last executing test programs: 46.113774756s ago: executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$sock(r0, &(0x7f0000003440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002f00)=[@txtime={{0x18}}], 0x18}}], 0x1, 0x0) 45.948309511s ago: executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2000000000000094, &(0x7f0000000080)=[{}, {}, {}]}, 0x10) 45.769533038s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x90e976db910956fe, 0x4002011, r2, 0x0) write$evdev(r1, &(0x7f00000001c0)=[{}], 0x18) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0x208e24b) fallocate(r0, 0x3, 0x0, 0x1a00) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000900)) 44.405610818s ago: executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x45c) 43.967205716s ago: executing program 4: r0 = semget(0x3, 0x4, 0x610) semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000000)=""/38) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x0]) r1 = semget(0x1, 0x0, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000180)=""/206) r2 = semget(0x1, 0x4, 0x302) semget$private(0x0, 0x4, 0x300) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = semget(0x3, 0x4, 0x0) semctl$SEM_INFO(r3, 0x1, 0x13, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) semctl$GETZCNT(0x0, 0x0, 0xf, &(0x7f0000001400)=""/184) semop(0x0, &(0x7f00000014c0), 0x0) semop(r1, &(0x7f0000001500)=[{0x2}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000001740)=""/99) 43.696293667s ago: executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) wait4(0x0, 0x0, 0x0, 0x0) 42.754623892s ago: executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="26000000030000000000000000000000667573650000c535fe31"], 0x26) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x26, 0x0) 41.816646096s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 40.903487947s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$eJzs3c9rHG8ZAPBnJtlvf+VrUvVQC7bFVtKi3U0a2wYPtYLYU8Fa7zUmmxCyyYbspm1CkRTvCiIqePLkRfAPEKR/gggFvUsVRbTVgwd1ZWdnaxt3m0i3OzX5fGA67zvv7j7P27Az88687ARwaJ2LiJsRMRIRlyJiPN+e5sutdvudzutePH80316SaLXu/jmJJN/W/awkX5+IiJ2IOBoRX70V8Y3kv+M2trZX5mq16kZerzRX1yuNre3Ly6tzS9Wl6trMzPS12euzV2enBtLPiYi48aXff/87P/nyjV989sFv7/3x4jfbaY3l7a/2Y5A6XS9l/xddoxGx8S6CFWAkX5f6tH97ZIjJAACwp/Y5/kcj4lPZ+f94jGRnpwAAAMBB0vrCWPwjiWgBAAAAB1aazYFN0nI+F2As0rRc7szh/XgcT2v1RvMzi/XNtYXOXNmJKKWLy7XqVD5XeCJKSbs+nc+x7dav7KrPRMTJiPje+LGsXp6v1xaKvvgBAAAAh8SJXeP/v41n4/8jRecFAAAADNhE0QkAAAAA75zxPwAAABx8xv8AAABwoH3l9u320uo+/3rh/tbmSv3+5YVqY6W8ujlfnq9vrJeX6vWl7Df7Vvf6vFq9vv65WNt8WGlWG81KY2v73mp9c615b/m1R2ADAAAAQ3Ty7JPfJBGx8/lj2dL2QdFJAUOR7NGePSTkWV753RASAoZmpOgEgMKMFp0AUJhS0QkAhdvrOkDfyTu/HHwuAADAuzH5if73/10bgIMtLToBAGDo3P+Hw6v0+gzAq8VlAhTlI3u0v/39/1brf0oIAAAYuLFsSdJyfi9wLNK0XI74MHssQClZXK5Vp/Lxwa/HS0fa9ensncmec4YBAAAAAAAAAAAAAAAAAAAAAAAAgI5WK4kWAAAAcKBFpH9Isl/zj5gcvzC2+/rAB8nfx7N1RDz40d0fPJxrNjem29v/8nJ784f59itFXMEAAAAAduuO07vjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpBfPH813l2HG/dMXI2KiZ/yzR7PV0ShFxPG/JjH6yvuSiBgZQPydxxFxqlf8pJ1WTEQni17xjxUYP42IEwOID4fZk/b+52av718a57J17+/faL68rf77vzS6+7+RPvufD/cZ4/TTn1X6xn8ccXq09/6nGz/pE//8PuN//Wvb2/3aWj+OmOx5/Elei1Vprq5XGlvbl5dX55aqS9W1mZnpa7PXZ6/OTlUWl2vV/N+eMb77yZ//6039P94n/sQe/b+wz/7/8+nD5x/rFEu94l883/v4e6pP/DQ/9n06L7fbJ7vlnU75VWd++qszb+r/Qp/+v/z79zjQtmNe3Gf/L9351rN9vhQAGILG1vbKXK1W3fh/LKTxXqShMJDCkfcjDYVOoeg9EwAAMGj/OekvOhMAAAAAAAAAAAAAAAAAAAA4vIbxc2K7Y+4U01UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDf6dwAAAP//sf7Zeg==") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x90e976db910956fe, 0x4002011, r2, 0x0) write$evdev(r1, &(0x7f00000001c0)=[{}], 0x18) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0x208e24b) fallocate(r0, 0x3, 0x0, 0x1a00) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000900)) 39.496747672s ago: executing program 2: mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=']) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000012000102000000000001040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'], 0x2c}}, 0x0) 38.01312521s ago: executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) 37.56072202s ago: executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @loopback}, 0x6}}, 0x2e) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x400003, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) 34.210082255s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @dev, 0x5}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @dev, 0x1}], 0x1c) 33.321135551s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 33.229501665s ago: executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) clock_settime(0x5, 0x0) 33.035801155s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4e7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x7, {0x7, 0x0, "78df705a90"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 31.937778553s ago: executing program 3: r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x64) 31.83419819s ago: executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000001cc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000017c0)={[{@subsystem='freezer'}]}) 31.716991757s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_cmd={0x4d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}}) 31.619966452s ago: executing program 3: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x2c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0xc, [@const={0x9, 0x0, 0x0, 0xa, 0x1}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x53, 0x0, 0x5}, @ptr={0xb, 0x0, 0x0, 0x2, 0x2}, @enum={0x4, 0x8, 0x0, 0x6, 0x4, [{0xd, 0x3}, {0xf, 0x6}, {0xd, 0x9}, {0x6, 0x7}, {0xb, 0x9bfd}, {0x10, 0x4}, {0xb, 0xc1}, {0x1, 0x6}]}, @restrict={0x9, 0x0, 0x0, 0xb, 0x1}, @typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @restrict={0xc, 0x0, 0x0, 0xb, 0x3}, @restrict={0x1}, @enum={0xb, 0x3, 0x0, 0x6, 0x4, [{0x3}, {0xd2, 0x80000000}, {0x7, 0x4}]}]}, {0x0, [0x61, 0x5f, 0x5f, 0x2e, 0x61, 0x0, 0x0, 0x0, 0x61, 0x0]}}, &(0x7f0000000440)=""/4096, 0xec, 0x1000, 0x0, 0x9}, 0x20) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001540)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}]}, &(0x7f0000000100)='GPL\x00', 0xfe8, 0x70, &(0x7f0000000140)=""/112, 0x40f00, 0x1, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000200)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x5, 0x4, 0x8000}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f00000014c0)=[0xffffffffffffffff], &(0x7f0000001500)=[{0x2, 0x4, 0x7, 0x3}, {0x2, 0x1, 0x5, 0x7}, {0x1, 0x1, 0x8, 0x1}], 0x10, 