][T11156] usb 1-1: USB disconnect, device number 3 [ 1215.680715][T14026] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1217.180382][T14026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1217.281756][T14026] 8021q: adding VLAN 0 to HW filter on device team0 [ 1217.353822][T14111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.361010][T14111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.443969][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.451145][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.341357][T14026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1218.427746][T14026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1220.076137][T14026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1220.167673][ T28] audit: type=1800 audit(1786327427.825:88): pid=14271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2481" name="c_srate" dev="configfs" ino=31391 res=0 errno=0 [ 1220.279966][T14026] veth0_vlan: entered promiscuous mode [ 1220.416505][T14026] veth1_vlan: entered promiscuous mode [ 1220.651315][T14026] veth0_macvtap: entered promiscuous mode [ 1220.694640][T14026] veth1_macvtap: entered promiscuous mode [ 1221.009120][T14026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1221.244958][T14026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.365677][T14026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1221.371368][T14287] loop1: detected capacity change from 0 to 512 [ 1221.376845][T14026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.399370][T14026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1221.436176][T14026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.447392][T14287] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1221.458982][T14026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1221.513328][T14026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1221.547660][T14026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.558184][T14026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1221.571150][T14026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.581187][T14026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1221.592001][T14026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.604493][T14026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1221.630068][T14026] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.668165][T14287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1221.672394][T14297] loop0: detected capacity change from 0 to 512 [ 1221.707461][T14026] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.716576][T14026] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.718852][T14297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1221.725836][T14026] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.764557][T14287] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1221.934083][T14299] Quota error (device loop1): do_check_range: Getting block 33554435 out of range 1-5 [ 1221.973172][T13728] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1221.995277][T14299] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1222.087289][T13570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.090263][T14299] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.2487: Failed to acquire dquot type 1 [ 1222.101747][T13570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1222.280808][ T4495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.304854][T14299] Quota error (device loop1): do_check_range: Getting block 33554435 out of range 1-5 [ 1222.319139][ T4495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1222.367691][T14299] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1222.451484][T14299] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.2487: Failed to acquire dquot type 1 [ 1222.501672][T14315] loop0: detected capacity change from 0 to 512 [ 1222.510413][T14315] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1222.532207][T14315] EXT4-fs: Mount option(s) incompatible with ext2 [ 1223.841429][T13429] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1223.874576][ T5844] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1224.091899][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 1224.103986][ T5844] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.125241][ T5844] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1224.145541][ T5844] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1224.187835][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.289748][ T5844] usb 3-1: config 0 descriptor?? [ 1224.969706][ T5844] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1225.173099][T11843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1225.185917][T11843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1225.195209][T11843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1225.221606][T11843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1225.229698][T11843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1225.237740][T11843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1225.313491][T14332] fuse: Invalid rootmode [ 1225.333878][ T5781] usb 3-1: USB disconnect, device number 4 [ 1226.379981][T14357] file system registered [ 1226.388986][T14357] ffs_data_put(): freeing [ 1226.491338][T14359] loop0: detected capacity change from 0 to 512 [ 1226.502689][T14359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1226.514723][T14359] EXT4-fs: Mount option(s) incompatible with ext2 [ 1227.262866][T11843] Bluetooth: hci1: command tx timeout [ 1227.507722][T14347] chnl_net:caif_netlink_parms(): no params data found [ 1227.886466][T14347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.909094][T14347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.939901][T14347] bridge_slave_0: entered allmulticast mode [ 1227.972473][T14347] bridge_slave_0: entered promiscuous mode [ 1227.997673][T14347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.018155][ T28] audit: type=1326 audit(1786327435.675:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.1.2504" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33599e0d9 code=0x7ffc0000 [ 1228.047951][T14347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.066986][T14347] bridge_slave_1: entered allmulticast mode [ 1228.079475][T14347] bridge_slave_1: entered promiscuous mode [ 1228.085994][ T28] audit: type=1326 audit(1786327435.705:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.1.2504" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33599e0d9 code=0x7ffc0000 [ 1228.157289][ T28] audit: type=1326 audit(1786327435.705:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.1.2504" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33599e0d9 code=0x7ffc0000 [ 1228.185725][T14347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.210552][T14347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.222459][ T28] audit: type=1326 audit(1786327435.715:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.1.2504" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc33599e0d9 code=0x7ffc0000 [ 1228.289081][ T28] audit: type=1326 audit(1786327435.715:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.1.2504" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33599e0d9 code=0x7ffc0000 [ 1228.331429][T14347] team0: Port device team_slave_0 added [ 1228.363224][T14347] team0: Port device team_slave_1 added [ 1228.392136][ T28] audit: type=1326 audit(1786327435.715:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.1.2504" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33599e0d9 code=0x7ffc0000 [ 1228.500506][T14347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1228.513099][ T28] audit: type=1326 audit(1786327435.715:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.1.2504" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33599e0d9 code=0x7ffc0000 [ 1228.538509][ T28] audit: type=1326 audit(1786327435.715:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.1.2504" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33599e0d9 code=0x7ffc0000 [ 1228.555994][T14347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1228.562862][ T28] audit: type=1326 audit(1786327435.725:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.1.2504" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc33599e0d9 code=0x7ffc0000 [ 