last executing test programs: 6.446930415s ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000240)={0xe}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.890366687s ago: executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x0) 5.511515011s ago: executing program 4: syz_usb_connect(0x0, 0x41, &(0x7f0000000f00)=ANY=[@ANYBLOB="12010000f70be010801b09e3cc740102030109022f000100000000090400000329776b00090500000000000000020409"], 0x0) 5.136177207s ago: executing program 3: signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) sendto$packet(r0, &(0x7f0000000080)="030600ffffffba00004000", 0xb, 0x4000030, 0x0, 0x0) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0x9) connect$inet(r2, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 4.592924957s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.368073406s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000002007910480000000000710433000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x14) r2 = epoll_create1(0x0) sendmmsg(r0, &(0x7f0000001680)=[{{&(0x7f0000000480)=@ax25={{0x3, @null, 0x3}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000400)="196a0f3bc4fbf5f938af76e41c73cb74f3e5da9c", 0x14}, {&(0x7f0000001500)="cfc10d6824df7fbf9466d4b43339c05920799179d177c498cf5f5d44142ed4b20ef893183654ab6d55baef19a05b2ab39bba5635dbd7ce6f4ae325868918d8a4e80fc5807582910b7e3b001b4921a4c15ee10048b2c36df2a14c9a21fb86728a3ab782b915cd238b7551ee44806caee7ca462864a099cc1febf33820e12f81c0b71803b07b309f34c94bd482132fc948cc357d3e056ffa897634fefc6b00552355bb4f2c5a70303896ea7acddf2a51df79425578104b7822a78c7eb9f040c1264319a343649afa9dbcbaf4dbf76cfd2eb1c927294e499cf6018c017108f0b52991982fdefd243d8c03ca2da6a88d9a", 0xef}, {&(0x7f0000001600)="80355fdfa3abaf43f380d5e9e8d1b98b87c150f33b1e04", 0x17}], 0x4, &(0x7f0000001780)=[{0x70, 0x119, 0xcc10d1a, "74787b0112fe575cd12b268bacf156ca948825c025e0cdaf4e36241eae54d5173d25501470d0509ea7a542ddf49e072df6070ca52cc9896b47f3f39e07370bd2f0f644d1f75bab1a0a502cb77fa84fe72e30dd566acfdb8858a6e9e04d7604"}, {0xf0, 0x0, 0x7, "43195a63baf1aefacc40f3e19b2d0dfab9ae751595e60911f40ba5d34248579b32109f91fa71dee345a94c3c02884d0812f1ed6f78747227edfe537dc950aedc4ba216f05b1e42d476295f4da72b97f759c4dbb3dc3b089e4c45a56e95896e838037ac3dc557a8a78e1d7a9f63f74dda375c9fd6d783b0c4e14ff50491671eb06bf7b7fa1c2990b0b2eb3ac64e9001943a2dfcd18325269a85690fdf3ed1a11226fa54905991cb06e732a7ef65f1911770d93ecd47addeef3124c492ef2c233b52eb5067252dc36d402779ea4c0a6a08ff158cc1b5a96891ed0793e00794fc8b"}, {0xa8, 0x185, 0x0, "dcc7f04f4f08ac2b435fb20978c86ea18efa954da331f4709c33eee193913779f53232293c922052ca0cba40161dc03924f8a6a16544110f55c67703a7399c7bc363ffed132a7d67a5d3ae8cc2048bcb07bb9303e9c416327ec02bb11af504b042b0bc7a0a360c960b8fcf68e3affa093f0c5310055473cf59d538dd55a301bf3c1b384ecedda58a887af5864d082963b60f06"}], 0x208}}], 0x1, 0x11) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$ppp(r1, &(0x7f0000000440)=')z', 0x2) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2f4, 0x5, 0xa, 0x6, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1137eb01}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_USERDATA={0xf1, 0xc, "68ba6874e2a6199c3551038492d72816a5c5ada9e922ba6e1ac0b1a4be313139dcbbd326d0316988285f6f3884c98165b42cc200deac3835075326bed2aec243eca77ae3a83cfa58ae45fc3d7e684b5d32b5e708090840c0eef6acb802915d0e5f13fca26b75d777ff78a7bcdc629c5e701fd5f35c22f95f18a29b1d907987b4a150368d16321387f2c68b03428f60fa17d22e8379370899922cf86f044d2b031cd46322b41247458fb983a6206c2de013326ed3d3bf2d2634cff6044af002a2e68e0ef6d5f8207582f99f8ff269ba85e626aee7bb9892f812db5db94bf48d33738167599b818ff29b864bf3d4"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0xb4, 0xc, "b8486717d31bf34de435021553d1d73d60c7402fa8ce2a14660ceadb6d5763e1e7040cbb0ec73147c69e717c8f621e701b096604350f5f56d1879f209c7c8dbf59375851d6a7eb5520b497c932b0e9269b0df706b646d6eceb2d4b35ab3bfcb05c22e58d4b94c9d704914526defd962a410b32e7d3fa23d58268c67658a03408b4df199ec5c9150378045024a041b07b2dc57518c6461b2b01d265326c3d4d3a185357a98afa52db45cd91de2cea1fde"}, @NFTA_CHAIN_USERDATA={0xb1, 0xc, "371f1f857ed82733fd7f0907d35aeef2c1de02c75dc4b39eaafdfcee25dcfb931d3cf52cbd0156d740263131ce9aacfa723b77f3a62ab7b1fbce160fbfc7f0e87eb3245d0a8603fd93496a6048f8dbfe0e55e90c9d849560536a50edf69afc6242244840d5c6fcedae09b3f48451e38bb15f9518bbb874b923de4ad729800457f3ad459a452a0f41c30ec0d8179a4705af4a32f9f232998ee5c17e795cd34a4d530f892979704c4d1e779f918a"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x10000}]}], {0x14}}, 0x368}}, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784004000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x6020400) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000100001040000000000000000cfcd0000", @ANYRES32=0x0, @ANYBLOB="d3a8040000000000180012800e000100776972656775617264000000040002800800040000000000"], 0x40}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@ipv4={""/10, ""/2, @broadcast}, 0x0}, &(0x7f0000000300)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', r8, 0x2f, 0x81, 0x7f, 0x3, 0x2, @loopback, @remote, 0x10, 0x8, 0x4, 0x2}}) 3.820107761s ago: executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d11f0000000000000000000000000f00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x6, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000340)={"0180000000000000f2e2ad238a7b44a8d886010284ed9208000000affbf514fd", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000280)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)=[{}]}) 3.63455123s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x0) 3.364458534s ago: executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x57b501, 0x0) 3.345694243s ago: executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0x7f05, 0x0, 0x0, 0x5, 0x0, "5f330000a90100f9"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xe7f1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x1a) 3.195600405s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 3.143213313s ago: executing program 1: write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") 3.044642666s ago: executing program 2: iopl(0x3) msgrcv(0x0, 0x0, 0x55, 0x0, 0x0) 2.916061837s ago: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x2c}, {0x3c}, {0x6}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}], 0x10) 2.34054938s ago: executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000a40)=[{&(0x7f0000000480)="ba", 0x1}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 2.325224028s ago: executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='G', 0xfffffffffffffca0, 0x8001, 0x0, 0x0) shutdown(r0, 0x1) syz_io_uring_setup(0x19f7, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.047164147s ago: executing program 0: syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) write(0xffffffffffffffff, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./bus\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 2.034794829s ago: executing program 4: r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) sendto$packet(r1, &(0x7f0000000080)="030600ffffffba00004000", 0xb, 0x4000030, 0x0, 0x0) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0x9) connect$inet(r3, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 1.4826146s ago: executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d11f0000000000000000000000000f00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x6, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000340)={"0180000000000000f2e2ad238a7b44a8d886010284ed9208000000affbf514fd", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000280)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)=[{}]}) 1.342855103s ago: executing program 2: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000005c0), 0x4) r1 = dup(r0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000f00), 0x10) 952.193432ms ago: executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0x5c90, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000600)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f0000000740)=@IORING_OP_ACCEPT={0xd, 0xa, 0x0, r3, 0x0}) listen(r3, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x1) 836.276692ms ago: executing program 2: r0 = socket$inet6(0xa, 0x3, 0x103) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2f, &(0x7f00000007c0)={0x0, {{0xa, 0x0, 0x0, @empty}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback}}]}, 0x110) 700.206466ms ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000002007910480000000000710433000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x14) r2 = epoll_create1(0x0) sendmmsg(r0, &(0x7f0000001680)=[{{&(0x7f0000000480)=@ax25={{0x3, @null, 0x3}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000400)="196a0f3bc4fbf5f938af76e41c73cb74f3e5da9c", 0x14}, {&(0x7f0000001500)="cfc10d6824df7fbf9466d4b43339c05920799179d177c498cf5f5d44142ed4b20ef893183654ab6d55baef19a05b2ab39bba5635dbd7ce6f4ae325868918d8a4e80fc5807582910b7e3b001b4921a4c15ee10048b2c36df2a14c9a21fb86728a3ab782b915cd238b7551ee44806caee7ca462864a099cc1febf33820e12f81c0b71803b07b309f34c94bd482132fc948cc357d3e056ffa897634fefc6b00552355bb4f2c5a70303896ea7acddf2a51df79425578104b7822a78c7eb9f040c1264319a343649afa9dbcbaf4dbf76cfd2eb1c927294e499cf6018c017108f0b52991982fdefd243d8c03ca2da6a88d9a", 0xef}, {&(0x7f0000001600)="80355fdfa3abaf43f380d5e9e8d1b98b87c150f33b1e04", 0x17}], 0x4, &(0x7f0000001780)=[{0x70, 0x119, 0xcc10d1a, "74787b0112fe575cd12b268bacf156ca948825c025e0cdaf4e36241eae54d5173d25501470d0509ea7a542ddf49e072df6070ca52cc9896b47f3f39e07370bd2f0f644d1f75bab1a0a502cb77fa84fe72e30dd566acfdb8858a6e9e04d7604"}, {0xf0, 0x0, 0x7, "43195a63baf1aefacc40f3e19b2d0dfab9ae751595e60911f40ba5d34248579b32109f91fa71dee345a94c3c02884d0812f1ed6f78747227edfe537dc950aedc4ba216f05b1e42d476295f4da72b97f759c4dbb3dc3b089e4c45a56e95896e838037ac3dc557a8a78e1d7a9f63f74dda375c9fd6d783b0c4e14ff50491671eb06bf7b7fa1c2990b0b2eb3ac64e9001943a2dfcd18325269a85690fdf3ed1a11226fa54905991cb06e732a7ef65f1911770d93ecd47addeef3124c492ef2c233b52eb5067252dc36d402779ea4c0a6a08ff158cc1b5a96891ed0793e00794fc8b"}, {0xa8, 0x185, 0x0, "dcc7f04f4f08ac2b435fb20978c86ea18efa954da331f4709c33eee193913779f53232293c922052ca0cba40161dc03924f8a6a16544110f55c67703a7399c7bc363ffed132a7d67a5d3ae8cc2048bcb07bb9303e9c416327ec02bb11af504b042b0bc7a0a360c960b8fcf68e3affa093f0c5310055473cf59d538dd55a301bf3c1b384ecedda58a887af5864d082963b60f06"}], 0x208}}], 0x1, 0x11) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) write$ppp(r1, &(0x7f0000000440)=')z', 0x2) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2f4, 0x5, 0xa, 0x6, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1137eb01}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_USERDATA={0xf1, 0xc, "68ba6874e2a6199c3551038492d72816a5c5ada9e922ba6e1ac0b1a4be313139dcbbd326d0316988285f6f3884c98165b42cc200deac3835075326bed2aec243eca77ae3a83cfa58ae45fc3d7e684b5d32b5e708090840c0eef6acb802915d0e5f13fca26b75d777ff78a7bcdc629c5e701fd5f35c22f95f18a29b1d907987b4a150368d16321387f2c68b03428f60fa17d22e8379370899922cf86f044d2b031cd46322b41247458fb983a6206c2de013326ed3d3bf2d2634cff6044af002a2e68e0ef6d5f8207582f99f8ff269ba85e626aee7bb9892f812db5db94bf48d33738167599b818ff29b864bf3d4"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0xb4, 0xc, "b8486717d31bf34de435021553d1d73d60c7402fa8ce2a14660ceadb6d5763e1e7040cbb0ec73147c69e717c8f621e701b096604350f5f56d1879f209c7c8dbf59375851d6a7eb5520b497c932b0e9269b0df706b646d6eceb2d4b35ab3bfcb05c22e58d4b94c9d704914526defd962a410b32e7d3fa23d58268c67658a03408b4df199ec5c9150378045024a041b07b2dc57518c6461b2b01d265326c3d4d3a185357a98afa52db45cd91de2cea1fde"}, @NFTA_CHAIN_USERDATA={0xb1, 0xc, "371f1f857ed82733fd7f0907d35aeef2c1de02c75dc4b39eaafdfcee25dcfb931d3cf52cbd0156d740263131ce9aacfa723b77f3a62ab7b1fbce160fbfc7f0e87eb3245d0a8603fd93496a6048f8dbfe0e55e90c9d849560536a50edf69afc6242244840d5c6fcedae09b3f48451e38bb15f9518bbb874b923de4ad729800457f3ad459a452a0f41c30ec0d8179a4705af4a32f9f232998ee5c17e795cd34a4d530f892979704c4d1e779f918a"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x10000}]}], {0x14}}, 0x368}}, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784004000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 681.419164ms ago: executing program 4: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x9, &(0x7f0000000400)=@framed={{}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) 458.249261ms ago: executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1fe) write$binfmt_script(r0, &(0x7f0000000a80)={'#! ', './file0'}, 0xb) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x8, 0x8}, 0x48) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) close(r3) 384.620789ms ago: executing program 1: iopl(0x3) msgrcv(0x0, 0x0, 0x55, 0x0, 0x0) 339.017876ms ago: executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6103014003017db278"], 0x9) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xff2e) write$binfmt_script(r5, 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/50) r6 = socket(0x0, 0x3, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 275.589451ms ago: executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0x7f05, 0x0, 0x0, 0x5, 0x0, "5f330000a90100f9"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xe7f1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x1a) 38.29657ms ago: executing program 1: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000a40)=[{&(0x7f0000000480)="ba", 0x1}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 0s ago: executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='G', 0xfffffffffffffca0, 0x8001, 0x0, 0x0) shutdown(r0, 0x1) syz_io_uring_setup(0x19f7, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 4969 free clusters [ 1174.104098][ T788] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1174.112151][ T788] ath9k_htc: Failed to initialize the device [ 1174.189533][ T5122] usb 5-1: USB disconnect, device number 38 [ 1174.561528][T15673] loop4: detected capacity change from 0 to 256 [ 1174.676739][T15673] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1174.836374][ T5122] usb 2-1: USB disconnect, device number 35 [ 1174.875317][ C1] vkms_vblank_simulate: vblank timer overrun [ 1174.915356][ T5124] usb 4-1: USB disconnect, device number 41 [ 1174.971891][ T5122] usb 2-1: ath9k_htc: USB layer deinitialized [ 1175.226624][T12642] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.314744][T15675] loop0: detected capacity change from 0 to 2048 [ 1175.371255][T15675] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1175.402550][T15675] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1175.429080][T15681] loop3: detected capacity change from 0 to 512 [ 1175.441704][T15675] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1175.559429][T15681] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1175.609836][T15681] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 2683928664 (level 1) [ 1175.635697][T15681] EXT4-fs (loop3): Remounting filesystem read-only [ 1175.664455][T15681] EXT4-fs (loop3): 1 truncate cleaned up [ 1175.670511][T15681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1175.795902][T15681] fuse: Bad value for 'fd' [ 1175.909864][T15675] UDF-fs: warning (device loop0): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 4096 