0xffff}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001c40)={'ipvlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x10, &(0x7f0000001440)=@raw=[@generic={0x20, 0x5, 0x8, 0x401, 0x7}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000001600)='syzkaller\x00', 0x8001, 0xd1, &(0x7f0000001640)=""/209, 0x41100, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000001740)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000001780)={0x0, 0xf, 0x74f542c3, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000017c0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001800)=[{0x3, 0x5, 0xb, 0x8}, {0x0, 0x5, 0xa, 0xa}], 0x10, 0x5}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002fc0)={r3, 0xe0, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000002d40)=[0x0, 0x0], &(0x7f0000002d80)=[0x0], 0x0, 0xa7, &(0x7f0000002dc0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000002e00), &(0x7f0000002e40), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000002e80)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003340)={r0, 0xe0, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000003080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f00000030c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f0000003140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000003180), &(0x7f00000031c0), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000003200)}}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000033c0)=@generic={&(0x7f0000003380)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003480)={{}, &(0x7f0000003400), &(0x7f0000003440)=r3}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000003500)=@generic={&(0x7f00000034c0)='./file0\x00', 0x0, 0x14}, 0x18) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x6}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x58}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) 31.512186479s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 31.477312994s ago: executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f000000b280)=[{{&(0x7f0000009d00)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f000000ae40)=[@hopopts={{0x18}}, @hopopts_2292={{0x18}}], 0x30}}], 0x1, 0x0) 31.415809454s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x8, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f900001ab703000008000000b704000000001500850000003300000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.839969502s ago: executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000089be8c2e000000000001000000182000", @ANYRES32], 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', @random="0600002000"}) 30.195018151s ago: executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9, 0x0, "ffff79f000"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "00ff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xff) 30.109901544s ago: executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x10000043, 0x0, 0x0, 0x3}, 0xb09e2977203cb8be) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(r1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r3, 0xfdd1df4705532f1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 30.027308047s ago: executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'ip6erspan0\x00', {0x2, 0x0, @dev}}) 1.488307611s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 821.413914ms ago: executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000001cc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000017c0)={[{@subsystem='freezer'}]}) 0s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.953470][T12857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.998767][T12857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.023370][T12857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.108694][T12857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.156501][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 496.203941][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 496.241780][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 496.269121][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 496.296634][T12727] device veth0_vlan entered promiscuous mode [ 496.376723][T12857] device hsr_slave_0 entered promiscuous mode [ 496.412762][T12857] device hsr_slave_1 entered promiscuous mode [ 496.447934][T12857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.463127][T12857] Cannot create hsr debugfs directory [ 496.499675][T12727] device veth1_vlan entered promiscuous mode [ 496.668408][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 496.686244][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 496.725845][T12727] device veth0_macvtap entered promiscuous mode [ 496.824425][T12727] device veth1_macvtap entered promiscuous mode [ 496.901430][T12727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.928549][T12727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.956294][T12727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.981940][T12727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.010338][T12727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.037759][T12727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.062686][T12727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.088991][T12727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.120494][T12727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.163229][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 497.178691][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 497.187058][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 497.208901][ T3583] Bluetooth: hci5: command tx timeout [ 497.246371][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 497.330321][T12910] loop4: detected capacity change from 0 to 32768 [ 497.347860][T12910] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (12910) [ 497.394202][T12910] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 497.401907][T12857] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.414291][T12910] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 497.435937][T12910] BTRFS info (device loop4): force clearing of disk cache [ 497.453819][T12910] BTRFS info (device loop4): setting nodatasum [ 497.466407][T12910] BTRFS info (device loop4): allowing degraded mounts [ 497.484473][T12727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.500426][T12910] BTRFS info (device loop4): enabling disk space caching [ 497.507547][T12727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.514708][T12910] BTRFS info (device loop4): disk