last executing test programs: 14.77535784s ago: executing program 0 (id=3787): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_POLICE={0x4}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14.647173621s ago: executing program 0 (id=3790): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x240, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x78, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x71, 0x3, "e6307e550d7de4fd7980a1d41f27f06c107134b6145205c85098229917246e0829f7b5e8cc4ec810e3d20a99fdc00627a3d434d161bd9a792b3e2a971e45d437badfb9d6039023157ca70341e960603a5063407db6f0738dd8aa818c5faf917300a4195ba49ad689e28aba10cb"}]}, @NL80211_ATTR_BEACON_HEAD={0x1a9, 0xe, {{{}, {}, @broadcast, @broadcast}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xe0, "93414a08ab4af8efed27fa7f28b733499952de7a062a2bcf53bf055c9f53184a3f730c89c2deb3617670314fdf5e32b2f39b7ddd240309b0871544b0b7e60255aba64ea12fd01427097b88009a8b4ec2d50f1bf3dfa21051552a691848f7dcf7d07cdca00a8467efe2eac0750b0b08e8810009ed9b1cd82dd1dc5f5f755c9599e6b2484dbfd282640aedfb1ebb66f939981d0c5e34569c58f5aab4e7dc0223e69cce674a15ac38e13a6738c78a121050f7fb434cb19a51d7f084616ecd7657480e6c6b4bbe93788551c6d6f39d2f50a2ff89c4b6f50eb2c8d9de4ef8c0d107c4"}, {0xdd, 0x15, "876af8287bafc27fc45a5e63343e4923a4136e0abe"}, {0xdd, 0x55, "b45f497fb92594eae9a0f10c451eb3d4a4b4409042142c64e420d0b90119e5dde24b7680432d6b5d7877c731537327f4d7bd5dee92757d9da3a808b2eb1c552a07527082482f9a9ebec785644301eb56c167a7598f"}]}}]}, 0x240}}, 0x0) 14.375409973s ago: executing program 0 (id=3792): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x7058, &(0x7f0000000040)={0x0, 0x20000000, 0x100, 0x0, 0x10001, 0x0, r0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f00000001c0)="e13b95007c00f514ff49a953", 0xc}], 0x1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="000001000000aa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) shmget(0x2, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x6000) shmctl$IPC_RMID(0x0, 0x0) 14.091169006s ago: executing program 3 (id=3795): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000040)="14000000140005b7ffccca38b9000000040860eb", 0x14) 13.818555109s ago: executing program 2 (id=3798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x1c, 0x18, 0x409}, 0x1c}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 13.579823859s ago: executing program 2 (id=3799): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) getpid() capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x1100}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 13.470500167s ago: executing program 3 (id=3800): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_POLICE={0x4}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13.463964828s ago: executing program 4 (id=3801): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x3c}, 0x0, @in=@dev}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 13.429909881s ago: executing program 1 (id=3802): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x240, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x78, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x71, 0x3, "e6307e550d7de4fd7980a1d41f27f06c107134b6145205c85098229917246e0829f7b5e8cc4ec810e3d20a99fdc00627a3d434d161bd9a792b3e2a971e45d437badfb9d6039023157ca70341e960603a5063407db6f0738dd8aa818c5faf917300a4195ba49ad689e28aba10cb"}]}, @NL80211_ATTR_BEACON_HEAD={0x1a9, 0xe, {{{}, {}, @broadcast, @broadcast}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xe0, "93414a08ab4af8efed27fa7f28b733499952de7a062a2bcf53bf055c9f53184a3f730c89c2deb3617670314fdf5e32b2f39b7ddd240309b0871544b0b7e60255aba64ea12fd01427097b88009a8b4ec2d50f1bf3dfa21051552a691848f7dcf7d07cdca00a8467efe2eac0750b0b08e8810009ed9b1cd82dd1dc5f5f755c9599e6b2484dbfd282640aedfb1ebb66f939981d0c5e34569c58f5aab4e7dc0223e69cce674a15ac38e13a6738c78a121050f7fb434cb19a51d7f084616ecd7657480e6c6b4bbe93788551c6d6f39d2f50a2ff89c4b6f50eb2c8d9de4ef8c0d107c4"}, {0xdd, 0x15, "876af8287bafc27fc45a5e63343e4923a4136e0abe"}, {0xdd, 0x55, "b45f497fb92594eae9a0f10c451eb3d4a4b4409042142c64e420d0b90119e5dde24b7680432d6b5d7877c731537327f4d7bd5dee92757d9da3a808b2eb1c552a07527082482f9a9ebec785644301eb56c167a7598f"}]}}]}, 0x240}}, 0x0) 13.403256623s ago: executing program 3 (id=3803): clock_gettime(0x4c25726cb16dd79b, 0x0) 13.328228789s ago: executing program 3 (id=3804): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000014000905000000001c17c33b23cd72b5", @ANYRES32], 0x34}}, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 13.327662469s ago: executing program 2 (id=3805): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCXONC(r1, 0x540a, 0x3) 13.282817634s ago: executing program 4 (id=3806): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x3e}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x51, 0x0, 0x0, {}, {}, @cond=[{0x0, 0x0, 0x0, 0x2806}]}) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_extract_tcp_res(&(0x7f0000000500), 0x7fff, 0x2) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x0, 0x4) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000", @ANYRES32=0x41424344, @ANYRES32=r2, @ANYBLOB="0800000090780000080a00000000000008b20000"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e08000c08"], 0xb) syz_io_uring_setup(0x3026, &(0x7f0000000280)={0x0, 0xca0d, 0x1, 0x0, 0x27}, &(0x7f0000000200), &(0x7f0000000240)) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04020f01ffcfd0e859ae09005d62ffffff0100090203b9afd80200"], 0x12) pipe2(0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x40001f) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040efaff0520"], 0x7) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 13.261762015s ago: executing program 1 (id=3807): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x8, 0x92a, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfff0, 0x4}, {0xfb}}}]}]}}]}, 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13.170439692s ago: executing program 2 (id=3808): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200), 0x0, 0x0, 0x0, 0x407006}, 0x104) 13.128588026s ago: executing program 1 (id=3809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x1c, 0x18, 0x409}, 0x1c}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 12.906428084s ago: executing program 1 (id=3810): syz_io_uring_setup(0x0, &(0x7f00000035c0), &(0x7f0000000100), &(0x7f0000000040)) mount$bpf(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@mode={'mode', 0x3d, 0x8}}], [{@smackfsroot}, {@subj_role={'subj_role', 0x3d, 'iso9660\x00'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3003, 0xffff96aabfff, 0x832, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xa4}}, 0x0) 12.824657511s ago: executing program 4 (id=3811): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x3e}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x51, 0x0, 0x0, {}, {}, @cond=[{0x0, 0x0, 0x0, 0x2806}]}) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_extract_tcp_res(&(0x7f0000000500), 0x7fff, 0x2) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x0, 0x4) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003400", @ANYRES32=0x41424344, @ANYRES32=r2, @ANYBLOB="0800000090780000080a00000000000008b20000"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e08000c08"], 0xb) syz_io_uring_setup(0x3026, &(0x7f0000000280)={0x0, 0xca0d, 0x1, 0x0, 0x27}, &(0x7f0000000200), &(0x7f0000000240)) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04020f01ffcfd0e859ae09005d62ffffff0100090203b9afd80200"], 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x40001f) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040efaff05"], 0x7) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 12.565243863s ago: executing program 4 (id=3812): socket$nl_route(0x10, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x1f8, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x164, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x148, 0x6, [@m_ctinfo={0x68, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x33, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb"}, {0xc}, {0xc}}}, @m_connmark={0xb0, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x48, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7da0dc8795f6ad32634b6b66cf821e93079c"}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x1f8}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ec3ca1c0c"], 0x7) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}}}, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ff2afc78f0f22fb370384a013106c9b79b1a000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000"], &(0x7f0000000300)='GPL\x00'}, 0x90) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040e0501460c1f00c7f641737da8c5df97e629d54f8eef8f4b4c287248623393943b5ba71f4c252077dee7cda5f191af639f6bc9ccce6307303924e47e62deed5d1bb5921eea00000c30f73971da9388b9ec29139dedf9d61d113d31eeef342c9d"], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x2b, &(0x7f0000000040)=0x200000000005) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="042292a8"], 0x4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9100, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x5) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x4) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000540)={{}, 'syz0\x00'}) 12.013140838s ago: executing program 2 (id=3813): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_POLICE={0x4}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12.012450708s ago: executing program 3 (id=3814): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000680)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001340)={0x0, 0x1, {0x401, @struct={0x6, 0x7}, 0x0, 0x4, 0x2, 0x4, 0x6, 0x9, 0x0, @struct={0x6, 0xa}, 0x9, 0x7, [0xb, 0xffff, 0x4, 0x400, 0x7fff, 0x8001]}, {0x7, @struct={0x0, 0x6}, 0x0, 0xc, 0x8, 0x3c6, 0x0, 0x80, 0x40, @usage, 0x0, 0x7, [0x2, 0x3, 0x4, 0xf, 0xd8]}, {0xe7, @struct={0x6, 0x3}, 0x0, 0x8, 0x6, 0x6, 0x200, 0x8000000000000000, 0x24, @usage=0x4, 0xc, 0x6, [0xfffffffffffffffd, 0x3, 0x7, 0x0, 0x1, 0x3]}, {0x0, 0xb}}) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC, @ANYRES64, @ANYRESHEX, @ANYRES64], 0x1, 0x14f0, &(0x7f0000001580)="$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") syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000580)={[{@fat=@errors_continue}, {@utf8no}, {@fat=@usefree}, {@fat=@sys_immutable}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}]}, 0x0, 0x275, &(0x7f0000000600)="$eJzs3MFrI1UYAPDPdLftdtlNDyIoiA+96CXs1r8gyC6IBaVuRD0IszbV0DEpmViJiLs3r/4di0dvgvoP9OLNu3gpguBlD2Jkk4xNS2B3pXXq5veDMF/mzZf3ZjITvhnIO3z36092d4rGTjaI2mqKWsTduB+x/iCaemq6rI3j5Zh1N165/MfPz7/93vtvNDc3b2yldLN569WNlNLVF77/7ItvXvxxcPmdb69+txIH6x8c/r7xy8EzB88e/nWr/PTeIGXpdq83yG7n7bTdKXYbKb2Vt7OinTrdot0/1r6T9/b2hinrbl9Z2+u3iyJl3WHabQ/ToJcG/WHKPso63dRoNNKVtVg0S4+d0bq3tZU1z2QwVOHSvJX9fjNbmtvYuvdfDAoAOF+qqv8/7hSpU6Tuw+r/Wqj/z476fxE8qP/Xptfvcep/AAAAAAAAAAAAAAD4P7g/GtVHo1G9XJavlYhYjYjyfdXj5Gz4/hfbzB/3ViPyr/Zb+63JctLe3IlO5NGOaxcj/hyfD1OT+ObrmzeupbHl+CG/M82/s99aipUyv7Q+P//6JD8dz78Ya7P9b0Q9np6fvzE3fzlefmkmvxH1+OnD6EUe2+Pz+ij/y+spvfbm5on8S+PtAAAA4EnQSP9YP3n/Pm5vpHLakBPtk5VHzwei/pDnAyfury/Ecxeq228AAABYJMXw890sz9t9weMFDt2ZB7WIqKj33yLifByEUw1+/XRy1T/KxlX/MgEAAKftqOiveiQAAAAAAAAAAAAAAAAAAACwuB518rBy+38z99hMd0vV7CUAAAAAAAAAAAAAAAAAAAAAAACcD38HAAD//3FIIUE=") open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="64697363617264000700000089bd47000000000000000000000000000000c0d7aecf05950ab7d689bb41012918d521428edf23582764292a5b70f182e5da325cc6a1e7be51ebcd00000000000000ef8a09f93326a37c6203a569725bb3f8902936d727b377c38328a16800639c2da42fb5a373d31b0e189df7a5b8963b40b15df6afce99b212e36055b1e7ae4e3f31a13f423dd3c5dda59616e2e5967e29ef83303852c5dce92983e47ebdf0912e954f7a6653c738238b9adced9d82bd3c76b7142615e9de9266c45e1b5ca13a313a5b641184d5561897edb989149ce9068e926ba693a1ebfa9c04e2b5823fb77aa6f8012b9859ce5735cf52e24655212cc25d8d0335ace4d7363ac260f11545c1f914b769b6277086817ccac98dcd5eb337a8c26663fbe2b8c21dd0c4a26645b7f23352d585431996f0fcf149fe3e92d378aa2809fc81a2e30143eb1b039ed9a93e55ef6ef04da90d39dc"], 0x1, 0xee2, &(0x7f0000001e80)="$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") 11.220294714s ago: executing program 2 (id=3815): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) 7.605545722s ago: executing program 0 (id=3816): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 7.604389193s ago: executing program 1 (id=3817): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x240, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x78, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x71, 0x3, "e6307e550d7de4fd7980a1d41f27f06c107134b6145205c85098229917246e0829f7b5e8cc4ec810e3d20a99fdc00627a3d434d161bd9a792b3e2a971e45d437badfb9d6039023157ca70341e960603a5063407db6f0738dd8aa818c5faf917300a4195ba49ad689e28aba10cb"}]}, @NL80211_ATTR_BEACON_HEAD={0x1a9, 0xe, {{{}, {}, @broadcast, @broadcast}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xe0, "93414a08ab4af8efed27fa7f28b733499952de7a062a2bcf53bf055c9f53184a3f730c89c2deb3617670314fdf5e32b2f39b7ddd240309b0871544b0b7e60255aba64ea12fd01427097b88009a8b4ec2d50f1bf3dfa21051552a691848f7dcf7d07cdca00a8467efe2eac0750b0b08e8810009ed9b1cd82dd1dc5f5f755c9599e6b2484dbfd282640aedfb1ebb66f939981d0c5e34569c58f5aab4e7dc0223e69cce674a15ac38e13a6738c78a121050f7fb434cb19a51d7f084616ecd7657480e6c6b4bbe93788551c6d6f39d2f50a2ff89c4b6f50eb2c8d9de4ef8c0d107c4"}, {0xdd, 0x15, "876af8287bafc27fc45a5e63343e4923a4136e0abe"}, {0xdd, 0x55, "b45f497fb92594eae9a0f10c451eb3d4a4b4409042142c64e420d0b90119e5dde24b7680432d6b5d7877c731537327f4d7bd5dee92757d9da3a808b2eb1c552a07527082482f9a9ebec785644301eb56c167a7598f"}]}}]}, 0x240}}, 0x0) 7.592599183s ago: executing program 4 (id=3818): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) getpid() capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x1100}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 7.39038679s ago: executing program 0 (id=3819): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x8, 0x92a, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfff0, 0x4}, {0xfb}}}]}]}}]}, 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.297151047s ago: executing program 1 (id=3820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x1c, 0x18, 0x409}, 0x1c}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, 0x0, 0x0) 7.253875762s ago: executing program 0 (id=3821): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x3e}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x51, 0x0, 0x0, {}, {}, @cond=[{0x0, 0x0, 0x0, 0x2806}]}) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_extract_tcp_res(&(0x7f0000000500), 0x7fff, 0x2) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x0, 0x4) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000034", @ANYRES32=0x41424344, @ANYRES32=r2, @ANYBLOB="0800000090780000080a00000000000008b20000"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e08000c08"], 0xb) syz_io_uring_setup(0x3026, &(0x7f0000000280)={0x0, 0xca0d, 0x1, 0x0, 0x27}, &(0x7f0000000200), &(0x7f0000000240)) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04020f01ffcfd0e859ae09005d62ffffff0100090203b9afd80200"], 0x12) pipe2(0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x40001f) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040efaff0520"], 0x7) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.072896506s ago: executing program 3 (id=3822): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x3e}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x51, 0x0, 0x0, {}, {}, @cond=[{0x0, 0x0, 0x0, 0x2806}]}) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) syz_extract_tcp_res(&(0x7f0000000500), 0x7fff, 0x2) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x0, 0x4) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003400", @ANYRES32=0x41424344, @ANYRES32=r2, @ANYBLOB="0800000090780000080a00000000000008b20000"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e08000c08"], 0xb) syz_io_uring_setup(0x3026, &(0x7f0000000280)={0x0, 0xca0d, 0x1, 0x0, 0x27}, &(0x7f0000000200), &(0x7f0000000240)) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04020f01ffcfd0e859ae09005d62ffffff0100090203b9afd80200"], 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x40001f) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040efaff05"], 0x7) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=3824): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000600000000eb83e27fa40000000f0001c8d6000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x3dd3, &(0x7f0000001100)) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000340)={0x1, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/85, 0x55}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) kernel console output (not intermixed with test programs): device hsr_slave_1 left promiscuous mode [ 784.356835][T15337] loop4: detected capacity change from 0 to 16 [ 784.371947][ T3564] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 784.383949][ T3564] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 784.393733][ T3564] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 784.395792][T15337] erofs: (device loop4): mounted with root inode @ nid 36. [ 784.408965][ T3564] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 784.430128][ T3564] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 784.437663][ T3564] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 784.465334][T13457] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 784.515321][T13457] asix: probe of 2-1:0.0 failed with error -71 [ 784.551992][T13457] usb 2-1: USB disconnect, device number 44 [ 784.598339][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.621836][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.631801][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.649810][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.665979][ T8915] device bridge_slave_1 left promiscuous mode [ 784.683215][ T8915] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.704810][ T8915] device bridge_slave_0 left promiscuous mode [ 784.715273][ T8915] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.796627][ T8915] device veth1_macvtap left promiscuous mode [ 784.802717][ T8915] device veth0_macvtap left promiscuous mode [ 784.825765][ T8915] device veth1_vlan left promiscuous mode [ 784.831620][ T8915] device veth0_vlan left promiscuous mode [ 785.246726][T15337] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 785.257920][T15337] syz.4.3319: attempt to access beyond end of device [ 785.257920][T15337] loop4: rw=0, sector=296, nr_sectors = 8 limit=16 [ 785.292130][T15337] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 785.324319][T15337] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 785.357626][T15346] input: syz1 as /devices/virtual/input/input260 [ 785.371068][ T3564] Bluetooth: hci7: unexpected event for opcode 0x080c [ 785.516989][ T3564] Bluetooth: hci7: unexpected event for opcode 0x2005 [ 786.155110][ T7927] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 786.385572][ T3564] Bluetooth: hci11: command tx timeout [ 786.427602][ T7927] usb 5-1: Using ep0 maxpacket: 8 [ 786.465263][ T3564] Bluetooth: hci12: command tx timeout [ 786.555286][ T7927] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 786.585251][ T7927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.647145][ T7927] usb 5-1: config 0 descriptor?? [ 786.695468][ T7927] usb 5-1: bad CDC descriptors [ 786.704367][ T7927] usb 5-1: bad CDC descriptors [ 786.876628][T15354] loop1: detected capacity change from 0 to 32768 [ 786.958449][T15354] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 786.970352][T15354] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 787.036759][T15354] XFS (loop1): Quotacheck needed: Please wait. [ 787.139061][T15354] XFS (loop1): Quotacheck: Done. [ 787.287617][ T8915] team0 (unregistering): Port device team_slave_1 removed [ 787.357195][T11580] XFS (loop1): Unmounting Filesystem [ 787.449758][ T8915] team0 (unregistering): Port device team_slave_0 removed [ 787.665404][ T8915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.850515][ T8915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.554997][T15188] Bluetooth: hci12: command tx timeout [ 788.596401][ T7597] usb 5-1: USB disconnect, device number 39 [ 789.099071][T15371] loop1: detected capacity change from 0 to 