1228.632294][T14347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1228.645228][T14347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1228.652264][T14347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1228.678573][T14347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1228.750427][T14347] hsr_slave_0: entered promiscuous mode [ 1228.759534][ T28] audit: type=1326 audit(1786327435.725:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.1.2504" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33599e0d9 code=0x7ffc0000 [ 1228.815098][T14347] hsr_slave_1: entered promiscuous mode [ 1229.266933][T13570] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.342634][T11843] Bluetooth: hci1: command tx timeout [ 1229.724262][T13570] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.730660][T14392] loop2: detected capacity change from 0 to 512 [ 1230.761405][T14392] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1230.769412][T14392] EXT4-fs: Mount option(s) incompatible with ext2 [ 1230.805022][T13570] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.824716][T13681] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1231.234251][T13570] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.422886][T11843] Bluetooth: hci1: command tx timeout [ 1231.778108][T14403] loop2: detected capacity change from 0 to 1024 [ 1231.809951][T14403] EXT4-fs: Ignoring removed bh option [ 1231.856196][T14403] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1231.891232][T14403] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1231.908769][T14403] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 1231.921769][T14403] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1232.088274][T14403] EXT4-fs (loop2): failed to open journal device unknown-block(0,5) -6 [ 1233.544544][T11843] Bluetooth: hci1: command tx timeout [ 1235.817833][T14442] netlink: 'syz.2.2517': attribute type 1 has an invalid length. [ 1235.872769][T14445] loop2: detected capacity change from 0 to 512 [ 1235.911458][T14445] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 1235.950224][T14445] EXT4-fs (loop2): failed to open journal device unknown-block(8,0) -16 [ 1236.128114][T14347] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1236.185066][T14347] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1236.226976][T14347] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1236.312582][T14347] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1236.472481][T13570] hsr_slave_0: left promiscuous mode [ 1236.517462][T13570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1237.423735][T13570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1238.002815][T13570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1238.010291][T13570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1238.055158][T13570] bridge_slave_1: left allmulticast mode [ 1238.072747][T13570] bridge_slave_1: left promiscuous mode [ 1238.089192][T13570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.121580][T13570] bridge_slave_0: left allmulticast mode [ 1238.220799][T13570] bridge_slave_0: left promiscuous mode [ 1238.227984][T13570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.352951][T13570] veth1_macvtap: left promiscuous mode [ 1238.358549][T13570] veth0_macvtap: left promiscuous mode [ 1238.402393][T13570] veth1_vlan: left promiscuous mode [ 1238.407789][T13570] veth0_vlan: left promiscuous mode [ 1238.429264][T14466] loop1: detected capacity change from 0 to 512 [ 1238.459409][T14466] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1238.512325][T14466] EXT4-fs: Mount option(s) incompatible with ext2 [ 1239.025646][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.033599][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.044920][T13570] team0 (unregistering): Port device team_slave_1 removed [ 1240.082061][T11219] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1240.093714][T13570] team0 (unregistering): Port device team_slave_0 removed [ 1240.134490][T13570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1240.181799][T13570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1240.282140][T11219] usb 3-1: Using ep0 maxpacket: 16 [ 1240.298973][T11219] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1240.310301][T11219] usb 3-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 1240.321047][T11219] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 