space caching is enabled [ 497.541976][T12727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.597741][T12727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.612347][T12727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.619665][T12910] BTRFS info (device loop4): rebuilding free space tree [ 497.643299][T12910] BTRFS info (device loop4): disabling free space tree [ 497.652230][T12910] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 497.662239][T12910] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 497.670362][T12727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.693756][T12902] loop2: detected capacity change from 0 to 40427 [ 497.707723][T12727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.719760][T12902] F2FS-fs (loop2): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 497.727754][T12727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.737482][T12902] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 497.751385][T12902] F2FS-fs (loop2): invalid crc value [ 497.758932][T12727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.775980][T12902] F2FS-fs (loop2): Found nat_bits in checkpoint [ 497.800223][T12727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.849217][T12902] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 497.858920][T12727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.882419][T12902] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 497.899383][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 497.914380][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 497.922838][T12902] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 497.994570][T12940] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 498.034689][T12606] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 498.081906][T12857] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.129871][T12727] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.139656][T12727] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.202431][T12727] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.257729][T12727] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.535713][T12857] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.771321][T12857] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.863020][ T3806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.898867][ T3806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.934551][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 499.037452][T12956] device macvlan2 entered promiscuous mode [ 499.064633][T12956] device bridge0 entered promiscuous mode [ 499.139014][T12956] team0: Port device macvlan2 added [ 499.192546][ T3903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.208696][ T3903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.288515][ T3583] Bluetooth: hci5: command tx timeout [ 499.342874][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 499.451286][T12857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 499.487434][T12857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 499.504528][T12857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 499.560490][T12857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 499.812444][T12970] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 499.844764][T12857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.969113][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 499.985928][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 500.005725][T12857] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.112923][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 500.128775][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 500.137584][ T3620] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.144763][ T3620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.189297][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 500.213862][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 500.245035][ T3620] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.252362][ T3620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.265171][T12962] loop4: detected capacity change from 0 to 32768 [ 500.297952][T12962] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (12962) [ 500.346842][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 500.356852][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 500.379325][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 500.416128][T12962] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 500.449025][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 500.457981][T12962] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 500.480792][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 500.486933][T12962] BTRFS info (device loop4): force clearing of disk cache [ 500.508846][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 500.514492][T12962] BTRFS info (device loop4): setting nodatasum [ 500.535753][T12962] BTRFS info (device loop4): allowing degraded mounts [ 500.538006][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 500.555879][T12962] BTRFS info (device loop4): enabling disk space caching [ 500.574222][T12962] BTRFS info (device loop4): disk space caching is enabled [ 500.606729][T12857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 500.648553][T12857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.686640][T12981] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 500.698331][T12981] tipc: Started in network mode [ 500.704472][T12981] tipc: Node identity 6, cluster identity 4711 [ 500.717981][T12981] tipc: Node number set to 6 [ 500.734516][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 500.754475][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 500.773615][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 500.781788][T12962] BTRFS info (device loop4): rebuilding free space tree [ 500.820854][T12962] BTRFS info (device loop4): disabling free space tree [ 500.837761][T12962] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 500.931168][T12962] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 500.944341][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 500.954031][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 501.002782][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 501.291557][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.298030][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.363882][T12606] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 501.374546][ T3583] Bluetooth: hci5: command tx timeout [ 501.450766][T13013] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 501.653820][T13020] loop2: detected capacity change from 0 to 512 [ 501.702161][T13022] device macvlan2 entered promiscuous mode [ 501.727237][T13020] EXT4-fs (loop2): bad block size 8192 [ 501.741804][T13022] device bridge0 entered promiscuous mode [ 501.857233][T13022] team0: Port device macvlan2 added [ 501.975540][T12857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.006532][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 502.208959][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 502.217028][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 502.226112][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 502.788248][T13034] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 502.855949][T13034] loop4: detected capacity change from 0 to 128 [ 503.021227][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 503.031174][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 503.042768][T12857] device veth0_vlan entered promiscuous mode [ 503.075690][T13037] syz-executor.4: attempt to access beyond end of device [ 503.075690][T13037] loop4: rw=2049, sector=145, nr_sectors = 504 limit=128 [ 503.155874][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 503.169902][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 503.197028][T13034] syz-executor.4: attempt to access beyond end of device [ 503.197028][T13034] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 503.214198][T12857] device veth1_vlan entered promiscuous mode [ 503.283486][ T9] device hsr_slave_0 left promiscuous mode [ 503.310004][ T9] device hsr_slave_1 left promiscuous mode [ 503.333009][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.343097][T13047] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 503.365896][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.416412][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.453149][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.473908][ T9] device bridge_slave_1 left promiscuous mode [ 503.487633][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.528850][ T9] device bridge_slave_0 left promiscuous mode [ 503.546165][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.575514][ T9] device veth1_macvtap left promiscuous mode [ 503.591756][ T9] device veth0_macvtap left promiscuous mode [ 503.620620][ T9] device veth1_vlan left promiscuous mode [ 503.652389][ T9] device veth0_vlan left promiscuous mode [ 504.115004][T13078] loop1: detected capacity change from 0 to 128 [ 504.256631][T13079] syz-executor.1: attempt to access beyond end of device [ 504.256631][T13079] loop1: rw=2049, sector=145, nr_sectors = 704 limit=128 [ 504.281723][ T9] team0 (unregistering): Port device team_slave_1 removed [ 504.340958][ T9] team0 (unregistering): Port device team_slave_0 removed [ 504.366233][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.387877][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.402157][T13078] syz-executor.1: attempt to access beyond end of device [ 504.402157][T13078] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 504.555660][ T9] bond0 (unregistering): Released all slaves [ 504.605556][T13075] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 504.672294][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 504.691960][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 504.726241][T12857] device veth0_macvtap entered promiscuous mode [ 504.787222][T12857] device veth1_macvtap entered promiscuous mode [ 504.883613][T12857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.909504][T12857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.927333][T12857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.966545][T12857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.977190][T12857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.017383][T12857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.037170][T12857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.075548][T12857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.100610][T12857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.122700][T13102] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 505.153503][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 505.168454][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 505.185916][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 505.205469][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 505.241259][T12857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.269310][T12857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.291654][T12857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.312010][T12857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.336866][T12857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.359426][T12857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.397676][T12857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.413859][T12857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.436899][T12857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.476161][T12857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.517839][T12857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.532254][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 505.548692][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 505.583672][T12857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.608535][T12857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.626097][T12857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.639539][T12857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.943382][ T3886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.957974][ T3886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.047214][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 506.097213][ T3886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.126670][ T3886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.178968][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 506.194846][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 507.236671][T13174] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 507.302336][ T4528] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 507.326376][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 507.345254][ T4528] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 507.411881][ T4528] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 507.562687][T13184] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 