512 [ 789.193231][T15371] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 789.235132][T15371] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 789.260419][T15371] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.3326: Corrupt directory, running e2fsck is recommended [ 789.396832][T15371] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 789.446422][T15371] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.3326: corrupted in-inode xattr [ 789.495300][T15371] EXT4-fs (loop1): Remounting filesystem read-only [ 789.511765][T15371] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.3326: couldn't read orphan inode 15 (err -117) [ 789.545458][T15371] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 789.655788][T15370] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 789.685711][T15370] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 789.722837][T15370] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.3326: Corrupt directory, running e2fsck is recommended [ 789.741792][T15370] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz.1.3326: path /182/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 789.774452][T15370] EXT4-fs (loop1): Remounting filesystem read-only [ 789.784019][ T8915] bond0 (unregistering): Released all slaves [ 790.218678][T15339] lo speed is unknown, defaulting to 1000 [ 790.285831][T15375] input: syz1 as /devices/virtual/input/input262 [ 790.328371][T15188] Bluetooth: hci6: unexpected event for opcode 0x080c [ 790.435866][T15188] Bluetooth: hci6: unexpected event for opcode 0x0005 [ 790.456765][ T3608] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 790.625112][T15188] Bluetooth: hci12: command tx timeout [ 790.935239][ T3608] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 790.975083][ T3608] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 791.135256][ T22] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 791.135264][ T3608] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.40 [ 791.135294][ T3608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.191455][T15185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 791.234540][ T3608] usb 2-1: Product: syz [ 791.238266][T15185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 791.265494][ T3608] usb 2-1: Manufacturer: syz [ 791.275035][ T3608] usb 2-1: SerialNumber: syz [ 791.297944][T15185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 791.331408][T15339] chnl_net:caif_netlink_parms(): no params data found [ 791.352751][T15185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 791.385074][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 791.505267][ T22] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 791.554082][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.576724][T10931] usb 2-1: USB disconnect, device number 45 [ 791.584687][ T22] usb 5-1: config 0 descriptor?? [ 791.699413][T15339] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.728786][T15339] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.768111][T15339] device bridge_slave_0 entered promiscuous mode [ 791.797676][T15339] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.804818][T15339] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.856691][T15339] device bridge_slave_1 entered promiscuous mode [ 791.938677][T15339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.980790][T15339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.118476][T15339] team0: Port device team_slave_0 added [ 792.191088][T11580] EXT4-fs (loop1): unmounting filesystem. [ 792.257170][T15185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.265663][T15339] team0: Port device team_slave_1 added [ 792.381275][T15185] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.406621][T15339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.423840][T15339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.709444][T15339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.786794][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 792.811374][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 792.892074][T15339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.918283][T15339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.150255][T15339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.328249][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 793.338033][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 793.388313][T10931] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.395520][T10931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.452642][T15188] Bluetooth: hci12: command tx timeout [ 793.496974][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 793.549632][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 793.605482][T10931] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.612640][T10931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.666125][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 793.746337][T15420] input: syz1 as /devices/virtual/input/input263 [ 793.754048][T10928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 793.762841][T10928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 793.815713][T10928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 793.826094][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c [ 793.840521][T10928] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 794.010247][T15188] Bluetooth: hci7: unexpected event for opcode 0x2005 [ 794.042164][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 794.078314][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 794.151589][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 794.161921][ T3564] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 794.173118][ T3564] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 794.184590][ T3564] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 794.199784][ T3564] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 794.207920][ T3564] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 794.215882][ T3564] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 794.388754][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 794.436081][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 794.455576][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 794.464222][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 794.499778][T15339] device hsr_slave_0 entered promiscuous mode [ 794.512757][T15339] device hsr_slave_1 entered promiscuous mode [ 794.537725][T12844] EXT4-fs (loop3): unmounting filesystem. [ 794.543827][T15339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 794.572121][T15339] Cannot create hsr debugfs directory [ 794.606944][T15185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 794.643061][T15425] lo speed is unknown, defaulting to 1000 [ 794.706604][ T22] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 794.743204][ T22] asix: probe of 5-1:0.0 failed with error -71 [ 794.790596][ T22] usb 5-1: USB disconnect, device number 40 [ 795.169906][T15429] loop1: detected capacity change from 0 to 32768 [ 795.194771][ T8915] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.280447][T15429] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 795.308374][T15339] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.325973][T15429] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 795.411387][ T8915] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.428154][T15429] XFS (loop1): Quotacheck needed: Please wait. [ 795.486635][T10936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 795.494167][T10936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 795.535974][T15429] XFS (loop1): Quotacheck: Done. [ 795.576725][T15339] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.616510][T11580] XFS (loop1): Unmounting Filesystem [ 795.673315][ T8915] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.689792][T15185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.717869][T15339] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.884348][T15339] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.940193][ T8915] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.985175][T15425] chnl_net:caif_netlink_parms(): no params data found [ 796.080490][T11018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 796.091822][T15452] input: syz1 as /devices/virtual/input/input264 [ 796.095928][T11018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 796.117598][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c [ 796.204826][T11018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 796.236289][T11018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 796.254653][T15188] Bluetooth: hci7: unexpected event for opcode 0x0005 [ 796.287147][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 796.299967][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 796.307908][T15188] Bluetooth: hci8: command tx timeout [ 796.317978][T15185] device veth0_vlan entered promiscuous mode [ 796.360260][T15425] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.372926][T15425] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.388588][T15425] device bridge_slave_0 entered promiscuous mode [ 796.430046][T15425] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.473822][T15425] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.495485][T15425] device bridge_slave_1 entered promiscuous mode [ 796.646119][T15465] input: syz1 as /devices/virtual/input/input265 [ 796.680913][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c [ 798.533102][T15188] Bluetooth: hci8: command tx timeout [ 798.588087][T15185] device veth1_vlan entered promiscuous mode [ 798.601595][T15425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.636252][T15188] Bluetooth: hci7: unexpected event for opcode 0x2005 [ 798.658290][T15425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.843570][T15339] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 798.879389][T15425] team0: Port device team_slave_0 added [ 798.923856][T15425] team0: Port device team_slave_1 added [ 798.973927][T15339] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 798.989182][T15339] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 799.046558][T15339] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 799.104375][T10936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 799.122139][T10936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 799.139402][T15185] device veth0_macvtap entered promiscuous mode [ 799.161055][T15425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.170086][T15425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.205086][ T22] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 799.295045][T15425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.397527][T15185] device veth1_macvtap entered promiscuous mode [ 799.455022][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 799.507548][T15482] input: syz1 as /devices/virtual/input/input266 [ 799.528359][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c [ 799.586351][ T22] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 799.605057][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.628676][ T22] usb 5-1: config 0 descriptor?? [ 799.665935][T15188] Bluetooth: hci7: unexpected event for opcode 0x0005 [ 799.692724][ T22] usb 5-1: bad CDC descriptors [ 799.700873][ T22] usb 5-1: bad CDC descriptors [ 799.714566][T15425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.726015][T15425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.854983][T15425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.903661][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 799.935245][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 800.104616][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.128664][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.162626][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.197742][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.228218][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.263974][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.307147][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.335033][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.348638][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.361188][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.373455][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.384385][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.362163][T15188] Bluetooth: hci8: command tx timeout [ 801.441765][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.490751][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.521727][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.555122][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.604662][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.630348][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.672908][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.709378][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.732154][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.752584][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.773376][T15185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.810450][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 801.823615][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 801.867672][T10931] usb 5-1: USB disconnect, device number 41 [ 801.968333][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.016954][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.052355][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.095005][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.114994][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.140775][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.166991][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.197707][T15518] input: syz1 as /devices/virtual/input/input267 [ 802.204636][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.226988][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c [ 802.238582][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.249222][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.259179][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.269771][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.279838][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.323503][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.359924][T15188] Bluetooth: hci7: unexpected event for opcode 0x0005 [ 802.374864][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.405153][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.422714][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.433260][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.444664][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.457099][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.477408][T15185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.490067][T15185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.507126][T15185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.593118][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 802.617543][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 802.670694][T15523] loop4: detected capacity change from 0 to 512 [ 802.763888][T15523] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 802.798051][T15523] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 802.822728][T15523] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.3354: Corrupt directory, running e2fsck is recommended [ 802.841286][T15185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.850690][T15185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.859519][T15185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.882690][T15185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.904008][T15425] device hsr_slave_0 entered promiscuous mode [ 802.921333][T15425] device hsr_slave_1 entered promiscuous mode [ 802.930432][T15425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 802.939943][T15425] Cannot create hsr debugfs directory [ 803.435866][T15188] Bluetooth: hci8: command tx timeout [ 803.861359][T15523] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 803.916561][T15523] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.3354: corrupted in-inode xattr [ 803.957851][T15523] EXT4-fs (loop4): Remounting filesystem read-only [ 803.975362][T15523] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.3354: couldn't read orphan inode 15 (err -117) [ 804.020070][T15523] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 804.147894][T15523] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 804.173840][T15523] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 804.203446][T15523] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.3354: Corrupt directory, running e2fsck is recommended [ 804.264605][T15523] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.3354: path /664/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 804.304487][T15523] EXT4-fs (loop4): Remounting filesystem read-only [ 804.436209][T15339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.681771][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 804.706181][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 804.857360][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.874749][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.889947][T15339] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.897866][T15551] input: syz1 as /devices/virtual/input/input268 [ 804.915683][ T3561] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 804.943455][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c [ 805.007019][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 805.035956][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 805.065535][T15188] Bluetooth: hci7: unexpected event for opcode 0x0005 [ 805.071283][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 805.111008][ T3603] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.118297][ T3603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.187399][ T8762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.199799][ T8762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.404206][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 805.415097][ T3561] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.416004][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 805.433744][ T3561] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 805.475940][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 805.495791][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.502940][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.519017][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 805.536617][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 805.550040][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 805.586657][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 805.606056][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 805.645598][ T3561] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.40 [ 805.713223][ T3561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.742305][ T3561] usb 5-1: Product: syz [ 805.754634][ T3561] usb 5-1: Manufacturer: syz [ 805.760473][ T3561] usb 5-1: SerialNumber: syz [ 805.793135][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 805.815925][ T3561] usb 5-1: can't set config #1, error -71 [ 805.822915][ T4846] EXT4-fs (loop4): unmounting filesystem. [ 805.830839][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 805.838692][ T3561] usb 5-1: USB disconnect, device number 42 [ 805.857446][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 805.894581][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 805.925140][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 805.954603][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 805.986132][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 806.062567][T15339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 806.238426][T15575] input: syz1 as /devices/virtual/input/input269 [ 807.056948][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 807.070884][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 807.111662][T15594] input: syz1 as /devices/virtual/input/input270 [ 