144, changing to 7 [ 1240.332587][T11219] usb 3-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 1240.343826][T11219] usb 3-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1240.366398][T11219] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid maxpacket 9216, setting to 64 [ 1240.386231][T11219] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1240.400254][T11219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.408578][T11219] usb 3-1: Product: syz [ 1240.418739][T11219] usb 3-1: Manufacturer: syz [ 1240.423558][T11219] usb 3-1: SerialNumber: syz [ 1240.619919][T13570] bond0 (unregistering): Released all slaves [ 1240.676999][T11219] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1240.714615][T11219] usb 3-1: USB disconnect, device number 5 [ 1240.793355][T13681] udevd[13681]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1240.862495][T14347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1240.872948][T14477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2525'. [ 1240.975989][T14347] 8021q: adding VLAN 0 to HW filter on device team0 [ 1241.033783][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.040928][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1241.052324][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.059552][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1242.476515][T14347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1242.929223][T14347] veth0_vlan: entered promiscuous mode [ 1242.966739][T14347] veth1_vlan: entered promiscuous mode [ 1243.061420][T14347] veth0_macvtap: entered promiscuous mode [ 1244.137111][T14347] veth1_macvtap: entered promiscuous mode [ 1244.157475][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1244.170191][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1244.180605][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1244.191709][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1244.202201][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1244.226924][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1244.248665][T14347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1244.275969][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1244.307208][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1244.327477][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1244.371936][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1244.401905][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1244.422095][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1244.443338][T14347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1244.464638][T14347] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.482147][T14347] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.502237][T14347] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.531944][T14347] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.712467][T14111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.732059][T14111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.815746][T14111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.849897][T14111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.873057][T14513] loop0: detected capacity change from 0 to 512 [ 1244.956656][T13681] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1246.295638][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 1246.295655][ T28] audit: type=1800 audit(1786327453.955:177): pid=14520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2494" name="c_srate" dev="configfs" ino=32888 res=0 errno=0 [ 1246.867922][T14524] loop1: detected capacity change from 0 to 512 [ 1246.950504][T14524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1247.184789][T14524] EXT4-fs: Mount option(s) incompatible with ext2 [ 1247.228879][ T28] audit: type=1326 audit(1786327454.875:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14527 comm="syz.3.2539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14daf9e0d9 code=0x7ffc0000 [ 1247.358169][T14526] loop2: detected capacity change from 0 to 1024 [ 1247.368739][T14526] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1247.433898][ T28] audit: type=1326 audit(1786327454.875:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14527 