507.595228][T13184] netlink: 46 bytes leftover after parsing attributes in process `syz-executor.3'. [ 507.737783][ T4528] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 508.098049][ T4528] usb 5-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 508.107214][ T4528] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.171844][ T4528] usb 5-1: config 0 descriptor?? [ 508.481503][ T3616] usb 5-1: USB disconnect, device number 12 [ 508.648725][ T3618] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 508.894724][ T3618] usb 1-1: Using ep0 maxpacket: 32 [ 509.122145][T13228] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 509.181689][ T3618] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=99.d3 [ 509.208564][ T3618] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.226267][ T3618] usb 1-1: Product: syz [ 509.235536][ T3618] usb 1-1: Manufacturer: syz [ 509.266288][ T3618] usb 1-1: SerialNumber: syz [ 509.293415][ T3618] usb 1-1: config 0 descriptor?? [ 509.350109][ T3618] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 509.370507][ T3618] radio-si470x: probe of 1-1:0.0 failed with error -5 [ 509.563445][ T3618] radio-raremono 1-1:0.0: Thanko's Raremono connected: (10C4:818A) [ 509.667367][T13217] loop1: detected capacity change from 0 to 32768 [ 509.711444][T13217] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 509.724603][T13217] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 509.769158][T13217] XFS (loop1): Quotacheck needed: Please wait. [ 509.779267][ T3618] radio-raremono 1-1:0.0: raremono_cmd_main failed (-71) [ 509.825449][ T3618] radio-raremono 1-1:0.0: V4L2 device registered as radio32 [ 509.867970][ T3618] usb 1-1: USB disconnect, device number 13 [ 509.908374][T13217] XFS (loop1): Quotacheck: Done. [ 509.916302][ T3618] radio-raremono 1-1:0.0: Thanko's Raremono disconnected [ 510.035228][T12727] XFS (loop1): Unmounting Filesystem [ 510.132265][ T155] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 510.147729][ T155] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 510.178731][ T155] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 510.370249][T13265] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 510.399819][T13265] netlink: 46 bytes leftover after parsing attributes in process `syz-executor.3'. [ 510.437736][ T3616] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 510.472864][T13239] loop2: detected capacity change from 0 to 32768 [ 510.597432][T13239] XFS (loop2): Mounting V5 Filesystem [ 510.694994][T13239] XFS (loop2): Ending clean mount [ 510.704506][T13283] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 510.716913][T13239] XFS (loop2): Quotacheck needed: Please wait. [ 510.808853][ T3616] usb 5-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 510.825359][ T3616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.833654][T13239] XFS (loop2): Quotacheck: Done. [ 510.877349][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 510.886875][ T3616] usb 5-1: config 0 descriptor?? [ 510.936244][T11489] XFS (loop2): Unmounting Filesystem [ 511.840367][ T155] usb 5-1: USB disconnect, device number 13 [ 512.981009][T13296] loop1: detected capacity change from 0 to 32768 [ 513.053502][T13296] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 513.078766][T13296] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 513.166599][T13296] XFS (loop1): Quotacheck needed: Please wait. [ 513.354751][T13337] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 513.360560][T13296] XFS (loop1): Quotacheck: Done. [ 513.407022][T12727] XFS (loop1): Unmounting Filesystem [ 514.349288][T13329] loop4: detected capacity change from 0 to 32768 [ 514.362644][T13351] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 514.756055][T13329] XFS (loop4): Mounting V5 Filesystem [ 514.934575][T13368] loop0: detected capacity change from 0 to 1024 [ 514.958081][T13329] XFS (loop4): Ending clean mount [ 514.985483][T13368] hfsplus: unable to change nls mapping [ 515.000912][T13329] XFS (loop4): Quotacheck needed: Please wait. [ 515.025817][T13368] hfsplus: unable to parse mount options [ 515.202425][T13368] loop0: detected capacity change from 0 to 128 [ 515.217048][T13329] XFS (loop4): Quotacheck: Done. [ 515.379329][T12606] XFS (loop4): Unmounting Filesystem [ 515.392393][T12857] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00005934) [ 515.422845][T12857] FAT-fs (loop0): Filesystem has been set read-only [ 515.438031][T12857] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00005934) [ 516.494652][ T3886] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.660674][ T3886] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.864056][ T3886] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.064169][ T3886] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.160099][ T3618] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 517.424499][ T3618] usb 5-1: Using ep0 maxpacket: 16 [ 517.548002][ T3618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 517.584419][ T3618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 517.607018][ T3589] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 517.620604][ T3589] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 517.629837][ T3589] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 517.640179][ T3618] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 517.652511][ T3618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.660819][ T3589] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 517.686843][ T3575] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 517.687297][ T3618] usb 5-1: config 0 descriptor?? [ 517.695508][ T3575] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 517.756912][T13414] sch_fq: defrate 0 ignored. [ 517.899739][T13415] loop1: detected capacity change from 0 to 8192 [ 517.926009][T13415] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 518.349512][T13401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.396961][T13401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.580450][ T3618] hid-generic 0003:0158:0100.0013: unknown main item tag 0x1 [ 518.588522][ T3618] hid-generic 0003:0158:0100.0013: unexpected long global item [ 518.597505][ T3618] hid-generic: probe of 0003:0158:0100.0013 failed with error -22 [ 518.756146][ T4439] usb 5-1: USB disconnect, device number 14 [ 518.802066][T13408] chnl_net:caif_netlink_parms(): no params data found [ 