807.143558][T15188] Bluetooth: hci6: unexpected event for opcode 0x080c [ 807.276920][T15188] Bluetooth: hci6: unexpected event for opcode 0x0005 [ 807.380466][T15339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.499281][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 807.521888][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 807.698920][T15339] device veth0_vlan entered promiscuous mode [ 807.742213][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 807.751616][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 807.793627][T15339] device veth1_vlan entered promiscuous mode [ 807.822744][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 807.833979][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 807.853332][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 807.892978][T15425] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 807.991198][T15425] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 808.059533][T15425] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 808.126504][T15425] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 808.190444][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 808.203900][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 808.256318][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 808.394414][ T8915] device hsr_slave_0 left promiscuous mode [ 808.433969][ T8915] device hsr_slave_1 left promiscuous mode [ 808.448221][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.497184][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.540372][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.564414][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.592997][ T8915] device bridge_slave_1 left promiscuous mode [ 808.617717][ T8915] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.628922][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.637760][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.655872][ T8915] device bridge_slave_0 left promiscuous mode [ 808.664869][ T8915] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.685605][ T8915] device hsr_slave_0 left promiscuous mode [ 808.704282][ T8915] device hsr_slave_1 left promiscuous mode [ 808.725902][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.752431][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.772511][ T8915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.795980][ T8915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.823732][ T8915] device bridge_slave_1 left promiscuous mode [ 808.849748][ T8915] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.887543][ T8915] device bridge_slave_0 left promiscuous mode [ 808.908638][ T8915] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.163279][ T8915] device veth1_macvtap left promiscuous mode [ 809.171421][ T8915] device veth0_macvtap left promiscuous mode [ 809.177662][ T8915] device veth1_vlan left promiscuous mode [ 809.186376][ T8915] device veth0_vlan left promiscuous mode [ 809.212614][ T8915] device veth1_macvtap left promiscuous mode [ 809.251293][ T8915] device veth0_macvtap left promiscuous mode [ 809.272050][ T8915] device veth1_vlan left promiscuous mode [ 809.288942][ T8915] device veth0_vlan left promiscuous mode [ 811.092945][ T8915] team0 (unregistering): Port device team_slave_1 removed [ 811.151796][ T8915] team0 (unregistering): Port device team_slave_0 removed [ 811.221081][ T8915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.285160][ T8915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.047143][ T8915] bond0 (unregistering): Released all slaves [ 812.675853][ T8915] team0 (unregistering): Port device team_slave_1 removed [ 812.721526][ T8915] team0 (unregistering): Port device team_slave_0 removed [ 812.775067][ T8915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.832936][ T8915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 813.411679][ T8915] bond0 (unregistering): Released all slaves [ 813.548126][T15339] device veth0_macvtap entered promiscuous mode [ 813.558734][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 813.603896][T15339] device veth1_macvtap entered promiscuous mode [ 813.719869][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.749009][T15635] input: syz1 as /devices/virtual/input/input271 [ 813.754167][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.795252][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.831114][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.852095][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.860141][T15188] Bluetooth: hci7: unexpected event for opcode 0x750c [ 813.945049][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.995285][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.033106][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.067286][T15188] Bluetooth: hci7: unexpected event for opcode 0x2005 [ 814.071924][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.129726][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.178878][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.200724][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.222731][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.261185][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.296713][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.330540][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.359519][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.403931][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.449887][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.487094][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.584068][T15339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.619084][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 814.635979][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 814.670862][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.707132][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.739168][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.770353][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.812257][T15658] input: syz1 as /devices/virtual/input/input272 [ 814.821090][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.856752][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c [ 814.860743][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.894318][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.946402][T15188] Bluetooth: hci7: unexpected event for opcode 0x0005 [ 814.975102][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.989937][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.000959][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.012174][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.025622][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.039897][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.051109][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.062231][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.073715][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.086893][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.098918][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.124804][T15637] loop4: detected capacity change from 0 to 32768 [ 815.129654][T15339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.168658][T15339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.253391][T15637] XFS (loop4): Mounting V5 Filesystem [ 815.277418][T15339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 815.295783][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 815.335614][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 815.393563][T15339] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.404515][T15637] XFS (loop4): Ending clean mount [ 815.445045][T15339] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.458971][T15339] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.468564][T15339] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.514254][ T26] audit: type=1800 audit(1721230819.720:139): pid=15637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3378" name="bus" dev="loop4" ino=4427 res=0 errno=0 [ 815.604207][T15425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.644253][ T26] audit: type=1800 audit(1721230819.750:140): pid=15683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3378" name="bus" dev="loop4" ino=4428 res=0 errno=0 [ 815.715843][ T4846] XFS (loop4): Unmounting Filesystem [ 815.773192][T11017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 815.794647][T11017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 815.834174][T15425] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.918354][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 815.948815][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 815.965717][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.972896][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.164643][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 816.222957][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 816.283642][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.290837][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.356905][ T3585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.377719][ T3585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.400133][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 816.430971][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 816.462000][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 816.502335][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 816.524456][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 816.563398][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 816.581187][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 816.627143][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 816.644785][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 816.691392][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 816.707871][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 816.741937][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.750804][T15425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 816.751690][T15425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 816.820284][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.836718][T11018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 816.859977][T11018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 816.944117][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 817.333528][T15709] input: syz1 as /devices/virtual/input/input273 [ 817.782868][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 817.796893][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 817.831577][T15425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.933387][T15726] input: syz1 as /devices/virtual/input/input274 [ 817.940072][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 817.956089][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 817.983730][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c [ 818.018782][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 818.027483][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 818.037007][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 818.045295][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 818.080818][T15425] device veth0_vlan entered promiscuous mode [ 818.121654][T15188] Bluetooth: hci7: unexpected event for opcode 0x0005 [ 818.167302][T15425] device veth1_vlan entered promiscuous mode [ 818.214630][T15733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3395'. [ 818.345603][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 818.354404][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 818.415876][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 818.430611][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 818.472026][T15425] device veth0_macvtap entered promiscuous mode [ 818.512029][T15425] device veth1_macvtap entered promiscuous mode [ 818.589740][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.624501][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.646229][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.689962][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.715575][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.888162][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.119266][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.307460][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.460787][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.511606][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.541929][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.552527][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.562447][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.572960][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.582900][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.595536][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.626464][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.644969][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.654825][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.684977][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.704946][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 819.725075][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.758060][T15425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.774270][T15724] loop2: detected capacity change from 0 to 32768 [ 819.826840][T11018] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 819.836239][T11018] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 819.855583][T11018] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 819.886370][T11018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 819.899716][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.921123][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.931379][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.967101][T15724] XFS (loop2): Mounting V5 Filesystem [ 819.991516][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.004381][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.015065][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.025345][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.035946][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.049283][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.081245][T15724] XFS (loop2): Ending clean mount [ 820.096744][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.116943][T15769] input: syz1 as /devices/virtual/input/input275 [ 820.129963][ T26] audit: type=1800 audit(1721230824.340:141): pid=15724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3391" name="bus" dev="loop2" ino=4427 res=0 errno=0 [ 820.155921][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c [ 820.173672][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.186045][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.196186][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.208600][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.219790][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.232196][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.242302][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.252935][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.262932][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.274102][ T26] audit: type=1800 audit(1721230824.380:142): pid=15724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3391" name="bus" dev="loop2" ino=4428 res=0 errno=0 [ 820.297405][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.310498][T15425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 820.321656][T15425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.332165][T15188] Bluetooth: hci7: unexpected event for opcode 0x0005 [ 820.347059][T15185] XFS (loop2): Unmounting Filesystem [ 820.353275][T15425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.364005][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 820.373752][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 820.392819][T15425] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.423998][T15425] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.491035][T15425] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.523690][T15425] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.896376][ T9202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.904860][ T9202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.008126][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 821.056068][ T8762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.069366][ T8762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.911261][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 822.621249][T15806] netlink: 'syz.3.3417': attribute type 10 has an invalid length. [ 822.802429][T15810] input: syz1 as /devices/virtual/input/input276 [ 823.236256][T15789] loop0: detected capacity change from 0 to 32768 [ 823.441916][T15795] loop4: detected capacity change from 0 to 32768 [ 823.862472][T15789] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 823.871420][T15795] XFS (loop4): Mounting V5 Filesystem [ 823.882016][T15789] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 823.960122][T15795] XFS (loop4): Ending clean mount [ 823.967951][T15789] XFS (loop0): Quotacheck needed: Please wait. [ 824.041970][T15789] XFS (loop0): Quotacheck: Done. [ 824.085668][ T26] audit: type=1800 audit(1721230828.300:143): pid=15795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3415" name="bus" dev="loop4" ino=4427 res=0 errno=0 [ 824.169077][ T4846] XFS (loop4): Unmounting Filesystem [ 824.190822][T15339] XFS (loop0): Unmounting Filesystem [ 824.363473][T15858] input: syz1 as /devices/virtual/input/input277 [ 825.595432][T11018] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 825.845224][T11018] usb 2-1: Using ep0 maxpacket: 8 [ 825.965083][T11018] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 825.983863][T11018] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.007315][T15874] device syzkaller1 entered promiscuous mode [ 826.030377][T11018] usb 2-1: config 0 descriptor?? [ 826.123319][T11018] usb 2-1: bad CDC descriptors [ 826.133771][T11018] usb 2-1: bad CDC descriptors [ 826.793321][T15898] input: syz1 as /devices/virtual/input/input278 [ 827.299268][T15907] loop2: detected capacity change from 0 to 1024 [ 827.380377][T11018] usb 2-1: USB disconnect, device number 46 [ 827.407083][T15882] loop4: detected capacity change from 0 to 32768 [ 827.521568][T15882] XFS (loop4): Mounting V5 Filesystem [ 827.569725][T15882] XFS (loop4): Ending clean mount [ 827.620647][ T26] audit: type=1800 audit(1721230831.830:144): pid=15882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3443" name="bus" dev="loop4" ino=4427 res=0 errno=0 [ 827.712747][ T4846] XFS (loop4): Unmounting Filesystem [ 828.182509][T15942] input: syz1 as /devices/virtual/input/input279 [ 828.239293][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c [ 828.365697][T15188] Bluetooth: hci7: unexpected event for opcode 0x0005 [ 828.857007][T15960] can0: slcan on ptm0. [ 828.870623][T15964] loop4: detected capacity change from 0 to 256 [ 829.089994][T15959] can0 (unregistered): slcan off ptm0. [ 829.227926][T15975] loop1: detected capacity change from 0 to 512 [ 829.285957][T15975] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.3475: casefold flag without casefold feature [ 829.376455][T15975] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.3475: missing EA_INODE flag [ 829.443670][T15951] loop3: detected capacity change from 0 to 32768 [ 829.460794][T15975] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3475: error while reading EA inode 2 err=-117 [ 829.570659][T15975] EXT4-fs (loop1): 1 orphan inode deleted [ 829.577965][T15975] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 829.667487][T15951] XFS (loop3): Mounting V5 Filesystem [ 829.847949][T15951] XFS (loop3): Ending clean mount [ 829.857248][T11580] EXT4-fs (loop1): unmounting filesystem. [ 829.934599][T16013] input: syz1 as /devices/virtual/input/input280 [ 830.017431][ T26] audit: type=1800 audit(1721230834.230:145): pid=15951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3468" name="bus" dev="loop3" ino=4427 res=0 errno=0 [ 