comm="syz.3.2539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14daf9e0d9 code=0x7ffc0000 [ 1247.479931][ T28] audit: type=1326 audit(1786327454.875:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14527 comm="syz.3.2539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14daf9e0d9 code=0x7ffc0000 [ 1247.842852][ T28] audit: type=1326 audit(1786327454.875:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14527 comm="syz.3.2539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f14daf9e0d9 code=0x7ffc0000 [ 1247.977764][ T28] audit: type=1326 audit(1786327454.875:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14527 comm="syz.3.2539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14daf9e0d9 code=0x7ffc0000 [ 1248.065563][ T28] audit: type=1326 audit(1786327454.875:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14527 comm="syz.3.2539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14daf9e0d9 code=0x7ffc0000 [ 1248.122719][ T28] audit: type=1326 audit(1786327454.875:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14527 comm="syz.3.2539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14daf9e0d9 code=0x7ffc0000 [ 1248.159614][ T28] audit: type=1326 audit(1786327454.875:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14527 comm="syz.3.2539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14daf9e0d9 code=0x7ffc0000 [ 1248.184545][ T28] audit: type=1326 audit(1786327454.875:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14527 comm="syz.3.2539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14daf9e0d9 code=0x7ffc0000 [ 1249.271945][T14069] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1249.418165][T14554] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2538'. [ 1249.493778][T14069] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.524306][T14069] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1249.557223][T14069] usb 1-1: Dual-Role OTG device on HNP port [ 1249.578579][T14069] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 1249.605969][T14069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.641466][ C1] ------------[ cut here ]------------ [ 1249.647399][ C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 1249.654656][ C1] WARNING: CPU: 1 PID: 13681 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x263/0x440 [ 1249.664823][ C1] Modules linked in: [ 1249.668756][ C1] CPU: 1 PID: 13681 Comm: udevd Not tainted syzkaller #0 [ 1249.675870][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1249.685965][ C1] RIP: 0010:usb_ep_enable+0x263/0x440 [ 1249.691457][ C1] Code: 49 8b 0e 48 c7 c0 00 ed 7a 8b 49 c7 c0 20 ed 7a 8b 4c 0f 44 c0 48 c7 c7 c0 ec 7a 8b 48 c7 c6 51 bf a6 8c 89 ea e8 7d fe 95 fa <0f> 0b e9 e1 fe ff ff e8 61 31 cc fa 49 bc 00 00 00 00 00 fc ff df [ 1249.711185][ C1] RSP: 0018:ffffc900001f0790 EFLAGS: 00010046 [ 1249.717361][ C1] RAX: 11960638c42b3300 RBX: ffff8881423f40e0 RCX: ffff888026198000 [ 1249.725363][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1249.733336][ C1] RBP: 0000000000000081 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 1249.741305][ C1] R10: dffffc0000000000 R11: ffffed10171e518b R12: dffffc0000000000 [ 1249.749276][ C1] R13: ffff8881423f410d R14: ffff8881423f40e8 R15: ffff888019edad3a [ 1249.757245][ C1] FS: 00007fb1cf23d880(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1249.766175][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1249.772754][ C1] CR2: 00007fcb51bd4000 CR3: 0000000040e3b000 CR4: 00000000003506e0 [ 1249.780725][ C1] Call Trace: [ 1249.784082][ C1] [ 1249.786969][ C1] hidg_set_alt+0x12a/0xa10 [ 1249.791542][ C1] ? usb_gadget_set_state+0x12c/0x2a0 [ 1249.796985][ C1] set_config+0x735/0xff0 [ 1249.801325][ C1] composite_setup+0x1df4/0x33a0 [ 1249.806274][ C1] configfs_composite_setup+0xc7/0x100 [ 1249.811737][ C1] dummy_timer+0x1324/0x34e0 [ 1249.816350][ C1] ? mark_lock+0x94/0x320 [ 1249.820700][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 1249.825740][ C1] ? lock_chain_count+0x20/0x20 [ 1249.830605][ C1] ? dummy_free_streams+0x520/0x520 [ 1249.835813][ C1] ? dummy_free_streams+0x520/0x520 [ 1249.841011][ C1] __hrtimer_run_queues+0x525/0xc10 [ 1249.846227][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1249.851337][ C1] ? read_tsc+0x9/0x20 [ 1249.855414][ C1] hrtimer_run_softirq+0x177/0x290 [ 1249.860528][ C1] handle_softirqs+0x27d/0x820 [ 1249.865289][ C1] ? read_tsc+0x9/0x20 [ 1249.869355][ C1] ? ktime_get+0x24b/0x280 [ 1249.873776][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1249.878541][ C1] ? do_softirq+0x1a0/0x1a0 [ 1249.883048][ C1] __irq_exit_rcu+0xd3/0x190 [ 1249.887636][ C1] ? irq_exit_rcu+0x20/0x20 [ 1249.892144][ C1] irq_exit_rcu+0x9/0x20 [ 1249.896387][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1249.902148][ C1] [ 1249.905091][ C1] [ 1249.908093][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1249.914134][ C1] RIP: 0010:lock_release+0x594/0x8c0 [ 1249.919423][ C1] Code: 00 00 00 f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 2f 04 f8 75 70 f7 44 24 50 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 43 c7 44 2f 08 00 00 00 00 65 48 8b 04 25 [ 1249.939039][ C1] RSP: 0018:ffffc90003377080 EFLAGS: 00000206 [ 1249.945106][ C1] RAX: 0000000000000001 RBX: d164550954f18519 RCX: 11960638c42b3300 [ 1249.953083][ C1] RDX: 0000000000000001 RSI: ffffffff8acadd60 RDI: ffffffff8b1d32e0 [ 1249.961061][ C1] RBP: ffffc90003377198 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 1249.969033][ C1] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: ffff888026198b10 [ 1249.977005][ C1] R13: dffffc0000000000 R14: ffff888026198ad8 R15: 1ffff9200066ee1c [ 1249.984997][ C1] ? deref_stack_reg+0x1ab/0x230 [ 1249.989935][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 1249.995173][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 1250.000200][ C1] ? __read_once_word_nocheck+0x9/0x10 [ 1250.005668][ C1] is_bpf_text_address+0x28f/0x2a0 [ 1250.010807][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 1250.016038][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1250.022116][ C1] kernel_text_address+0xa0/0xd0 [ 1250.027061][ C1] __kernel_text_address+0xd/0x30 [ 1250.032094][ C1] unwind_get_return_address+0x5d/0xc0 [ 1250.037558][ C1] ? stack_trace_save+0x100/0x100 [ 1250.042587][ C1] arch_stack_walk+0x11d/0x190 [ 1250.047356][ C1] stack_trace_save+0xaa/0x100 [ 1250.052124][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1250.057239][ C1] ? __lock_acquire+0x1336/0x7d80 [ 1250.062266][ C1] ? is_dynamic_key+0x260/0x260 [ 1250.067120][ C1] kasan_set_track+0x4e/0x70 [ 1250.071760][ C1] ? kasan_set_track+0x4e/0x70 [ 1250.076546][ C1] ? __kasan_kmalloc+0x8f/0xa0 [ 1250.081323][ C1] ? __kmalloc+0xb7/0x240 [ 1250.085696][ C1] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1250.091453][ C1] ? tomoyo_check_open_permission+0x224/0x460 [ 1250.097525][ C1] ? security_file_open+0x62/0xa0 [ 1250.102571][ C1] ? do_dentry_open+0x32b/0x14b0 [ 1250.107542][ C1] ? path_openat+0x284f/0x3270 [ 1250.112304][ C1] ? do_filp_open+0x1f2/0x430 [ 1250.116977][ C1] ? do_sys_openat2+0x134/0x1d0 [ 1250.121830][ C1] ? __x64_sys_openat+0x139/0x160 [ 1250.126958][ C1] ? do_syscall_64+0x55/0xb0 [ 1250.131549][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1250.137686][ C1] __kasan_kmalloc+0x8f/0xa0 [ 1250.142283][ C1] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1250.148012][ C1] __kmalloc+0xb7/0x240 [ 1250.152175][ C1] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1250.157736][ C1] tomoyo_check_open_permission+0x224/0x460 [ 1250.163633][ C1] ? tomoyo_check_open_permission+0x1cf/0x460 [ 1250.169789][ C1] ? tomoyo_check_path_number_acl+0x280/0x280 [ 1250.175866][ C1] ? __asan_memset+0x22/0x40 [ 1250.180479][ C1] ? __rwlock_init+0x150/0x150 [ 1250.185246][ C1] ? tomoyo_file_open+0xed/0x180 [ 1250.190190][ C1] security_file_open+0x62/0xa0 [ 1250.195049][ C1] do_dentry_open+0x32b/0x14b0 [ 1250.199820][ C1] ? __asan_memcpy+0x40/0x70 [ 1250.204437][ C1] path_openat+0x284f/0x3270 [ 1250.209067][ C1] ? do_filp_open+0x430/0x430 [ 1250.213765][ C1] do_filp_open+0x1f2/0x430 [ 1250.218285][ C1] ? vfs_tmpfile+0x620/0x620 [ 1250.222897][ C1] ? _raw_spin_unlock+0x28/0x40 [ 1250.227858][ C1] ? alloc_fd+0x590/0x640 [ 1250.232217][ C1] do_sys_openat2+0x134/0x1d0 [ 1250.236910][ C1] ? do_sys_open+0xe0/0xe0 [ 1250.241327][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1250.247312][ C1] ? lock_chain_count+0x20/0x20 [ 1250.252166][ C1] __x64_sys_openat+0x139/0x160 [ 1250.257027][ C1] do_syscall_64+0x55/0xb0 [ 1250.261443][ C1] ? clear_bhb_loop+0x40/0x90 [ 1250.266172][ C1] ? clear_bhb_loop+0x40/0x90 [ 1250.270956][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1250.276862][ C1] RIP: 0033:0x7fb1ceaa7407 [ 1250.281291][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1250.300903][ C1] RSP: 002b:00007fffefcaec20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1250.309334][ C1] RAX: ffffffffffffffda RBX: 00007fb1cf23d880 RCX: 00007fb1ceaa7407 [ 1250.317310][ C1] RDX: 0000000000080000 RSI: 00007fffefcaeda0 RDI: ffffffffffffff9c [ 1250.325283][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1250.333252][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00005557ffb7a7f5 [ 1250.341223][ C1] R13: 00005557ffb7a7f5 R14: 0000000000000001 R15: 00005557ffb95140 [ 1250.349207][ C1] [ 1250.352227][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1250.359511][ C1] CPU: 1 PID: 13681 Comm: udevd Not tainted syzkaller #0 [ 1250.366527][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1250.376616][ C1] Call Trace: [ 1250.379913][ C1] [ 1250.382753][ C1] dump_stack_lvl+0x18c/0x250 [ 1250.387468][ C1] ? show_regs_print_info+0x20/0x20 [ 1250.392665][ C1] ? load_image+0x420/0x420 [ 1250.397221][ C1] panic+0x2ca/0x720 [ 1250.401121][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1250.405632][ C1] __warn+0x2e0/0x470 [ 1250.409617][ C1] ? usb_ep_enable+0x263/0x440 [ 1250.414383][ C1] ? usb_ep_enable+0x263/0x440 [ 1250.419146][ C1] report_bug+0x2be/0x4f0 [ 1250.423499][ C1] ? usb_ep_enable+0x263/0x440 [ 1250.428261][ C1] ? usb_ep_enable+0x263/0x440 [ 1250.433054][ C1] ? usb_ep_enable+0x265/0x440 [ 1250.437819][ C1] handle_bug+0xcf/0x120 [ 1250.442068][ C1] exc_invalid_op+0x1a/0x50 [ 1250.446579][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1250.451427][ C1] RIP: 0010:usb_ep_enable+0x263/0x440 [ 1250.456800][ C1] Code: 49 8b 0e 48 c7 c0 00 ed 7a 8b 49 c7 c0 20 ed 7a 8b 4c 0f 44 c0 48 c7 c7 c0 ec 7a 8b 48 c7 c6 51 bf a6 8c 89 ea e8 7d fe 95 fa <0f> 0b e9 e1 fe ff ff e8 61 31 cc fa 49 bc 00 00 00 00 00 fc ff df [ 1250.476405][ C1] RSP: 0018:ffffc900001f0790 EFLAGS: 00010046 [ 1250.482468][ C1] RAX: 11960638c42b3300 RBX: ffff8881423f40e0 RCX: ffff888026198000 [ 1250.490437][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1250.498403][ C1] RBP: 0000000000000081 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 1250.506370][ C1] R10: dffffc0000000000 R11: ffffed10171e518b R12: dffffc0000000000 [ 1250.514369][ C1] R13: ffff8881423f410d R14: ffff8881423f40e8 R15: ffff888019edad3a [ 1250.522355][ C1] hidg_set_alt+0x12a/0xa10 [ 1250.526863][ C1] ? usb_gadget_set_state+0x12c/0x2a0 [ 1250.532237][ C1] set_config+0x735/0xff0 [ 1250.536578][ C1] composite_setup+0x1df4/0x33a0 [ 1250.541650][ C1] configfs_composite_setup+0xc7/0x100 [ 1250.547119][ C1] dummy_timer+0x1324/0x34e0 [ 1250.551821][ C1] ? mark_lock+0x94/0x320 [ 1250.556162][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 1250.561183][ C1] ? lock_chain_count+0x20/0x20 [ 1250.566041][ C1] ? dummy_free_streams+0x520/0x520 [ 1250.571242][ C1] ? dummy_free_streams+0x520/0x520 [ 1250.576436][ C1] __hrtimer_run_queues+0x525/0xc10 [ 1250.581644][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1250.586756][ C1] ? read_tsc+0x9/0x20 [ 1250.590830][ C1] hrtimer_run_softirq+0x177/0x290 [ 1250.595952][ C1] handle_softirqs+0x27d/0x820 [ 1250.600714][ C1] ? read_tsc+0x9/0x20 [ 1250.604782][ C1] ? ktime_get+0x24b/0x280 [ 1250.609195][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1250.613959][ C1] ? do_softirq+0x1a0/0x1a0 [ 1250.618461][ C1] __irq_exit_rcu+0xd3/0x190 [ 1250.623044][ C1] ? irq_exit_rcu+0x20/0x20 [ 1250.627551][ C1] irq_exit_rcu+0x9/0x20 [ 1250.631786][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1250.637430][ C1] [ 1250.640354][ C1] [ 1250.643283][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1250.649262][ C1] RIP: 0010:lock_release+0x594/0x8c0 [ 1250.654545][ C1] Code: 00 00 00 f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 2f 04 f8 75 70 f7 44 24 50 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 43 c7 44 2f 08 00 00 00 00 65 48 8b 04 25 [ 1250.674150][ C1] RSP: 0018:ffffc90003377080 