519.057436][T13408] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.095573][T13408] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.120074][T13408] device bridge_slave_0 entered promiscuous mode [ 519.147821][T13408] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.157353][T13408] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.179273][T13408] device bridge_slave_1 entered promiscuous mode [ 519.324322][T13408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.373073][ T3886] device hsr_slave_0 left promiscuous mode [ 519.396714][ T3886] device hsr_slave_1 left promiscuous mode [ 519.409630][ T3886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.431145][ T3886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.458904][ T3886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.483622][ T3886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.513991][ T3886] device bridge_slave_1 left promiscuous mode [ 519.526154][ T3886] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.547910][ T3886] device bridge_slave_0 left promiscuous mode [ 519.555452][ T3886] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.595346][ T3886] device veth1_macvtap left promiscuous mode [ 519.606791][ T4439] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 519.607264][ T3886] device veth0_macvtap left promiscuous mode [ 519.632593][ T4439] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 519.635158][ T3886] device veth1_vlan left promiscuous mode [ 519.657789][ T4439] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 519.667799][ T3886] device veth0_vlan left promiscuous mode [ 519.789186][ T3575] Bluetooth: hci5: command tx timeout [ 519.987846][ T4439] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 520.654857][ T4439] usb 5-1: New USB device found, idVendor=157e, idProduct=300e, bcdDevice=ec.5f [ 520.665779][ T4439] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.682319][ T4439] usb 5-1: config 0 descriptor?? [ 520.972297][ T3617] usb 5-1: USB disconnect, device number 15 [ 521.094288][ T3886] team0 (unregistering): Port device team_slave_1 removed [ 521.109453][ T3886] team0 (unregistering): Port device team_slave_0 removed [ 521.126545][ T3886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.144975][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 521.173221][ T3886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.264918][ T3886] bond0 (unregistering): Released all slaves [ 521.318747][T13408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.453190][ T27] audit: type=1800 audit(1717510840.744:1173): pid=13467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1962 res=0 errno=0 [ 521.505908][T13408] team0: Port device team_slave_0 added [ 521.587194][T13408] team0: Port device team_slave_1 added [ 521.661739][T13408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.708212][T13408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.858076][ T3575] Bluetooth: hci5: command tx timeout [ 522.180287][T13408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.465835][T13408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.678231][T13408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.723499][T13477] loop2: detected capacity change from 0 to 4096 [ 522.763101][T13408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.785135][T13477] ntfs: (device loop2): parse_ntfs_boot_sector(): Mft record size (8192) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 522.831431][T13477] ntfs: (device loop2): ntfs_fill_super(): Unsupported NTFS filesystem. [ 522.876691][T13408] device hsr_slave_0 entered promiscuous mode [ 522.890212][T13408] device hsr_slave_1 entered promiscuous mode [ 522.922621][T13408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.936190][T13408] Cannot create hsr debugfs directory [ 523.121491][T13493] loop2: detected capacity change from 0 to 1024 [ 523.145063][T13493] hfsplus: unable to change nls mapping [ 523.163311][T13493] hfsplus: unable to parse mount options [ 523.170790][T13488] loop4: detected capacity change from 0 to 8192 [ 523.211968][T13488] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 523.279558][T13493] loop2: detected capacity change from 0 to 128 [ 523.419605][ T27] audit: type=1800 audit(1717510842.714:1174): pid=13498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1961 res=0 errno=0 [ 523.473723][T11489] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00005934) [ 523.503959][T11489] FAT-fs (loop2): Filesystem has been set read-only [ 523.512176][T11489] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00005934) [ 523.934506][T13506] loop4: detected capacity change from 0 to 2048 [ 523.937661][ T3575] Bluetooth: hci5: command tx timeout [ 524.071154][T13506] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 524.098000][T13506] ext4 filesystem being mounted at /root/syzkaller-testdir3243752762/syzkaller.WTgp5d/33/file0 supports timestamps until 2038 (0x7fffffff) [ 524.247714][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 524.350921][T12606] EXT4-fs (loop4): unmounting filesystem. [ 524.351254][T13408] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 524.398207][T13408] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 524.444992][T13408] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 524.468306][T13408] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 524.514371][T13526] loop4: detected capacity change from 0 to 512 [ 524.613866][T13526] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 524.624141][T13526] ext4 filesystem being mounted at /root/syzkaller-testdir3243752762/syzkaller.WTgp5d/34/file0 supports timestamps until 2038 (0x7fffffff) [ 524.791147][T12606] EXT4-fs (loop4): unmounting filesystem. [ 524.899085][T13408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.958701][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 524.972866][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 524.986798][ T3583] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 525.000765][ T3583] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 525.011853][ T3583] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 525.024027][ T3583] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 525.029378][T13408] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.041043][ T3589] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 525.048726][ T3589] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 525.229099][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 525.249231][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 