lbcount: 8192 extent 65+4096 [ 1176.386509][ T5124] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1176.854505][ T5124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 105, changing to 10 [ 1176.866145][ T5124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25900, setting to 1024 [ 1176.880609][ T5124] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1176.894201][ T5124] usb 4-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 1176.903543][ T5124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.985001][ T5124] usb 4-1: config 0 descriptor?? [ 1177.005491][T15681] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1177.806209][ T5124] usbhid 4-1:0.0: can't add hid device: -71 [ 1177.812882][ T5124] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1177.879360][ T5124] usb 4-1: USB disconnect, device number 42 [ 1178.448774][T15434] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.485224][ T5122] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1178.595705][T15720] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1178.661749][T15720] pim6reg: entered allmulticast mode [ 1178.754278][ T8] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1178.763442][T15722] loop1: detected capacity change from 0 to 2048 [ 1178.820402][T15724] loop3: detected capacity change from 0 to 256 [ 1178.828057][T15725] loop0: detected capacity change from 0 to 256 [ 1178.854936][ T5122] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1178.863643][ T5122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1178.885350][T15722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1178.958726][ T5122] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1178.968362][ T5122] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1178.983058][ T5122] usb 3-1: Manufacturer: syz [ 1178.994863][ T5122] usb 3-1: config 0 descriptor?? [ 1179.029646][T15725] FAT-fs (loop0): Directory bread(block 64) failed [ 1179.037184][T15725] FAT-fs (loop0): Directory bread(block 65) failed [ 1179.044413][T15725] FAT-fs (loop0): Directory bread(block 66) failed [ 1179.051206][T15725] FAT-fs (loop0): Directory bread(block 67) failed [ 1179.058394][T15725] FAT-fs (loop0): Directory bread(block 68) failed [ 1179.065301][T15725] FAT-fs (loop0): Directory bread(block 69) failed [ 1179.072298][T15725] FAT-fs (loop0): Directory bread(block 70) failed [ 1179.080853][T15725] FAT-fs (loop0): Directory bread(block 71) failed [ 1179.086562][T15724] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1179.088144][T15725] FAT-fs (loop0): Directory bread(block 72) failed [ 1179.106763][T15725] FAT-fs (loop0): Directory bread(block 73) failed [ 1179.215960][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.227671][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.239290][ T8] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1179.444377][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1179.453980][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.454029][ T5122] rc_core: IR keymap rc-hauppauge not found [ 1179.454127][ T8] usb 5-1: Product: syz [ 1179.462127][ T5122] Registered IR keymap rc-empty [ 1179.463542][ T5122] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1179.468497][ T8] usb 5-1: Manufacturer: syz [ 1179.474673][ T5122] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input44 [ 1179.477407][ T8] usb 5-1: SerialNumber: syz [ 1179.607486][ T8] usb 5-1: selecting invalid altsetting 1 [ 1179.714033][ C1] igorplugusb 3-1:0.0: receive overflow, at least 33 lost [ 1180.064989][ T8] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 1180.071585][ T8] cdc_ncm 5-1:1.0: bind() failure [ 1180.087068][ T8] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1180.094568][ T8] cdc_ncm 5-1:1.1: bind() failure [ 1180.130669][T15732] loop3: detected capacity change from 0 to 2048 [ 1180.215541][T15732] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1180.259849][T15732] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1180.332467][T15732] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1180.777364][T15738] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 8192 lbcount: 12288 extent 65+8192 [ 1181.209650][ T8] usb 3-1: USB disconnect, device number 44 [ 1181.522117][ T5124] usb 5-1: USB disconnect, device number 39 [ 1181.834884][T15684] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1182.845558][T15761] loop3: detected capacity change from 0 to 256 [ 1183.285855][T15769] loop4: detected capacity change from 0 to 512 [ 1183.322608][T14672] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.434839][T15769] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1183.469607][T15771] loop0: detected capacity change from 0 to 256 [ 1183.477325][T15769] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 2683928664 (level 1) [ 1183.547302][T15769] EXT4-fs (loop4): Remounting filesystem read-only [ 1183.580401][T15769] EXT4-fs (loop4): 1 truncate cleaned up [ 1183.588342][T15769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1183.677215][T15771] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1183.678601][T15777] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1183.766870][T15777] pim6reg: entered allmulticast mode [ 1183.802606][T15769] fuse: Bad value for 'fd' [ 1183.868774][T15775] loop3: detected capacity change from 0 to 2048 [ 1183.955068][T15775] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1184.018584][T15775] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1184.039471][T15777] loop1: detected capacity change from 0 to 256 [ 1184.090415][T15775] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1184.262171][T15777] FAT-fs (loop1): Directory bread(block 64) failed [ 1184.269395][T15777] FAT-fs (loop1): Directory bread(block 65) failed [ 1184.276667][T15777] FAT-fs (loop1): Directory bread(block 66) failed [ 1184.277841][T14641] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1184.283354][T15777] FAT-fs (loop1): Directory bread(block 67) failed [ 1184.283638][T15777] FAT-fs (loop1): Directory bread(block 68) failed [ 1184.311592][T15777] FAT-fs (loop1): Directory bread(block 69) failed [ 1184.321023][T15777] FAT-fs (loop1): Directory bread(block 70) failed [ 1184.328037][T15777] FAT-fs (loop1): Directory bread(block 71) failed [ 1184.335303][T15777] FAT-fs (loop1): Directory bread(block 72) failed [ 1184.342092][T15777] FAT-fs (loop1): Directory bread(block 73) failed [ 1184.695620][T15775] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 4096 lbcount: 8192 extent 65+4096 [ 1184.764889][T14641] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 105, changing to 10 [ 1184.777044][T14641] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25900, setting to 1024 [ 1184.789102][T14641] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1184.802388][T14641] usb 5-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 1184.813624][T14641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.917745][T14641] usb 5-1: config 0 descriptor?? [ 1184.935670][T15769] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1185.184753][ T5124] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1185.574507][ T5124] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.585307][ T5124] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.596838][ T5124] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1185.714887][T14641] usbhid 5-1:0.0: can't add hid device: -71 [ 1185.721571][T14641] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1185.771570][T14641] usb 5-1: USB disconnect, device number 40 [ 1185.824430][ T5124] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1185.836053][ T5124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.844100][T15800] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1185.844671][ T5124] usb 1-1: Product: syz [ 1185.858367][ T5124] usb 1-1: Manufacturer: syz [ 1185.863275][ T5124] usb 1-1: SerialNumber: syz [ 1185.947602][ T5124] usb 1-1: selecting invalid altsetting 1 [ 1186.386943][ T5124] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1186.393499][ T5124] cdc_ncm 1-1:1.0: bind() failure [ 1186.409097][ T5124] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1186.416432][ T5124] cdc_ncm 1-1:1.1: bind() failure [ 1186.431243][T14692] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.893118][T15811] loop4: detected capacity change from 0 to 256 [ 1186.942286][T15808] loop1: detected capacity change from 0 to 2048 [ 1187.047196][T15808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1187.331211][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1187.341276][T15811] bridge_slave_1: left allmulticast mode [ 1187.347348][T15811] bridge_slave_1: left promiscuous mode [ 1187.354230][T15811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.401587][T15811] bridge_slave_0: left allmulticast mode [ 1187.407889][T15811] bridge_slave_0: left promiscuous mode [ 1187.415041][T15811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.948427][ T8] usb 1-1: USB disconnect, device number 48 [ 1188.000173][T15773] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1188.095484][T15824] loop3: detected capacity change from 0 to 2048 [ 1188.180035][T15824] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1188.219938][T15824] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1188.247009][T14692] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 1188.276924][T14692] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 1188.307968][T15824] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1188.976806][ T6427] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.040552][T15831] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 4096 lbcount: 8192 extent 65+4096 [ 1189.118690][ T6427] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.252370][ T6427] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.391829][ T6427] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.226013][ T6427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1190.280144][ T6427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1190.355127][ T6427] bond0 (unregistering): Released all slaves [ 1190.460422][T15844] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1190.916947][T14672] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1191.357351][T15853] loop0: detected capacity change from 0 to 256 [ 1191.852273][ T6427] hsr_slave_0: left promiscuous mode [ 1191.965283][ T6427] hsr_slave_1: left promiscuous mode [ 1192.007178][ T6427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1192.015510][ T6427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1192.036124][T11098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1192.045551][T11098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1192.055141][T11098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1192.077783][T11098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1192.091027][T11098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1192.091347][ T6427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1192.106489][ T6427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1192.128670][T11098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1192.200786][ T6427] veth1_macvtap: left promiscuous mode [ 1192.206896][ T6427] veth0_macvtap: left promiscuous mode [ 1192.212814][ T6427] veth1_vlan: left promiscuous mode [ 1192.218625][ T6427] veth0_vlan: left promiscuous mode [ 1193.140461][ T6427] team0 (unregistering): Port device team_slave_1 removed [ 1193.190293][ T6427] team0 (unregistering): Port device team_slave_0 removed [ 1193.268224][T15872] loop2: detected capacity change from 0 to 2048 [ 1193.319925][T15872] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1193.366866][T15872] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1193.493989][T15872] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1193.520103][T15862] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1193.529883][T15862] bridge_slave_1: left allmulticast mode [ 1193.535986][T15862] bridge_slave_1: left promiscuous mode [ 1193.542685][T15862] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.709788][T15862] bridge_slave_0: left allmulticast mode [ 1193.716565][T15862] bridge_slave_0: left promiscuous mode [ 1193.729965][T15862] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.989510][T15871] UDF-fs: warning (device loop2): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 0 lbcount: 4096 extent 56+4096 [ 1194.015197][T11098] Bluetooth: hci3: command 0x0406 tx timeout [ 1194.125810][T14094] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 1194.170240][T14094] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 1194.237124][ T5073] Bluetooth: hci2: command tx timeout [ 1194.807024][T15883] loop2: detected capacity change from 0 to 2048 [ 1194.936342][T15883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1195.275519][T15890] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1195.321898][T15886] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1195.414052][T14643] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1195.666847][T15857] chnl_net:caif_netlink_parms(): no params data found [ 1195.686069][T14643] usb 2-1: Using ep0 maxpacket: 8 [ 1195.833437][T14643] usb 2-1: config 0 has an invalid descriptor of length 206, skipping remainder of the config [ 1195.844318][T14643] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1195.857747][T14643] usb 2-1: New USB device found, idVendor=1020, idProduct=1410, bcdDevice= 0.00 [ 1195.867245][T14643] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.945766][T14643] usb 2-1: config 0 descriptor?? [ 1196.007092][T14643] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1196.314146][ T5073] Bluetooth: hci2: command tx timeout [ 1197.155862][T15857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.163600][T15857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.173303][T15857] bridge_slave_0: entered allmulticast mode [ 1197.182815][T15857] bridge_slave_0: entered promiscuous mode [ 1197.267143][T15857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.275329][T15857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.283138][T15857] bridge_slave_1: entered allmulticast mode [ 1197.292527][T15857] bridge_slave_1: entered promiscuous mode [ 1197.884898][T15857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1197.932146][T15857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1198.180417][T15857] team0: Port device team_slave_0 added [ 1198.232699][T15857] team0: Port device team_slave_1 added [ 1198.318083][ T5124] usb 2-1: USB disconnect, device number 36 [ 1198.437989][ T5073] Bluetooth: hci2: command tx timeout [ 1198.594509][T15857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1198.601695][T15857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1198.630216][T15857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1198.765520][T15857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1198.772717][T15857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1198.799129][T15857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1198.848628][T11098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1198.881897][T11098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1198.949666][T11098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1198.963030][T12642] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1199.002976][T11098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1199.027625][T11098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1199.037379][T11098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1199.227211][T15857] hsr_slave_0: entered promiscuous mode [ 1199.230503][T15915] loop1: detected capacity change from 0 to 2048 [ 1199.262812][T15857] hsr_slave_1: entered promiscuous mode [ 1199.272323][T15857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1199.279205][T15915] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1199.282336][T15857] Cannot create hsr debugfs directory [ 1199.316423][ T3273] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.324313][T15915] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1199.395410][T15915] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1199.669179][ T3273] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.800201][ T3273] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.872562][T15922] loop2: detected capacity change from 0 to 256 [ 1199.945852][T15919] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 0 lbcount: 4096 extent 56+4096 [ 1200.097968][ T3273] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.281844][T15922] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1200.291975][T15922] bridge_slave_1: left allmulticast mode [ 1200.298194][T15922] bridge_slave_1: left promiscuous mode [ 1200.305082][T15922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.348170][T15922] bridge_slave_0: left allmulticast mode [ 1200.354418][T15922] bridge_slave_0: left promiscuous mode [ 1200.361203][T15922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.474601][T11098] Bluetooth: hci2: command tx timeout [ 1200.805605][T12642] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 1200.814528][T12642] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 1201.019152][T15930] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1201.150137][T11098] Bluetooth: hci1: command tx timeout [ 1201.262496][T15932] loop3: detected capacity change from 0 to 1024 [ 1201.328367][ T3273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1201.352401][ T3273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1201.376562][ T3273] bond0 (unregistering): Released all slaves [ 1201.432433][ T3390] hfsplus: b-tree write err: -5, ino 4 [ 1202.185248][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 1203.195584][T11098] Bluetooth: hci1: command tx timeout [ 1203.211862][ T3273] hsr_slave_0: left promiscuous mode [ 1203.289606][ T3273] hsr_slave_1: left promiscuous mode [ 1203.335438][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1203.343338][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1203.408462][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1203.416398][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1203.475209][T15944] loop3: detected capacity change from 0 to 32768 [ 1203.484751][ T3273] veth1_macvtap: left promiscuous mode [ 1203.490699][ T3273] veth0_macvtap: left promiscuous mode [ 1203.496772][ T3273] veth1_vlan: left promiscuous mode [ 1203.502350][ T3273] veth0_vlan: left promiscuous mode [ 1203.951186][ T3273] pim6reg (unregistering): left allmulticast mode [ 1204.023263][ T3390] smc: removing ib device syz0 [ 1205.137707][ T5073] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1205.147556][ T5073] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1205.157508][ T5073] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1205.171395][ T5073] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1205.183019][ T5073] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1205.196282][ T5073] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1205.278601][T11098] Bluetooth: hci1: command tx timeout [ 1206.956021][ T3273] team0 (unregistering): Port device team_slave_1 removed [ 1207.020129][ T3273] team0 (unregistering): Port device team_slave_0 removed [ 1207.302184][T11098] Bluetooth: hci4: command tx timeout [ 1207.350111][T15857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1207.359401][T11098] Bluetooth: hci1: command tx timeout [ 1207.435733][T15857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1207.584680][T15912] chnl_net:caif_netlink_parms(): no params data found [ 1207.609286][T15857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1207.684196][T15857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1207.724319][T15959] loop1: detected capacity change from 0 to 256 [ 1208.468734][T15959] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1208.478727][T15959] bridge_slave_1: left allmulticast mode [ 1208.484744][T15959] bridge_slave_1: left promiscuous mode [ 1208.491440][T15959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.528631][T15959] bridge_slave_0: left allmulticast mode [ 1208.534840][T15959] bridge_slave_0: left promiscuous mode [ 1208.541816][T15959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.023420][T15912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.033108][T15912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.041153][T15912] bridge_slave_0: entered allmulticast mode [ 1209.050326][T15912] bridge_slave_0: entered promiscuous mode [ 1209.190784][T15912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.198699][T15912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.206614][T15912] bridge_slave_1: entered allmulticast mode [ 1209.215742][T15912] bridge_slave_1: entered promiscuous mode [ 1209.217510][T14672] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 1209.244843][T14672] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 1209.282070][T15948] chnl_net:caif_netlink_parms(): no params data found [ 1209.354988][T11098] Bluetooth: hci4: command tx timeout [ 1209.520673][T15912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.731415][T15857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1209.764552][T15912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1209.893726][T15975] hsr0: entered promiscuous mode [ 1210.018292][T15912] team0: Port device team_slave_0 added [ 1210.292060][T15912] team0: Port device team_slave_1 added [ 1210.563100][T15912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1210.570434][T15912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1210.596922][T15912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1210.624678][T15857] 8021q: adding VLAN 0 to HW filter on device team0 [ 1210.681546][T15912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1210.689096][T15912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1210.715991][T15912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1210.740055][T14643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.747900][T14643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.854317][T14643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.861996][T14643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1211.444000][T11098] Bluetooth: hci4: command tx timeout [ 1211.455632][T15912] hsr_slave_0: entered promiscuous mode [ 1211.513134][T15912] hsr_slave_1: entered promiscuous mode [ 1211.563635][T15857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1211.594803][T15948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.602512][T15948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.612089][T15948] bridge_slave_0: entered allmulticast mode [ 1211.621504][T15948] bridge_slave_0: entered promiscuous mode [ 1211.805184][T15948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.812894][T15948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.820949][T15948] bridge_slave_1: entered allmulticast mode [ 1211.830283][T15948] bridge_slave_1: entered promiscuous mode [ 1212.205234][T15948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.419250][T15948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.499190][ T3273] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.659126][ T3273] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.854751][ T5073] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1212.864252][ T5073] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1212.883770][ T5073] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1212.897335][ T5073] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1212.909186][ T5073] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1212.922971][ T5073] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1213.092909][ T3273] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.188468][T15948] team0: Port device team_slave_0 added [ 1213.338299][ T3273] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.401122][T15948] team0: Port device team_slave_1 added [ 1213.514590][ T5073] Bluetooth: hci4: command tx timeout [ 1213.600756][T15948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.608990][T15948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.635549][T15948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.730894][T15948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.738760][T15948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.765373][T15948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.184491][ T3273] bond0: (slave netdevsim3): Releasing backup interface [ 1214.215833][ T3273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.407021][ T3273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.449359][T15857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1214.475367][T15948] hsr_slave_0: entered promiscuous mode [ 1214.504381][T15948] hsr_slave_1: entered promiscuous mode [ 1214.525357][T15948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1214.533343][T15948] Cannot create hsr debugfs directory [ 1214.600058][ T3273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.824661][ T3273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.905973][T15912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1214.940733][T15912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1214.974831][ T5073] Bluetooth: hci3: command tx timeout [ 1215.088548][T15912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1215.110965][T15912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1215.662973][T16013] loop3: detected capacity change from 0 to 256 [ 1216.258143][ T3273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1216.304474][ T3273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1216.319899][ T3273] bond0 (unregistering): Released all slaves [ 1216.343125][ T3273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1216.362918][ T3273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1216.382490][ T3273] bond0 (unregistering): Released all slaves [ 1216.505702][T16013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1216.515638][T16013] bridge_slave_1: left allmulticast mode [ 1216.521539][T16013] bridge_slave_1: left promiscuous mode [ 1216.529247][T16013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.569332][T16013] bridge_slave_0: left allmulticast mode [ 1216.576784][T16013] bridge_slave_0: left promiscuous mode [ 1216.583568][T16013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.792304][T15991] chnl_net:caif_netlink_parms(): no params data found [ 1216.903530][T15434] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1216.921252][T15434] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1217.035349][ T5073] Bluetooth: hci3: command tx timeout [ 1217.891181][ T3273] hsr_slave_0: left promiscuous mode [ 1217.904853][ T3273] hsr_slave_1: left promiscuous mode [ 1217.913304][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1217.923045][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1217.939750][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1217.947795][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1217.979131][ T3273] hsr_slave_0: left promiscuous mode [ 1218.004648][ T3273] hsr_slave_1: left promiscuous mode [ 1218.013434][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1218.024564][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.036622][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1218.044597][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.078672][ T3273] veth1_macvtap: left promiscuous mode [ 1218.085080][ T3273] veth0_macvtap: left promiscuous mode [ 1218.092180][ T3273] veth1_vlan: left promiscuous mode [ 1218.097975][ T3273] veth0_vlan: left promiscuous mode [ 1218.110125][ T3273] veth1_macvtap: left promiscuous mode [ 1218.116430][ T3273] veth0_macvtap: left promiscuous mode [ 1218.122332][ T3273] veth1_vlan: left promiscuous mode [ 1218.128156][ T3273] veth0_vlan: left promiscuous mode [ 1218.958611][ T3273] pim6reg (unregistering): left allmulticast mode [ 1219.119699][ T5073] Bluetooth: hci3: command tx timeout [ 1219.255037][T11098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1219.264838][T11098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1219.278059][T11098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1219.308133][T11098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1219.330200][T11098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1219.345854][T11098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1219.426818][ T3273] team0 (unregistering): Port device team_slave_1 removed [ 1219.449485][ T3273] team0 (unregistering): Port device team_slave_0 removed [ 1219.975567][ T3273] team0 (unregistering): Port device team_slave_1 removed [ 1220.014604][ T3273] team0 (unregistering): Port device team_slave_0 removed [ 1220.512467][T15991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.523909][T15991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.531723][T15991] bridge_slave_0: entered allmulticast mode [ 1220.540902][T15991] bridge_slave_0: entered promiscuous mode [ 1220.607618][T15991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.615722][T15991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.623507][T15991] bridge_slave_1: entered allmulticast mode [ 1220.632612][T15991] bridge_slave_1: entered promiscuous mode [ 1220.736670][T15857] veth0_vlan: entered promiscuous mode [ 1220.821661][T15991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.980874][T15991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1220.991063][T15948] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1221.037063][T15912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1221.156015][T15948] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1221.196005][ T5073] Bluetooth: hci3: command tx timeout [ 1221.238135][T15857] veth1_vlan: entered promiscuous mode [ 1221.262037][T15991] team0: Port device team_slave_0 added [ 1221.280829][T15948] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1221.322730][T15948] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1221.418416][T15912] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.433647][T15991] team0: Port device team_slave_1 added [ 1221.443049][ T5073] Bluetooth: hci0: command tx timeout [ 