830.113391][T15425] XFS (loop3): Unmounting Filesystem [ 830.545207][T15188] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 830.689767][T16031] can0: slcan on ptm0. [ 830.806469][T16036] loop4: detected capacity change from 0 to 1024 [ 834.028766][T16030] can0 (unregistered): slcan off ptm0. [ 834.211662][T16056] device pim6reg1 entered promiscuous mode [ 834.377533][T16069] input: syz1 as /devices/virtual/input/input281 [ 840.663230][T16097] can0: slcan on ptm0. [ 840.835308][T16096] can0 (unregistered): slcan off ptm0. [ 840.849470][T16103] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3506'. [ 840.944148][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3506'. [ 841.150849][T16108] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3509'. [ 841.210363][T16112] input: syz1 as /devices/virtual/input/input282 [ 841.239312][T15188] Bluetooth: hci6: unexpected event for opcode 0x080c [ 841.326027][T16115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3509'. [ 841.342199][T15188] Bluetooth: hci6: unexpected event for opcode 0x0005 [ 846.885681][T16164] input: syz1 as /devices/virtual/input/input283 [ 846.923639][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c [ 847.012169][T15188] Bluetooth: hci7: unexpected event for opcode 0x0005 [ 847.143208][ T3564] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 847.177004][ T3564] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 847.193779][ T3564] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 847.205510][T10933] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 847.217673][ T3564] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 847.225539][ T3564] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 847.236055][ T3564] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 847.468657][T16173] lo speed is unknown, defaulting to 1000 [ 847.615248][T10933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.645317][T10933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.675073][T10933] usb 3-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 847.692428][ T8762] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.714799][T10933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.752328][T10933] usb 3-1: config 0 descriptor?? [ 847.892199][ T8762] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.054835][ T8762] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.226858][T10933] smartjoyplus 0003:0925:0005.000F: unknown main item tag 0x0 [ 848.234447][T10933] smartjoyplus 0003:0925:0005.000F: unbalanced collection at end of report description [ 848.297560][ T8762] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.317175][T10933] smartjoyplus 0003:0925:0005.000F: parse failed [ 848.337533][T10933] smartjoyplus: probe of 0003:0925:0005.000F failed with error -22 [ 848.449941][ T7597] usb 3-1: USB disconnect, device number 28 [ 849.266767][T15188] Bluetooth: hci13: command tx timeout [ 851.362156][T15188] Bluetooth: hci13: command tx timeout [ 853.425192][T15188] Bluetooth: hci13: command tx timeout [ 853.922491][T16218] input: syz1 as /devices/virtual/input/input284 [ 853.998281][T16173] chnl_net:caif_netlink_parms(): no params data found [ 854.155186][T16225] input: syz1 as /devices/virtual/input/input285 [ 855.011717][T16173] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.041099][T16245] loop1: detected capacity change from 0 to 128 [ 855.073132][T16173] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.107705][T16173] device bridge_slave_0 entered promiscuous mode [ 855.517380][T15188] Bluetooth: hci13: command tx timeout [ 858.285544][T16173] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.327754][T16173] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.376294][T16173] device bridge_slave_1 entered promiscuous mode [ 858.516398][T16265] input: syz1 as /devices/virtual/input/input286 [ 858.533254][T16266] input: syz1 as /devices/virtual/input/input287 [ 858.567706][T15188] Bluetooth: hci6: unexpected event for opcode 0x080c [ 858.668071][T16173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.695567][T15188] Bluetooth: hci6: unexpected event for opcode 0x0005 [ 858.704469][T16173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.923378][T16173] team0: Port device team_slave_0 added [ 859.017259][T16173] team0: Port device team_slave_1 added [ 859.427460][T16293] loop2: detected capacity change from 0 to 2048 [ 859.446910][T16173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.453899][T16173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.541088][T16293] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 859.572246][T16173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.645262][T16294] netlink: 'syz.3.3557': attribute type 2 has an invalid length. [ 859.690625][T16173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.717504][T16173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.762436][T15185] EXT4-fs (loop2): unmounting filesystem. [ 859.789260][T16173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.452375][T16321] input: syz1 as /devices/virtual/input/input288 [ 861.497011][T15188] Bluetooth: hci7: unexpected event for opcode 0x080c [ 861.507201][T16324] input: syz1 as /devices/virtual/input/input289 [ 861.699980][T16173] device hsr_slave_0 entered promiscuous mode [ 861.727357][T15188] Bluetooth: hci7: unexpected event for opcode 0x0005 [ 861.738698][T16173] device hsr_slave_1 entered promiscuous mode [ 861.801402][T16173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 861.842759][T16173] Cannot create hsr debugfs directory [ 862.024540][ T8762] device hsr_slave_0 left promiscuous mode [ 862.051007][ T8762] device hsr_slave_1 left promiscuous mode [ 862.088519][ T8762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.099912][ T8762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.134276][ T8762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 862.155187][ T8762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.175308][ T8762] device bridge_slave_1 left promiscuous mode [ 862.207410][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.339467][ T8762] device bridge_slave_0 left promiscuous mode [ 862.448888][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.048912][ T8762] device veth1_macvtap left promiscuous mode [ 863.058561][ T8762] device veth0_macvtap left promiscuous mode [ 863.064708][ T8762] device veth1_vlan left promiscuous mode [ 863.081647][ T8762] device veth0_vlan left promiscuous mode [ 864.192086][ T8762] team0 (unregistering): Port device team_slave_1 removed [ 864.254047][ T8762] team0 (unregistering): Port device team_slave_0 removed [ 864.346684][ T8762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.474848][ T8762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.104602][ T8762] bond0 (unregistering): Released all slaves [ 865.225131][T16353] netlink: 'syz.1.3570': attribute type 2 has an invalid length. [ 865.360022][T16366] input: syz1 as /devices/virtual/input/input291 [ 865.665132][T11015] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 865.936814][T11015] usb 5-1: Using ep0 maxpacket: 8 [ 866.074481][T11015] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 866.089139][T11015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.137389][T11015] usb 5-1: config 0 descriptor?? [ 866.821143][T16173] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 866.870596][T16173] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 866.912688][T16173] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 866.970335][T16416] netlink: 'syz.2.3585': attribute type 2 has an invalid length. [ 866.986093][T16173] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 867.246291][T16173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.294560][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 867.304433][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 867.343576][T16173] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.376930][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 867.396559][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 867.427913][T10933] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.435075][T10933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.504703][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 867.525735][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 867.555764][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 867.576901][T10931] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.584047][T10931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.625524][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 867.655399][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 867.697127][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 867.721422][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 867.750919][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 867.806193][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 867.860451][T16173] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 867.885141][T16429] input: syz1 as /devices/virtual/input/input293 [ 867.901758][T16173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 867.961517][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 867.986997][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 867.995298][T16407] loop1: detected capacity change from 0 to 40427 [ 868.021963][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 868.074594][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 868.094411][T16407] F2FS-fs (loop1): Found nat_bits in checkpoint [ 868.114756][T10931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 868.152399][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 868.258355][T16407] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 868.504273][T16407] syz.1.3582[16407] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 868.504365][T16407] syz.1.3582[16407] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 868.615404][T11015] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 868.689748][T11015] asix: probe of 5-1:0.0 failed with error -71 [ 868.738367][T11015] usb 5-1: USB disconnect, device number 43 [ 868.799616][T11580] F2FS-fs (loop1): Inconsistent error blkaddr:5633, sit bitmap:0 [ 868.832914][T11580] CPU: 0 PID: 11580 Comm: syz-executor Not tainted 6.1.99-syzkaller #0 [ 868.841230][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 868.851322][T11580] Call Trace: [ 868.854634][T11580] [ 868.857582][T11580] dump_stack_lvl+0x1e3/0x2cb [ 868.862308][T11580] ? nf_tcp_handle_invalid+0x642/0x642 [ 868.867817][T11580] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 868.873681][T11580] f2fs_is_valid_blkaddr+0xc61/0x1270 [ 868.879101][T11580] f2fs_map_blocks+0x15fd/0x3ab0 [ 868.884087][T11580] ? f2fs_do_map_lock+0x70/0x70 [ 868.888957][T11580] ? page_index+0xff/0x4b0 [ 868.893381][T11580] f2fs_mpage_readpages+0xbd5/0x2b90 [ 868.898708][T11580] ? mark_lock+0x9a/0x340 [ 868.903065][T11580] ? dquot_release_reservation_block+0x90/0x90 [ 868.909231][T11580] ? folio_add_lru+0x34d/0xd70 [ 868.914016][T11580] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 868.920182][T11580] ? f2fs_readahead+0x18a/0x3a0 [ 868.925038][T11580] ? blk_start_plug+0x95/0x110 [ 868.929818][T11580] read_pages+0x17f/0x830 [ 868.934157][T11580] ? folio_add_lru+0x34d/0xd70 [ 868.938925][T11580] ? folio_add_lru+0x34d/0xd70 [ 868.943713][T11580] ? page_cache_ra_unbounded+0x7b0/0x7b0 [ 868.949373][T11580] ? __filemap_add_folio+0x1ba0/0x1ba0 [ 868.954872][T11580] ? page_cache_ra_order+0xb2a/0xd80 [ 868.960206][T11580] page_cache_ra_unbounded+0x68b/0x7b0 [ 868.965704][T11580] f2fs_readdir+0x5ae/0xc30 [ 868.970224][T11580] ? __might_sleep+0xb0/0xb0 [ 868.974861][T11580] ? f2fs_fill_dentries+0xd60/0xd60 [ 868.980089][T11580] ? iterate_dir+0x10a/0x560 [ 868.984689][T11580] ? __fdget_pos+0x2ba/0x360 [ 868.989293][T11580] ? common_file_perm+0x17d/0x1d0 [ 868.994355][T11580] ? fsnotify_perm+0x439/0x590 [ 868.999126][T11580] iterate_dir+0x224/0x560 [ 869.003548][T11580] ? f2fs_fill_dentries+0xd60/0xd60 [ 869.008775][T11580] __se_sys_getdents64+0x209/0x4f0 [ 869.013907][T11580] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 869.019909][T11580] ? __x64_sys_getdents64+0x80/0x80 [ 869.025127][T11580] ? filldir+0x6f0/0x6f0 [ 869.029386][T11580] ? syscall_enter_from_user_mode+0x2e/0x230 [ 869.035388][T11580] ? lockdep_hardirqs_on+0x94/0x130 [ 869.040600][T11580] ? syscall_enter_from_user_mode+0x2e/0x230 [ 869.046590][T11580] do_syscall_64+0x3b/0xb0 [ 869.051019][T11580] ? clear_bhb_loop+0x45/0xa0 [ 869.055715][T11580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 869.061619][T11580] RIP: 0033:0x7f418f5a7ab3 [ 869.066048][T11580] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 02 45 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 869.085674][T11580] RSP: 002b:00007ffdd42bae38 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 869.094110][T11580] RAX: ffffffffffffffda RBX: 000055555569c600 RCX: 00007f418f5a7ab3 [ 869.102093][T11580] RDX: 0000000000008000 RSI: 000055555569c600 RDI: 0000000000000005 [ 869.110086][T11580] RBP: 000055555569c5d4 R08: 0000000000000000 R09: 0000000000000000 [ 869.118100][T11580] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 869.126085][T11580] R13: 0000000000000010 R14: 000055555569c5d0 R15: 00000000000d394a [ 869.134119][T11580] [ 869.161747][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 869.171389][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 869.197071][T16173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.259728][T11015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 869.273827][T11015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 869.317444][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 869.328510][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 869.368417][T16173] device veth0_vlan entered promiscuous mode [ 869.384460][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 869.423323][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 869.463379][T16173] device veth1_vlan entered promiscuous mode [ 869.555448][T11015] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 869.576086][T11015] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 869.605856][T11015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 869.635899][T11015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 869.667947][T16173] device veth0_macvtap entered promiscuous mode [ 869.682599][T16173] device veth1_macvtap entered promiscuous mode [ 869.728506][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.759690][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.786607][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.817607][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.848051][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.904345][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.944128][T11580] F2FS-fs (loop1): Inconsistent error blkaddr:5633, sit bitmap:0 [ 869.962347][T11580] CPU: 0 PID: 11580 Comm: syz-executor Not tainted 6.1.99-syzkaller #0 [ 869.970647][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 869.974988][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.980710][T11580] Call Trace: [ 869.980724][T11580] [ 869.980734][T11580] dump_stack_lvl+0x1e3/0x2cb [ 870.002092][T11580] ? nf_tcp_handle_invalid+0x642/0x642 [ 870.007604][T11580] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 870.013456][T11580] f2fs_is_valid_blkaddr+0xc61/0x1270 [ 870.018877][T11580] f2fs_get_read_data_page+0x4ec/0x8c0 [ 870.024374][T11580] ? f2fs_get_block+0x1b0/0x1b0 [ 870.029267][T11580] ? PageHeadHuge+0x8e/0x1c0 [ 870.033900][T11580] f2fs_find_data_page+0x99/0x380 [ 870.038958][T11580] f2fs_readdir+0x5c3/0xc30 [ 870.043505][T11580] ? __might_sleep+0xb0/0xb0 [ 870.048142][T11580] ? f2fs_fill_dentries+0xd60/0xd60 [ 870.053384][T11580] ? iterate_dir+0x10a/0x560 [ 870.058021][T11580] ? __fdget_pos+0x2ba/0x360 [ 870.062637][T11580] ? common_file_perm+0x17d/0x1d0 [ 870.066795][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.067672][T11580] ? fsnotify_perm+0x439/0x590 [ 870.074721][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.078643][T11580] iterate_dir+0x224/0x560 [ 870.078671][T11580] ? f2fs_fill_dentries+0xd60/0xd60 [ 870.094684][T11580] __se_sys_getdents64+0x209/0x4f0 [ 870.099831][T11580] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 870.105052][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.105841][T11580] ? __x64_sys_getdents64+0x80/0x80 [ 870.120907][T11580] ? filldir+0x6f0/0x6f0 [ 870.125183][T11580] ? syscall_enter_from_user_mode+0x2e/0x230 [ 870.126144][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.131182][T11580] ? lockdep_hardirqs_on+0x94/0x130 [ 870.131218][T11580] ? syscall_enter_from_user_mode+0x2e/0x230 [ 870.141879][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.146804][T11580] do_syscall_64+0x3b/0xb0 [ 870.146840][T11580] ? clear_bhb_loop+0x45/0xa0 [ 870.146874][T11580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 870.146904][T11580] RIP: 0033:0x7f418f5a7ab3 [ 870.153099][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.162770][T11580] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 02 45 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 870.162790][T11580] RSP: 002b:00007ffdd42bae38 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 870.162814][T11580] RAX: ffffffffffffffda RBX: 000055555569c600 RCX: 00007f418f5a7ab3 [ 870.162829][T11580] RDX: 0000000000008000 RSI: 000055555569c600 RDI: 0000000000000005 [ 870.162842][T11580] RBP: 000055555569c5d4 R08: 0000000000000000 R09: 0000000000000000 [ 870.162855][T11580] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 870.162869][T11580] R13: 0000000000000010 R14: 000055555569c5d0 R15: 00000000000d394a [ 870.162899][T11580] [ 870.288633][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.309199][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.330506][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.351045][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.375204][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.401684][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.424095][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.439439][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.460471][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.484399][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.512596][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.535833][T16173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.581740][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.654554][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.695140][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.730614][ T8915] kworker/u4:25: attempt to access beyond end of device [ 870.730614][ T8915] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 870.737905][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.796309][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.835345][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.843620][T16501] input: syz1 as /devices/virtual/input/input295 [ 870.875146][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.898335][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.925529][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.938484][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.949085][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.959727][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.969608][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.980320][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.990379][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.003248][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.017644][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.028342][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.038464][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.062652][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.082830][T16173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.098137][T16173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.112067][T16173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 