last executing test programs: 43.878254399s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000e45f39bb850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0x9, 0xfffffffffffffeb9}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 43.732163166s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x18}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x16}, 0x70) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x14, 0x4, 0x4, 0x101}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r0, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) 43.295242427s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='lastblock=00000000000004000226,adinicb,gid=forget,nostrict,unhide,nostrict,dmode=00000000000017777777777,uid=ignore,shortad,volume=00000000000000000006,\x00'], 0x4, 0xc24, &(0x7f0000000d00)="$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") landlock_create_ruleset(0x0, 0x0, 0x0) r5 = open(0x0, 0xca942, 0x0) pwrite64(r5, &(0x7f0000000140)='+', 0x1, 0x4010000c000) open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) ftruncate(0xffffffffffffffff, 0x8002007ffb) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x28, 0x0, 0x4d81bb417e005f1f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @val={0xc}}}}, 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='devpts\x00', 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) gettid() r7 = getpid() rt_tgsigqueueinfo(r7, 0x0, 0x7, 0x0) 43.21725204s ago: executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000000)={r2, 0xffffffffffffffff, 0xe}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000012c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x87, &(0x7f0000000080)=""/135}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4f8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c956fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d68d7489cfcb0176"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r6, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) 43.205193821s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000001000)={0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xa, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000200)=""/156, 0x9c) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000000180)={[{@gid}]}) 40.363054614s ago: executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @HCI_OP_USER_CONFIRM_NEG_REPLY}}, 0x45) 40.118650279s ago: executing program 4: syz_open_dev$usbmon(0x0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) syz_emit_ethernet(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x0) write(0xffffffffffffffff, 0x0, 0x0) munlock(&(0x7f0000cad000/0x1000)=nil, 0x1000) munlock(&(0x7f0000cb5000/0x3000)=nil, 0x3000) munlock(&(0x7f0000e4f000/0x1000)=nil, 0x1000) mremap(&(0x7f0000f32000/0x2000)=nil, 0x2000, 0x14000, 0x0, &(0x7f0000abb000/0x14000)=nil) munlockall() r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_aout(r2, &(0x7f0000000fc0)={{0x108, 0x7, 0xc7, 0x61, 0x22e, 0x0, 0x1ac, 0x1}, "ea8f01f51b5dc7268da12bf304f722709a65f674cfddb77b671efbe3abb7dc2a59d4dc7779d59b02851e7575ccd1f0765c05e8219c2119cff582943270f0eceee2c4084a3353d7d6f84a8d5e5f1e83ca64041bd8d7f31460c05263a551d14f3f1d89e427f8cbaf8304f675f97692366157e98ba90b8f1018da94ea5e135d67d80b40c9d7b03ba643887852c602f306fe0f00e5a3f1c5ecb3c3726153cf3bfd90b3eab930c08a9877562582e3119faeee32ff90c6664765688a01671428ce15b07e8d003468de5a3a9e213f8da36d4f352d6ddd28594525d49aace9499bc3a527d74b36a8410a0e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x607) fcntl$lock(r2, 0x26, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x5}) sendfile(r0, r1, 0x0, 0x200) 40.078638494s ago: executing program 0: r0 = fanotify_init(0x0, 0x0) r1 = dup(r0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0xfffffffffffffff6}, 0x18) 39.892723462s ago: executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@func_proto={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @var={0x2, 0x0, 0x0, 0x11}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) 39.77824918s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000e45f39bb850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0x9, 0xfffffffffffffeb9}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 39.647066304s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 39.385769083s ago: executing program 4: bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r0, &(0x7f0000000740)=""/384, 0x200008c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) tkill(0x0, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000030a01080000000000000000020000000900010073797a30000000000c000240000000000000000114000000020a01"], 0x68}}, 0x0) 39.370618278s ago: executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x0, @random="1c3c0b91717b"}, 0x38, {0x2, 0x0, @private}, 'wg2\x00'}) 39.363314749s ago: executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 37.547683881s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendfile(r0, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) truncate(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @dev}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 37.212582953s ago: executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getrlimit(0x0, 0x0) 36.972826031s ago: executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000280)={0x28, 0x15a614b51561adc8}) 36.752947605s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@usrquota}, {@nobarrier}, {@noauto_da_alloc}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffff]}, {0x10000, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) recvmsg$can_j1939(r0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)) 36.268753891s ago: executing program 3: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}, {0x0}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001980)={{0x2000, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 35.94100542s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 32.514385055s ago: executing program 1: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 32.331016866s ago: executing program 1: r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f00000000c0), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0x8400941f, &(0x7f0000001b80)={0x0, 0x0, @start={0x0, 0x0, "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", "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"}}) 31.588159146s ago: executing program 1: socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@usrquota}, {@nobarrier}, {@noauto_da_alloc}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f00000000c0), 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default us'], 0x2a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@mp_join={0x1e, 0x3, 0x0, 0x5}]}}}}}}}}, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) 31.174328642s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x40, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x40}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0xffffdf004002, 0xffffdf004000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r3 = socket(0x10, 0x3, 0x0) r4 = gettid() syz_open_procfs$userns(r4, &(0x7f0000000280)) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e00050300", @ANYBLOB], 0x24}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) prlimit64(r5, 0xa, &(0x7f00000000c0)={0x758, 0xeb0c}, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4402, &(0x7f00000003c0)=ANY=[@ANYBLOB="706172743d3078300002a27f9edc6b44900000c63d5f852c6769643d", @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYRESOCT=r6, @ANYRES8, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29ab72f4a2f73b811c7fd9bae7ecd520839bd791f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50d049dc760465dea7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399ca072639251325e38177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8964f99a04195ad43adb611", @ANYRES16=r6, @ANYBLOB="4599"], 0x1, 0x701, &(0x7f00000009c0)="$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") ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x41, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0xc5, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 30.036344821s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e24}}]}, 0x24}}, 0x0) 9.319593215s ago: executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x4}) 9.300539584s ago: executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000080)) 7.520617177s ago: executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000240)="58000000140091d427323b4725458db45602117fffefff81000e224e227f", 0x1e}], 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=0x0]) 5.907013866s ago: executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x4000000000001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x10, 0x1, 0x0, "18e889d15b38429faa8ff62438eaed752e68f3a6d09382b392b049e33958b16c"}) 0s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f00000000c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): 000003e syscall=202 compat=0 ip=0x7f4dbfe7cea9 code=0x7ffc0000 [ 169.519485][ T5105] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.528032][ T5105] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 169.535694][ T5105] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.910862][ T9] hid-led 0003:1D34:000A.0004: unknown main item tag 0x0 [ 170.113444][ T9] hid-led 0003:1D34:000A.0004: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 170.162856][ T9] hid-led 0003:1D34:000A.0004: Dream Cheeky Webmail Notifier initialized [ 170.372665][ T1041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.392847][ T6491] loop0: detected capacity change from 0 to 512 [ 170.414714][ T1041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.429274][ T6491] EXT4-fs (loop0): Test dummy encryption mode enabled [ 170.438297][ T1041] bond0 (unregistering): Released all slaves [ 170.504506][ T6491] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #17: comm syz-executor.0: iget: bogus i_mode (0) [ 170.560745][ T6491] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 17 (err -117) [ 170.576151][ T6491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.803524][ T6491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.833604][ T6491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.983924][ T6507] loop3: detected capacity change from 0 to 128 [ 171.013650][ T5153] usb 1-1: USB disconnect, device number 4 [ 171.064066][ T6507] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.099697][ T6507] ext4 filesystem being mounted at /root/syzkaller-testdir2491164204/syzkaller.GFsfkS/89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 171.171716][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.268635][ T5108] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.379850][ T6513] loop2: detected capacity change from 0 to 1024 [ 171.485423][ T1041] hsr_slave_0: left promiscuous mode [ 171.505200][ T6513] hfsplus: extend alloc file! (8192,65536,366) [ 171.527169][ T1041] hsr_slave_1: left promiscuous mode [ 171.563471][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.579169][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.617353][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.635461][ T5105] Bluetooth: hci4: command tx timeout [ 171.646020][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.690260][ T5100] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir1336057535/syzkaller.5OpDqU/106/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 171.790707][ T1041] veth1_macvtap: left promiscuous mode [ 171.828533][ T1041] veth0_macvtap: left promiscuous mode [ 171.840688][ T5100] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2856: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 171.851689][ T1041] veth1_vlan: left promiscuous mode [ 171.890624][ T1041] veth0_vlan: left promiscuous mode [ 171.913665][ T5100] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz-executor.0: bg 0: block 7: invalid block bitmap [ 171.966026][ T5100] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 172.027122][ T5100] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir1336057535/syzkaller.5OpDqU/106/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 172.155957][ T5100] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir1336057535/syzkaller.5OpDqU/106/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 172.225755][ T5100] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir1336057535/syzkaller.5OpDqU/106/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 172.276911][ T5100] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir1336057535/syzkaller.5OpDqU/106/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 172.339863][ T5100] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir1336057535/syzkaller.5OpDqU/106/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 172.396432][ T5100] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir1336057535/syzkaller.5OpDqU/106/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 172.429134][ T5100] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir1336057535/syzkaller.5OpDqU/106/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 172.493166][ T5106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.506736][ T5106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.528084][ T5106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.537249][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.546718][ T5106] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 172.555277][ T5106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.244239][ T1041] team0 (unregistering): Port device team_slave_1 removed [ 173.372173][ T1041] team0 (unregistering): Port device team_slave_0 removed [ 173.721399][ T5105] Bluetooth: hci4: command tx timeout [ 174.062734][ T6497] chnl_net:caif_netlink_parms(): no params data found [ 174.237810][ T5100] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.633149][ T5105] Bluetooth: hci1: command tx timeout [ 175.430577][ T6497] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.466804][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.498320][ T6497] bridge_slave_0: entered allmulticast mode [ 175.515350][ T6497] bridge_slave_0: entered promiscuous mode [ 175.589896][ T6497] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.631621][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.651879][ T6548] loop3: detected capacity change from 