1221.671990][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.679825][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.792097][T15991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1221.799454][T15991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1221.825956][T15991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1221.973217][T15991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1221.980535][T15991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1222.012319][T15991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1222.076461][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.084309][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1222.399777][T15857] veth0_macvtap: entered promiscuous mode [ 1222.482939][T16021] chnl_net:caif_netlink_parms(): no params data found [ 1222.513466][T15857] veth1_macvtap: entered promiscuous mode [ 1222.640744][T15991] hsr_slave_0: entered promiscuous mode [ 1222.661252][T15991] hsr_slave_1: entered promiscuous mode [ 1222.678648][T15991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1222.687384][T15991] Cannot create hsr debugfs directory [ 1222.963984][T15857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1222.975070][T15857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.990025][T15857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1223.175328][T15857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1223.186204][T15857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.201206][T15857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1223.307310][T15857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.317542][T15857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.327044][T15857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.338478][T15857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.529102][ T5073] Bluetooth: hci0: command tx timeout [ 1224.004131][ T3273] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.091229][T15948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.233610][ T3273] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.455361][ T3273] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.471027][T16021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.482064][T16021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.491656][T16021] bridge_slave_0: entered allmulticast mode [ 1224.501078][T16021] bridge_slave_0: entered promiscuous mode [ 1224.628178][ T3273] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.661583][T16021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.669489][T16021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.677540][T16021] bridge_slave_1: entered allmulticast mode [ 1224.686741][T16021] bridge_slave_1: entered promiscuous mode [ 1224.760056][T15948] 8021q: adding VLAN 0 to HW filter on device team0 [ 1224.963299][T15912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1224.991820][T16021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.001447][T15991] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1225.066882][T16021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1225.105910][T13869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.113642][T13869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.154025][T15991] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1225.301012][T15991] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1225.392877][T16021] team0: Port device team_slave_0 added [ 1225.405147][T15991] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1225.453616][T13869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.461443][T13869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.500149][T16021] team0: Port device team_slave_1 added [ 1225.624219][ T5073] Bluetooth: hci0: command tx timeout [ 1225.853111][ T3273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1225.891495][ T3273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.923299][ T3273] bond0 (unregistering): Released all slaves [ 1226.075493][T16021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1226.084125][T16021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1226.110907][T16021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1226.204121][T16021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1226.211289][T16021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1226.237586][T16021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1226.638020][T16021] hsr_slave_0: entered promiscuous mode [ 1226.649226][T16021] hsr_slave_1: entered promiscuous mode [ 1226.666513][T16021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1226.674499][T16021] Cannot create hsr debugfs directory [ 1226.964425][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1226.972156][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1226.986467][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1226.994684][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1227.009286][ T3273] veth1_macvtap: left promiscuous mode [ 1227.015443][ T3273] veth0_macvtap: left promiscuous mode [ 1227.021346][ T3273] veth1_vlan: left promiscuous mode [ 1227.027020][ T3273] veth0_vlan: left promiscuous mode [ 1227.570968][ T3273] team0 (unregistering): Port device team_slave_1 removed [ 1227.615082][ T3273] team0 (unregistering): Port device team_slave_0 removed [ 1227.677883][ T5073] Bluetooth: hci0: command tx timeout [ 1227.874993][T15912] veth0_vlan: entered promiscuous mode [ 1228.223237][T15912] veth1_vlan: entered promiscuous mode [ 1228.391382][T15991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1228.664443][T15912] veth0_macvtap: entered promiscuous mode [ 1228.785254][T15991] 8021q: adding VLAN 0 to HW filter on device team0 [ 1228.795787][T15912] veth1_macvtap: entered promiscuous mode [ 1228.915021][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.922727][ T5122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1229.055376][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.063099][ T5122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1229.246907][T15912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1229.257908][T15912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.272987][T15912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1229.547156][T15912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1229.558423][T15912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1229.573342][T15912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1229.745783][T15912] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.755213][T15912] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.764419][T15912] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.773474][T15912] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.826205][T16021] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1229.915751][T16021] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1230.010220][T16021] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1230.082913][T16021] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1230.166795][T15948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1230.848920][T15948] veth0_vlan: entered promiscuous mode [ 1231.067051][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.075228][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.086733][T15948] veth1_vlan: entered promiscuous mode [ 1231.349390][ T6062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.357756][ T6062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.538608][T16021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1231.561342][T15948] veth0_macvtap: entered promiscuous mode [ 1231.657278][T15948] veth1_macvtap: entered promiscuous mode [ 1231.692817][T15991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1231.755332][T16021] 8021q: adding VLAN 0 to HW filter on device team0 [ 1231.891038][T15948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.901889][T15948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.912041][T15948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.924144][T15948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.941436][T15948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1231.958039][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.965876][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.058307][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.066123][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.285475][T15948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.296342][T15948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.306500][T15948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.317348][T15948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.334177][T15948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1232.342805][ T5127] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1232.457882][T15991] veth0_vlan: entered promiscuous mode [ 1232.584248][T15991] veth1_vlan: entered promiscuous mode [ 1232.601568][T15948] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.611414][T15948] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.620688][T15948] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.629911][T15948] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.852027][ T5127] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.863926][ T5127] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.876862][ T5127] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1232.987326][T15991] veth0_macvtap: entered promiscuous mode [ 1233.083488][T15991] veth1_macvtap: entered promiscuous mode [ 1233.164543][ T5127] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1233.174123][ T5127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.182404][ T5127] usb 5-1: Product: syz [ 1233.186938][ T5127] usb 5-1: Manufacturer: syz [ 1233.191754][ T5127] usb 5-1: SerialNumber: syz [ 1233.300520][ T5127] usb 5-1: selecting invalid altsetting 1 [ 1233.362324][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1233.374135][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.384378][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1233.395165][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.405275][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1233.416079][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.431259][T15991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1233.678763][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1233.689760][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.701286][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1233.713359][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.723512][T15991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1233.734378][T15991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.744516][ T5127] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 1233.749446][T15991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1233.750896][ T5127] cdc_ncm 5-1:1.0: bind() failure [ 1233.776686][ T5127] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1233.784032][ T5127] cdc_ncm 5-1:1.1: bind() failure [ 1233.986290][T15991] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.997462][T15991] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.008005][T15991] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.017290][T15991] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.567410][T16021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1235.001966][ T8] usb 5-1: USB disconnect, device number 41 [ 1235.096452][T16021] veth0_vlan: entered promiscuous mode [ 1235.230948][T16021] veth1_vlan: entered promiscuous mode [ 1235.678665][T16021] veth0_macvtap: entered promiscuous mode [ 1235.790260][T16021] veth1_macvtap: entered promiscuous mode [ 1235.927572][T16021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1235.939462][T16021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.949943][T16021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1235.960745][T16021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.970954][T16021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1235.981856][T16021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.992088][T16021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1236.003012][T16021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.019484][T16021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1236.177519][T16021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1236.188707][T16021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.198981][T16021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1236.209734][T16021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.221020][T16021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1236.232136][T16021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.243041][T16021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1236.254469][T16021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1236.269577][T16021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1236.859939][T16101] loop4: detected capacity change from 0 to 32768 [ 1236.892246][T16101] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (16101) [ 1236.919651][T16021] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.929822][T16021] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.940116][T16021] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.949684][T16021] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.968903][T16101] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1236.979657][T16101] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm [ 1236.991463][T16101] BTRFS info (device loop4): using free-space-tree [ 1237.349279][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 1237.349362][ T29] audit: type=1800 audit(1717779240.233:503): pid=16101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=264 res=0 errno=0 [ 1237.695116][T15857] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1237.866423][ T5127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1237.875957][ T5127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.050187][ T5591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.059701][ T5591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.938031][ T3273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.947429][ T3273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.130847][ T3273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.139368][ T3273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.827312][T16172] loop4: detected capacity change from 0 to 256 [ 1240.921290][T16166] loop2: detected capacity change from 0 to 2048 [ 1241.021466][T16166] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1241.073825][ T5124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.081904][ T5124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.106991][T16166] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1241.181333][T16166] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1241.262792][ T5429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.271159][ T5429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.375713][T16172] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1241.385348][T16172] bridge_slave_1: left allmulticast mode [ 1241.391235][T16172] bridge_slave_1: left promiscuous mode [ 1241.398106][T16172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.431500][T16172] bridge_slave_0: left allmulticast mode [ 1241.449492][T16172] bridge_slave_0: left promiscuous mode [ 1241.456372][T16172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.871757][T16177] UDF-fs: warning (device loop2): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 8192 lbcount: 12288 extent 65+8192 [ 1242.018831][T16182] loop1: detected capacity change from 0 to 16 [ 1242.070217][T16182] erofs: Unknown parameter 'ÿÿÿÿ)|' [ 1242.129358][T15857] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 1242.143400][T15857] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 1242.547027][T16187] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1242.658708][ T3273] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.778053][T13869] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1242.846573][ T3273] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.026318][T13869] usb 2-1: Using ep0 maxpacket: 16 [ 1243.029594][ T3273] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.203457][ T3273] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.224220][T13869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1243.235719][T13869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1243.245939][T13869] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1243.255410][T13869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.312605][T13869] usb 2-1: config 0 descriptor?? [ 1243.392557][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.400971][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1243.598483][ T5429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1243.606762][ T5429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.025002][T13869] usbhid 2-1:0.0: can't add hid device: -71 [ 1244.031692][T13869] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1244.124914][ T3273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1244.135886][T13869] usb 2-1: USB disconnect, device number 37 [ 1244.172811][ T3273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1244.216595][ T3273] bond0 (unregistering): Released all slaves [ 1244.242462][T16199] loop0: detected capacity change from 0 to 256 [ 1244.529675][T16199] FAT-fs (loop0): Directory bread(block 64) failed [ 1244.537003][T16199] FAT-fs (loop0): Directory bread(block 65) failed [ 1244.544071][T16199] FAT-fs (loop0): Directory bread(block 66) failed [ 1244.550843][T16199] FAT-fs (loop0): Directory bread(block 67) failed [ 1244.558025][T16199] FAT-fs (loop0): Directory bread(block 68) failed [ 1244.565005][T16199] FAT-fs (loop0): Directory bread(block 69) failed [ 1244.571937][T16199] FAT-fs (loop0): Directory bread(block 70) failed [ 1244.578836][T16199] FAT-fs (loop0): Directory bread(block 71) failed [ 1244.585874][T16199] FAT-fs (loop0): Directory bread(block 72) failed [ 1244.592656][T16199] FAT-fs (loop0): Directory bread(block 73) failed [ 1245.562993][ T3273] hsr_slave_0: left promiscuous mode [ 1245.603780][ T3273] hsr_slave_1: left promiscuous mode [ 1245.750344][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1245.758600][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1245.775562][ T5122] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1245.827457][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1245.831419][T16212] loop0: detected capacity change from 0 to 2048 [ 1245.835366][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1245.874256][T16212] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1245.891340][T16212] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1245.911761][T16212] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1245.922983][ T3273] veth1_macvtap: left promiscuous mode [ 1245.929128][ T3273] veth0_macvtap: left promiscuous mode [ 1245.935186][ T3273] veth1_vlan: left promiscuous mode [ 1245.940782][ T3273] veth0_vlan: left promiscuous mode [ 1246.267392][ T5122] usb 2-1: Using ep0 maxpacket: 8 [ 1246.417050][T16212] UDF-fs: warning (device loop0): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 4096 lbcount: 8192 extent 65+4096 [ 1246.475414][ T5122] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1246.486186][ T5122] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.536391][ T5122] usb 2-1: config 0 descriptor?? [ 1246.699346][T11098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1246.712371][T11098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1246.766307][T11098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1246.858444][T11098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1246.874735][T11098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1246.885661][T11098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1246.974028][ T3273] team0 (unregistering): Port device team_slave_1 removed [ 1247.001613][T16217] loop0: detected capacity change from 0 to 256 [ 1247.057820][ T3273] team0 (unregistering): Port device team_slave_0 removed [ 1247.845643][ T5122] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1247.856425][ T5122] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1247.913151][ T5122] usb 2-1: USB disconnect, device number 38 [ 1248.404984][T16214] chnl_net:caif_netlink_parms(): no params data found [ 1248.573309][T16217] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1248.582974][T16217] bridge_slave_1: left allmulticast mode [ 1248.588954][T16217] bridge_slave_1: left promiscuous mode [ 1248.595943][T16217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.738379][T16217] bridge_slave_0: left allmulticast mode [ 1248.744421][T16217] bridge_slave_0: left promiscuous mode [ 1248.751168][T16217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.762734][T16229] sctp: [Deprecated]: syz-executor.1 (pid 16229) Use of int in max_burst socket option deprecated. [ 1248.762734][T16229] Use struct sctp_assoc_value instead [ 1248.953991][T11098] Bluetooth: hci0: command tx timeout [ 1249.058525][ T5127] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1249.169795][ T5073] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1249.186563][ T5073] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1249.211714][ T5073] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1249.279848][ T5073] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1249.292225][ T5073] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1249.303316][ T5073] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1249.540602][ T5127] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.551274][ T5127] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1249.562694][ T5127] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1249.755136][ T5127] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1249.764826][ T5127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.773107][ T5127] usb 3-1: Product: syz [ 1249.777736][ T5127] usb 3-1: Manufacturer: syz [ 1249.782579][ T5127] usb 3-1: SerialNumber: syz [ 1249.873874][T16241] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1250.651996][T16214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.664932][T16214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.672773][T16214] bridge_slave_0: entered allmulticast mode [ 1250.682805][T16214] bridge_slave_0: entered promiscuous mode [ 1250.693833][ T5122] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1250.735782][T16256] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1250.745756][T16256] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 1250.775453][T16256] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 65023 - 0 [ 1250.784780][T16256] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 65023 - 0 [ 1250.796255][T16256] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 65023 - 0 [ 1250.806182][T16256] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 65023 - 0 [ 1250.815623][T16256] vxlan0: entered promiscuous mode [ 1250.839076][T16214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.848930][T16214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.856939][T16214] bridge_slave_1: entered allmulticast mode [ 1250.870199][T16214] bridge_slave_1: entered promiscuous mode [ 1250.979260][T16236] chnl_net:caif_netlink_parms(): no params data found [ 1251.042076][ T5073] Bluetooth: hci0: command tx timeout [ 1251.054498][ T5127] cdc_ncm 3-1:1.0: bind() failure [ 1251.124349][ T5127] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 1251.138434][ T5127] usb 3-1: USB disconnect, device number 45 [ 1251.165979][T16258] loop1: detected capacity change from 0 to 128 [ 1251.218352][T16214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.310595][T16214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.354319][ T5073] Bluetooth: hci2: command tx timeout [ 1251.549480][T16214] team0: Port device team_slave_0 added [ 1251.641929][T16214] team0: Port device team_slave_1 added [ 1251.859394][T16214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1251.866719][T16214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1251.897666][T16214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1251.943527][T16214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.950920][T16214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1251.977600][T16214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1252.463408][ T3273] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.501909][T16265] loop2: detected capacity change from 0 to 2048 [ 1252.633346][T16265] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1252.694125][T16265] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1252.721422][ T3273] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.774188][T16263] loop0: detected capacity change from 0 to 32768 [ 1252.784138][T16236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.791861][T16236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.799817][T16236] bridge_slave_0: entered allmulticast mode [ 1252.809899][T16263] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (16263) [ 1252.812645][T16236] bridge_slave_0: entered promiscuous mode [ 1252.861577][T16263] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1252.875686][T16263] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm [ 1252.887151][T16263] BTRFS info (device loop0): using free-space-tree [ 1252.895731][T16265] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1252.981418][T16236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.989425][T16236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.997410][T16236] bridge_slave_1: entered allmulticast mode [ 1253.007350][T16236] bridge_slave_1: entered promiscuous mode [ 1253.061539][ T3273] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.116298][ T5073] Bluetooth: hci0: command tx timeout [ 1253.201354][T16214] hsr_slave_0: entered promiscuous mode [ 1253.236095][T16214] hsr_slave_1: entered promiscuous mode [ 1253.284910][T16214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1253.292883][T16214] Cannot create hsr debugfs directory [ 1253.392759][ T3273] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.449803][ T5073] Bluetooth: hci2: command tx timeout [ 1253.546178][T16265] UDF-fs: warning (device loop2): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 0 lbcount: 4096 extent 56+4096 [ 1253.885968][T16236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1253.935594][ T29] audit: type=1800 audit(1717779256.643:504): pid=16263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=264 res=0 errno=0 [ 1254.002719][T16286] loop1: detected capacity change from 0 to 32768 [ 1254.056300][T16236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1254.142595][T16286] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 1254.152694][T16286] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1254.271284][T16286] XFS (loop1): Ending clean mount [ 1254.283496][T16286] XFS (loop1): Quotacheck needed: Please wait. [ 1254.316284][T15912] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1254.367364][ T3273] bridge_slave_1: left allmulticast mode [ 1254.373492][ T3273] bridge_slave_1: left promiscuous mode [ 1254.380290][ T3273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.403184][T16286] XFS (loop1): Quotacheck: Done. [ 1254.480048][ T3273] bridge_slave_0: left allmulticast mode [ 1254.486321][ T3273] bridge_slave_0: left promiscuous mode [ 1254.492972][ T3273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.566960][T15991] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1255.208793][ T5073] Bluetooth: hci0: command tx timeout [ 1255.259522][ T3273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1255.382770][ T3273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1255.460676][ T3273] bond0 (unregistering): Released all slaves [ 1255.530007][ T5073] Bluetooth: hci2: command tx timeout [ 1255.538145][T16236] team0: Port device team_slave_0 added [ 1255.632038][T16236] team0: Port device team_slave_1 added [ 1256.030634][T16236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1256.038188][T16236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1256.064928][T16236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1256.535460][T16303] loop0: detected capacity change from 0 to 32768 [ 1256.612463][T16236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1256.619906][T16236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1256.647379][T16236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1256.732854][T16303] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 1256.745900][T16303] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1256.762056][T16311] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1256.896439][T16314] loop1: detected capacity change from 0 to 256 [ 1257.008500][T16303] XFS (loop0): Ending clean mount [ 1257.026083][T16303] XFS (loop0): Quotacheck needed: Please wait. [ 1257.091375][T16303] XFS (loop0): Quotacheck: Done. [ 1257.174584][ T3273] hsr_slave_0: left promiscuous mode [ 1257.212671][ T3273] hsr_slave_1: left promiscuous mode [ 1257.234382][T15912] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1257.247036][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1257.255057][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1257.300729][ T3273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1257.308719][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1257.394189][ T3273] veth1_macvtap: left promiscuous mode [ 1257.400109][ T3273] veth0_macvtap: left promiscuous mode [ 1257.406221][ T3273] veth1_vlan: left promiscuous mode [ 1257.413082][ T3273] veth0_vlan: left promiscuous mode [ 1257.691895][ T5073] Bluetooth: hci2: command tx timeout [ 1257.746210][T16319] loop2: detected capacity change from 0 to 32768 [ 1257.807630][T16319] [ 1257.807630][T16319] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1257.807630][T16319] [ 1257.861845][T16319] [ 1257.861845][T16319] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1257.861845][T16319] [ 1257.872736][T16319] [ 1257.872736][T16319] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1257.872736][T16319] [ 1257.883876][T16319] [ 