871.178225][T16173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.213542][T16173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.229796][T16173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.241548][T16173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.268942][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 871.296007][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 871.326130][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 871.348125][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 871.370027][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 871.389521][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 871.722759][T16517] device syzkaller1 entered promiscuous mode [ 871.883784][ T9202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.921448][ T9202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.955510][ T7867] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 872.040751][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 872.176728][ T8762] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.205759][ T7867] usb 4-1: Using ep0 maxpacket: 8 [ 872.219299][ T7935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.245075][ T7935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.323229][ T8762] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.325666][ T7867] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 872.373178][ T7867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.415958][ T7867] usb 4-1: config 0 descriptor?? [ 872.445703][T10472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 872.558985][ T8762] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.705885][ T8762] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.746142][T16530] can0: slcan on ptm0. [ 872.867260][T16529] can0 (unregistered): slcan off ptm0. [ 873.075210][T16536] input: syz1 as /devices/virtual/input/input296 [ 873.088518][ T3574] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 873.109926][ T3574] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 873.119014][ T3574] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 873.132273][ T3574] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 873.142813][ T3574] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 873.155467][ T3574] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 873.189490][T16521] loop2: detected capacity change from 0 to 40427 [ 873.222419][T16521] F2FS-fs (loop2): invalid crc value [ 873.264313][T16521] F2FS-fs (loop2): Found nat_bits in checkpoint [ 873.444523][T16521] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 873.478561][T16537] lo speed is unknown, defaulting to 1000 [ 873.562417][T16521] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 875.065230][ T7867] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 875.085121][ T7867] asix: probe of 4-1:0.0 failed with error -71 [ 875.114327][ T7867] usb 4-1: USB disconnect, device number 37 [ 875.194325][ T3574] Bluetooth: hci7: command tx timeout [ 875.204597][ T14] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 875.400686][T16537] chnl_net:caif_netlink_parms(): no params data found [ 875.569944][T16579] device syzkaller1 entered promiscuous mode [ 875.585351][ T14] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 875.594433][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.675667][ T14] usb 5-1: config 0 descriptor?? [ 875.717816][ T14] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 876.240240][T16605] input: syz1 as /devices/virtual/input/input297 [ 876.323908][T16598] can0: slcan on ptm0. [ 876.531959][T16597] can0 (unregistered): slcan off ptm0. [ 876.616718][T16537] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.620458][T16614] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3621'. [ 876.645785][T16537] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.663635][T16537] device bridge_slave_0 entered promiscuous mode [ 876.712324][T16537] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.737753][T16537] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.777863][T16537] device bridge_slave_1 entered promiscuous mode [ 876.890226][T16537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.965574][ T8762] device hsr_slave_0 left promiscuous mode [ 876.977600][ T8762] device hsr_slave_1 left promiscuous mode [ 876.985564][ T8762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 876.993118][ T8762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.008214][ T8762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.019448][ T8762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.028247][ T8762] device bridge_slave_1 left promiscuous mode [ 877.046256][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.063567][ T8762] device bridge_slave_0 left promiscuous mode [ 877.073489][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.133647][ T8762] device veth0_macvtap left promiscuous mode [ 877.141304][ T8762] device veth1_vlan left promiscuous mode [ 877.147832][ T8762] device veth0_vlan left promiscuous mode [ 877.265011][ T3574] Bluetooth: hci7: command tx timeout [ 877.365167][T10472] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 877.604973][T10472] usb 4-1: Using ep0 maxpacket: 8 [ 877.725149][T10472] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 877.744546][T10472] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.773148][T10472] usb 4-1: config 0 descriptor?? [ 877.793016][ T14] usb 5-1: USB disconnect, device number 44 [ 878.402479][T16654] input: syz1 as /devices/virtual/input/input298 [ 878.436868][ T3574] Bluetooth: hci6: unexpected event for opcode 0x752f [ 878.532045][ T3574] Bluetooth: hci6: unexpected event for opcode 0x2005 [ 878.562225][ T8762] team0 (unregistering): Port device team_slave_1 removed [ 878.624244][ T8762] team0 (unregistering): Port device team_slave_0 removed [ 878.719575][ T8762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.803250][ T8762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.346324][ T3574] Bluetooth: hci7: command tx timeout [ 879.444555][ T8762] bond0 (unregistering): Released all slaves [ 879.528497][T16537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.562581][T16647] device syzkaller1 entered promiscuous mode [ 879.583496][T16658] slcan: can't register candev [ 879.589422][T16658] Falling back ldisc for ptm0. [ 879.664075][T16662] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3632'. [ 879.748080][T16537] team0: Port device team_slave_0 added [ 879.826599][T16537] team0: Port device team_slave_1 added [ 879.934412][T16537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.972061][T16537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.094597][T16537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.130680][T16672] netlink: 'syz.2.3635': attribute type 2 has an invalid length. [ 880.161262][T16537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.180784][T16537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.243934][T16537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 880.285215][T10472] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 880.303925][T10472] asix: probe of 4-1:0.0 failed with error -71 [ 880.362236][T10472] usb 4-1: USB disconnect, device number 38 [ 880.470397][T16537] device hsr_slave_0 entered promiscuous mode [ 880.536708][T16537] device hsr_slave_1 entered promiscuous mode [ 880.561222][T16537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 880.603438][T16537] Cannot create hsr debugfs directory [ 880.688846][T16692] device syzkaller1 entered promiscuous mode [ 880.836237][T16697] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3643'. [ 881.424998][ T3574] Bluetooth: hci7: command tx timeout [ 882.615445][T16731] netlink: 'syz.2.3652': attribute type 2 has an invalid length. [ 882.724753][T16735] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3654'. [ 882.844942][T10931] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 882.909962][T16537] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 882.958300][T16537] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 882.988099][T16738] device syzkaller1 entered promiscuous mode [ 882.999734][T16537] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 883.093015][T16537] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 883.105187][T10931] usb 5-1: Using ep0 maxpacket: 8 [ 883.225400][T10931] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 883.247165][T10931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.303039][T10931] usb 5-1: config 0 descriptor?? [ 883.399481][T16537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.472791][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 883.483214][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 883.516878][T16537] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.555511][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 883.574580][ T7597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 883.598322][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.605526][ T7597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.685017][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 883.694222][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 883.733659][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 883.754039][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.761219][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.811218][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 883.842297][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 883.902539][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 883.918757][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 883.936681][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 883.958296][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 883.972503][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 883.991172][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 884.019856][T16537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 884.051930][T16537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 884.113760][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 884.136456][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 884.172243][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 884.199313][T16775] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3664'. [ 884.592638][T16784] device syzkaller1 entered promiscuous mode [ 884.906189][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 884.913722][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 884.979378][T16537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 885.055752][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 885.065712][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 885.149556][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 885.161546][T10925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 885.190537][T16537] device veth0_vlan entered promiscuous mode [ 885.206720][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 885.218046][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 885.243600][T16537] device veth1_vlan entered promiscuous mode [ 885.322113][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 885.361653][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 885.392400][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 885.427287][ T3605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 885.450720][T16537] device veth0_macvtap entered promiscuous mode [ 885.479525][T10933] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 885.511537][T16537] device veth1_macvtap entered promiscuous mode [ 885.559543][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.578268][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.590279][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.618279][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.645989][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.664226][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.688593][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.702487][T16814] loop3: detected capacity change from 0 to 1024 [ 885.711019][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.755097][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.780223][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.800240][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.822620][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.835200][T10931] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 885.846038][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.874332][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.896709][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.915528][T10931] asix: probe of 5-1:0.0 failed with error -71 [ 885.933667][T16818] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3675'. [ 885.948298][T10931] usb 5-1: USB disconnect, device number 45 [ 885.954944][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.980037][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.999628][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.021185][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.043018][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.056389][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.069315][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.081665][T16537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.101694][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.165076][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.189950][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.211774][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.234299][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.260328][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.280720][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.303573][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.334631][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.360512][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.381892][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.403644][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.434053][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.485020][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.507380][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.534202][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.554546][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.575033][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.595833][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.606976][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.617263][T16537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 886.628816][T16537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.670594][T16537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.725573][T11017] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 886.746183][T11017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 886.780971][T11017] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 886.812612][T11017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 886.850441][T16537] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.875025][T16537] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.883776][T16537] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.895892][T16537] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.923835][T16840] device syzkaller1 entered promiscuous mode [ 887.167235][T16851] loop0: detected capacity change from 0 to 2048 [ 887.219387][ T7935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.246803][T16851] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 887.262636][ T5607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.266964][ T7935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.272076][ T5607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.339205][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 887.367822][ T26] audit: type=1804 audit(1721230891.580:146): pid=16851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3683" name="/newroot/26/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 887.426243][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 887.450229][T16173] EXT4-fs (loop0): unmounting filesystem. [ 887.673920][ T3574] Bluetooth: hci7: Malformed HCI Event: 0x22 [ 887.785385][T16869] netlink: 'syz.4.3688': attribute type 2 has an invalid length. [ 887.885143][T10933] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 888.002111][T16850] loop2: detected capacity change from 0 to 32768 [ 888.067544][T16850] XFS (loop2): Mounting V5 Filesystem [ 888.145397][T10933] usb 1-1: Using ep0 maxpacket: 8 [ 888.221903][T16850] XFS (loop2): Ending clean mount [ 888.237149][T16850] XFS (loop2): Quotacheck needed: Please wait. [ 888.283844][T10933] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 888.293662][T10933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.307485][T16850] XFS (loop2): Quotacheck: Done. [ 888.323744][T10933] usb 1-1: config 0 descriptor?? [ 888.386026][T15185] XFS (loop2): Unmounting Filesystem [ 888.800023][T16887] device syzkaller1 entered promiscuous mode [ 889.332425][T16908] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3699'. [ 889.385988][T16903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.136815][T16914] netlink: 'syz.3.3702': attribute type 2 has an invalid length. [ 890.744013][T16913] loop2: detected capacity change from 0 to 32768 [ 890.794279][T16913] XFS (loop2): Mounting V5 Filesystem [ 890.825019][T10933] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 890.838279][T10933] asix: probe of 1-1:0.0 failed with error -71 [ 890.848115][T10933] usb 1-1: USB disconnect, device number 33 [ 890.919864][T16913] XFS (loop2): Ending clean mount [ 890.943586][T16913] XFS (loop2): Quotacheck needed: Please wait. [ 891.082103][T16913] XFS (loop2): Quotacheck: Done. [ 891.131888][T16940] loop3: detected capacity change from 0 to 128 [ 891.237691][T16942] fuse: Bad value for 'fd' [ 891.891620][T15185] XFS (loop2): Unmounting Filesystem [ 891.960593][T16945] input: syz1 as /devices/virtual/input/input300 [ 896.148453][ T3574] Bluetooth: hci13: Controller not accepting commands anymore: ncmd = 0 [ 896.157431][ T3574] Bluetooth: hci13: Injecting HCI hardware error event [ 896.168790][T15188] Bluetooth: hci13: hardware error 0x00 [ 896.189548][T16968] netlink: 'syz.1.3720': attribute type 2 has an invalid length. [ 896.545158][T11017] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 896.795189][T11017] usb 4-1: Using ep0 maxpacket: 8 [ 896.915154][T11017] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 896.925663][T11017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.954743][T11017] usb 4-1: config 0 descriptor?? [ 897.351120][T16988] fuse: Bad value for 'fd' [ 897.978952][T16990] input: syz1 as /devices/virtual/input/input301 [ 898.052903][ T3574] Bluetooth: hci13: unexpected event for opcode 0x080c [ 898.235361][ T3574] Bluetooth: hci13: unexpected event for opcode 0x0005 [ 898.305321][T15188] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 898.841746][T17003] loop2: detected capacity change from 0 to 32768 [ 898.856556][T17003] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.3733 (17003) [ 898.883473][T17003] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 898.904798][T17003] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 898.914054][T17003] BTRFS info (device loop2): setting nodatacow, compression disabled [ 898.932131][T17003] BTRFS info (device loop2): setting datacow [ 898.940082][T17003] BTRFS info (device loop2): doing ref verification [ 898.956476][T17003] BTRFS info (device loop2): force clearing of disk cache [ 898.969394][T17003] BTRFS info (device loop2): turning off barriers [ 898.976922][T17003] BTRFS info (device loop2): enabling ssd optimizations [ 898.984254][T17003] BTRFS info (device loop2): using spread ssd allocation scheme [ 898.992792][T17003] BTRFS info (device loop2): not using ssd optimizations [ 899.000501][T17003] BTRFS info (device loop2): not using spread ssd allocation scheme [ 899.009164][T17003] BTRFS info (device loop2): using free space tree [ 899.081184][T17003] BTRFS info (device loop2): rebuilding free space tree [ 899.251304][ T26] audit: type=1800 audit(1721230903.460:147): pid=17003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3733" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 899.326696][ T26] audit: type=1804 audit(1721230903.500:148): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3733" name="/newroot/90/bus/bus" dev="loop2" ino=263 res=1 errno=0 [ 899.476499][ T26] audit: type=1804 audit(1721230903.680:149): pid=17003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3733" name="/newroot/90/bus/bus" dev="loop2" ino=263 res=1 errno=0 [ 899.545184][T11017] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 899.556787][T11017] asix: probe of 4-1:0.0 failed with error -71 [ 899.569202][T11017] usb 4-1: USB disconnect, device number 39 [ 899.577830][ T26] audit: type=1804 audit(1721230903.720:150): pid=17003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3733" name="/newroot/90/bus/bus" dev="loop2" ino=263 res=1 errno=0 [ 899.663719][T17047] fuse: Bad value for 'fd' [ 900.380077][T17003] BTRFS info (device loop2): balance: start [ 900.389609][ T26] audit: type=1804 audit(1721230904.600:151): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3733" name="/newroot/90/bus/bus" dev="loop2" ino=263 res=1 errno=0 [ 900.405728][T17003] BTRFS info (device loop2): balance: ended with status: 0 [ 900.630581][T17063] input: syz1 as /devices/virtual/input/input302 [ 901.140440][T15185] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 901.498148][T11015] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 901.839363][T17087] fuse: Bad value for 'fd' [ 901.846787][T17087] netlink: 'syz.2.3755': attribute type 1 has an invalid length. [ 901.915059][T11015] usb 1-1: Using ep0 maxpacket: 8 [ 902.128089][T11015] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 902.198619][T11015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.437083][T11015] usb 1-1: config 0 descriptor?? [ 902.835149][ T7867] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 902.865276][T15188] Bluetooth: hci11: command 0x0406 tx timeout [ 902.946073][T17108] input: syz1 as /devices/virtual/input/input303 [ 902.967910][ T3574] Bluetooth: hci6: unexpected event for opcode 0x080c [ 903.094350][ T3574] Bluetooth: hci6: unexpected event for opcode 0x0005 [ 903.215324][ T7867] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 903.231983][ T7867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.259397][ T7867] usb 4-1: config 0 descriptor?? [ 903.296645][ T7867] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 904.652986][T17139] loop1: detected capacity change from 0 to 2048 [ 904.911550][T17146] input: syz1 as /devices/virtual/input/input304 [ 904.922418][ T3574] Bluetooth: hci6: unexpected event for opcode 0x080c [ 904.961323][T17139] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 905.035119][ T3574] Bluetooth: hci6: unexpected event for opcode 0x0005 [ 905.197482][ T26] audit: type=1800 audit(1721230909.410:152): pid=17139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3777" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 905.295083][T11015] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 905.350562][T11015] asix: probe of 1-1:0.0 failed with error -71 [ 905.379890][T11015] usb 1-1: USB disconnect, device number 34 [ 905.431437][T16537] EXT4-fs (loop1): unmounting filesystem. [ 905.674061][T17168] device syzkaller1 entered promiscuous mode [ 905.770969][ T26] audit: type=1326 audit(1721230909.980:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17169 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb32775a19 code=0x7ffc0000 [ 905.857877][ T26] audit: type=1326 audit(1721230909.980:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17169 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ffb32775a19 code=0x7ffc0000 [ 905.904143][ T7867] usb 4-1: USB disconnect, device number 40 [ 905.946299][ T26] audit: type=1326 audit(1721230909.980:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17169 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb32775a19 code=0x7ffc0000 [ 906.016899][ T26] audit: type=1326 audit(1721230909.990:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17169 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb32775a19 code=0x7ffc0000 [ 906.085563][ T26] audit: type=1326 audit(1721230909.990:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17169 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb32775a19 code=0x7ffc0000 [ 906.089076][T17181] input: syz1 as /devices/virtual/input/input306 [ 906.136499][ T26] audit: type=1326 audit(1721230909.990:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17169 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7ffb32775a19 code=0x7ffc0000 [ 906.160744][ T26] audit: type=1326 audit(1721230909.990:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17169 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb32775a19 code=0x7ffc0000 [ 906.183744][ T26] audit: type=1326 audit(1721230909.990:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17169 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb32775a19 code=0x7ffc0000 [ 906.226619][ T26] audit: type=1326 audit(1721230910.000:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17169 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb32775a19 code=0x7ffc0000 [ 906.547372][ T14] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 906.559542][T17190] input: syz1 as /devices/virtual/input/input307 [ 906.596000][ T3574] Bluetooth: hci6: unexpected event for opcode 0x080c [ 906.677155][ T3574] Bluetooth: hci6: unexpected event for opcode 0x0005 [ 906.709855][ T3574] Bluetooth: hci7: Malformed HCI Event: 0x22 [ 906.786793][T17201] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3797'. [ 906.809199][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 906.850918][T17203] device syzkaller1 entered promiscuous mode [ 906.956943][ T14] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 906.984985][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.056208][ T14] usb 1-1: config 0 descriptor?? [ 907.396421][T17220] input: syz1 as /devices/virtual/input/input309 [ 907.401728][T17222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3804'. [ 907.424403][ T3574] Bluetooth: hci6: unexpected event for opcode 0x080c [ 907.556940][T17226] device syzkaller1 entered promiscuous mode [ 907.563306][ T3574] Bluetooth: hci6: unexpected event for opcode 0x2005 [ 907.807221][ C0] hrtimer: interrupt took 15518859 ns [ 907.851944][T17233] input: syz1 as /devices/virtual/input/input310 [ 907.873203][ T3574] Bluetooth: hci6: unexpected event for opcode 0x080c [ 907.989561][ T3574] Bluetooth: hci6: unexpected event for opcode 0x0005 [ 908.506277][ T3574] Bluetooth: hci6: unexpected event for opcode 0x0c1c [ 908.638138][ T3574] Bluetooth: hci6: unexpected event for opcode 0x0c46 [ 908.845070][ T3574] Bluetooth: hci6: Malformed HCI Event: 0x22 [ 909.399671][T17238] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3812'. [ 909.446211][ C0] vkms_vblank_simulate: vblank timer overrun [ 909.787289][ C0] vkms_vblank_simulate: vblank timer overrun [ 910.126358][ C0] vkms_vblank_simulate: vblank timer overrun [ 910.563035][ C0] vkms_vblank_simulate: vblank timer overrun [ 910.965073][ C0] vkms_vblank_simulate: vblank timer overrun [ 911.338201][ C0] vkms_vblank_simulate: vblank timer overrun [ 911.778082][ C0] vkms_vblank_simulate: vblank timer overrun [ 912.191876][ C0] vkms_vblank_simulate: vblank timer overrun [ 912.580399][ C0] vkms_vblank_simulate: vblank timer overrun [ 913.049738][ C0] vkms_vblank_simulate: vblank timer overrun [ 913.475889][T17261] device syzkaller1 entered promiscuous mode [ 913.684820][ C0] vkms_vblank_simulate: vblank timer overrun [ 914.341153][ C0] vkms_vblank_simulate: vblank timer overrun [ 915.027583][ T14] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 915.027709][ T14] asix: probe of 1-1:0.0 failed with error -71 [ 915.039600][ T14] usb 1-1: USB disconnect, device number 35 [ 915.043154][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 915.043177][ T26] audit: type=1326 audit(1721230919.250:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17250 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9b575a19 code=0x7ffc0000 [ 915.096583][T17264] input: syz1 as /devices/virtual/input/input312 [ 915.100091][ T26] audit: type=1326 audit(1721230919.250:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17250 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9b575a19 code=0x7ffc0000 [ 915.146736][T17260] input: syz1 as /devices/virtual/input/input313 [ 917.629917][ T26] audit: type=1326 audit(1721230919.270:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17250 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fbb9b575a19 code=0x7ffc0000 [ 920.460118][ T26] audit: type=1326 audit(1721230919.280:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17250 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9b575a19 code=0x7ffc0000 [ 920.460164][ T26] audit: type=1326 audit(1721230919.280:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17250 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9b575a19 code=0x7ffc0000 [ 920.460200][ T26] audit: type=1326 audit(1721230919.310:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17250 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb9b575a19 code=0x7ffc0000 [ 920.460235][ T26] audit: type=1326 audit(1721230921.840:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17250 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9b575a19 code=0x7ffc0000 [ 920.460271][ T26] audit: type=1326 audit(1721230921.840:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17250 comm="syz.4.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9b575a19 code=0x7ffc0000 [ 920.489661][T15188] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 920.489783][T15188] Bluetooth: hci8: Injecting HCI hardware error event [ 920.491640][T15188] Bluetooth: hci8: command 0x0406 tx timeout [ 920.492463][ T3574] Bluetooth: hci8: hardware error 0x00 [ 927.625024][ T3574] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 932.171784][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.178180][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.156921][ T3564] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 937.174388][T15188] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 937.183899][T15188] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 937.195783][ T3564] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 937.205761][ T3564] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 937.213158][ T3564] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 937.409696][ T3564] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 937.421588][ T3564] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 937.430582][ T48] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 937.438876][ T48] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 937.448917][ T3564] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 937.457376][ T3564] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 937.665401][T17282] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 937.731464][T17285] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 937.742667][T17285] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 937.752335][T17285] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 937.766117][T17285] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 937.774950][T17285] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 937.784470][T17285] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 937.795772][T17285] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 937.803152][T17285] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 937.812184][T17285] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 937.819951][T17285] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 937.829961][T17285] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 937.838258][T17285] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 937.845990][T17285] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 937.853221][T17285] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 937.862252][T17285] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 937.871724][T17285] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 937.879103][T17285] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 997.396732][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.403112][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.971841][T17282] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 997.984670][T17297] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 997.995916][T17297] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 998.007308][T17297] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 998.015752][T17297] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 998.023364][T17297] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 998.347794][T17300] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 998.359038][T17300] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 998.371024][T17300] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 998.381800][T17300] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 998.390361][T17300] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 998.398462][T17300] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 998.407064][T17300] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 998.446984][T17288] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 998.456283][T17288] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 998.464261][T17288] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 998.472486][T17288] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 998.479995][T17288] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 998.591017][T17282] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 998.603351][T17282] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 998.613704][T17282] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 998.622152][T17282] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 998.631828][T17282] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3 [ 998.639445][T17282] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 1016.757334][T17309] Bluetooth: hci7: command 0x0406 tx timeout [ 1016.875882][ T3564] Bluetooth: hci14: command tx timeout [ 1016.885546][T15188] Bluetooth: hci12: command tx timeout [ 1016.899005][ T3574] Bluetooth: hci13: command tx timeout [ 1027.797271][T15188] Bluetooth: hci19: command tx timeout [ 1027.803731][T15188] Bluetooth: hci20: command tx timeout [ 1027.810575][T15188] Bluetooth: hci13: command tx timeout [ 1027.827653][ T3564] Bluetooth: hci18: command tx timeout [ 1027.834236][ T3564] Bluetooth: hci15: command tx timeout [ 1027.884232][ T3574] Bluetooth: hci16: command tx timeout [ 1027.891075][ T3574] Bluetooth: hci17: command tx timeout [ 1027.899213][T17300] Bluetooth: hci12: command tx timeout [ 1027.904760][T17300] Bluetooth: hci14: command tx timeout [ 1039.911897][T15188] Bluetooth: hci13: command tx timeout [ 1039.917847][T15188] Bluetooth: hci17: command tx timeout [ 1039.923390][T15188] Bluetooth: hci15: command tx timeout [ 1039.934986][ T3564] Bluetooth: hci14: command tx timeout [ 1039.940654][ T3564] Bluetooth: hci12: command tx timeout [ 1039.956519][ T3574] Bluetooth: hci16: command tx timeout [ 1039.962054][ T3574] Bluetooth: hci18: command tx timeout [ 1039.969880][T17300] Bluetooth: hci20: command tx timeout [ 1039.976528][T17285] Bluetooth: hci19: command tx timeout [ 1040.130033][ T3574] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1040.145283][ T3564] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1040.155362][ T3564] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1040.165217][ T3574] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1040.174578][ T3574] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1040.183174][ T3564] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1053.246933][ T3564] Bluetooth: hci20: command tx timeout [ 1053.252491][ T3564] Bluetooth: hci19: command tx timeout [ 1053.271554][ T3574] Bluetooth: hci16: command tx timeout [ 1053.277188][ T3574] Bluetooth: hci14: command tx timeout [ 1053.282697][ T3574] Bluetooth: hci17: command tx timeout [ 1053.302189][T17300] Bluetooth: hci13: command tx timeout [ 1053.307915][T17300] Bluetooth: hci15: command tx timeout [ 1053.313632][T17300] Bluetooth: hci12: command tx timeout [ 1053.320292][T17297] Bluetooth: hci18: command tx timeout [ 1054.015882][T17300] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 1054.034657][T17300] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 1054.044316][T17300] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 1054.053037][ T3564] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 1054.060790][ T3564] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3 [ 1054.069516][T17300] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 1054.157236][T17297] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 1054.168810][ T48] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 1054.178457][T17297] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 1054.188502][ T48] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 1054.196746][T17297] Bluetooth: hci22: unexpected cc 0x0c25 length: 249 > 3 [ 1054.207388][T17297] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 1054.243404][ T48] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 1054.255329][T17297] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 1054.265283][T17297] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 1054.273491][T17297] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 1054.281574][ T48] Bluetooth: hci23: unexpected cc 0x0c25 length: 249 > 3 [ 1054.294719][T17297] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 1068.592190][T17297] Bluetooth: hci17: command tx timeout [ 1068.598245][T17297] Bluetooth: hci19: command tx timeout [ 1068.603741][T17297] Bluetooth: hci18: command tx timeout [ 1068.616057][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 1068.622419][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 1068.628949][ T48] Bluetooth: hci15: command tx timeout [ 1068.634499][ T48] Bluetooth: hci16: command tx timeout [ 1068.659286][T17285] Bluetooth: hci20: command tx timeout [ 1069.226365][ T48] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1 [ 1069.238518][ T48] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9 [ 1069.249407][T17282] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9 [ 1069.273424][T17282] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4 [ 1069.283048][T17282] Bluetooth: hci24: unexpected cc 0x0c25 length: 249 > 3 [ 1069.290967][T17285] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2 [ 1069.323591][T17285] Bluetooth: hci25: unexpected cc 0x0c03 length: 249 > 1 [ 1069.340334][T17282] Bluetooth: hci25: unexpected cc 0x1003 length: 249 > 9 [ 1069.351597][T17285] Bluetooth: hci25: unexpected cc 0x1001 length: 249 > 9 [ 1069.365944][T17282] Bluetooth: hci25: unexpected cc 0x0c23 length: 249 > 4 [ 1069.373628][T17282] Bluetooth: hci25: unexpected cc 0x0c25 length: 249 > 3 [ 1069.381506][T17285] Bluetooth: hci25: unexpected cc 0x0c38 length: 249 > 2 [ 1123.826843][ T27] INFO: task kworker/0:4:3605 blocked for more than 173 seconds. [ 1123.834632][ T27] Not tainted 6.1.99-syzkaller #0 [ 1123.904975][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1123.913712][ T27] task:kworker/0:4 state:D stack:21496 pid:3605 ppid:2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1124.064861][ T27] Workqueue: ipv6_addrconf addrconf_verify_work [ 1124.071216][ T27] Call Trace: [ 1124.074521][ T27] [ 1124.134845][ T27] __schedule+0x142d/0x4550 [ 1124.139465][ T27] ? __sched_text_start+0x8/0x8 [ 1124.144353][ T27] ? print_irqtrace_events+0x210/0x210 [ 1124.204902][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 1124.210165][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1124.264929][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 1124.270199][ T27] schedule+0xbf/0x180 [ 1124.274291][ T27] schedule_preempt_disabled+0xf/0x20 [ 1124.334950][ T27] __mutex_lock+0x6b9/0xd80 [ 1124.339549][ T27] ? __mutex_lock+0x53c/0xd80 [ 1124.344252][ T27] ? addrconf_verify_work+0x15/0x30 [ 1124.434890][ T27] ? mutex_lock_nested+0x10/0x10 [ 1124.439896][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1124.485083][ T27] ? print_irqtrace_events+0x210/0x210 [ 1124.490610][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1124.535037][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 1124.558127][ T27] ? process_one_work+0x7a9/0x11d0 [ 1124.594829][ T27] addrconf_verify_work+0x15/0x30 [ 1124.599913][ T27] process_one_work+0x8a9/0x11d0 [ 1124.644921][ T27] ? worker_detach_from_pool+0x260/0x260 [ 1124.650620][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1124.704862][ T27] ? kthread_data+0x4e/0xc0 [ 1124.709443][ T27] ? wq_worker_running+0x97/0x190 [ 1124.714545][ T27] worker_thread+0xa47/0x1200 [ 1124.786058][T17282] Bluetooth: hci26: unexpected cc 0x0c03 length: 249 > 1 [ 1124.797712][T17282] Bluetooth: hci26: unexpected cc 0x1003 length: 249 > 9 [ 1124.816539][T17306] Bluetooth: hci26: unexpected cc 0x1001 length: 249 > 9 [ 1124.824167][ T27] ? _raw_spin_unlock+0x40/0x40 [ 1124.831374][T17306] Bluetooth: hci26: unexpected cc 0x0c23 length: 249 > 4 [ 1124.839402][T17306] Bluetooth: hci26: unexpected cc 0x0c25 length: 249 > 3 [ 1124.849122][T17282] Bluetooth: hci26: unexpected cc 0x0c38 length: 249 > 2 [ 1124.918575][ T27] kthread+0x28d/0x320 [ 1124.922722][ T27] ? worker_clr_flags+0x190/0x190 [ 1124.929668][T17306] Bluetooth: hci27: unexpected cc 0x0c03 length: 249 > 1 [ 1124.941192][T17306] Bluetooth: hci27: unexpected cc 0x1003 length: 249 > 9 [ 1124.951713][T17288] Bluetooth: hci27: unexpected cc 0x1001 length: 249 > 9 [ 1124.959953][T17288] Bluetooth: hci27: unexpected cc 0x0c23 length: 249 > 4 [ 1124.969085][T17306] Bluetooth: hci27: unexpected cc 0x0c25 length: 249 > 3 [ 1124.976551][T17306] Bluetooth: hci27: unexpected cc 0x0c38 length: 249 > 2 [ 1125.024671][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1125.039231][ T27] ret_from_fork+0x1f/0x30 [ 1125.043730][ T27] [ 1125.074637][ T27] INFO: task kworker/0:11:10925 blocked for more than 152 seconds. [ 1125.084907][T17288] Bluetooth: hci28: unexpected cc 0x0c03 length: 249 > 1 [ 1125.096502][T17309] Bluetooth: hci28: unexpected cc 0x1003 length: 249 > 9 [ 1125.105596][T17309] Bluetooth: hci28: unexpected cc 0x1001 length: 249 > 9 [ 1125.113701][T17309] Bluetooth: hci28: unexpected cc 0x0c23 length: 249 > 4 [ 1125.121973][T17288] Bluetooth: hci28: unexpected cc 0x0c25 length: 249 > 3 [ 1125.129644][T17288] Bluetooth: hci28: unexpected cc 0x0c38 length: 249 > 2 [ 1125.172513][ T27] Not tainted 6.1.99-syzkaller #0 [ 1125.185501][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1125.194208][ T27] task:kworker/0:11 state:D stack:24280 pid:10925 ppid:2 flags:0x00004000 [ 1125.224908][ T27] Workqueue: events_power_efficient reg_check_chans_work [ 1125.232008][ T27] Call Trace: [ 1125.244884][ T27] [ 1125.247866][ T27] __schedule+0x142d/0x4550 [ 1125.264854][ T27] ? __sched_text_start+0x8/0x8 [ 1125.269773][ T27] ? print_irqtrace_events+0x210/0x210 [ 1125.284844][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 1125.290094][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1125.304827][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 1125.310081][ T27] schedule+0xbf/0x180 [ 1125.314213][ T27] schedule_preempt_disabled+0xf/0x20 [ 1125.334207][ T27] __mutex_lock+0x6b9/0xd80 [ 1125.343583][ T27] ? __mutex_lock+0x53c/0xd80 [ 1125.356468][ T27] ? reg_check_chans_work+0x8d/0xdb0 [ 1125.361815][ T27] ? mutex_lock_nested+0x10/0x10 [ 1125.377308][ T27] ? process_one_work+0x7a9/0x11d0 [ 1125.394924][ T27] reg_check_chans_work+0x8d/0xdb0 [ 1125.400111][ T27] ? read_lock_is_recursive+0x10/0x10 [ 1125.414879][ T27] ? reg_process_ht_flags+0xba0/0xba0 [ 1125.420398][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1125.434907][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 1125.440180][ T27] ? process_one_work+0x7a9/0x11d0 [ 1125.458759][ T27] process_one_work+0x8a9/0x11d0 [ 1125.463787][ T27] ? worker_detach_from_pool+0x260/0x260 [ 1125.484944][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1125.490550][ T27] ? kthread_data+0x4e/0xc0 [ 1125.504815][ T27] ? wq_worker_running+0x97/0x190 [ 1125.509995][ T27] worker_thread+0xa47/0x1200 [ 1125.514726][ T27] kthread+0x28d/0x320 [ 1125.533715][ T27] ? worker_clr_flags+0x190/0x190 [ 1125.539267][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1125.543888][ T27] ret_from_fork+0x1f/0x30 [ 1125.561260][ T27] [ 1125.564339][ T27] INFO: task syz-executor:17274 blocked for more than 175 seconds. [ 1125.582078][ T27] Not tainted 6.1.99-syzkaller #0 [ 1125.594967][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1125.603669][ T27] task:syz-executor state:D stack:24760 pid:17274 ppid:1 flags:0x00004004 [ 1125.629245][ T27] Call Trace: [ 1125.632580][ T27] [ 1125.645111][ T27] __schedule+0x142d/0x4550 [ 1125.649705][ T27] ? __mutex_lock+0x6b4/0xd80 [ 1125.654408][ T27] ? __sched_text_start+0x8/0x8 [ 1125.674902][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 1125.680432][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 1125.700584][ T27] schedule+0xbf/0x180 [ 1125.704707][ T27] schedule_preempt_disabled+0xf/0x20 [ 1125.724906][ T27] __mutex_lock+0x6b9/0xd80 [ 1125.729464][ T27] ? __mutex_lock+0x53c/0xd80 [ 1125.734212][ T27] ? register_nexthop_notifier+0x80/0x270 [ 1125.754951][ T27] ? mutex_lock_nested+0x10/0x10 [ 1125.759962][ T27] ? memset+0x1f/0x40 [ 1125.763976][ T27] register_nexthop_notifier+0x80/0x270 [ 1125.784947][ T27] ? lockdep_softirqs_off+0x420/0x420 [ 1125.795572][ T27] ? fib_check_nexthop+0x570/0x570 [ 1125.800740][ T27] ? memset+0x1f/0x40 [ 1125.814812][ T27] ops_init+0x35d/0x610 [ 1125.819029][ T27] setup_net+0x4b5/0xb90 [ 1125.823307][ T27] ? copy_net_ns+0x5d0/0x5d0 [ 1125.842632][ T27] copy_net_ns+0x392/0x5d0 [ 1125.854147][ T27] create_new_namespaces+0x425/0x7a0 [ 1125.865048][ T27] ? bpf_lsm_capable+0x5/0x10 [ 1125.875184][ T27] unshare_nsproxy_namespaces+0x11e/0x170 [ 1125.880954][ T27] ksys_unshare+0x580/0xb20 [ 1125.900908][ T27] ? unshare_fd+0x240/0x240 [ 1125.906480][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1125.912551][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 1125.932598][ T27] __x64_sys_unshare+0x34/0x40 [ 1125.943481][ T27] do_syscall_64+0x3b/0xb0 [ 1125.948489][ T27] ? clear_bhb_loop+0x45/0xa0 [ 1125.953217][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1125.974899][ T27] RIP: 0033:0x7fc134577177 [ 1125.979450][ T27] RSP: 002b:00007ffe83fb7328 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 1126.003436][ T27] RAX: ffffffffffffffda RBX: 00007fc134703f20 RCX: 00007fc134577177 [ 1126.016840][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1126.034923][ T27] RBP: 00007fc134704a18 R08: 0000000000000000 R09: 0000000000000000 [ 1126.042938][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 1126.067291][ T27] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 1126.084895][ T27] [ 1126.087955][ T27] INFO: task syz-executor:17278 blocked for more than 176 seconds. [ 1126.110704][ T27] Not tainted 6.1.99-syzkaller #0 [ 1126.124313][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1126.144908][ T27] task:syz-executor state:D stack:25000 pid:17278 ppid:1 flags:0x00004004 [ 1126.154155][ T27] Call Trace: [ 1126.164838][ T27] [ 1126.167807][ T27] __schedule+0x142d/0x4550 [ 1126.172377][ T27] ? __mutex_lock+0x6b4/0xd80 [ 1126.193077][ T27] ? __sched_text_start+0x8/0x8 [ 1126.204605][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 1126.214921][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 1126.220170][ T27] schedule+0xbf/0x180 [ 1126.224276][ T27] schedule_preempt_disabled+0xf/0x20 [ 1126.254982][ T27] __mutex_lock+0x6b9/0xd80 [ 1126.259544][ T27] ? __mutex_lock+0x53c/0xd80 [ 1126.264330][ T27] ? rtnetlink_rcv_msg+0x7c1/0xff0 [ 1126.284964][ T27] ? mutex_lock_nested+0x10/0x10 [ 1126.289962][ T27] ? rtnetlink_rcv_msg+0x1f9/0xff0 [ 1126.299675][ T27] rtnetlink_rcv_msg+0x7c1/0xff0 [ 1126.304662][ T27] ? rtnetlink_bind+0x80/0x80 [ 1126.324932][ T27] ? stack_trace_save+0x1c0/0x1c0 [ 1126.330011][ T27] ? kernel_text_address+0x9f/0xd0 [ 1126.344893][ T27] ? __kernel_text_address+0x9/0x40 [ 1126.350143][ T27] ? unwind_get_return_address+0x49/0x80 [ 1126.364879][ T27] ? arch_stack_walk+0xf3/0x140 [ 1126.369779][ T27] ? mark_lock+0x9a/0x340 [ 1126.374167][ T27] ? mark_lock+0x9a/0x340 [ 1126.394006][ T27] ? __lock_acquire+0x125b/0x1f80 [ 1126.414914][ T27] netlink_rcv_skb+0x1cd/0x410 [ 1126.419742][ T27] ? rtnetlink_bind+0x80/0x80 [ 1126.424449][ T27] ? netlink_ack+0x1290/0x1290 [ 1126.443241][ T27] ? netlink_deliver_tap+0x2e/0x1b0 [ 1126.448943][ T27] netlink_unicast+0x7d8/0x970 [ 1126.453759][ T27] ? netlink_detachskb+0x90/0x90 [ 1126.473706][ T27] ? __virt_addr_valid+0x44a/0x520 [ 1126.479300][ T27] ? __phys_addr_symbol+0x2b/0x70 [ 1126.494820][ T27] ? __check_object_size+0x4dd/0xa30 [ 1126.500150][ T27] ? bpf_lsm_netlink_send+0x5/0x10 [ 1126.514813][ T27] netlink_sendmsg+0xa26/0xd60 [ 1126.519637][ T27] ? netlink_getsockopt+0x580/0x580 [ 1126.534834][ T27] ? __might_fault+0xa1/0x110 [ 1126.539560][ T27] ? aa_sock_msg_perm+0x91/0x150 [ 1126.544524][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1126.564732][ T27] ? security_socket_sendmsg+0x7d/0xa0 [ 1126.573944][ T27] ? netlink_getsockopt+0x580/0x580 [ 1126.585281][ T27] __sys_sendto+0x480/0x600 [ 1126.589843][ T27] ? __ia32_sys_getpeername+0x80/0x80 [ 1126.604920][ T27] __x64_sys_sendto+0xda/0xf0 [ 1126.624378][ T27] do_syscall_64+0x3b/0xb0 [ 1126.629305][ T27] ? clear_bhb_loop+0x45/0xa0 [ 1126.634026][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1126.654682][ T27] RIP: 0033:0x7fbe92f777ac [ 1126.659470][ T27] RSP: 002b:00007ffc077bc080 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1126.674844][ T27] RAX: ffffffffffffffda RBX: 00007fbe93c34620 RCX: 00007fbe92f777ac [ 1126.682931][ T27] RDX: 0000000000000028 RSI: 00007fbe93c34670 RDI: 0000000000000003 [ 1126.709475][ T27] RBP: 0000000000000000 R08: 00007ffc077bc0d4 R09: 000000000000000c [ 1126.725040][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1126.733048][ T27] R13: 0000000000000000 R14: 00007fbe93c34670 R15: 0000000000000000 [ 1126.759469][ T27] [ 1126.762544][ T27] INFO: task syz-executor:17279 blocked for more than 176 seconds. [ 1126.785117][ T27] Not tainted 6.1.99-syzkaller #0 [ 1126.792406][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1126.810918][ T27] task:syz-executor state:D stack:25000 pid:17279 ppid:1 flags:0x00004004 [ 1126.834961][ T27] Call Trace: [ 1126.838279][ T27] [ 1126.841227][ T27] __schedule+0x142d/0x4550 [ 1126.854890][ T27] ? __mutex_lock+0x6b4/0xd80 [ 1126.859614][ T27] ? __sched_text_start+0x8/0x8 [ 1126.864497][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 1126.885003][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 1126.890260][ T27] schedule+0xbf/0x180 [ 1126.910218][ T27] schedule_preempt_disabled+0xf/0x20 [ 1126.924946][ T27] __mutex_lock+0x6b9/0xd80 [ 1126.929510][ T27] ? __mutex_lock+0x53c/0xd80 [ 1126.934211][ T27] ? rtnetlink_rcv_msg+0x7c1/0xff0 [ 1126.954327][ T27] ? mutex_lock_nested+0x10/0x10 [ 1126.959837][ T27] ? rtnetlink_rcv_msg+0x1f9/0xff0 [ 1126.974960][ T27] rtnetlink_rcv_msg+0x7c1/0xff0 [ 1126.980166][ T27] ? rtnetlink_bind+0x80/0x80 [ 1126.995133][ T27] ? stack_trace_save+0x1c0/0x1c0 [ 1127.000218][ T27] ? kernel_text_address+0x9f/0xd0 [ 1127.014930][ T27] ? __kernel_text_address+0x9/0x40 [ 1127.034659][ T27] ? unwind_get_return_address+0x49/0x80 [ 1127.040949][ T27] ? arch_stack_walk+0xf3/0x140 [ 1127.054865][ T27] ? mark_lock+0x9a/0x340 [ 1127.059262][ T27] ? mark_lock+0x9a/0x340 [ 1127.063629][ T27] ? __lock_acquire+0x125b/0x1f80 [ 1127.082782][ T27] netlink_rcv_skb+0x1cd/0x410 [ 1127.088048][ T27] ? rtnetlink_bind+0x80/0x80 [ 1127.092761][ T27] ? netlink_ack+0x1290/0x1290 [ 1127.114988][ T27] ? netlink_deliver_tap+0x2e/0x1b0 [ 1127.125230][ T27] netlink_unicast+0x7d8/0x970 [ 1127.130055][ T27] ? netlink_detachskb+0x90/0x90 [ 1127.144816][ T27] ? __virt_addr_valid+0x44a/0x520 [ 1127.149972][ T27] ? __phys_addr_symbol+0x2b/0x70 [ 1127.164820][ T27] ? __check_object_size+0x4dd/0xa30 [ 1127.170150][ T27] ? bpf_lsm_netlink_send+0x5/0x10 [ 1127.190219][ T27] netlink_sendmsg+0xa26/0xd60 [ 1127.195634][ T27] ? netlink_getsockopt+0x580/0x580 [ 1127.201746][ T27] ? __might_fault+0xa1/0x110 [ 1127.220534][ T27] ? aa_sock_msg_perm+0x91/0x150 [ 1127.235012][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1127.240352][ T27] ? security_socket_sendmsg+0x7d/0xa0 [ 1127.254856][ T27] ? netlink_getsockopt+0x580/0x580 [ 1127.260183][ T27] __sys_sendto+0x480/0x600 [ 1127.264725][ T27] ? __ia32_sys_getpeername+0x80/0x80 [ 1127.280302][ T27] __x64_sys_sendto+0xda/0xf0 [ 1127.294896][ T27] do_syscall_64+0x3b/0xb0 [ 1127.299376][ T27] ? clear_bhb_loop+0x45/0xa0 [ 1127.320704][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1127.334995][ T27] RIP: 0033:0x7f4bf8b777ac [ 1127.339466][ T27] RSP: 002b:00007ffc674652a0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1127.364940][ T27] RAX: ffffffffffffffda RBX: 00007f4bf9834620 RCX: 00007f4bf8b777ac [ 1127.372966][ T27] RDX: 0000000000000028 RSI: 00007f4bf9834670 RDI: 0000000000000003 [ 1127.394959][ T27] RBP: 0000000000000000 R08: 00007ffc674652f4 R09: 000000000000000c [ 1127.414886][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1127.422901][ T27] R13: 0000000000000000 R14: 00007f4bf9834670 R15: 0000000000000000 [ 1127.444921][ T27] [ 1127.447994][ T27] INFO: task syz-executor:17280 blocked for more than 177 seconds. [ 1127.470135][ T27] Not tainted 6.1.99-syzkaller #0 [ 1127.484918][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1127.493701][ T27] task:syz-executor state:D stack:25000 pid:17280 ppid:1 flags:0x00004004 [ 1127.519948][ T27] Call Trace: [ 1127.523360][ T27] [ 1127.534977][ T27] __schedule+0x142d/0x4550 [ 1127.539569][ T27] ? __mutex_lock+0x6b4/0xd80 [ 1127.544273][ T27] ? __sched_text_start+0x8/0x8 [ 1127.563918][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 1127.574148][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 1127.584906][ T27] schedule+0xbf/0x180 [ 1127.589028][ T27] schedule_preempt_disabled+0xf/0x20 [ 1127.594419][ T27] __mutex_lock+0x6b9/0xd80 [ 1127.614979][ T27] ? __mutex_lock+0x53c/0xd80 [ 1127.619712][ T27] ? rtnetlink_rcv_msg+0x7c1/0xff0 [ 1127.634910][ T27] ? mutex_lock_nested+0x10/0x10 [ 1127.639913][ T27] ? rtnetlink_rcv_msg+0x1f9/0xff0 [ 1127.659680][ T27] rtnetlink_rcv_msg+0x7c1/0xff0 [ 1127.664680][ T27] ? rtnetlink_bind+0x80/0x80 [ 1127.684523][ T27] ? stack_trace_save+0x1c0/0x1c0 [ 1127.690006][ T27] ? kernel_text_address+0x9f/0xd0 [ 1127.704828][ T27] ? __kernel_text_address+0x9/0x40 [ 1127.711885][ T27] ? unwind_get_return_address+0x49/0x80 [ 1127.724829][ T27] ? arch_stack_walk+0xf3/0x140 [ 1127.729730][ T27] ? mark_lock+0x9a/0x340 [ 1127.744848][ T27] ? mark_lock+0x9a/0x340 [ 1127.749266][ T27] ? __lock_acquire+0x125b/0x1f80 [ 1127.754357][ T27] netlink_rcv_skb+0x1cd/0x410 [ 1127.774040][ T27] ? rtnetlink_bind+0x80/0x80 [ 1127.783864][ T27] ? netlink_ack+0x1290/0x1290 [ 1127.794946][ T27] ? netlink_deliver_tap+0x2e/0x1b0 [ 1127.800219][ T27] netlink_unicast+0x7d8/0x970 [ 1127.814883][ T27] ? netlink_detachskb+0x90/0x90 [ 1127.819930][ T27] ? __virt_addr_valid+0x44a/0x520 [ 1127.841214][ T27] ? __phys_addr_symbol+0x2b/0x70 [ 1127.854948][ T27] ? __check_object_size+0x4dd/0xa30 [ 1127.860304][ T27] ? bpf_lsm_netlink_send+0x5/0x10 [ 1127.874910][ T27] netlink_sendmsg+0xa26/0xd60 [ 1127.879741][ T27] ? netlink_getsockopt+0x580/0x580 [ 1127.894868][ T27] ? __might_fault+0xa1/0x110 [ 1127.899602][ T27] ? aa_sock_msg_perm+0x91/0x150 [ 1127.904577][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1127.924941][ T27] ? security_socket_sendmsg+0x7d/0xa0 [ 1127.930474][ T27] ? netlink_getsockopt+0x580/0x580 [ 1127.950204][ T27] __sys_sendto+0x480/0x600 [ 1127.964070][ T27] ? __ia32_sys_getpeername+0x80/0x80 [ 1127.970051][ T27] __x64_sys_sendto+0xda/0xf0 [ 1127.984901][ T27] do_syscall_64+0x3b/0xb0 [ 1127.989456][ T27] ? clear_bhb_loop+0x45/0xa0 [ 1127.994164][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1128.014234][ T27] RIP: 0033:0x7f774dd777ac [ 1128.024964][ T27] RSP: 002b:00007ffd8a62d760 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1128.033430][ T27] RAX: ffffffffffffffda RBX: 00007f774ea34620 RCX: 00007f774dd777ac [ 1128.059160][ T27] RDX: 0000000000000028 RSI: 00007f774ea34670 RDI: 0000000000000003 [ 1128.074942][ T27] RBP: 0000000000000000 R08: 00007ffd8a62d7b4 R09: 000000000000000c [ 1128.082951][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1128.108762][ T27] R13: 0000000000000000 R14: 00007f774ea34670 R15: 0000000000000000 [ 1128.124914][ T27] [ 1128.127986][ T27] INFO: task syz-executor:17286 blocked for more than 178 seconds. [ 1128.153904][ T27] Not tainted 6.1.99-syzkaller #0 [ 1128.186798][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1128.196168][ T27] task:syz-executor state:D stack:25000 pid:17286 ppid:1 flags:0x00004004 [ 1128.214881][ T27] Call Trace: [ 1128.218194][ T27] [ 1128.221144][ T27] __schedule+0x142d/0x4550 [ 1128.241280][ T27] ? __mutex_lock+0x6b4/0xd80 [ 1128.255006][ T27] ? __sched_text_start+0x8/0x8 [ 1128.259916][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 1128.274910][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 1128.280155][ T27] schedule+0xbf/0x180 [ 1128.284245][ T27] schedule_preempt_disabled+0xf/0x20 [ 1128.303816][ T27] __mutex_lock+0x6b9/0xd80 [ 1128.315045][ T27] ? __mutex_lock+0x53c/0xd80 [ 1128.319773][ T27] ? rtnetlink_rcv_msg+0x7c1/0xff0 [ 1128.345062][ T27] ? mutex_lock_nested+0x10/0x10 [ 1128.350903][ T27] ? rtnetlink_rcv_msg+0x1f9/0xff0 [ 1128.364843][ T27] rtnetlink_rcv_msg+0x7c1/0xff0 [ 1128.369835][ T27] ? rtnetlink_bind+0x80/0x80 [ 1128.374536][ T27] ? stack_trace_save+0x1c0/0x1c0 [ 1128.394955][ T27] ? kernel_text_address+0x9f/0xd0 [ 1128.400128][ T27] ? __kernel_text_address+0x9/0x40 [ 1128.414953][ T27] ? unwind_get_return_address+0x49/0x80 [ 1128.420646][ T27] ? arch_stack_walk+0xf3/0x140 [ 1128.434947][ T27] ? mark_lock+0x9a/0x340 [ 1128.439350][ T27] ? mark_lock+0x9a/0x340 [ 1128.443727][ T27] ? __lock_acquire+0x125b/0x1f80 [ 1128.464696][ T27] netlink_rcv_skb+0x1cd/0x410 [ 1128.470590][ T27] ? rtnetlink_bind+0x80/0x80 [ 1128.484842][ T27] ? netlink_ack+0x1290/0x1290 [ 1128.489675][ T27] ? netlink_deliver_tap+0x2e/0x1b0 [ 1128.504824][ T27] netlink_unicast+0x7d8/0x970 [ 1128.509657][ T27] ? netlink_detachskb+0x90/0x90 [ 1128.514625][ T27] ? __virt_addr_valid+0x44a/0x520 [ 1128.534952][ T27] ? __phys_addr_symbol+0x2b/0x70 [ 1128.540034][ T27] ? __check_object_size+0x4dd/0xa30 [ 1128.560711][ T27] ? bpf_lsm_netlink_send+0x5/0x10 [ 1128.566372][ T27] netlink_sendmsg+0xa26/0xd60 [ 1128.571179][ T27] ? netlink_getsockopt+0x580/0x580 [ 1128.591141][ T27] ? __might_fault+0xa1/0x110 [ 1128.603958][ T27] ? aa_sock_msg_perm+0x91/0x150 [ 1128.609361][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1128.624834][ T27] ? security_socket_sendmsg+0x7d/0xa0 [ 1128.630344][ T27] ? netlink_getsockopt+0x580/0x580 [ 1128.644809][ T27] __sys_sendto+0x480/0x600 [ 1128.649382][ T27] ? __ia32_sys_getpeername+0x80/0x80 [ 1128.670296][ T27] __x64_sys_sendto+0xda/0xf0 [ 1128.684350][ T27] do_syscall_64+0x3b/0xb0 [ 1128.689309][ T27] ? clear_bhb_loop+0x45/0xa0 [ 1128.694033][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1128.714934][ T27] RIP: 0033:0x7fac2d1777ac [ 1128.719394][ T27] RSP: 002b:00007ffdf1d01fe0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1128.743387][ T27] RAX: ffffffffffffffda RBX: 00007fac2de34620 RCX: 00007fac2d1777ac [ 1128.754982][ T27] RDX: 0000000000000028 RSI: 00007fac2de34670 RDI: 0000000000000003 [ 1128.774900][ T27] RBP: 0000000000000000 R08: 00007ffdf1d02034 R09: 000000000000000c [ 1128.782938][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1128.804877][ T27] R13: 0000000000000000 R14: 00007fac2de34670 R15: 0000000000000000 [ 1128.813004][ T27] [ 1128.830350][ T27] [ 1128.830350][ T27] Showing all locks held in the system: [ 1128.854606][ T27] 1 lock held by rcu_tasks_kthre/12: [ 1128.860840][ T27] #0: ffffffff8d12aed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1128.884864][ T27] 1 lock held by rcu_tasks_trace/13: [ 1128.890196][ T27] #0: ffffffff8d12b6d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1128.914908][ T27] 1 lock held by khungtaskd/27: [ 1128.919797][ T27] #0: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1128.955047][ T27] 4 locks held by kworker/u5:0/48: [ 1128.960208][ T27] #0: ffff8880793c5938 ((wq_completion)hci26#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1128.984914][ T27] #1: ffffc90000b97d20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1129.004834][ T27] #2: ffff88801fa14078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0 [ 1129.024863][ T27] #3: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0 [ 1129.055029][ T27] 2 locks held by getty/3311: [ 1129.059783][ T27] #0: ffff888028cbf098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1129.084639][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 1129.104854][ T27] 5 locks held by kworker/0:3/3561: [ 1129.110191][ T27] 4 locks held by kworker/u5:3/3564: [ 1129.124829][ T27] #0: ffff8880237f6138 ((wq_completion)hci23#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1129.151637][ T27] #1: ffffc9000410fd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1129.175005][ T27] #2: ffff888057d54078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0 [ 1129.194901][ T27] #3: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0 [ 1129.214877][ T27] 4 locks held by kworker/u5:8/3574: [ 1129.220205][ T27] #0: ffff8880298bd138 ((wq_completion)hci21#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1129.247539][ T27] #1: ffffc900041bfd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1129.284875][ T27] #2: ffff88805d6c8078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0 [ 1129.304826][ T27] #3: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0 [ 1129.324833][ T27] 3 locks held by kworker/1:4/3602: [ 1129.330062][ T27] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1129.364990][ T27] #1: ffffc9000431fd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1129.384829][ T27] #2: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 1129.393870][ T27] 2 locks held by kworker/1:5/3603: [ 1129.414051][ T27] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1129.434973][ T27] #1: ffffc9000432fd20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1129.444723][ T27] 3 locks held by kworker/0:4/3605: [ 1129.464851][ T27] #0: ffff88814b335138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1129.492169][ T27] #1: ffffc9000464fd20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1129.514955][ T27] #2: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 [ 1129.524513][ T27] 3 locks held by kworker/1:8/3626: [ 1129.544822][ T27] 3 locks held by kworker/u4:11/5149: [ 1129.550228][ T27] 5 locks held by kworker/u4:23/7935: [ 1129.572163][ T27] 3 locks held by kworker/0:11/10925: [ 1129.585024][ T27] #0: ffff888012471938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1129.611188][ T27] #1: ffffc90004977d20 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1129.634978][ T27] #2: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x8d/0xdb0 [ 1129.644649][ T27] 3 locks held by kworker/1:14/11015: [ 1129.664909][ T27] #0: ffff88814b335138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1129.684816][ T27] #1: ffffc90004a57d20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1129.712111][ T27] #2: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 [ 1129.734940][ T27] 3 locks held by kworker/1:15/11017: [ 1129.740358][ T27] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1129.764965][ T27] #1: ffffc90005057d20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1129.791026][ T27] #2: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 1129.814869][ T27] 3 locks held by syz-executor/15185: [ 1129.820281][ T27] #0: ffff8880776d10b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1cf/0x4d0 [ 1129.844925][ T27] #1: ffff8880776d0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 1129.854671][ T27] #2: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 1129.882878][ T27] 4 locks held by kworker/u5:1/15188: [ 1129.894938][ T27] #0: ffff88804109b138 ((wq_completion)hci8#4){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1129.921501][ T27] #1: ffffc9000345fd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1129.945160][ T27] #2: ffff888042c44078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0 [ 1129.964360][ T27] #3: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0 [ 1129.984835][ T27] 1 lock held by syz-executor/15425: [ 1130.004947][ T27] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 [ 1130.014002][ T27] 2 locks held by syz-executor/16173: [ 1130.033728][ T27] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 [ 1130.054880][ T27] #1: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 1130.074868][ T27] 3 locks held by syz.1.3820/17258: [ 1130.080102][ T27] #0: ffff88803155d0b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1cf/0x4d0 [ 1130.108493][ T27] #1: ffff88803155c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 1130.133105][ T27] #2: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 1130.154846][ T27] 3 locks held by syz-executor/17271: [ 1130.160341][ T27] #0: ffff88805b0710b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1cf/0x4d0 [ 1130.184898][ T27] #1: ffff88805b070078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 1130.204863][ T27] #2: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 1130.225657][ T27] 2 locks held by syz-executor/17274: [ 1130.231066][ T27] #0: ffffffff8e28d8d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 1130.254891][ T27] #1: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x80/0x270 [ 1130.281141][ T27] 1 lock held by syz-executor/17278: [ 1130.286992][ T27] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1130.312173][ T27] 1 lock held by syz-executor/17279: [ 1130.324524][ T27] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1130.344861][ T27] 1 lock held by syz-executor/17280: [ 1130.350183][ T27] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1130.373944][ T27] 4 locks held by kworker/u5:2/17282: [ 1130.385172][ T27] #0: ffff88801ecfa938 ((wq_completion)hci27#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1130.404868][ T27] #1: ffffc9000a8cfd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1130.433228][ T27] #2: ffff888023834078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0 [ 1130.454908][ T27] #3: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0 [ 1130.476259][ T27] 4 locks held by kworker/u5:4/17285: [ 1130.481754][ T27] #0: ffff88802356a138 ((wq_completion)hci25#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1130.513141][ T27] #1: ffffc9000a91fd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1130.534986][ T27] #2: ffff888040cfc078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0 [ 1130.554885][ T27] #3: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0 [ 1130.574877][ T27] 1 lock held by syz-executor/17286: [ 1130.594901][ T27] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1130.614876][ T27] 1 lock held by syz-executor/17295: [ 1130.620198][ T27] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1130.644547][ T27] 4 locks held by kworker/u5:6/17297: [ 1130.654713][ T27] #0: ffff888076b18938 ((wq_completion)hci24#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1130.674855][ T27] #1: ffffc9000302fd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1130.702086][ T27] #2: ffff8880773e8078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0 [ 1130.724866][ T27] #3: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0 [ 1130.744831][ T27] 1 lock held by syz-executor/17299: [ 1130.750148][ T27] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1130.773987][ T27] 4 locks held by kworker/u5:7/17300: [ 1130.794907][ T27] #0: ffff88802c7bc138 ((wq_completion)hci22#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1130.814860][ T27] #1: ffffc9000315fd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1130.834883][ T27] #2: ffff8880793a4078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0 [ 1130.854864][ T27] #3: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0 [ 1130.879775][ T27] 1 lock held by syz-executor/17302: [ 1130.894954][ T27] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1130.904442][ T27] 1 lock held by syz-executor/17305: [ 1130.924941][ T27] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1130.934441][ T27] 4 locks held by kworker/u5:10/17306: [ 1130.954254][ T27] #0: ffff88802d489938 ((wq_completion)hci28#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1130.975007][ T27] #1: ffffc900033dfd20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1131.002368][ T27] #2: ffff888023830078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x98/0xab0 [ 1131.024956][ T27] #3: ffffffff8e3f0d08 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x664/0xab0 [ 1131.044843][ T27] 1 lock held by dhcpcd/17311: [ 1131.049742][ T27] #0: ffff88805cdf6810 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 1131.074092][ T27] 1 lock held by dhcpcd/17313: [ 1131.083682][ T27] #0: ffff88805cdf2610 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 1131.105006][ T27] 1 lock held by dhcpcd/17314: [ 1131.109817][ T27] #0: ffff88805cdf4a10 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 1131.134949][ T27] 1 lock held by syz-executor/17318: [ 1131.140282][ T27] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1131.164001][ T27] 1 lock held by syz-executor/17325: [ 1131.174219][ T27] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1131.187256][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 1131.193591][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 1131.214125][ T27] 1 lock held by syz-executor/17328: [ 1131.220661][ T27] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1131.244931][ T27] 1 lock held by syz-executor/17329: [ 1131.250273][ T27] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1131.274999][ T27] 1 lock held by syz-executor/17335: [ 1131.280370][ T27] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1131.310227][ T27] 1 lock held by syz-executor/17337: [ 1131.324945][ T27] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1131.334444][ T27] 1 lock held by syz-executor/17345: [ 1131.354523][ T27] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1131.374833][ T27] 1 lock held by syz-executor/17348: [ 1131.380163][ T27] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1131.404976][ T27] 1 lock held by syz-executor/17351: [ 1131.410837][ T27] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1131.445088][ T27] [ 1131.447470][ T27] ============================================= [ 1131.447470][ T27] [ 1131.464948][ T27] NMI backtrace for cpu 1 [ 1131.469342][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.99-syzkaller #0 [ 1131.477356][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1131.487468][ T27] Call Trace: [ 1131.490769][ T27] [ 1131.493725][ T27] dump_stack_lvl+0x1e3/0x2cb [ 1131.498445][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 1131.503933][ T27] ? panic+0x764/0x764 [ 1131.508377][ T27] ? vprintk_emit+0x622/0x740 [ 1131.513094][ T27] ? printk_sprint+0x490/0x490 [ 1131.518930][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 1131.524079][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 1131.529053][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 1131.535233][ T27] ? _printk+0xd1/0x111 [ 1131.539500][ T27] ? panic+0x764/0x764 [ 1131.543678][ T27] ? __wake_up_klogd+0xcc/0x100 [ 1131.548546][ T27] ? panic+0x764/0x764 [ 1131.552634][ T27] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 1131.558734][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1131.564831][ T27] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 1131.570846][ T27] watchdog+0xf88/0xfd0 [ 1131.575041][ T27] ? watchdog+0x1f8/0xfd0 [ 1131.579405][ T27] kthread+0x28d/0x320 [ 1131.583488][ T27] ? hungtask_pm_notify+0x50/0x50 [ 1131.588537][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1131.593159][ T27] ret_from_fork+0x1f/0x30 [ 1131.597619][ T27] [ 1131.602687][ T27] Sending NMI from CPU 1 to CPUs 0: [ 1131.608251][ C0] NMI backtrace for cpu 0 [ 1131.608263][ C0] CPU: 0 PID: 3561 Comm: kworker/0:3 Not tainted 6.1.99-syzkaller #0 [ 1131.608282][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1131.608294][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 1131.608320][ C0] RIP: 0010:__lock_acquire+0xf4e/0x1f80 [ 1131.608352][ C0] Code: 8b 6c 24 48 0f 85 1a 03 00 00 48 83 7c 24 40 00 0f 84 63 02 00 00 48 8b 44 24 20 48 8d 58 f8 48 89 d8 48 c1 e8 03 0f b6 04 38 <84> c0 0f 85 d9 0d 00 00 8b 1b 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 [ 1131.608369][ C0] RSP: 0018:ffffc90000007a60 EFLAGS: 00000802 [ 1131.608384][ C0] RAX: 0000000000000000 RBX: ffff88802734c6f8 RCX: 000000000368637d [ 1131.608397][ C0] RDX: 00000000726de75e RSI: 000000006f5a8b04 RDI: dffffc0000000000 [ 1131.608410][ C0] RBP: bcc239ac175c4142 R08: dffffc0000000000 R09: fffffbfff209387b [ 1131.608423][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88802734c658 [ 1131.608437][ C0] R13: ffff88802734bb80 R14: 0000000000000001 R15: 1ffff11004e698e4 [ 1131.608450][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 1131.608466][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1131.608479][ C0] CR2: 00007f8cc0704000 CR3: 000000000ce8e000 CR4: 00000000003506f0 [ 1131.608495][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1131.608506][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1131.608518][ C0] Call Trace: [ 1131.608523][ C0] [ 1131.608530][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 1131.608558][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1131.608586][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 1131.608622][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 1131.608650][ C0] ? nmi_handle+0x12e/0x440 [ 1131.608676][ C0] ? nmi_handle+0x25/0x440 [ 1131.608702][ C0] ? __lock_acquire+0xf4e/0x1f80 [ 1131.608727][ C0] ? default_do_nmi+0x62/0x150 [ 1131.608745][ C0] ? exc_nmi+0xa8/0x100 [ 1131.608762][ C0] ? end_repeat_nmi+0x16/0x31 [ 1131.608793][ C0] ? __lock_acquire+0xf4e/0x1f80 [ 1131.608818][ C0] ? __lock_acquire+0xf4e/0x1f80 [ 1131.608844][ C0] ? __lock_acquire+0xf4e/0x1f80 [ 1131.608869][ C0] [ 1131.608874][ C0] [ 1131.608887][ C0] lock_acquire+0x1f8/0x5a0 [ 1131.608911][ C0] ? advance_sched+0x47/0x970 [ 1131.608938][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1131.608963][ C0] ? debug_deactivate+0x1d/0x280 [ 1131.608985][ C0] ? __hrtimer_run_queues+0x4b0/0xe50 [ 1131.609006][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 1131.609031][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 1131.609059][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 1131.609079][ C0] _raw_spin_lock+0x2a/0x40 [ 1131.609100][ C0] ? advance_sched+0x47/0x970 [ 1131.609128][ C0] advance_sched+0x47/0x970 [ 1131.609151][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1131.609172][ C0] ? debug_object_deactivate+0x63/0x380 [ 1131.609201][ C0] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 1131.609224][ C0] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 1131.609249][ C0] __hrtimer_run_queues+0x5e5/0xe50 [ 1131.609278][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1131.609303][ C0] hrtimer_interrupt+0x392/0x980 [ 1131.609335][ C0] __sysvec_apic_timer_interrupt+0x156/0x580 [ 1131.609360][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 1131.609381][ C0] [ 1131.609387][ C0] [ 1131.609393][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1131.609419][ C0] RIP: 0010:poly1305_blocks_x86_64+0xd/0x100 [ 1131.609442][ C0] Code: ff ff 0f 48 23 06 48 23 4e 08 48 89 47 18 48 89 4f 20 b8 01 00 00 00 c3 0f 1f 44 00 00 48 c1 ea 04 0f 84 e8 00 00 00 53 41 54 <41> 55 41 56 41 57 57 49 89 d7 4c 8b 5f 18 4c 8b 6f 20 4c 8b 37 48 [ 1131.609457][ C0] RSP: 0018:ffffc900040df118 EFLAGS: 00000202 [ 1131.609471][ C0] RAX: ffffffff814d761d RBX: 0000000000000020 RCX: 0000000000000001 [ 1131.609483][ C0] RDX: 0000000000000002 RSI: ffff88801f2172f8 RDI: ffffc900040df228 [ 1131.609496][ C0] RBP: 0000000000000020 R08: ffffffff814d741b R09: 1ffff9200081be9a [ 1131.609509][ C0] R10: 000000003b641103 R11: 00000000bb36655b R12: 0000000000000020 [ 1131.609521][ C0] R13: ffff88801f2172f8 R14: ffffc900040df200 R15: 0000000000000000 [ 1131.609537][ C0] ? poly1305_simd_blocks+0x14b/0x510 [ 1131.609559][ C0] ? poly1305_simd_blocks+0x34d/0x510 [ 1131.609585][ C0] poly1305_update_arch+0xf8/0x7d0 [ 1131.609607][ C0] ? blake2s_final+0xd7/0x180 [ 1131.609627][ C0] ? irq_fpu_usable+0x83/0xa0 [ 1131.609654][ C0] __chacha20poly1305_encrypt+0x132/0x2e0 [ 1131.609679][ C0] ? chacha20poly1305_encrypt+0x7d0/0x7d0 [ 1131.609699][ C0] ? kernel_fpu_begin_mask+0x3b9/0x4f0 [ 1131.609749][ C0] ? chacha_init_arch+0x22/0x740 [ 1131.609776][ C0] chacha20poly1305_encrypt+0x3d2/0x7d0 [ 1131.609800][ C0] ? blake2s_compress_generic+0x29f0/0x29f0 [ 1131.609827][ C0] ? blake2s_final+0xd7/0x180 [ 1131.609847][ C0] ? memset+0x1f/0x40 [ 1131.609869][ C0] wg_noise_handshake_create_response+0x6a6/0xd30 [ 1131.609903][ C0] ? wg_noise_handshake_consume_initiation+0xf60/0xf60 [ 1131.609940][ C0] ? mark_lock+0x9a/0x340 [ 1131.609967][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1131.610000][ C0] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 1131.610031][ C0] ? ktime_get_coarse_with_offset+0x13f/0x190 [ 1131.610057][ C0] wg_packet_send_handshake_response+0xf5/0x2d0 [ 1131.610078][ C0] ? wg_packet_send_queued_handshake_initiation+0x350/0x350 [ 1131.610098][ C0] ? wg_socket_set_peer_endpoint_from_skb+0xc5/0x120 [ 1131.610128][ C0] ? wg_packet_handshake_receive_worker+0xce/0xf00 [ 1131.610151][ C0] wg_packet_handshake_receive_worker+0x5de/0xf00 [ 1131.610177][ C0] ? wg_packet_purge_staged_packets+0x210/0x210 [ 1131.610202][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1131.610228][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1131.610255][ C0] ? print_irqtrace_events+0x210/0x210 [ 1131.610280][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1131.610304][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 1131.610325][ C0] ? process_one_work+0x7a9/0x11d0 [ 1131.610344][ C0] process_one_work+0x8a9/0x11d0 [ 1131.610373][ C0] ? worker_detach_from_pool+0x260/0x260 [ 1131.610396][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1131.610417][ C0] ? kthread_data+0x4e/0xc0 [ 1131.610445][ C0] ? wq_worker_running+0x97/0x190 [ 1131.610473][ C0] worker_thread+0xa47/0x1200 [ 1131.610499][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1131.610526][ C0] kthread+0x28d/0x320 [ 1131.610540][ C0] ? worker_clr_flags+0x190/0x190 [ 1131.610560][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1131.610576][ C0] ret_from_fork+0x1f/0x30 [ 1131.610607][ C0] [ 1132.298921][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1132.305809][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.99-syzkaller #0 [ 1132.313629][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1132.323699][ T27] Call Trace: [ 1132.327070][ T27] [ 1132.330028][ T27] dump_stack_lvl+0x1e3/0x2cb [ 1132.334743][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 1132.340229][ T27] ? panic+0x764/0x764 [ 1132.344314][ T27] ? llist_add_batch+0x160/0x1d0 [ 1132.349277][ T27] ? vscnprintf+0x59/0x80 [ 1132.353630][ T27] panic+0x318/0x764 [ 1132.357545][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 1132.363726][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 1132.369122][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 1132.375301][ T27] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 1132.381487][ T27] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 1132.387673][ T27] watchdog+0xfc7/0xfd0 [ 1132.391854][ T27] ? watchdog+0x1f8/0xfd0 [ 1132.396209][ T27] kthread+0x28d/0x320 [ 1132.400292][ T27] ? hungtask_pm_notify+0x50/0x50 [ 1132.405335][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1132.409938][ T27] ret_from_fork+0x1f/0x30 [ 1132.414399][ T27] [ 1133.591569][ T27] Shutting down cpus with NMI [ 1133.596424][ T27] Kernel Offset: disabled [ 1133.600750][ T27] Rebooting in 86400 seconds..