0 to 128 [ 175.659175][ T6497] bridge_slave_1: entered allmulticast mode [ 175.676772][ T6497] bridge_slave_1: entered promiscuous mode [ 175.733274][ T6548] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.795066][ T5105] Bluetooth: hci4: command tx timeout [ 175.802777][ T6548] ext4 filesystem being mounted at /root/syzkaller-testdir2491164204/syzkaller.GFsfkS/92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.862893][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 175.862926][ T29] audit: type=1326 audit(1718384909.089:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6543 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d287cea9 code=0x7ffc0000 [ 175.955464][ T29] audit: type=1326 audit(1718384909.089:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6543 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d287cea9 code=0x7ffc0000 [ 175.978793][ T6497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.008589][ T5108] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.023545][ T29] audit: type=1326 audit(1718384909.089:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6543 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff6d287cea9 code=0x7ffc0000 [ 176.027770][ T6552] fuse: Unknown parameter ':Z;"!'meg40x0000000000000005' [ 176.064314][ T29] audit: type=1326 audit(1718384909.089:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6543 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d287cea9 code=0x7ffc0000 [ 176.109999][ T6497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.146322][ T29] audit: type=1326 audit(1718384909.099:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6543 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d287cea9 code=0x7ffc0000 [ 176.170587][ T29] audit: type=1326 audit(1718384909.099:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6543 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff6d287cea9 code=0x7ffc0000 [ 176.219162][ T29] audit: type=1326 audit(1718384909.149:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6543 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d287cea9 code=0x7ffc0000 [ 176.242735][ T29] audit: type=1326 audit(1718384909.259:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6543 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d287cea9 code=0x7ffc0000 [ 176.280669][ T29] audit: type=1326 audit(1718384909.259:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6543 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff6d287cea9 code=0x7ffc0000 [ 176.339028][ T29] audit: type=1326 audit(1718384909.259:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6543 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6d287cea9 code=0x7ffc0000 [ 176.447838][ T1041] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.489161][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.501269][ T5106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.501406][ T6497] team0: Port device team_slave_0 added [ 176.516588][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.521817][ T6522] chnl_net:caif_netlink_parms(): no params data found [ 176.531781][ T5106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.548661][ T5106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 176.561882][ T6497] team0: Port device team_slave_1 added [ 176.570431][ T5106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.615025][ T5166] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 176.641620][ T1041] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.675966][ T5105] Bluetooth: hci1: command tx timeout [ 176.738053][ T6497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.745539][ T6497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.774444][ T6497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.812457][ T1041] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.826953][ T5166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.854372][ T5166] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 176.864931][ T5166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.895436][ T5166] usb 4-1: config 0 descriptor?? [ 176.910970][ T6497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.920554][ T6497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.948277][ T6497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.992268][ T1041] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.126094][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.138791][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.146388][ T6522] bridge_slave_0: entered allmulticast mode [ 177.154325][ T6522] bridge_slave_0: entered promiscuous mode [ 177.185434][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.204495][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.220279][ T6522] bridge_slave_1: entered allmulticast mode [ 177.230548][ T6522] bridge_slave_1: entered promiscuous mode [ 177.242409][ T6497] hsr_slave_0: entered promiscuous mode [ 177.250634][ T6497] hsr_slave_1: entered promiscuous mode [ 177.361697][ T5166] hid-led 0003:1D34:000A.0005: unknown main item tag 0x0 [ 177.419299][ T6522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.540545][ T6522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.572545][ T5166] hid-led 0003:1D34:000A.0005: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 177.598731][ T5166] hid-led 0003:1D34:000A.0005: Dream Cheeky Webmail Notifier initialized [ 177.794520][ T6556] loop3: detected capacity change from 0 to 512 [ 177.831836][ T1041] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.843186][ T6556] EXT4-fs (loop3): Test dummy encryption mode enabled [ 177.862245][ T6556] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #17: comm syz-executor.3: iget: bogus i_mode (0) [ 177.878741][ T5105] Bluetooth: hci4: command tx timeout [ 177.886807][ T6556] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 17 (err -117) [ 177.928461][ T6556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.929357][ T6522] team0: Port device team_slave_0 added [ 177.996504][ T6522] team0: Port device team_slave_1 added [ 178.030854][ T6556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.051440][ T1041] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.053063][ T6556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.188103][ T5166] usb 4-1: USB disconnect, device number 4 [ 178.301899][ T1041] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.333565][ T6522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.340830][ T6522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.368421][ T6522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.396656][ T6522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.407824][ T6522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.436440][ T6522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.501964][ T1041] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.569763][ T6557] chnl_net:caif_netlink_parms(): no params data found [ 178.595119][ T5105] Bluetooth: hci2: command tx timeout [ 178.670708][ T6522] hsr_slave_0: entered promiscuous mode [ 178.682313][ T6522] hsr_slave_1: entered promiscuous mode [ 178.692469][ T6522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.704689][ T6522] Cannot create hsr debugfs directory [ 178.755591][ T5105] Bluetooth: hci1: command tx timeout [ 178.760027][ T5108] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir2491164204/syzkaller.GFsfkS/93/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 178.802373][ T5108] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz-executor.3: bg 0: block 7: invalid block bitmap [ 178.875707][ T5108] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 178.958000][ T5108] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir2491164204/syzkaller.GFsfkS/93/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 178.973179][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.993444][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.004053][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.014352][ T5108] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir2491164204/syzkaller.GFsfkS/93/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 179.041090][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.050246][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 179.057781][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.066862][ T5108] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir2491164204/syzkaller.GFsfkS/93/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 179.106076][ T5108] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir2491164204/syzkaller.GFsfkS/93/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 179.111142][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.139698][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.147546][ T6557] bridge_slave_0: entered allmulticast mode [ 179.147908][ T5108] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir2491164204/syzkaller.GFsfkS/93/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 179.156217][ T6557] bridge_slave_0: entered promiscuous mode [ 179.196013][ T5108] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir2491164204/syzkaller.GFsfkS/93/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 179.221015][ T6557] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.228896][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.235043][ T5108] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir2491164204/syzkaller.GFsfkS/93/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 179.240798][ T6557] bridge_slave_1: entered allmulticast mode [ 179.267908][ T6557] bridge_slave_1: entered promiscuous mode [ 179.283108][ T1041] bridge_slave_1: left allmulticast mode [ 179.299705][ T1041] bridge_slave_1: left promiscuous mode [ 179.309220][ T1041] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.324137][ T1041] bridge_slave_0: left allmulticast mode [ 179.330512][ T1041] bridge_slave_0: left promiscuous mode [ 179.337389][ T1041] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.359967][ T1041] bridge_slave_1: left allmulticast mode [ 179.366050][ T1041] bridge_slave_1: left promiscuous mode [ 179.371830][ T1041] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.382389][ T1041] bridge_slave_0: left allmulticast mode [ 179.388505][ T1041] bridge_slave_0: left promiscuous mode [ 179.394253][ T1041] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.202273][ T1041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.214157][ T1041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.225058][ T1041] bond0 (unregistering): Released all slaves [ 180.342005][ T1041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.354587][ T1041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.374115][ T1041] bond0 (unregistering): Released all slaves [ 180.582034][ T6557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.594795][ T6557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.677407][ T5105] Bluetooth: hci2: command tx timeout [ 180.779090][ T5108] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.822407][ T6557] team0: Port device team_slave_0 added [ 180.835814][ T5105] Bluetooth: hci1: command tx timeout [ 180.844042][ T6557] team0: Port device team_slave_1 added [ 181.030130][ T6497] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 181.050548][ T6497] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.155128][ T5105] Bluetooth: hci0: command tx timeout [ 181.155689][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.186451][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.205581][ T5106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.220616][ T6557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.224114][ T5106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.244211][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.246191][ T5106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.261518][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.269021][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.296723][ T6557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.307456][ T5106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 181.315041][ T5106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.324485][ T6497] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.335951][ T6497] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.496604][ T6557] hsr_slave_0: entered promiscuous mode [ 181.503429][ T6557] hsr_slave_1: entered promiscuous mode [ 181.509833][ T6557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.517765][ T6557] Cannot create hsr debugfs directory [ 181.530200][ T1041] hsr_slave_0: left promiscuous mode [ 181.536302][ T1041] hsr_slave_1: left promiscuous mode [ 181.542401][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.550023][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.570487][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.578204][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.592355][ T1041] hsr_slave_0: left promiscuous mode [ 181.600842][ T1041] hsr_slave_1: left promiscuous mode [ 181.607062][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.614483][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.622613][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.630645][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.670727][ T1041] veth1_macvtap: left promiscuous mode [ 181.676501][ T1041] veth0_macvtap: left promiscuous mode [ 181.682221][ T1041] veth1_vlan: left promiscuous mode [ 181.689393][ T1041] veth0_vlan: left promiscuous mode [ 181.698645][ T1041] veth1_macvtap: left promiscuous mode [ 181.704191][ T1041] veth0_macvtap: left promiscuous mode [ 181.709899][ T1041] veth1_vlan: left promiscuous mode [ 181.715642][ T1041] veth0_vlan: left promiscuous mode [ 182.308870][ T1041] team0 (unregistering): Port device team_slave_1 removed [ 182.359898][ T1041] team0 (unregistering): Port device team_slave_0 removed [ 182.758092][ T5105] Bluetooth: hci2: command tx timeout [ 183.202336][ T1041] team0 (unregistering): Port device team_slave_1 removed [ 183.239640][ T5105] Bluetooth: hci0: command tx timeout [ 183.256395][ T1041] team0 (unregistering): Port device team_slave_0 removed [ 183.405992][ T5105] Bluetooth: hci3: command tx timeout [ 184.061857][ T6570] chnl_net:caif_netlink_parms(): no params data found [ 184.223547][ T6522] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 184.305629][ T6522] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 184.324226][ T6522] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 184.337438][ T6522] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 184.353949][ T6570] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.361387][ T6570] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.370698][ T6570] bridge_slave_0: entered allmulticast mode [ 184.378419][ T6570] bridge_slave_0: entered promiscuous mode [ 184.420750][ T6570] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.429451][ T6570] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.437171][ T6570] bridge_slave_1: entered allmulticast mode [ 184.444413][ T6570] bridge_slave_1: entered promiscuous mode [ 184.538368][ T6570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.557395][ T6570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.643186][ T6574] chnl_net:caif_netlink_parms(): no params data found [ 184.694154][ T6570] team0: Port device team_slave_0 added [ 184.731905][ T6570] team0: Port device team_slave_1 added [ 184.814103][ T6570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.821855][ T6570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.848280][ T6570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.855448][ T5105] Bluetooth: hci2: command tx timeout [ 184.882275][ T6497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.901327][ T6570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.908718][ T6570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.936195][ T6570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.987272][ T6522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.093121][ T6574] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.100945][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.109084][ T6574] bridge_slave_0: entered allmulticast mode [ 185.117921][ T6574] bridge_slave_0: entered promiscuous mode [ 185.140473][ T6557] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.162189][ T6497] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.173988][ T6574] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.182375][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.190418][ T6574] bridge_slave_1: entered allmulticast mode [ 185.198071][ T6574] bridge_slave_1: entered promiscuous mode [ 185.238050][ T6557] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.254482][ T6557] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 185.264665][ T6557] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 185.308941][ T1041] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.320498][ T5105] Bluetooth: hci0: command tx timeout [ 185.355048][ T6574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.370502][ T6570] hsr_slave_0: entered promiscuous mode [ 185.385850][ T6570] hsr_slave_1: entered promiscuous mode [ 185.392346][ T6570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.400723][ T6570] Cannot create hsr debugfs directory [ 185.419562][ T6522] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.429060][ T6574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.467379][ T1041] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.485382][ T5105] Bluetooth: hci3: command tx timeout [ 185.505701][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.512876][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.583648][ T1041] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.600275][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.607477][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.621393][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.628562][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.693087][ T6574] team0: Port device team_slave_0 added [ 185.706128][ T6574] team0: Port device team_slave_1 added [ 185.727469][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.734628][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.759983][ T1041] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.863374][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.870831][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.901844][ T6574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.914385][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.921576][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.947655][ T6574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.066863][ T6574] hsr_slave_0: entered promiscuous mode [ 186.073454][ T6574] hsr_slave_1: entered promiscuous mode [ 186.080364][ T6574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.088924][ T6574] Cannot create hsr debugfs directory [ 186.108758][ T6497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.260236][ T6570] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.387430][ T6570] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.484136][ T6570] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.588174][ T6497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.648707][ T6570] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.712939][ T6557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.785426][ T6557] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.793859][ T6497] veth0_vlan: entered promiscuous mode [ 186.818876][ T1041] bridge_slave_1: left allmulticast mode [ 186.824580][ T1041] bridge_slave_1: left promiscuous mode [ 186.840468][ T1041] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.857535][ T1041] bridge_slave_0: left allmulticast mode [ 186.863202][ T1041] bridge_slave_0: left promiscuous mode [ 186.870290][ T1041] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.882982][ T1041] bridge_slave_1: left allmulticast mode [ 186.889057][ T1041] bridge_slave_1: left promiscuous mode [ 186.894773][ T1041] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.906466][ T1041] bridge_slave_0: left allmulticast mode [ 186.912172][ T1041] bridge_slave_0: left promiscuous mode [ 186.918557][ T1041] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.397811][ T5105] Bluetooth: hci0: command tx timeout [ 187.565183][ T5105] Bluetooth: hci3: command tx timeout [ 187.588787][ T1041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.600291][ T1041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.615915][ T1041] bond0 (unregistering): Released all slaves [ 187.742935][ T1041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.754508][ T1041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.765866][ T1041] bond0 (unregistering): Released all slaves [ 187.819981][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.827192][ T5109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.875054][ T6497] veth1_vlan: entered promiscuous mode [ 187.938751][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.945958][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.988266][ T6522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.261925][ T6497] veth0_macvtap: entered promiscuous mode [ 188.290880][ T6497] veth1_macvtap: entered promiscuous mode [ 188.376227][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.414052][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.432272][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.444013][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.464073][ T6497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.551749][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.585292][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.596838][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.607411][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.619037][ T6497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.647022][ T6497] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.662888][ T6497] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.676760][ T6497] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.686028][ T6497] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.775943][ T6570] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 188.807176][ T6557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.818989][ T6570] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 188.839585][ T6570] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 188.858847][ T6570] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 188.894172][ T1041] hsr_slave_0: left promiscuous mode [ 188.904027][ T1041] hsr_slave_1: left promiscuous mode [ 188.911985][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.927335][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.936658][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.944095][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.955875][ T1041] hsr_slave_0: left promiscuous mode [ 188.962019][ T1041] hsr_slave_1: left promiscuous mode [ 188.968856][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.976744][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.984509][ T1041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.992100][ T1041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.035201][ T1041] veth1_macvtap: left promiscuous mode [ 189.040739][ T1041] veth0_macvtap: left promiscuous mode [ 189.046545][ T1041] veth1_vlan: left promiscuous mode [ 189.052358][ T1041] veth0_vlan: left promiscuous mode [ 189.058636][ T1041] veth1_macvtap: left promiscuous mode [ 189.064156][ T1041] veth0_macvtap: left promiscuous mode [ 189.070106][ T1041] veth1_vlan: left promiscuous mode [ 189.079320][ T1041] veth0_vlan: left promiscuous mode [ 189.648891][ T5105] Bluetooth: hci3: command tx timeout [ 189.726983][ T1041] team0 (unregistering): Port device team_slave_1 removed [ 189.774991][ T1041] team0 (unregistering): Port device team_slave_0 removed [ 190.667817][ T1041] team0 (unregistering): Port device team_slave_1 removed [ 190.710800][ T1041] team0 (unregistering): Port device team_slave_0 removed [ 191.224728][ T6522] veth0_vlan: entered promiscuous mode [ 191.368025][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.380941][ T6522] veth1_vlan: entered promiscuous mode [ 191.386761][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.511951][ T6574] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 191.536292][ T6574] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 191.547925][ T6557] veth0_vlan: entered promiscuous mode [ 191.571043][ T6557] veth1_vlan: entered promiscuous mode [ 191.594458][ T6574] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 191.608964][ T6574] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 191.609760][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.623727][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.653931][ T6522] veth0_macvtap: entered promiscuous mode [ 191.683461][ T6522] veth1_macvtap: entered promiscuous mode [ 191.863935][ T6557] veth0_macvtap: entered promiscuous mode [ 191.890379][ T6522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.901809][ T6522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.914608][ T6522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.929665][ T6570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.988291][ T6557] veth1_macvtap: entered promiscuous mode [ 192.029121][ T6522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.049800][ T6522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.067734][ T6522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.092208][ T6522] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.104389][ T6522] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.121347][ T6522] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.131481][ T6522] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.183825][ T6570] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.212690][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.233249][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.243684][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.254382][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.268982][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.289119][ T6615] tipc: Started in network mode [ 192.294074][ T6615] tipc: Node identity ffff000000a0ffffff00000000000001, cluster identity 4711 [ 192.314218][ T6615] tipc: Enabling of bearer rejected, failed to enable media [ 192.330770][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.345183][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.358106][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.368843][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.380175][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.391643][ T6557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.404056][ T6557] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.414015][ T6557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.425260][ T6557] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.464525][ T5192] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.471857][ T5192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.528301][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.535520][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.574653][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.602367][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.645292][ T6574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.689804][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.711382][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.758913][ T6574] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.789746][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.798350][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.818517][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 192.819166][ T5192] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.833357][ T5192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.875316][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.882522][ T5109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.936966][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.968711][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.011705][ T6622] loop4: detected capacity change from 0 to 128 [ 193.047613][ T6622] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.066343][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 193.090148][ T6622] ext4 filesystem being mounted at /root/syzkaller-testdir1955617145/syzkaller.mGZYNZ/1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.111377][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 193.131623][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 193.169288][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 193.218745][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 193.260791][ T9] usb 2-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 193.286641][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 193.303068][ T6522] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.305837][ T9] usb 2-1: SerialNumber: syz [ 193.343368][ T9] usb-storage 2-1:1.0: USB Mass Storage device detected [ 193.381686][ T6570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.423294][ T9] usb-storage 2-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 193.443615][ T9] scsi host1: usb-storage 2-1:1.0 [ 193.489716][ T6574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.595496][ T5148] usb 2-1: USB disconnect, device number 2 [ 193.623342][ T6642] loop4: detected capacity change from 0 to 4096 [ 193.641810][ T6570] veth0_vlan: entered promiscuous mode [ 193.694423][ T6570] veth1_vlan: entered promiscuous mode [ 193.742200][ T6574] veth0_vlan: entered promiscuous mode [ 193.807970][ T6574] veth1_vlan: entered promiscuous mode [ 193.859063][ T6570] veth0_macvtap: entered promiscuous mode [ 193.881800][ T6570] veth1_macvtap: entered promiscuous mode [ 193.980841][ T6574] veth0_macvtap: entered promiscuous mode [ 194.010599][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.028846][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.058843][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.070253][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.089386][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.101989][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.124104][ T6570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.171852][ T6574] veth1_macvtap: entered promiscuous mode [ 194.197386][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.210865][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.223678][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.234716][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.245310][ T6570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.258533][ T6570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.288034][ T6570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.392693][ T6570] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.407133][ T6570] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.417687][ T6570] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.432252][ T6570] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.476044][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.488217][ T6656] loop0: detected capacity change from 0 to 512 [ 194.494451][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.494534][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.494600][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.494618][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.494666][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.494747][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.494794][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.575495][ T6656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 194.598720][ T6656] ext4 filesystem being mounted at /root/syzkaller-testdir649754417/syzkaller.yOUWGB/6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.631465][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.708991][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.727650][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.737736][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.748663][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.760470][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.768341][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.776808][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.787401][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.800001][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.810775][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.829246][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.857710][ T6574] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.876552][ T6574] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.886281][ T6574] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.895142][ T6574] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.951914][ T6557] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 195.117808][ T2455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.142286][ T2455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.274698][ T2485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.318832][ T2485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.383629][ T6666] loop0: detected capacity change from 0 to 128 [ 195.399032][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.446914][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.449019][ T6666] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.480127][ T6666] ext4 filesystem being mounted at /root/syzkaller-testdir649754417/syzkaller.yOUWGB/8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 196.751308][ T6673] loop2: detected capacity change from 0 to 256 [ 196.774330][ T1041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.817848][ T1041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.884357][ T6557] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.899531][ T6673] FAT-fs (loop2): Directory bread(block 64) failed [ 196.930891][ T6673] FAT-fs (loop2): Directory bread(block 65) failed [ 196.960648][ T6673] FAT-fs (loop2): Directory bread(block 66) failed [ 196.981244][ T6673] FAT-fs (loop2): Directory bread(block 67) failed [ 197.023215][ T6673] FAT-fs (loop2): Directory bread(block 68) failed [ 197.036237][ T6673] FAT-fs (loop2): Directory bread(block 69) failed [ 197.043144][ T6673] FAT-fs (loop2): Directory bread(block 70) failed [ 197.050315][ T6673] FAT-fs (loop2): Directory bread(block 71) failed [ 197.059466][ T6673] FAT-fs (loop2): Directory bread(block 72) failed [ 197.067260][ T6673] FAT-fs (loop2): Directory bread(block 73) failed [ 197.333149][ T6681] loop0: detected capacity change from 0 to 2048 [ 197.404260][ T6681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 197.464039][ T6689] loop3: detected capacity change from 0 to 128 [ 197.512398][ T6557] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.949849][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 197.949870][ T29] audit: type=1326 audit(1718384931.159:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6708 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c6b27cea9 code=0x0 [ 198.022880][ T29] audit: type=1326 audit(1718384931.229:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6711 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf807cea9 code=0x7ffc0000 [ 198.069698][ T6716] loop3: detected capacity change from 0 to 256 [ 198.076815][ T29] audit: type=1326 audit(1718384931.229:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6711 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf807cea9 code=0x7ffc0000 [ 198.099365][ T29] audit: type=1326 audit(1718384931.239:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6711 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cf807cea9 code=0x7ffc0000 [ 198.127099][ T29] audit: type=1326 audit(1718384931.239:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6711 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf807cea9 code=0x7ffc0000 [ 198.170729][ T29] audit: type=1326 audit(1718384931.239:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6711 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf807cea9 code=0x7ffc0000 [ 198.218366][ T29] audit: type=1326 audit(1718384931.239:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6711 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cf807cea9 code=0x7ffc0000 [ 198.242912][ T29] audit: type=1326 audit(1718384931.239:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6711 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cf807cea9 code=0x7ffc0000 [ 198.266414][ T29] audit: type=1326 audit(1718384931.239:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6711 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9cf807a627 code=0x7ffc0000 [ 198.291456][ T29] audit: type=1326 audit(1718384931.239:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6711 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9cf8040309 code=0x7ffc0000 [ 198.344543][ T6716] FAT-fs (loop3): Directory bread(block 64) failed [ 198.351643][ T6716] FAT-fs (loop3): Directory bread(block 65) failed [ 198.363500][ T6716] FAT-fs (loop3): Directory bread(block 66) failed [ 198.373961][ T6716] FAT-fs (loop3): Directory bread(block 67) failed [ 198.380898][ T6716] FAT-fs (loop3): Directory bread(block 68) failed [ 198.389314][ T6716] FAT-fs (loop3): Directory bread(block 69) failed [ 198.397728][ T6716] FAT-fs (loop3): Directory bread(block 70) failed [ 198.404572][ T6716] FAT-fs (loop3): Directory bread(block 71) failed [ 198.411420][ T6716] FAT-fs (loop3): Directory bread(block 72) failed [ 198.418336][ T6716] FAT-fs (loop3): Directory bread(block 73) failed [ 198.475383][ T6725] loop1: detected capacity change from 0 to 128 [ 199.026736][ T6730] loop1: detected capacity change from 0 to 4096 [ 199.115883][ T6741] netlink: 'syz-executor.3': attribute type 28 has an invalid length. [ 199.325432][ T6741] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 199.425457][ T6741] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 199.881947][ T6749] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 200.036574][ T6756] Illegal XDP return value 4294967294 on prog (id 89) dev N/A, expect packet loss! [ 200.449635][ T6772] loop1: detected capacity change from 0 to 512 [ 200.462565][ T6755] team0: Port device team_slave_0 removed [ 200.571990][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.753445][ T6774] loop3: detected capacity change from 0 to 1024 [ 200.839648][ T6774] hfsplus: extend alloc file! (8192,65536,366) [ 201.421300][ T6761] loop4: detected capacity change from 0 to 32768 [ 201.436901][ T6761] xfs: Bad value for 'allocsize' [ 202.477618][ T6791] syzkaller0: entered promiscuous mode [ 202.504680][ T6791] syzkaller0: entered allmulticast mode [ 202.537085][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 202.554109][ T6802] netlink: 'syz-executor.1': attribute type 28 has an invalid length. [ 202.575213][ T6802] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 202.602001][ T6802] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 203.736677][ T6819] mmap: syz-executor.1 (6819) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 203.765025][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 203.765048][ T29] audit: type=1326 audit(1718384936.999:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6816 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9ea27cea9 code=0x0 [ 203.916561][ T6827] loop0: detected capacity change from 0 to 512 [ 203.945539][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 203.975777][ T6827] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 204.000559][ T6827] EXT4-fs (loop0): invalid journal inode [ 204.007768][ T6827] EXT4-fs (loop0): can't get journal size [ 204.086196][ T6827] EXT4-fs (loop0): 1 truncate cleaned up [ 204.113081][ T6827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.166667][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.193036][ T6842] Bluetooth: MGMT ver 1.22 [ 204.194971][ T45] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 204.212226][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.232565][ T45] usb 4-1: config 0 descriptor?? [ 204.305344][ T6843] netlink: 'syz-executor.1': attribute type 28 has an invalid length. [ 204.657905][ T6853] loop4: detected capacity change from 0 to 1024 [ 204.679883][ T45] hid-led 0003:1D34:000A.0006: unknown main item tag 0x0 [ 204.760231][ T6557] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.871532][ T6853] usb usb8: usbfs: interface 0 claimed by hub while 'syz-executor.4' sets config #5001287 [ 204.889074][ T45] hid-led 0003:1D34:000A.0006: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 204.932013][ T45] hid-led 0003:1D34:000A.0006: Dream Cheeky Webmail Notifier initialized [ 204.943060][ T6858] tipc: Enabling of bearer rejected, failed to enable media [ 204.980850][ T6864] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x2 [ 205.113590][ T6814] loop3: detected capacity change from 0 to 512 [ 205.131266][ T6814] EXT4-fs (loop3): Test dummy encryption mode enabled [ 205.219856][ T6814] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #17: comm syz-executor.3: iget: bogus i_mode (0) [ 205.252280][ T6814] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 17 (err -117) [ 205.267616][ T6814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.310964][ T6881] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.375855][ T6814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.401552][ T6881] loop4: detected capacity change from 0 to 1024 [ 205.418789][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 205.435669][ T6881] ext4: Unknown parameter 'nouser_xattr' [ 205.451988][ T6814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.500566][ T6881] loop4: detected capacity change from 0 to 512 [ 205.522132][ T6881] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 205.557440][ T6881] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 205.589725][ T9] usb 4-1: USB disconnect, device number 5 [ 205.602828][ T6881] EXT4-fs (loop4): 1 truncate cleaned up [ 205.648435][ T6881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.671850][ T6885] loop0: detected capacity change from 0 to 4096 [ 205.720224][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 205.761523][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 205.775451][ T6881] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: overlapping e_value [ 205.775614][ T6885] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 205.796056][ T45] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 205.811522][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 205.822303][ T6885] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 205.839138][ T6888] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.848134][ T45] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 205.861150][ T6889] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.899659][ T6881] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1766: inode #15: comm syz-executor.4: unable to update i_inline_off [ 205.926600][ T45] usb 2-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 205.946617][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 205.972538][ T45] usb 2-1: SerialNumber: syz [ 205.991246][ T45] usb-storage 2-1:1.0: USB Mass Storage device detected [ 206.041217][ T45] usb-storage 2-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 206.093336][ T45] scsi host1: usb-storage 2-1:1.0 [ 206.113892][ T6881] syz-executor.4 (6881) used greatest stack depth: 17712 bytes left [ 206.142495][ T6574] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir1702416591/syzkaller.ruTQZT/13/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 206.161983][ T6522] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.198542][ T6574] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz-executor.3: bg 0: block 7: invalid block bitmap [ 206.244966][ T45] usb 2-1: USB disconnect, device number 3 [ 206.255209][ T6574] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 206.277772][ T5106] Bluetooth: hci3: command 0x1407 tx timeout [ 206.280672][ T5105] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 206.307199][ T6574] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir1702416591/syzkaller.ruTQZT/13/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 206.373251][ T6574] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir1702416591/syzkaller.ruTQZT/13/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 206.451953][ T6574] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir1702416591/syzkaller.ruTQZT/13/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 206.497316][ T6902] xt_TCPMSS: Only works on TCP SYN packets [ 206.518495][ T6574] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir1702416591/syzkaller.ruTQZT/13/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 206.591781][ T6574] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir1702416591/syzkaller.ruTQZT/13/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 206.647928][ T6574] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir1702416591/syzkaller.ruTQZT/13/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 206.699443][ T6574] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir1702416591/syzkaller.ruTQZT/13/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 206.870341][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 207.975245][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 208.010546][ T25] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=69.e6 [ 208.025006][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.043299][ T25] usb 3-1: Product: syz [ 208.049738][ T25] usb 3-1: Manufacturer: syz [ 208.052609][ T2485] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.054454][ T25] usb 3-1: SerialNumber: syz [ 208.095792][ T25] usb 3-1: config 0 descriptor?? [ 208.104095][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 208.149971][ T6920] loop4: detected capacity change from 0 to 4096 [ 208.171106][ T6920] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 208.192419][ T6920] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 208.245126][ T6922] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.320089][ T25] gspca_stk1135: reg_w 0x2 err -71 [ 208.328898][ T2485] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.345086][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 208.354604][ T25] gspca_stk1135: Sensor write failed [ 208.372176][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 208.399885][ T25] gspca_stk1135: Sensor write failed [ 208.427000][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 208.449767][ T25] gspca_stk1135: Sensor read failed [ 208.455470][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 208.461941][ T25] gspca_stk1135: Sensor read failed [ 208.468905][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 208.472441][ T2485] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.475664][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 208.475709][ T25] gspca_stk1135: Sensor read failed [ 208.475737][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 208.524981][ T25] gspca_stk1135: Sensor read failed [ 208.548336][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 208.580655][ T25] gspca_stk1135: Sensor write failed [ 208.604970][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 208.614841][ T25] gspca_stk1135: Sensor write failed [ 208.620233][ T25] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 208.656906][ T25] usb 3-1: USB disconnect, device number 4 [ 208.710555][ T2485] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.021639][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.040924][ T5106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.049473][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.058900][ T5106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.079500][ T5106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.092242][ T5106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.162226][ T2485] bridge_slave_1: left allmulticast mode [ 209.188008][ T2485] bridge_slave_1: left promiscuous mode [ 209.213201][ T2485] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.266607][ T2485] bridge_slave_0: left allmulticast mode [ 209.272319][ T2485] bridge_slave_0: left promiscuous mode [ 209.304606][ T2485] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.357393][ T6574] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.883837][ T6941] loop2: detected capacity change from 0 to 1024 [ 209.906467][ T6941] ext4: Unknown parameter 'nouser_xattr' [ 210.015227][ T6941] loop2: detected capacity change from 0 to 512 [ 210.043283][ T6941] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 210.090098][ T6941] EXT4-fs (loop2): 1 truncate cleaned up [ 210.106158][ T6941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.212314][ T6941] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: overlapping e_value [ 210.240087][ T6941] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1766: inode #15: comm syz-executor.2: unable to update i_inline_off [ 210.300729][ T6945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 210.333068][ T5106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.355142][ T5106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.383123][ T5106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.392753][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.413202][ T5106] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.431801][ T5106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.454753][ T2485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.511039][ T2485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.525563][ T2485] bond0 (unregistering): Released all slaves [ 210.655296][ T6939] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 210.697650][ T6570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.022112][ T6959] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 211.130434][ T29] audit: type=1326 audit(1718384944.369:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6961 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9ea27cea9 code=0x0 [ 211.155449][ T5105] Bluetooth: hci2: command tx timeout [ 211.163023][ T2485] hsr_slave_0: left promiscuous mode [ 211.176142][ T2485] hsr_slave_1: left promiscuous mode [ 211.184176][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.192023][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.200715][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.208426][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.236027][ T2485] veth1_macvtap: left promiscuous mode [ 211.241732][ T2485] veth0_macvtap: left promiscuous mode [ 211.247688][ T2485] veth1_vlan: left promiscuous mode [ 211.253073][ T2485] veth0_vlan: left promiscuous mode [ 211.704669][ T5106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.715497][ T5106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.723923][ T5106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.737664][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.745563][ T5106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 211.757281][ T5106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.813961][ T6967] loop2: detected capacity change from 0 to 256 [ 211.822332][ T6967] exfat: Bad value for 'gid' [ 212.136908][ T2485] team0 (unregistering): Port device team_slave_1 removed [ 212.525540][ T5106] Bluetooth: hci1: command tx timeout [ 212.621379][ T6966] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 212.630286][ T6966] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 212.742345][ T6979] loop2: detected capacity change from 0 to 256 [ 212.818277][ T29] audit: type=1800 audit(1718384946.059:386): pid=6979 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048658 res=0 errno=0 [ 212.933056][ T6946] chnl_net:caif_netlink_parms(): no params data found [ 213.019032][ T6924] chnl_net:caif_netlink_parms(): no params data found [ 213.180098][ T6946] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.187797][ T6946] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.200057][ T6946] bridge_slave_0: entered allmulticast mode [ 213.210650][ T6946] bridge_slave_0: entered promiscuous mode [ 213.223471][ T6946] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.233671][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.241156][ T5106] Bluetooth: hci2: command tx timeout [ 213.252954][ T6946] bridge_slave_1: entered allmulticast mode [ 213.260653][ T6946] bridge_slave_1: entered promiscuous mode [ 213.369725][ T6946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.422664][ T6924] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.440252][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.458927][ T6924] bridge_slave_0: entered allmulticast mode [ 213.467377][ T6924] bridge_slave_0: entered promiscuous mode [ 213.477599][ T6924] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.485003][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.492253][ T6924] bridge_slave_1: entered allmulticast mode [ 213.500153][ T6924] bridge_slave_1: entered promiscuous mode [ 213.511469][ T6946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.631624][ T1048] kworker/u8:6: attempt to access beyond end of device [ 213.631624][ T1048] loop2: rw=1, sector=256, nr_sectors = 288 limit=256 [ 213.674016][ T6946] team0: Port device team_slave_0 added [ 213.687756][ T1048] kworker/u8:6: attempt to access beyond end of device [ 213.687756][ T1048] loop2: rw=1, sector=640, nr_sectors = 384 limit=256 [ 213.734049][ T1048] kworker/u8:6: attempt to access beyond end of device [ 213.734049][ T1048] loop2: rw=1, sector=1056, nr_sectors = 2048 limit=256 [ 213.794986][ T5106] Bluetooth: hci3: command tx timeout [ 213.802263][ T1048] kworker/u8:6: attempt to access beyond end of device [ 213.802263][ T1048] loop2: rw=1, sector=3104, nr_sectors = 2048 limit=256 [ 213.809505][ T6946] team0: Port device team_slave_1 added [ 213.829872][ T1048] kworker/u8:6: attempt to access beyond end of device [ 213.829872][ T1048] loop2: rw=1, sector=5152, nr_sectors = 1064 limit=256 [ 213.892527][ T6924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.997289][ T2485] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.052954][ T6924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.072725][ T6971] chnl_net:caif_netlink_parms(): no params data found [ 214.154444][ T6946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.175132][ T6946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.242373][ T6946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.398505][ T2485] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.438446][ T6946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.458949][ T6946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.514893][ T6946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.542949][ T6924] team0: Port device team_slave_0 added [ 214.597400][ T5106] Bluetooth: hci1: command tx timeout [ 214.600025][ T2485] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.623667][ T7004] loop2: detected capacity change from 0 to 32768 [ 214.632026][ T6924] team0: Port device team_slave_1 added [ 214.639138][ T7004] xfs: Bad value for 'allocsize' [ 214.715845][ T2485] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.754367][ T6946] hsr_slave_0: entered promiscuous mode [ 214.761517][ T6946] hsr_slave_1: entered promiscuous mode [ 214.775713][ T6946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.783546][ T6946] Cannot create hsr debugfs directory [ 214.791199][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.800520][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.828025][ T6924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.918463][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.933401][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.964869][ T6924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.987935][ T6971] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.011704][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.031108][ T6971] bridge_slave_0: entered allmulticast mode [ 215.040910][ T6971] bridge_slave_0: entered promiscuous mode [ 215.067960][ T6971] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.092712][ T6971] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.117414][ T6971] bridge_slave_1: entered allmulticast mode [ 215.132689][ T6971] bridge_slave_1: entered promiscuous mode [ 215.516825][ T5106] Bluetooth: hci2: command tx timeout [ 215.878695][ T5106] Bluetooth: hci3: command tx timeout [ 216.205366][ T6924] hsr_slave_0: entered promiscuous mode [ 216.222026][ T6924] hsr_slave_1: entered promiscuous mode [ 216.231693][ T6924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.247468][ T6924] Cannot create hsr debugfs directory [ 216.280251][ T6971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.297876][ T7013] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 216.308678][ T7013] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.318308][ T7013] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.797463][ T5106] Bluetooth: hci1: command tx timeout [ 217.199541][ T2485] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.261767][ T6971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.409541][ T2485] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.452019][ T6971] team0: Port device team_slave_0 added [ 217.460255][ T7025] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.475798][ T7025] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.568721][ T6971] team0: Port device team_slave_1 added [ 217.613944][ T2485] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.631401][ T7033] loop1: detected capacity change from 0 to 16 [ 217.662268][ T7035] loop2: detected capacity change from 0 to 256 [ 217.705875][ T29] audit: type=1800 audit(1718384950.949:387): pid=7035 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048659 res=0 errno=0 [ 217.729438][ T6971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.740920][ T6971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.772762][ T6971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.801086][ T2485] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.847405][ T6971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.854407][ T6971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.886204][ T5106] Bluetooth: hci2: command tx timeout [ 217.894954][ T6971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.967070][ T5106] Bluetooth: hci3: command tx timeout [ 218.153052][ T6971] hsr_slave_0: entered promiscuous mode [ 218.168605][ T6971] hsr_slave_1: entered promiscuous mode [ 218.182204][ T6971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.199599][ T6971] Cannot create hsr debugfs directory [ 218.229791][ T7037] loop1: detected capacity change from 0 to 32768 [ 218.490859][ T2485] bridge_slave_1: left allmulticast mode [ 218.501250][ T2485] bridge_slave_1: left promiscuous mode [ 218.508944][ T2485] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.524417][ T2485] bridge_slave_0: left allmulticast mode [ 218.534594][ T2485] bridge_slave_0: left promiscuous mode [ 218.545518][ T11] kworker/u8:0: attempt to access beyond end of device [ 218.545518][ T11] loop2: rw=1, sector=256, nr_sectors = 288 limit=256 [ 218.570886][ T2485] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.579942][ T11] kworker/u8:0: attempt to access beyond end of device [ 218.579942][ T11] loop2: rw=1, sector=608, nr_sectors = 416 limit=256 [ 218.605172][ T2485] bridge_slave_1: left allmulticast mode [ 218.610891][ T2485] bridge_slave_1: left promiscuous mode [ 218.620147][ T11] kworker/u8:0: attempt to access beyond end of device [ 218.620147][ T11] loop2: rw=1, sector=1088, nr_sectors = 2048 limit=256 [ 218.634733][ T2485] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.659934][ T2485] bridge_slave_0: left allmulticast mode [ 218.678677][ T11] kworker/u8:0: attempt to access beyond end of device [ 218.678677][ T11] loop2: rw=1, sector=3136, nr_sectors = 3720 limit=256 [ 218.693121][ T2485] bridge_slave_0: left promiscuous mode [ 218.699004][ T2485] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.711552][ T11] kworker/u8:0: attempt to access beyond end of device [ 218.711552][ T11] loop2: rw=1, sector=6856, nr_sectors = 1024 limit=256 [ 218.836009][ T5106] Bluetooth: hci1: command tx timeout [ 219.141868][ T7053] loop2: detected capacity change from 0 to 1024 [ 219.149863][ T7053] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.192313][ T7053] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c018, mo2=0002] [ 219.203287][ T7053] System zones: 0-1, 3-12 [ 219.226313][ T7053] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.371359][ T6570] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 219.684759][ T2485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.696571][ T2485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.710472][ T2485] bond0 (unregistering): Released all slaves [ 219.830016][ T2485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.841290][ T2485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.853590][ T2485] bond0 (unregistering): Released all slaves [ 220.018089][ T7061] loop1: detected capacity change from 0 to 512 [ 220.040657][ T5106] Bluetooth: hci3: command tx timeout [ 220.113358][ T29] audit: type=1326 audit(1718384953.349:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7063 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9ea27cea9 code=0x0 [ 220.636926][ T6946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 220.692910][ T6946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 220.711131][ T2485] hsr_slave_0: left promiscuous mode [ 220.726738][ T2485] hsr_slave_1: left promiscuous mode [ 220.747460][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.764940][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.783433][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.789042][ T7068] loop2: detected capacity change from 0 to 256 [ 220.794957][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.805987][ T7068] exfat: Bad value for 'gid' [ 220.820320][ T2485] hsr_slave_0: left promiscuous mode [ 220.826528][ T2485] hsr_slave_1: left promiscuous mode [ 220.832716][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.840410][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.851916][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.859500][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.915022][ T7067] loop1: detected capacity change from 0 to 32768 [ 220.938441][ T2485] veth1_macvtap: left promiscuous mode [ 220.944167][ T2485] veth0_macvtap: left promiscuous mode [ 220.949801][ T2485] veth1_vlan: left promiscuous mode [ 220.955182][ T2485] veth0_vlan: left promiscuous mode [ 220.961605][ T2485] veth1_macvtap: left promiscuous mode [ 220.967272][ T2485] veth0_macvtap: left promiscuous mode [ 220.972969][ T2485] veth1_vlan: left promiscuous mode [ 220.978644][ T2485] veth0_vlan: left promiscuous mode [ 221.178112][ T7070] loop2: detected capacity change from 0 to 256 [ 221.258846][ T29] audit: type=1800 audit(1718384954.499:389): pid=7070 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048660 res=0 errno=0 [ 221.990938][ T2485] team0 (unregistering): Port device team_slave_1 removed [ 222.060616][ T1048] kworker/u8:6: attempt to access beyond end of device [ 222.060616][ T1048] loop2: rw=1, sector=256, nr_sectors = 288 limit=256 [ 222.075790][ T1048] kworker/u8:6: attempt to access beyond end of device [ 222.075790][ T1048] loop2: rw=1, sector=608, nr_sectors = 416 limit=256 [ 222.089956][ T1048] kworker/u8:6: attempt to access beyond end of device [ 222.089956][ T1048] loop2: rw=1, sector=1056, nr_sectors = 64 limit=256 [ 222.090614][ T2485] team0 (unregistering): Port device team_slave_0 removed [ 222.114415][ T1048] kworker/u8:6: attempt to access beyond end of device [ 222.114415][ T1048] loop2: rw=1, sector=1152, nr_sectors = 6696 limit=256 [ 222.303267][ T29] audit: type=1800 audit(1718384955.539:390): pid=7075 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1949 res=0 errno=0 [ 224.721216][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.841203][ T7089] loop2: detected capacity change from 0 to 1024 [ 224.893424][ T7089] hfsplus: extend alloc file! (8192,65536,366) [ 225.051417][ T2485] team0 (unregistering): Port device team_slave_1 removed [ 225.157643][ T2485] team0 (unregistering): Port device team_slave_0 removed [ 225.826778][ T7097] loop2: detected capacity change from 0 to 128 [ 225.948600][ T6946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 225.985743][ T6946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 226.152305][ T29] audit: type=1326 audit(1718384959.389:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7100 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9ea27cea9 code=0x0 [ 226.315684][ T6946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.370936][ T6946] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.406824][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.414007][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.471897][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.479135][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.979965][ T6946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.110029][ T6946] veth0_vlan: entered promiscuous mode [ 227.141823][ T6946] veth1_vlan: entered promiscuous mode [ 227.258749][ T7103] loop2: detected capacity change from 0 to 256 [ 227.276057][ T7103] exfat: Bad value for 'gid' [ 227.283903][ T6946] veth0_macvtap: entered promiscuous mode [ 227.302978][ T6946] veth1_macvtap: entered promiscuous mode [ 227.344188][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.364829][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.381772][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.392600][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.412866][ T6946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.488288][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.526940][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.544874][ T6946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.564836][ T6946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.616767][ T6946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.641507][ T6946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.665575][ T6946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.676515][ T6946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.685758][ T6946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.988564][ T2455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.009492][ T2440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.044967][ T2455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.054923][ T2440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.013718][ T6971] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 229.034384][ T29] audit: type=1326 audit(1718384962.269:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7128 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f098107cea9 code=0x0 [ 229.074532][ T6971] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 229.093219][ T6971] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 229.111845][ T6971] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 229.161088][ T7131] loop2: detected capacity change from 0 to 64 [ 230.901142][ T6924] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 230.955376][ T6924] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 231.038934][ T6924] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 231.072233][ T6924] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 231.110773][ T6971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.199697][ T6971] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.242036][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.249325][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.307672][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.314938][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.362349][ T29] audit: type=1326 audit(1718384964.599:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7151 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9ea27cea9 code=0x0 [ 231.589329][ T6924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.648336][ T6924] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.696859][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.704134][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.751968][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.759229][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.097377][ T6971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.460596][ T7155] loop1: detected capacity change from 0 to 32768 [ 232.469563][ T6924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.493641][ T7155] bcachefs (/dev/loop1): error reading superblock: error opening /dev/loop1: EACCES [ 232.582392][ T7169] loop2: detected capacity change from 0 to 256 [ 232.594004][ T7169] exfat: Bad value for 'gid' [ 232.644133][ T6924] veth0_vlan: entered promiscuous mode [ 232.661402][ T6924] veth1_vlan: entered promiscuous mode [ 232.759652][ T6924] veth0_macvtap: entered promiscuous mode [ 232.783047][ T6924] veth1_macvtap: entered promiscuous mode [ 232.856351][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.880658][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.901842][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.942896][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.981959][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.006841][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.027696][ T6924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.073364][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.144367][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.154603][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.174199][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.184364][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.202687][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.219006][ T6924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.241212][ T6924] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.254805][ T6924] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.263567][ T6924] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.272788][ T6924] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.367287][ T7178] loop2: detected capacity change from 0 to 8192 [ 233.388431][ T7178] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 233.409310][ T7180] loop1: detected capacity change from 0 to 4096 [ 233.520381][ T6971] veth0_vlan: entered promiscuous mode [ 233.628356][ T6971] veth1_vlan: entered promiscuous mode [ 233.695693][ T2440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.703570][ T2440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.815776][ T6971] veth0_macvtap: entered promiscuous mode [ 233.829918][ T7187] loop2: detected capacity change from 0 to 256 [ 233.853051][ T6971] veth1_macvtap: entered promiscuous mode [ 233.873690][ T2485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.905060][ T2485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.919737][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.945883][ T29] audit: type=1800 audit(1718384967.189:394): pid=7187 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048664 