EFLAGS: 00000206 [ 1250.680214][ C1] RAX: 0000000000000001 RBX: d164550954f18519 RCX: 11960638c42b3300 [ 1250.688179][ C1] RDX: 0000000000000001 RSI: ffffffff8acadd60 RDI: ffffffff8b1d32e0 [ 1250.696175][ C1] RBP: ffffc90003377198 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 1250.704141][ C1] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: ffff888026198b10 [ 1250.712136][ C1] R13: dffffc0000000000 R14: ffff888026198ad8 R15: 1ffff9200066ee1c [ 1250.720119][ C1] ? deref_stack_reg+0x1ab/0x230 [ 1250.725056][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 1250.730255][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 1250.735279][ C1] ? __read_once_word_nocheck+0x9/0x10 [ 1250.740746][ C1] is_bpf_text_address+0x28f/0x2a0 [ 1250.745862][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 1250.751059][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1250.757126][ C1] kernel_text_address+0xa0/0xd0 [ 1250.762068][ C1] __kernel_text_address+0xd/0x30 [ 1250.767096][ C1] unwind_get_return_address+0x5d/0xc0 [ 1250.772554][ C1] ? stack_trace_save+0x100/0x100 [ 1250.777578][ C1] arch_stack_walk+0x11d/0x190 [ 1250.782343][ C1] stack_trace_save+0xaa/0x100 [ 1250.787101][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1250.792210][ C1] ? __lock_acquire+0x1336/0x7d80 [ 1250.797236][ C1] ? is_dynamic_key+0x260/0x260 [ 1250.802092][ C1] kasan_set_track+0x4e/0x70 [ 1250.806687][ C1] ? kasan_set_track+0x4e/0x70 [ 1250.811480][ C1] ? __kasan_kmalloc+0x8f/0xa0 [ 1250.816240][ C1] ? __kmalloc+0xb7/0x240 [ 1250.820570][ C1] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1250.826290][ C1] ? tomoyo_check_open_permission+0x224/0x460 [ 1250.832356][ C1] ? security_file_open+0x62/0xa0 [ 1250.837380][ C1] ? do_dentry_open+0x32b/0x14b0 [ 1250.842339][ C1] ? path_openat+0x284f/0x3270 [ 1250.847100][ C1] ? do_filp_open+0x1f2/0x430 [ 1250.851769][ C1] ? do_sys_openat2+0x134/0x1d0 [ 1250.856618][ C1] ? __x64_sys_openat+0x139/0x160 [ 1250.861662][ C1] ? do_syscall_64+0x55/0xb0 [ 1250.866250][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1250.872341][ C1] __kasan_kmalloc+0x8f/0xa0 [ 1250.876938][ C1] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1250.882660][ C1] __kmalloc+0xb7/0x240 [ 1250.886830][ C1] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1250.892385][ C1] tomoyo_check_open_permission+0x224/0x460 [ 1250.898279][ C1] ? tomoyo_check_open_permission+0x1cf/0x460 [ 1250.904347][ C1] ? tomoyo_check_path_number_acl+0x280/0x280 [ 1250.910420][ C1] ? __asan_memset+0x22/0x40 [ 1250.915024][ C1] ? __rwlock_init+0x150/0x150 [ 1250.919787][ C1] ? tomoyo_file_open+0xed/0x180 [ 1250.924727][ C1] security_file_open+0x62/0xa0 [ 1250.929579][ C1] do_dentry_open+0x32b/0x14b0 [ 1250.934343][ C1] ? __asan_memcpy+0x40/0x70 [ 1250.938932][ C1] path_openat+0x284f/0x3270 [ 1250.943538][ C1] ? do_filp_open+0x430/0x430 [ 1250.948222][ C1] do_filp_open+0x1f2/0x430 [ 1250.952731][ C1] ? vfs_tmpfile+0x620/0x620 [ 1250.957328][ C1] ? _raw_spin_unlock+0x28/0x40 [ 1250.962181][ C1] ? alloc_fd+0x590/0x640 [ 1250.966517][ C1] do_sys_openat2+0x134/0x1d0 [ 1250.971195][ C1] ? do_sys_open+0xe0/0xe0 [ 1250.975616][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1250.981597][ C1] ? lock_chain_count+0x20/0x20 [ 1250.986446][ C1] __x64_sys_openat+0x139/0x160 [ 1250.991298][ C1] do_syscall_64+0x55/0xb0 [ 1250.995718][ C1] ? clear_bhb_loop+0x40/0x90 [ 1251.000393][ C1] ? clear_bhb_loop+0x40/0x90 [ 1251.005066][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1251.010958][ C1] RIP: 0033:0x7fb1ceaa7407 [ 1251.015371][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1251.034978][ C1] RSP: 002b:00007fffefcaec20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1251.043389][ C1] RAX: ffffffffffffffda RBX: 00007fb1cf23d880 RCX: 00007fb1ceaa7407 [ 1251.051360][ C1] RDX: 0000000000080000 RSI: 00007fffefcaeda0 RDI: ffffffffffffff9c [ 1251.059334][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1251.067298][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00005557ffb7a7f5 [ 1251.075261][ C1] R13: 00005557ffb7a7f5 R14: 0000000000000001 R15: 00005557ffb95140 [ 1251.083242][ C1] [ 1251.086500][ C1] Kernel Offset: disabled [ 1251.090880][ C1] Rebooting in 86400 seconds..