1257.883876][T16319] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1257.883876][T16319] [ 1257.894683][T16319] [ 1257.894683][T16319] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1257.894683][T16319] [ 1257.930979][ T111] [ 1257.930979][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1257.930979][ T111] [ 1258.065019][ T5593] [ 1258.065019][ T5593] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1258.065019][ T5593] [ 1258.076564][ T5593] [ 1258.076564][ T5593] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1258.076564][ T5593] [ 1258.107581][ T110] [ 1258.107581][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1258.107581][ T110] [ 1258.127619][T15948] [ 1258.127619][T15948] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1258.127619][T15948] [ 1258.168534][T15948] [ 1258.168534][T15948] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1258.168534][T15948] [ 1258.381930][ T3273] team0 (unregistering): Port device team_slave_1 removed [ 1258.561677][ T3273] team0 (unregistering): Port device team_slave_0 removed [ 1259.056576][T16236] hsr_slave_0: entered promiscuous mode [ 1259.074496][T16236] hsr_slave_1: entered promiscuous mode [ 1259.136951][T16236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1259.145195][T16236] Cannot create hsr debugfs directory [ 1259.158711][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1259.170591][T16314] bridge_slave_1: left allmulticast mode [ 1259.176635][T16314] bridge_slave_1: left promiscuous mode [ 1259.183301][T16314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.261611][T16314] bridge_slave_0: left allmulticast mode [ 1259.268494][T16314] bridge_slave_0: left promiscuous mode [ 1259.275408][T16314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.467815][T16323] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1259.477671][T16323] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 1260.515678][T16325] loop2: detected capacity change from 0 to 32768 [ 1260.535774][T16214] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1260.575949][T16325] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1260.680991][T16214] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1260.820655][ T788] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1260.863095][T16214] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1260.879271][T16325] XFS (loop2): Ending clean mount [ 1260.897935][T16325] XFS (loop2): Quotacheck needed: Please wait. [ 1260.931115][T16214] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1260.962541][T16325] XFS (loop2): Quotacheck: Done. [ 1261.294456][ T788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.309048][ T788] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.351432][T16338] mkiss: ax0: crc mode is auto. [ 1261.538964][ T788] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1261.548556][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.557533][ T788] usb 2-1: Product: syz [ 1261.561939][ T788] usb 2-1: Manufacturer: syz [ 1261.566900][ T788] usb 2-1: SerialNumber: syz [ 1261.733352][T16236] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1261.776275][T16236] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1261.879043][T16236] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1261.889857][T16343] loop0: detected capacity change from 0 to 2048 [ 1261.971066][T16343] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1261.977644][T16236] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1261.992362][T16343] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1262.050723][T16343] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1262.160654][T15948] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1262.400595][T16214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.490898][T16214] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.581137][T14643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.588963][T14643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.627552][T16343] UDF-fs: warning (device loop0): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 0 lbcount: 4096 extent 56+4096 [ 1262.696149][T14643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.703983][T14643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.879393][ T788] cdc_ncm 2-1:1.0: bind() failure [ 1262.985570][ T788] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1263.028557][ T788] usb 2-1: USB disconnect, device number 40 [ 1263.141522][T16214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1263.522689][T16236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1263.622487][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 1263.781336][T16236] 8021q: adding VLAN 0 to HW filter on device team0 [ 1263.883436][T14643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.891300][T14643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.007541][T14643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.015360][T14643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1264.958070][T16354] loop0: detected capacity change from 0 to 32768 [ 1265.723350][T16367] loop2: detected capacity change from 0 to 8 [ 1265.769161][T16214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1265.856582][T16367] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1265.864984][T16367] SQUASHFS error: Failed to read block 0x51c: -5 [ 1265.871568][T16367] SQUASHFS error: Unable to read metadata cache entry [51a] [ 1265.879257][T16367] SQUASHFS error: Unable to read inode 0x320048 [ 1266.806231][T16373] loop1: detected capacity change from 0 to 32768 [ 1267.219866][ T5591] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.343443][T16236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1267.476352][ T5591] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.661996][ T5591] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.815148][ T5591] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.162373][ T5591] bridge_slave_1: left allmulticast mode [ 1268.169822][ T5591] bridge_slave_1: left promiscuous mode [ 1268.176555][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.225430][ T5591] bridge_slave_0: left allmulticast mode [ 1268.231376][ T5591] bridge_slave_0: left promiscuous mode [ 1268.239076][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.825418][ T5591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1268.895818][ T5591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1268.945743][ T5591] bond0 (unregistering): Released all slaves [ 1269.109067][T16381] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1269.120052][T16381] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 1269.143171][T16381] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 65023 - 0 [ 1269.152534][T16381] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 65023 - 0 [ 1269.161876][T16381] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 65023 - 0 [ 1269.171135][T16381] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 65023 - 0 [ 1269.180785][T16381] vxlan0: entered promiscuous mode [ 1269.203503][T16236] veth0_vlan: entered promiscuous mode [ 1269.411154][T16236] veth1_vlan: entered promiscuous mode [ 1269.786645][T16214] veth0_vlan: entered promiscuous mode [ 1270.206391][ T5591] hsr_slave_0: left promiscuous mode [ 1270.231089][ T5591] hsr_slave_1: left promiscuous mode [ 1270.334516][ T5591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1270.342276][ T5591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1270.385240][T16385] loop1: detected capacity change from 0 to 128 [ 1270.395387][ T5591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1270.403085][ T5591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1270.456222][ T5591] veth1_macvtap: left promiscuous mode [ 1270.462026][ T5591] veth0_macvtap: left promiscuous mode [ 1270.468166][ T5591] veth1_vlan: left promiscuous mode [ 1270.474003][ T5591] veth0_vlan: left promiscuous mode [ 1270.534041][T11098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1270.552364][T16385] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1270.680325][T16385] ext4 filesystem being mounted at /root/syzkaller-testdir406233355/syzkaller.PfnB2a/13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1270.688932][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1270.703298][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1270.711506][T16392] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1270.717687][T16392] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1270.738138][T16392] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1270.749027][T16392] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1270.779220][T16392] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1270.804965][T16392] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1270.828907][T16392] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1270.840382][T16392] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1270.849958][T16392] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1271.094509][T15991] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1271.228869][ T5591] team0 (unregistering): Port device team_slave_1 removed [ 1271.312145][ T5591] team0 (unregistering): Port device team_slave_0 removed [ 1271.746830][T16214] veth1_vlan: entered promiscuous mode [ 1271.775048][T16236] veth0_macvtap: entered promiscuous mode [ 1271.932697][T16236] veth1_macvtap: entered promiscuous mode [ 1272.155094][T16396] loop1: detected capacity change from 0 to 2048 [ 1272.302773][T16396] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1272.344299][T16396] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1272.381858][T16396] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1272.408851][T16236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1272.419727][T16236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.429878][T16236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1272.440662][T16236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.455800][T16236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1272.586087][T16214] veth0_macvtap: entered promiscuous mode [ 1272.650516][T16214] veth1_macvtap: entered promiscuous mode [ 1272.691986][T16236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.705286][T16236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.716058][T16236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1272.726824][T16236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.741696][T16236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1272.877955][ T50] Bluetooth: hci1: command tx timeout [ 1272.883206][T16236] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.892758][T16236] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.903534][T16236] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.912656][T16236] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.963189][ T50] Bluetooth: hci4: command tx timeout [ 1273.118795][T16401] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 0 lbcount: 4096 extent 56+4096 [ 1273.126907][T16390] chnl_net:caif_netlink_parms(): no params data found [ 1273.209140][T16214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1273.219957][T16214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.231487][T16214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1273.242391][T16214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.252695][T16214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1273.263480][T16214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.278621][T16214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1273.536904][T16214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.547752][T16214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.557953][T16214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.568759][T16214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.578963][T16214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.589783][T16214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.608521][T16214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1273.832447][T16387] chnl_net:caif_netlink_parms(): no params data found [ 1273.876263][T16214] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.885489][T16214] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.894883][T16214] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.907274][T16214] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.254434][T14636] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1274.687106][T14636] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.697859][T14636] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1274.710224][T14636] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1274.934620][T14636] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1274.944788][T14636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.953056][T14636] usb 2-1: Product: syz [ 1274.957732][T14636] usb 2-1: Manufacturer: syz [ 1274.962574][T14636] usb 2-1: SerialNumber: syz [ 1274.984467][ T50] Bluetooth: hci1: command tx timeout [ 1275.017174][T14636] usb 2-1: selecting invalid altsetting 1 [ 1275.035357][T16390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.038461][ T50] Bluetooth: hci4: command tx timeout [ 1275.042970][T16390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.056277][T16390] bridge_slave_0: entered allmulticast mode [ 1275.065520][T16390] bridge_slave_0: entered promiscuous mode [ 1275.179572][T16390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.187658][T16390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.198011][T16390] bridge_slave_1: entered allmulticast mode [ 1275.207347][T16390] bridge_slave_1: entered promiscuous mode [ 1275.454647][T14636] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1275.460272][T16390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1275.460959][T14636] cdc_ncm 2-1:1.0: bind() failure [ 1275.486112][T14636] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1275.493265][T14636] cdc_ncm 2-1:1.1: bind() failure [ 1275.616604][T16390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1275.817953][T16387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.825808][T16387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.833834][T16387] bridge_slave_0: entered allmulticast mode [ 1275.843141][T16387] bridge_slave_0: entered promiscuous mode [ 1275.937304][T16390] team0: Port device team_slave_0 added [ 1275.959280][T16387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.970589][T16387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.978611][T16387] bridge_slave_1: entered allmulticast mode [ 1275.988054][T16387] bridge_slave_1: entered promiscuous mode [ 1276.050135][T16390] team0: Port device team_slave_1 added [ 1276.419622][ T5591] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 1276.431917][ T5591] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.465875][T16387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1276.492958][T16390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1276.500319][T16390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1276.528078][T16390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1276.554994][T16387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.700976][ T5591] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 1276.712668][ T5591] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.778858][T16390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1276.787477][T16390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1276.815171][T16390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1276.858448][T16387] team0: Port device team_slave_0 added [ 1276.893175][T16387] team0: Port device team_slave_1 added [ 1276.944011][ T5591] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 1276.955901][ T5591] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.015941][T13869] usb 2-1: USB disconnect, device number 41 [ 1277.052126][ T50] Bluetooth: hci1: command tx timeout [ 1277.130169][ T50] Bluetooth: hci4: command tx timeout [ 1277.206280][ T5591] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 1277.217179][ T5591] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.513142][T16387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1277.521267][T16387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1277.548140][T16387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1278.040305][T16390] hsr_slave_0: entered promiscuous mode [ 1278.095929][T16390] hsr_slave_1: entered promiscuous mode [ 1278.136706][T16390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1278.144695][T16390] Cannot create hsr debugfs directory [ 1278.286839][T16387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1278.294348][T16387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1278.327072][T16387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1278.922319][T16387] hsr_slave_0: entered promiscuous mode [ 1278.975772][T16387] hsr_slave_1: entered promiscuous mode [ 1279.011577][T16387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1279.024262][T16387] Cannot create hsr debugfs directory [ 1279.114974][ T50] Bluetooth: hci1: command tx timeout [ 1279.194578][ T50] Bluetooth: hci4: command tx timeout [ 1282.164558][ T5591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1282.191698][ T5591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1282.214856][ T5591] bond0 (unregistering): Released all slaves [ 1282.368353][T16452] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1283.010885][ T5591] hsr_slave_0: left promiscuous mode [ 1283.055837][ T5591] hsr_slave_1: left promiscuous mode [ 1283.086699][ T5591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1283.094809][ T5591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1283.118548][ T5591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1283.126448][ T5591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1283.167399][ T5591] veth1_macvtap: left promiscuous mode [ 1283.173306][ T5591] veth0_macvtap: left promiscuous mode [ 1283.181174][ T5591] veth1_vlan: left promiscuous mode [ 1283.186938][ T5591] veth0_vlan: left promiscuous mode [ 1283.781113][ T5591] team0 (unregistering): Port device team_slave_1 removed [ 1283.809224][ T5591] team0 (unregistering): Port device team_slave_0 removed [ 1284.623526][ T6062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.631935][ T6062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.633236][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.647635][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.894400][ T5589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.894600][ T6062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.902465][ T5589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.919478][ T6062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.208175][T16390] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1285.321398][T16390] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1285.473149][T16390] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1285.610161][T16390] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1285.845495][T16470] loop3: detected capacity change from 0 to 2048 [ 1285.934405][T16470] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1286.014288][T16470] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1286.062991][T16387] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1286.111568][T16470] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 1286.121683][T16387] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1286.134938][T16470] System zones: 0-19 [ 1286.165135][T16387] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1286.207056][T16470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1286.248309][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1286.258091][T16481] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 1286.294165][T16387] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1286.430423][T16477] loop4: detected capacity change from 0 to 2048 [ 1286.462973][T16470] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (22) [ 1286.657839][T16477] EXT4-fs (loop4): failed to initialize system zone (-117) [ 1286.755057][T16477] EXT4-fs (loop4): mount failed [ 1287.026379][T16236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1287.048742][T16390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1287.306692][T16390] 8021q: adding VLAN 0 to HW filter on device team0 [ 1287.387292][T16477] loop4: detected capacity change from 0 to 1024 [ 1287.426104][T16477] udf: Unknown parameter 'shoCiJ(4ÇS9rtad' [ 1287.459815][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.467657][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1287.585757][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.593477][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1287.630130][T16387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1287.879214][T16387] 8021q: adding VLAN 0 to HW filter on device team0 [ 1288.075772][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.083472][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1288.271647][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.279446][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1288.664262][ T8] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1288.924285][T16497] loop4: detected capacity change from 0 to 2048 [ 1289.012036][T16497] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1289.066180][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.070237][T16497] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1289.076575][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1289.076756][ T8] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1289.236491][T16497] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1289.294544][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1289.304544][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.312808][ T8] usb 2-1: Product: syz [ 1289.317341][ T8] usb 2-1: Manufacturer: syz [ 1289.322179][ T8] usb 2-1: SerialNumber: syz [ 1289.419796][ T8] usb 2-1: selecting invalid altsetting 1 [ 1289.716642][T16504] UDF-fs: warning (device loop4): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 0 lbcount: 4096 extent 56+4096 [ 1289.886953][ T8] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 1289.893374][ T8] cdc_ncm 2-1:1.0: bind() failure [ 1289.908941][ T8] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1289.916706][ T8] cdc_ncm 2-1:1.1: bind() failure [ 1290.050907][T16390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1290.291610][T16387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1290.509301][T16390] veth0_vlan: entered promiscuous mode [ 1290.588732][T16390] veth1_vlan: entered promiscuous mode [ 1290.934226][T16387] veth0_vlan: entered promiscuous mode [ 1290.981637][T16390] veth0_macvtap: entered promiscuous mode [ 1291.043170][T16387] veth1_vlan: entered promiscuous mode [ 1291.082917][T16390] veth1_macvtap: entered promiscuous mode [ 1291.265813][T16390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.277813][T16390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.287923][T16390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.298568][T16390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.310714][T16390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.321939][T16390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.335839][T16390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1291.625185][T16390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1291.636365][T16390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.646495][T16390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1291.657429][T16390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.662522][ T10] usb 2-1: USB disconnect, device number 42 [ 1291.667461][T16390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1291.685282][T16390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.704300][T16390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1291.809581][T16387] veth0_macvtap: entered promiscuous mode [ 1291.966451][T16390] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.975662][T16390] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.984716][T16390] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.993616][T16390] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.034975][T16387] veth1_macvtap: entered promiscuous mode [ 1292.307014][T16387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1292.318640][T16387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.328787][T16387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1292.341934][T16387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.352682][T16387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1292.363330][T16387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.373390][T16387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1292.384295][T16387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.404101][T16387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1292.607597][T16387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.618882][T16387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.628960][T16387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.642853][T16387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.654242][T16387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.665150][T16387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.675458][T16387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1292.686576][T16387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1292.700063][T16387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1292.864279][T16387] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.873315][T16387] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.882588][T16387] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.891722][T16387] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.042405][T16518] loop3: detected capacity change from 0 to 256 [ 1293.316347][T16515] veth0_vlan: left promiscuous mode [ 1293.724576][T14636] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1294.034014][T14636] usb 4-1: Using ep0 maxpacket: 32 [ 1294.154872][T14636] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1294.166284][T14636] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1294.178130][T14636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.236052][T14636] usb 4-1: config 0 descriptor?? [ 1294.258201][T16518] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1294.346408][T14636] hub 4-1:0.0: bad descriptor, ignoring hub [ 1294.352645][T14636] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1294.368048][T14636] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1294.635214][T14636] usb 4-1: USB disconnect, device number 43 [ 1295.796405][T16534] loop4: detected capacity change from 0 to 4096 [ 1296.050924][T16534] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1296.059808][T16534] NILFS (loop4): trying rollback from an earlier position [ 1296.177729][T16534] NILFS (loop4): recovery complete [ 1296.229212][T16549] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1296.307989][T16550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1296.318287][T16550] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1296.340113][T16550] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 65023 - 0 [ 1296.349331][T16550] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 65023 - 0 [ 1296.358516][T16550] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 65023 - 0 [ 1296.367601][T16550] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 65023 - 0 [ 1296.376909][T16550] vxlan0: entered promiscuous mode [ 1297.517098][ T29] audit: type=1800 audit(1717779300.353:505): pid=16561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1950 res=0 errno=0 [ 1298.635583][T16570] loop4: detected capacity change from 0 to 4096 [ 1298.864397][T16582] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1298.912987][T16570] NILFS error (device loop4): nilfs_readdir: zero-length directory entry [ 1298.937471][T16570] Remounting filesystem read-only [ 1299.001050][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.009246][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.250129][ T5127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.258566][ T5127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.483158][ T6427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.491973][ T6427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.736858][ T6427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.745627][ T6427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.886018][T16597] loop2: detected capacity change from 0 to 256 [ 1300.247446][T16600] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1300.701487][T16603] veth0_vlan: left promiscuous mode [ 1300.919654][T16597] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1300.929475][T16597] bridge_slave_1: left allmulticast mode [ 1300.940166][T16597] bridge_slave_1: left promiscuous mode [ 1300.946653][T16597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.222434][T16597] bridge_slave_0: left allmulticast mode [ 1301.228807][T16597] bridge_slave_0: left promiscuous mode [ 1301.235375][T16597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.452116][T16607] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1301.461830][T16607] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 1301.794689][ T29] audit: type=1800 audit(1717779304.583:506): pid=16613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1950 res=0 errno=0 [ 1301.909304][T16613] loop3: detected capacity change from 0 to 512 [ 1301.981941][T16613] EXT4-fs: Ignoring removed mblk_io_submit option [ 1302.047241][T16613] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1302.229085][T16613] EXT4-fs (loop3): 1 truncate cleaned up [ 1302.235206][T16613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1302.531300][T16612] loop0: detected capacity change from 0 to 4096 [ 1302.711318][T16612] NILFS (loop0): invalid segment: Checksum error in segment payload [ 1302.720595][T16612] NILFS (loop0): trying rollback from an earlier position [ 1302.844992][T16612] NILFS (loop0): recovery complete [ 