res=0 errno=0 [ 233.977700][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.006267][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.038565][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.049410][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.060375][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.071366][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.083180][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.097549][ T6971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.149740][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.192738][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.224832][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.250593][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.274863][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.294811][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.304668][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.337015][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.376969][ T6971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.414618][ T6971] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.464828][ T6971] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.473594][ T6971] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.520417][ T6971] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.756142][ T1041] kworker/u8:5: attempt to access beyond end of device [ 234.756142][ T1041] loop2: rw=1, sector=256, nr_sectors = 288 limit=256 [ 234.787126][ T1041] kworker/u8:5: attempt to access beyond end of device [ 234.787126][ T1041] loop2: rw=1, sector=608, nr_sectors = 96 limit=256 [ 234.828111][ T1041] kworker/u8:5: attempt to access beyond end of device [ 234.828111][ T1041] loop2: rw=1, sector=736, nr_sectors = 288 limit=256 [ 234.857315][ T2485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.878842][ T2485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.916555][ T1041] kworker/u8:5: attempt to access beyond end of device [ 234.916555][ T1041] loop2: rw=1, sector=1056, nr_sectors = 4680 limit=256 [ 234.954385][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.985326][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.393038][ T7216] loop0: detected capacity change from 0 to 512 [ 235.465446][ T7216] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 17 [ 235.508500][ T7216] ext4_test_bit(bit=16, block=4) = 1 [ 235.524251][ T7216] is_bad_inode(inode)=0 [ 235.537890][ T7216] NEXT_ORPHAN(inode)=0 [ 235.542008][ T7216] max_ino=32 [ 235.552235][ T7227] loop2: detected capacity change from 0 to 256 [ 235.590089][ T7216] i_nlink=1 [ 235.594656][ T7216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.697426][ T7225] loop1: detected capacity change from 0 to 4096 [ 235.732536][ T6924] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.879934][ T7232] loop2: detected capacity change from 0 to 256 [ 235.891719][ T7230] loop0: detected capacity change from 0 to 256 [ 235.929112][ T7232] FAT-fs (loop2): Directory bread(block 64) failed [ 235.948534][ T7232] FAT-fs (loop2): Directory bread(block 65) failed [ 235.970337][ T7232] FAT-fs (loop2): Directory bread(block 66) failed [ 235.990643][ T7232] FAT-fs (loop2): Directory bread(block 67) failed [ 235.991201][ T29] audit: type=1800 audit(1718384969.229:395): pid=7230 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048672 res=0 errno=0 [ 236.004973][ T7232] FAT-fs (loop2): Directory bread(block 68) failed [ 236.044867][ T7232] FAT-fs (loop2): Directory bread(block 69) failed [ 236.058752][ T7232] FAT-fs (loop2): Directory bread(block 70) failed [ 236.080996][ T7232] FAT-fs (loop2): Directory bread(block 71) failed [ 236.095003][ T7232] FAT-fs (loop2): Directory bread(block 72) failed [ 236.111945][ T7232] FAT-fs (loop2): Directory bread(block 73) failed [ 236.133149][ T7217] loop4: detected capacity change from 0 to 32768 [ 236.325048][ T7232] syz-executor.2: attempt to access beyond end of device [ 236.325048][ T7232] loop2: rw=2049, sector=1224, nr_sectors = 32 limit=256 [ 236.380285][ T7217] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 236.400750][ T7232] syz-executor.2: attempt to access beyond end of device [ 236.400750][ T7232] loop2: rw=2049, sector=1288, nr_sectors = 88 limit=256 [ 236.437717][ T7217] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 236.527884][ T7217] bcachefs (loop4): alloc_read... done [ 236.553090][ T7217] bcachefs (loop4): stripes_read... done [ 236.570357][ T7217] bcachefs (loop4): snapshots_read... done [ 236.582975][ T7217] bcachefs (loop4): journal_replay... done [ 236.589166][ T7217] bcachefs (loop4): resume_logged_ops... done [ 236.608929][ T7217] bcachefs (loop4): going read-write [ 236.626343][ T7217] bcachefs (loop4): done starting filesystem [ 236.777923][ T1048] kworker/u8:6: attempt to access beyond end of device [ 236.777923][ T1048] loop0: rw=1, sector=256, nr_sectors = 192 limit=256 [ 236.840641][ T1048] kworker/u8:6: attempt to access beyond end of device [ 236.840641][ T1048] loop0: rw=1, sector=480, nr_sectors = 64 limit=256 [ 236.912003][ T1048] kworker/u8:6: attempt to access beyond end of device [ 236.912003][ T1048] loop0: rw=1, sector=608, nr_sectors = 416 limit=256 [ 236.945711][ T7217] syz-executor.4 (7217) used greatest stack depth: 15544 bytes left [ 236.986935][ T1048] kworker/u8:6: attempt to access beyond end of device [ 236.986935][ T1048] loop0: rw=1, sector=1056, nr_sectors = 2856 limit=256 [ 237.031518][ T6971] bcachefs (loop4): shutting down [ 237.051715][ T6971] bcachefs (loop4): going read-only [ 237.064866][ T6971] bcachefs (loop4): finished waiting for writes to stop [ 237.125047][ T6971] bcachefs (loop4): flushing journal and stopping allocators, journal seq 13 [ 237.149686][ T7262] loop2: detected capacity change from 0 to 512 [ 237.186132][ T6971] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 15 [ 237.228371][ T6971] bcachefs (loop4): shutdown complete, journal seq 16 [ 237.248593][ T6971] bcachefs (loop4): marking filesystem clean [ 237.260189][ T7262] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 237.294860][ T7262] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: journalled. [ 237.352037][ T6971] bcachefs (loop4): shutdown complete [ 237.444467][ T7262] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 237.872696][ T7266] loop0: detected capacity change from 0 to 512 [ 237.939152][ T7266] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz-executor.0: bad orphan inode 17 [ 237.995217][ T7266] ext4_test_bit(bit=16, block=4) = 1 [ 238.000580][ T7266] is_bad_inode(inode)=0 [ 238.028117][ T7266] NEXT_ORPHAN(inode)=0 [ 238.046748][ T7266] max_ino=32 [ 238.050031][ T7266] i_nlink=1 [ 238.054494][ T7266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.313244][ T6924] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.087813][ T29] audit: type=1326 audit(1718384972.329:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098107cea9 code=0x7ffc0000 [ 239.205752][ T29] audit: type=1326 audit(1718384972.329:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098107cea9 code=0x7ffc0000 [ 239.302315][ T7278] loop4: detected capacity change from 0 to 1024 [ 239.307574][ T29] audit: type=1326 audit(1718384972.359:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f098107cea9 code=0x7ffc0000 [ 239.340637][ T29] audit: type=1326 audit(1718384972.359:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098107cea9 code=0x7ffc0000 [ 239.360502][ T7278] hfsplus: unable to parse mount options [ 239.384253][ T29] audit: type=1326 audit(1718384972.359:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098107cea9 code=0x7ffc0000 [ 239.417961][ T29] audit: type=1326 audit(1718384972.359:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f098107cea9 code=0x7ffc0000 [ 239.442494][ T29] audit: type=1326 audit(1718384972.359:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098107cea9 code=0x7ffc0000 [ 239.472104][ T29] audit: type=1326 audit(1718384972.369:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f098107a627 code=0x7ffc0000 [ 239.495167][ T29] audit: type=1326 audit(1718384972.369:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0981040309 code=0x7ffc0000 [ 239.528830][ T29] audit: type=1326 audit(1718384972.369:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7272 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f098107cea9 code=0x7ffc0000 [ 239.550895][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.892419][ T7288] loop1: detected capacity change from 0 to 64 [ 240.021606][ T7288] fuse: Unknown parameter '0x000000000000000400000000000000000000000|-xJu99HvZ@đ' [ 241.771780][ T7319] loop3: detected capacity change from 0 to 1024 [ 241.779109][ T7312] loop2: detected capacity change from 0 to 4096 [ 241.805322][ T7319] hfsplus: unable to parse mount options [ 242.147109][ T7321] loop4: detected capacity change from 0 to 4096 [ 242.203791][ T7321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.328450][ T6971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.036015][ T5106] Bluetooth: hci3: unexpected cc 0x042d length: 63 > 7 [ 243.143332][ T7329] loop1: detected capacity change from 0 to 32768 [ 243.146234][ T7339] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 243.191211][ T7339] loop2: detected capacity change from 0 to 2048 [ 244.474010][ T7353] loop2: detected capacity change from 0 to 512 [ 244.495216][ T7353] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 244.510764][ T7353] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: journalled. [ 244.600625][ T7353] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 244.869843][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 244.869865][ T29] audit: type=1326 audit(1718384978.079:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7357 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098107cea9 code=0x7ffc0000 [ 244.986674][ T29] audit: type=1326 audit(1718384978.079:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7357 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098107cea9 code=0x7ffc0000 [ 245.027719][ T29] audit: type=1326 audit(1718384978.079:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7357 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f098107cea9 code=0x7ffc0000 [ 245.050315][ T29] audit: type=1326 audit(1718384978.079:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7357 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098107cea9 code=0x7ffc0000 [ 245.210917][ T7365] loop1: detected capacity change from 0 to 2048 [ 245.577128][ T29] audit: type=1326 audit(1718384978.079:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7357 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098107cea9 code=0x7ffc0000 [ 245.723206][ T29] audit: type=1326 audit(1718384978.089:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7357 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f098107cea9 code=0x7ffc0000 [ 245.783502][ T29] audit: type=1326 audit(1718384978.089:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7357 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098107cea9 code=0x7ffc0000 [ 245.885180][ T29] audit: type=1326 audit(1718384978.089:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7357 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f098107a627 code=0x7ffc0000 [ 245.923374][ T29] audit: type=1326 audit(1718384978.099:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7357 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0981040309 code=0x7ffc0000 [ 245.950797][ T29] audit: type=1326 audit(1718384978.099:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7357 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f098107cea9 code=0x7ffc0000 [ 247.153174][ T5106] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 247.162444][ T5106] Bluetooth: hci3: Injecting HCI hardware error event [ 247.180138][ T5106] Bluetooth: hci3: hardware error 0x00 [ 247.295232][ T5105] Bluetooth: hci4: unexpected cc 0x042d length: 63 > 7 [ 247.793875][ T7392] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 248.179315][ T7401] loop1: detected capacity change from 0 to 4096 [ 248.258826][ T7406] loop3: detected capacity change from 0 to 256 [ 250.322695][ T7412] loop4: detected capacity change from 0 to 2048 [ 250.368836][ T5106] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 250.645476][ T7412] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 250.653279][ T7412] UDF-fs: Scanning with blocksize 512 failed [ 250.683921][ T7412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.951321][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 250.951342][ T29] audit: type=1800 audit(1718384984.189:422): pid=7406 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048674 res=0 errno=0 [ 251.247342][ T1041] kworker/u8:5: attempt to access beyond end of device [ 251.247342][ T1041] loop3: rw=1, sector=256, nr_sectors = 288 limit=256 [ 251.267644][ T1041] kworker/u8:5: attempt to access beyond end of device [ 251.267644][ T1041] loop3: rw=1, sector=608, nr_sectors = 64 limit=256 [ 251.282704][ T1041] kworker/u8:5: attempt to access beyond end of device [ 251.282704][ T1041] loop3: rw=1, sector=704, nr_sectors = 320 limit=256 [ 251.298436][ T1041] kworker/u8:5: attempt to access beyond end of device [ 251.298436][ T1041] loop3: rw=1, sector=1056, nr_sectors = 696 limit=256 [ 251.314917][ T5106] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 251.325875][ T5106] Bluetooth: hci4: Injecting HCI hardware error event [ 251.335961][ T5105] Bluetooth: hci4: hardware error 0x00 [ 251.358178][ T5106] Bluetooth: hci0: unexpected cc 0x042d length: 63 > 7 [ 251.598559][ T7427] loop4: detected capacity change from 0 to 128 [ 251.637557][ T7427] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 251.682734][ T7427] ext4 filesystem being mounted at /root/syzkaller-testdir2526235785/syzkaller.ZPZwCm/13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 251.898847][ T6971] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.221070][ T7448] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.722768][ T7444] loop1: detected capacity change from 0 to 40427 [ 253.394935][ T5105] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 253.912017][ T29] audit: type=1800 audit(1718384987.149:423): pid=7444 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1941 res=0 errno=0 [ 254.545021][ T5148] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 254.660681][ T7473] loop3: detected capacity change from 0 to 512 [ 254.713797][ T7473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.733342][ T7473] ext4 filesystem being mounted at /root/syzkaller-testdir3084570359/syzkaller.pxr8XG/35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.755089][ T5148] usb 2-1: Using ep0 maxpacket: 8 [ 254.780948][ T5148] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 254.794895][ T5148] usb 2-1: config 0 has no interface number 0 [ 254.801312][ T5148] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.844861][ T5148] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 254.864290][ T5148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.896483][ T5148] usb 2-1: config 0 descriptor?? [ 254.930908][ T5148] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 255.017485][ T6946] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.161323][ T45] usb 2-1: USB disconnect, device number 4 [ 255.172000][ T45] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 255.396249][ T5105] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 255.406551][ T5105] Bluetooth: hci0: Injecting HCI hardware error event [ 255.414945][ T5105] Bluetooth: hci0: hardware error 0x00 [ 255.842515][ T7484] loop1: detected capacity change from 0 to 512 [ 255.892289][ T7484] EXT4-fs (loop1): write access unavailable, skipping orphan cleanup [ 255.908825][ T7484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 255.990396][ T7484] EXT4-fs error (device loop1): ext4_lookup:1858: inode #2: comm syz-executor.1: deleted inode referenced: 12 [ 256.237791][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.245717][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.407068][ T7487] EXT4-fs error (device loop1): ext4_lookup:1858: inode #2: comm syz-executor.1: deleted inode referenced: 12 [ 257.382338][ T6497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.477990][ T5105] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 258.897310][ T7496] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 259.400894][ T7498] loop1: detected capacity change from 0 to 32768 [ 259.839292][ T7500] loop1: detected capacity change from 0 to 512 [ 260.312608][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 260.445279][ T7505] loop1: detected capacity change from 0 to 1024 [ 282.816670][ T5106] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.833489][ T5106] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.842609][ T5106] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.858749][ T4479] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.868052][ T5115] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 282.885158][ T5115] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 282.892377][ T4479] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 282.901402][ T5115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.911062][ T5115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 282.935679][ T5105] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 282.946958][ T5105] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 282.954467][ T5115] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 284.149726][ T5115] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 284.161257][ T5115] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 284.170277][ T5115] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 284.178584][ T5115] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 284.195795][ T5115] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 284.203219][ T5115] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 284.995432][ T5106] Bluetooth: hci5: command tx timeout [ 284.995480][ T5115] Bluetooth: hci6: command tx timeout [ 285.803582][ T5106] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 285.816311][ T5106] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 285.825378][ T5106] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 285.837142][ T5106] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 285.845129][ T5106] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 285.855064][ T5106] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 286.275864][ T5115] Bluetooth: hci7: command tx timeout [ 287.075030][ T5115] Bluetooth: hci5: command tx timeout [ 287.080518][ T5115] Bluetooth: hci6: command tx timeout [ 287.874834][ T5115] Bluetooth: hci8: command tx timeout [ 288.354891][ T5115] Bluetooth: hci7: command tx timeout [ 289.154958][ T5106] Bluetooth: hci6: command tx timeout [ 289.161093][ T5115] Bluetooth: hci5: command tx timeout [ 289.954768][ T5115] Bluetooth: hci8: command tx timeout [ 290.440632][ T5115] Bluetooth: hci7: command tx timeout [ 291.234880][ T5115] Bluetooth: hci5: command tx timeout [ 291.234925][ T5106] Bluetooth: hci6: command tx timeout [ 291.712607][ T5115] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 291.724157][ T5115] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 291.733004][ T5115] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 291.742517][ T5115] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 291.754681][ T5115] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 291.762084][ T5115] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 292.038367][ T5115] Bluetooth: hci8: command tx timeout [ 292.514838][ T5115] Bluetooth: hci7: command tx timeout [ 293.794826][ T5115] Bluetooth: hci9: command tx timeout [ 294.114750][ T5115] Bluetooth: hci8: command tx timeout [ 295.877381][ T5115] Bluetooth: hci9: command tx timeout [ 297.954898][ T5115] Bluetooth: hci9: command tx timeout [ 300.036516][ T5115] Bluetooth: hci9: command tx timeout [ 317.643893][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.650344][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 335.081926][ T5115] Bluetooth: hci2: command 0x0406 tx timeout [ 335.095923][ T4479] Bluetooth: hci1: command 0x0406 tx timeout [ 348.354287][ T5115] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 348.370354][ T5106] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 348.380239][ T5106] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 348.388621][ T5106] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 348.396506][ T5106] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 348.405918][ T5106] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 348.491338][ T5105] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 348.504401][ T5105] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 348.524045][ T5105] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 348.535805][ T5105] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 348.543738][ T5105] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 348.551301][ T5105] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 349.271616][ T5106] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 349.282262][ T5106] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 349.301576][ T5106] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 349.312273][ T5106] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 349.325606][ T5106] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 349.333163][ T5106] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 350.434740][ T5106] Bluetooth: hci10: command tx timeout [ 350.597586][ T5106] Bluetooth: hci11: command tx timeout [ 350.817110][ T5105] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 350.828512][ T5105] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 350.841898][ T5105] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 350.866324][ T5105] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 350.874200][ T5105] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 350.881804][ T5105] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 351.394770][ T5106] Bluetooth: hci12: command tx timeout [ 352.524659][ T5106] Bluetooth: hci10: command tx timeout [ 352.674731][ T5106] Bluetooth: hci11: command tx timeout [ 352.924827][ T5106] Bluetooth: hci13: command tx timeout [ 353.492841][ T5106] Bluetooth: hci12: command tx timeout [ 354.594670][ T5106] Bluetooth: hci10: command tx timeout [ 354.758359][ T5106] Bluetooth: hci11: command tx timeout [ 354.995011][ T5106] Bluetooth: hci13: command tx timeout [ 355.554744][ T5106] Bluetooth: hci12: command tx timeout [ 356.674788][ T5106] Bluetooth: hci10: command tx timeout [ 356.834700][ T5106] Bluetooth: hci11: command tx timeout [ 356.888792][ T5105] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 356.900720][ T5105] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 356.914353][ T5105] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 356.934856][ T5105] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 356.942896][ T5105] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 356.950641][ T5105] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 357.075097][ T5106] Bluetooth: hci13: command tx timeout [ 357.640832][ T5106] Bluetooth: hci12: command tx timeout [ 358.994819][ T5106] Bluetooth: hci14: command tx timeout [ 359.172601][ T5106] Bluetooth: hci13: command tx timeout [ 361.074735][ T5106] Bluetooth: hci14: command tx timeout [ 363.154827][ T5106] Bluetooth: hci14: command tx timeout [ 365.238096][ T5106] Bluetooth: hci14: command tx timeout [ 379.087853][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.094230][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 406.754916][ T7538] Bluetooth: hci6: command 0x0406 tx timeout [ 406.761010][ T7538] Bluetooth: hci7: command 0x0406 tx timeout [ 406.784544][ T7538] Bluetooth: hci5: command 0x0406 tx timeout [ 411.874745][ T5106] Bluetooth: hci8: command 0x0406 tx timeout [ 414.035263][ T5106] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 414.055083][ T5115] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 414.063295][ T7539] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 414.073585][ T5115] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 414.089582][ T5115] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 414.096910][ T7539] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 414.110628][ T5115] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 414.118151][ T7539] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 414.132278][ T7539] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 414.132583][ T5115] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 414.150146][ T5115] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 414.154597][ T7539] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 414.472169][ T5105] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 414.483938][ T5105] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 414.496424][ T5105] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 414.509102][ T5105] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 414.520155][ T5105] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 414.527797][ T5105] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 414.915249][ T30] INFO: task syz-executor.0:7446 blocked for more than 143 seconds. [ 414.934651][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 414.942344][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.951225][ T30] task:syz-executor.0 state:D stack:28496 pid:7446 tgid:7443 ppid:6924 flags:0x00000006 2024/06/14 17:12:28 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 414.963601][ T30] Call Trace: [ 414.967079][ T30] [ 415.014516][ T30] __schedule+0x1796/0x49d0 [ 415.019140][ T30] ? __pfx___schedule+0x10/0x10 [ 415.024028][ T30] ? __pfx_lock_release+0x10/0x10 [ 415.054646][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 415.060188][ T30] ? schedule+0x90/0x320 [ 415.084650][ T30] schedule+0x14b/0x320 [ 415.088886][ T30] schedule_preempt_disabled+0x13/0x30 [ 415.094387][ T30] __mutex_lock+0x6a4/0xd70 [ 415.109038][ T30] ? __mutex_lock+0x527/0xd70 [ 415.113756][ T30] ? arp_ioctl+0x371/0x530 [ 415.134500][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 415.139688][ T30] ? __might_fault+0xc6/0x120 [ 415.144406][ T30] arp_ioctl+0x371/0x530 [ 415.162622][ T30] ? __pfx_arp_ioctl+0x10/0x10 [ 415.172730][ T30] inet_ioctl+0x2b5/0x4f0 [ 415.180667][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 415.188757][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 415.193697][ T30] sock_do_ioctl+0x158/0x460 [ 415.198502][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 415.203659][ T30] ? __asan_memset+0x23/0x50 [ 415.214037][ T30] ? smack_file_ioctl+0x2a1/0x3a0 [ 415.219153][ T30] sock_ioctl+0x629/0x8e0 [ 415.223517][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 415.234270][ T30] ? __fget_files+0x3f6/0x470 [ 415.239024][ T30] ? __fget_files+0x29/0x470 [ 415.243647][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 415.248797][ T30] ? security_file_ioctl+0x87/0xb0 [ 415.253942][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 415.274640][ T30] __se_sys_ioctl+0xfc/0x170 [ 415.279297][ T30] do_syscall_64+0xf3/0x230 [ 415.283833][ T30] ? clear_bhb_loop+0x35/0x90 [ 415.304490][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.310459][ T30] RIP: 0033:0x7fc4a927cea9 [ 415.334478][ T30] RSP: 002b:00007fc4aa01e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.342989][ T30] RAX: ffffffffffffffda RBX: 00007fc4a93b3f80 RCX: 00007fc4a927cea9 [ 415.368359][ T30] RDX: 0000000020000000 RSI: 0000000000008953 RDI: 0000000000000003 [ 415.400618][ T30] RBP: 00007fc4a92ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 415.409797][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.423798][ T30] R13: 000000000000000b R14: 00007fc4a93b3f80 R15: 00007fff0b8f8d68 [ 415.431893][ T30] [ 415.436730][ T30] INFO: task syz-executor.4:7462 blocked for more than 143 seconds. [ 415.450676][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 415.458446][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.478215][ T30] task:syz-executor.4 state:D stack:28960 pid:7462 tgid:7459 ppid:6971 flags:0x00000006 [ 415.494280][ T30] Call Trace: [ 415.497829][ T30] [ 415.500796][ T30] __schedule+0x1796/0x49d0 [ 415.511313][ T30] ? __pfx___schedule+0x10/0x10 [ 415.517554][ T30] ? __pfx_lock_release+0x10/0x10 [ 415.522630][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 415.534047][ T30] ? schedule+0x90/0x320 [ 415.538577][ T30] schedule+0x14b/0x320 [ 415.542779][ T30] schedule_preempt_disabled+0x13/0x30 [ 415.549789][