1302.934608][T16627] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1303.965237][T16236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1304.549565][T16647] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1305.264749][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1305.285118][T16656] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.294352][T16656] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.303358][T16656] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.312856][T16656] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.322225][T16656] vxlan0: entered promiscuous mode [ 1306.950414][ T29] audit: type=1800 audit(1717779309.803:507): pid=16669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1959 res=0 errno=0 [ 1307.031622][T16669] loop0: detected capacity change from 0 to 512 [ 1307.068519][T16669] EXT4-fs: Ignoring removed mblk_io_submit option [ 1307.131883][T16669] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1307.232151][T16669] EXT4-fs (loop0): 1 truncate cleaned up [ 1307.238396][T16669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1312.219394][T16387] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1312.747575][T16692] veth0_vlan: left promiscuous mode [ 1313.520275][T16697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1313.552384][T16697] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1313.561612][T16697] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1313.570918][T16697] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1313.580202][T16697] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1313.589466][T16697] vxlan1: entered promiscuous mode [ 1316.745227][T16713] loop4: detected capacity change from 0 to 512 [ 1316.778889][T16713] ext4: Unknown parameter 'dont_measure' [ 1316.894346][T16715] loop0: detected capacity change from 0 to 256 [ 1316.958644][ T29] audit: type=1326 audit(1717779319.833:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16712 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f210467cf69 code=0x0 [ 1316.979946][T16715] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1317.148125][T16715] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1317.160969][T16717] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1317.185695][T16717] gretap0: entered promiscuous mode [ 1317.202348][T16717] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1317.260914][T16719] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1317.271000][T16719] 0ªX¹¦D: renamed from gretap0 [ 1317.346824][T16719] 0ªX¹¦D: left promiscuous mode [ 1317.351956][T16719] 0ªX¹¦D: entered allmulticast mode [ 1317.374876][T16719] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1317.463961][T14643] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1317.717738][ T5127] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1317.904259][T14643] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.915809][T14643] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.074879][T14643] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice=61.8f [ 1318.084362][T14643] usb 1-1: New USB device strings: Mfr=129, Product=106, SerialNumber=0 [ 1318.092994][T14643] usb 1-1: Product: syz [ 1318.097772][T14643] usb 1-1: Manufacturer: syz [ 1318.216421][T14643] usb 1-1: config 0 descriptor?? [ 1318.586367][ T5127] usb 3-1: Using ep0 maxpacket: 16 [ 1318.714616][ T5127] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1318.786361][T14643] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 1318.794038][T14643] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 1318.801384][T14643] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 1318.808854][T14643] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 1318.816399][T14643] uclogic 0003:5543:0522.0003: unknown main item tag 0x0 [ 1318.906089][ T5127] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1318.915639][ T5127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.924389][ T5127] usb 3-1: Product: syz [ 1318.928794][ T5127] usb 3-1: Manufacturer: syz [ 1318.933633][ T5127] usb 3-1: SerialNumber: syz [ 1319.041031][ T5127] usb 3-1: config 0 descriptor?? [ 1319.137964][ T5127] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1319.147758][ T5127] usb 3-1: Detected FT232R [ 1319.269126][T14643] uclogic 0003:5543:0522.0003: No inputs registered, leaving [ 1319.290060][T14643] uclogic 0003:5543:0522.0003: hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 1319.308818][T14643] usb 1-1: USB disconnect, device number 49 [ 1319.515609][ T5127] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1319.575084][ T5127] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1319.619009][ T5127] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1319.732107][ T5127] usb 3-1: USB disconnect, device number 46 [ 1319.823524][ T29] audit: type=1800 audit(1717779322.653:509): pid=16729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=1952 res=0 errno=0 [ 1319.829825][ T5127] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1319.856517][ T5127] ftdi_sio 3-1:0.0: device disconnected [ 1319.966213][T16729] loop4: detected capacity change from 0 to 512 [ 1320.012439][T16729] EXT4-fs: Ignoring removed mblk_io_submit option [ 1320.076086][T16729] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1320.281948][T16729] EXT4-fs (loop4): 1 truncate cleaned up [ 1320.296457][T16729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1321.914068][T16745] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1321.972315][T16214] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1323.610941][T16766] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1323.641972][T16765] loop4: detected capacity change from 0 to 512 [ 1323.715553][T16765] ext4: Unknown parameter 'dont_measure' [ 1323.785694][T16768] lo speed is unknown, defaulting to 1000 [ 1323.794894][T16768] lo speed is unknown, defaulting to 1000 [ 1323.801852][T16768] lo speed is unknown, defaulting to 1000 [ 1324.194250][ T29] audit: type=1326 audit(1717779327.013:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16763 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f210467cf69 code=0x0 [ 1324.225964][T16768] infiniband syz0: set active [ 1324.230935][T16768] infiniband syz0: added lo [ 1324.249813][ T10] lo speed is unknown, defaulting to 1000 [ 1324.330185][T16774] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1324.376080][T16768] RDS/IB: syz0: added [ 1324.380506][T16768] smc: adding ib device syz0 with port count 1 [ 1324.391094][T16768] smc: ib device syz0 port 1 has pnetid [ 1324.408968][T16774] 0ªX¹¦D: entered promiscuous mode [ 1324.414688][T16774] 0ªX¹¦D: left allmulticast mode [ 1324.428287][T16774] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1324.491091][T16781] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1324.501384][T16781] 1ªX¹¦D: renamed from 30ªX¹¦D [ 1324.604566][T16781] 1ªX¹¦D: left promiscuous mode [ 1324.609696][T16781] 1ªX¹¦D: entered allmulticast mode [ 1324.623405][T16781] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1324.640437][T16768] lo speed is unknown, defaulting to 1000 [ 1324.669129][ T10] lo speed is unknown, defaulting to 1000 [ 1325.087660][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 1325.097401][T16768] lo speed is unknown, defaulting to 1000 [ 1325.560104][T16768] lo speed is unknown, defaulting to 1000 [ 1326.018336][T16768] lo speed is unknown, defaulting to 1000 [ 1326.348298][T16768] lo speed is unknown, defaulting to 1000 [ 1326.921078][T16792] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1326.930778][T16792] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1328.523425][T16814] loop2: detected capacity change from 0 to 512 [ 1328.600335][T16814] ext4: Unknown parameter 'dont_measure' [ 1328.859670][ T29] audit: type=1326 audit(1717779331.693:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16809 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe98147cf69 code=0x0 [ 1328.979153][T16820] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1329.096395][T16820] gretap0: entered promiscuous mode [ 1329.112838][T16820] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1329.212280][T16820] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1329.222707][T16820] 0ªX¹¦D: renamed from gretap0 [ 1329.293410][T16820] 0ªX¹¦D: left promiscuous mode [ 1329.304076][T16820] 0ªX¹¦D: entered allmulticast mode [ 1329.319304][T16820] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1330.175737][T16840] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1330.185718][T16840] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 1330.206175][T16840] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1330.215304][T16840] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1330.227299][T16840] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1330.236885][T16840] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1330.246100][T16840] vxlan0: entered promiscuous mode [ 1330.544677][ T5124] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1331.494467][ T5124] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1331.504184][ T5124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.512473][ T5124] usb 3-1: Product: syz [ 1331.517319][ T5124] usb 3-1: Manufacturer: syz [ 1331.522167][ T5124] usb 3-1: SerialNumber: syz [ 1331.589177][ T5124] usb 3-1: config 0 descriptor?? [ 1331.669353][ T5124] ch341 3-1:0.0: ch341-uart converter detected [ 1331.924817][ T5124] usb 3-1: failed to receive control message: -71 [ 1331.931678][ T5124] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1331.993584][ T5124] usb 3-1: USB disconnect, device number 47 [ 1332.001509][ T5124] ch341 3-1:0.0: device disconnected [ 1332.416994][T16861] kvm: kvm [16860]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x17e00004080 [ 1332.485828][T16861] kvm: kvm [16860]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x2e700000000 [ 1332.535396][T16861] kvm: kvm [16860]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x34e00004080 [ 1333.276372][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1333.558781][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1333.694519][ T10] usb 5-1: config 0 has an invalid interface descriptor of length 2, skipping [ 1333.704906][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.716653][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1333.727335][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1333.915493][ T10] usb 5-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=74.cc [ 1333.925974][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.934627][ T10] usb 5-1: Product: syz [ 1333.938919][ T10] usb 5-1: Manufacturer: syz [ 1333.943641][ T10] usb 5-1: SerialNumber: syz [ 1333.978027][ T10] usb 5-1: config 0 descriptor?? [ 1334.234817][ T5124] usb 5-1: USB disconnect, device number 42 [ 1335.407499][T16912] loop1: detected capacity change from 0 to 128 [ 1336.574033][ T29] audit: type=1326 audit(1717779339.403:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16918 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe98147cf69 code=0x0 [ 1336.649645][T16924] loop0: detected capacity change from 0 to 2048 [ 1336.741610][T16924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1337.359387][T16392] Bluetooth: hci3: command 0x0406 tx timeout [ 1337.654213][T16387] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1338.265862][ T6062] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1338.276258][ T6062] ===================================================== [ 1338.276400][ T6062] BUG: KMSAN: uninit-value in nci_ntf_packet+0x2ac8/0x39c0 [ 1338.276531][ T6062] nci_ntf_packet+0x2ac8/0x39c0 [ 1338.276652][ T6062] nci_rx_work+0x288/0x5d0 [ 1338.276757][ T6062] process_scheduled_works+0xa81/0x1bd0 [ 1338.276880][ T6062] worker_thread+0xea5/0x1560 [ 1338.276998][ T6062] kthread+0x3e2/0x540 [ 1338.277118][ T6062] ret_from_fork+0x6d/0x90 [ 1338.277220][ T6062] ret_from_fork_asm+0x1a/0x30 [ 1338.277353][ T6062] [ 1338.277375][ T6062] Uninit was created at: [ 1338.277521][ T6062] kmem_cache_alloc_node+0x622/0xc90 [ 1338.277620][ T6062] kmalloc_reserve+0x13d/0x4a0 [ 1338.277741][ T6062] __alloc_skb+0x35b/0x7a0 [ 1338.277844][ T6062] virtual_ncidev_write+0x6d/0x290 [ 1338.277980][ T6062] vfs_write+0x497/0x14d0 [ 1338.278111][ T6062] ksys_write+0x20f/0x4c0 [ 1338.278244][ T6062] __x64_sys_write+0x93/0xe0 [ 1338.278377][ T6062] x64_sys_call+0x3062/0x3b50 [ 1338.278509][ T6062] do_syscall_64+0xcf/0x1e0 [ 1338.278637][ T6062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.278782][ T6062] [ 1338.278809][ T6062] CPU: 1 PID: 6062 Comm: kworker/u8:55 Tainted: G W 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 1338.278919][ T6062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 1338.278988][ T6062] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 1338.279096][ T6062] ===================================================== [ 1338.279128][ T6062] Disabling lock debugging due to kernel taint [ 1338.279175][ T6062] Kernel panic - not syncing: kmsan.panic set ... [ 1338.279223][ T6062] CPU: 1 PID: 6062 Comm: kworker/u8:55 Tainted: G B W 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 1338.279335][ T6062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 1338.279399][ T6062] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 1338.279501][ T6062] Call Trace: [ 1338.279539][ T6062] [ 1338.279573][ T6062] dump_stack_lvl+0x216/0x2d0 [ 1338.279722][ T6062] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1338.279855][ T6062] dump_stack+0x1e/0x30 [ 1338.279990][ T6062] panic+0x4e2/0xcd0 [ 1338.280127][ T6062] ? kmsan_get_metadata+0xf1/0x1d0 [ 1338.280258][ T6062] kmsan_report+0x2d5/0x2e0 [ 1338.280379][ T6062] ? __msan_warning+0x95/0x120 [ 1338.280475][ T6062] ? nci_ntf_packet+0x2ac8/0x39c0 [ 1338.280599][ T6062] ? nci_rx_work+0x288/0x5d0 [ 1338.280698][ T6062] ? process_scheduled_works+0xa81/0x1bd0 [ 1338.280825][ T6062] ? worker_thread+0xea5/0x1560 [ 1338.280941][ T6062] ? kthread+0x3e2/0x540 [ 1338.281069][ T6062] ? ret_from_fork+0x6d/0x90 [ 1338.281178][ T6062] ? ret_from_fork_asm+0x1a/0x30 [ 1338.281324][ T6062] ? vprintk_default+0x3e/0x50 [ 1338.281480][ T6062] ? vprintk+0xee/0xf0 [ 1338.281590][ T6062] ? _printk+0x157/0x190 [ 1338.281735][ T6062] ? kmsan_get_metadata+0x146/0x1d0 [ 1338.281846][ T6062] ? nci_add_new_protocol+0x159/0x870 [ 1338.281969][ T6062] ? nci_add_new_protocol+0x51/0x870 [ 1338.282106][ T6062] ? nci_add_new_protocol+0x5a0/0x870 [ 1338.282240][ T6062] __msan_warning+0x95/0x120 [ 1338.282339][ T6062] nci_ntf_packet+0x2ac8/0x39c0 [ 1338.282474][ T6062] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1338.282661][ T6062] nci_rx_work+0x288/0x5d0 [ 1338.282778][ T6062] ? __pfx_nci_rx_work+0x10/0x10 [ 1338.282881][ T6062] process_scheduled_works+0xa81/0x1bd0 [ 1338.283042][ T6062] worker_thread+0xea5/0x1560 [ 1338.283173][ T6062] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1338.283312][ T6062] kthread+0x3e2/0x540 [ 1338.283441][ T6062] ? __pfx_worker_thread+0x10/0x10 [ 1338.283573][ T6062] ? __pfx_kthread+0x10/0x10 [ 1338.283707][ T6062] ret_from_fork+0x6d/0x90 [ 1338.283817][ T6062] ? __pfx_kthread+0x10/0x10 [ 1338.283948][ T6062] ret_from_fork_asm+0x1a/0x30 [ 1338.284101][ T6062] [ 1338.284438][ T6062] Kernel Offset: disabled