525.288238][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.295476][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.327235][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 525.354230][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 525.372372][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.379837][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.442081][T13025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 525.456258][T13025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 525.484582][T13025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 525.528902][T13516] loop1: detected capacity change from 0 to 32768 [ 525.564050][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 525.582538][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 525.606672][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 525.616553][T13516] XFS (loop1): Mounting V5 Filesystem [ 525.627905][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 525.636879][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 525.645559][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 525.654784][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 525.664130][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 525.676140][T13408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 525.694968][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 525.823233][T13516] XFS (loop1): Ending clean mount [ 525.914177][ T27] audit: type=1804 audit(1717510845.194:1175): pid=13516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2404353966/syzkaller.aU9rsL/49/file0/bus" dev="loop1" ino=1289 res=1 errno=0 [ 525.991660][ T27] audit: type=1804 audit(1717510845.254:1176): pid=13516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2404353966/syzkaller.aU9rsL/49/file0/bus" dev="loop1" ino=1289 res=1 errno=0 [ 526.017213][ T3589] Bluetooth: hci5: command tx timeout [ 526.132831][T12727] XFS (loop1): Unmounting Filesystem [ 526.150817][T13536] chnl_net:caif_netlink_parms(): no params data found [ 526.371640][T13539] loop4: detected capacity change from 0 to 40427 [ 526.442181][T13539] F2FS-fs (loop4): invalid crc value [ 526.458645][T13408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.482988][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 526.493105][T13539] F2FS-fs (loop4): Found nat_bits in checkpoint [ 526.502987][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 526.572103][T13536] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.582918][T13536] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.591888][T13536] device bridge_slave_0 entered promiscuous mode [ 526.601293][T13539] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 526.644051][T13536] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.668244][T13536] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.679137][T13536] device bridge_slave_1 entered promiscuous mode [ 526.713514][T12606] syz-executor.4: attempt to access beyond end of device [ 526.713514][T12606] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 526.747808][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 526.757300][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 526.765531][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 526.852619][T13536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.880576][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 526.900580][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 526.922011][T13408] device veth0_vlan entered promiscuous mode [ 526.944672][T13536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.991609][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 527.018631][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 527.043907][T13408] device veth1_vlan entered promiscuous mode [ 527.127937][ T3575] Bluetooth: hci2: command tx timeout [ 527.153171][T13536] team0: Port device team_slave_0 added [ 527.217591][T13536] team0: Port device team_slave_1 added [ 527.292668][T13408] device veth0_macvtap entered promiscuous mode [ 527.337328][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 527.345933][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 527.390643][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 527.399955][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 527.420411][T13408] device veth1_macvtap entered promiscuous mode [ 527.475496][T13576] bond0: option use_carrier: invalid value (251) [ 527.487054][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 527.501255][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 527.557181][T13408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.587969][T13408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.606306][T13408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.629081][T13408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.648092][T13408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.668968][T13408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.697059][T13408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.738956][T13408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.759815][T13408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.786823][T13536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.797280][T13536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.838210][T13536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.942068][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.007098][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 528.028985][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 528.063421][T13408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.075652][T13594] loop1: detected capacity change from 0 to 1024 [ 528.085360][T13408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.099279][T13592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.120667][T13408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.132272][T13408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.142558][T13408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.146598][T13594] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 528.153165][T13408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.153190][T13408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.153208][T13408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.153225][T13408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.206550][T13408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.218671][T13408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.234512][T13536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.250499][T13536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.290962][T12727] EXT4-fs (loop1): unmounting filesystem. [ 528.323827][T13536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.395161][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.422969][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 528.435775][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 528.456917][T13408] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.476311][T13408] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.486744][T13408] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.497696][T13408] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.549576][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.716036][T13536] device hsr_slave_0 entered promiscuous mode [ 528.730251][T13536] device hsr_slave_1 entered promiscuous mode [ 528.757829][T13536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.765573][T13536] Cannot create hsr debugfs directory [ 528.810821][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.982403][ T3629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.015692][ T3629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.044039][ T3806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.071498][ T3806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.084531][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 529.099110][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 529.208230][ T3575] Bluetooth: hci2: command tx timeout [ 529.340851][ T11] tipc: Left network mode [ 530.716545][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 530.944107][T13613] loop0: detected capacity change from 0 to 32768 [ 531.070510][T13613] XFS (loop0): Mounting V5 Filesystem [ 531.196131][T13613] XFS (loop0): Ending clean mount [ 531.211635][T13613] XFS (loop0): Quotacheck needed: Please wait. [ 531.297348][ T3575] Bluetooth: hci2: command tx timeout [ 531.407339][T13613] XFS (loop0): Quotacheck: Done. [ 531.409036][T13659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.454302][T13536] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 531.510883][T13408] XFS (loop0): Unmounting Filesystem [ 531.546011][T13536] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 531.572271][T13536] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 531.595250][T13536] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 531.698487][ T11] device hsr_slave_0 left promiscuous mode [ 531.710358][ T11] device hsr_slave_1 left promiscuous mode [ 531.725902][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.734283][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.740996][T13633] loop1: detected capacity change from 0 to 32768 [ 531.793964][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.805310][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.826452][ T11] device bridge_slave_1 left promiscuous mode [ 531.841881][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.868951][ T11] device bridge_slave_0 left promiscuous mode [ 531.883818][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.912369][ T11] device veth1_macvtap left promiscuous mode [ 531.919905][ T11] device veth0_macvtap left promiscuous mode [ 531.926144][ T11] device veth1_vlan left promiscuous mode [ 531.932476][ T11] device veth0_vlan left promiscuous mode [ 532.315671][ T11] team0 (unregistering): Port device team_slave_1 removed [ 532.358672][ T11] team0 (unregistering): Port device team_slave_0 removed [ 532.397404][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.437000][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.592911][ T11] bond0 (unregistering): Released all slaves [ 532.866238][T13536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.912699][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 532.926619][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 533.002189][T13536] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.050884][T13692] loop4: detected capacity change from 0 to 512 [ 533.060347][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 533.079520][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 533.088878][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.096034][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.145510][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 533.157528][T13692] EXT4-fs (loop4): 1 orphan inode deleted [ 533.163877][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 533.174198][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 533.176362][T13692] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 533.183741][ T4590] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.199430][ T4590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.209769][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 533.268856][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 533.278139][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 533.292012][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 533.301091][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 533.313232][T13692] ext4 filesystem being mounted at /root/syzkaller-testdir3243752762/syzkaller.WTgp5d/55/file1 supports timestamps until 2038 (0x7fffffff) [ 533.319217][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 533.367874][ T3575] Bluetooth: hci2: command tx timeout [ 533.386864][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 533.450493][T13703] fuse: Bad value for 'fd' [ 533.456401][T13692] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 533.469840][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 533.483044][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 533.519260][T13692] EXT4-fs (loop4): Remounting filesystem read-only [ 533.529779][T13692] EXT4-fs error (device loop4): ext4_ext_grow_indepth:1386: inode #16: comm syz-executor.4: mark_inode_dirty error [ 533.573125][T13536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 533.581850][T13702] EXT4-fs warning (device loop4): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 533.621481][T13536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 533.643253][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 533.661332][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 533.744341][T12606] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 3: comm syz-executor.4: lblock 0 mapped to illegal pblock 3 (length 1) [ 533.828846][T12606] EXT4-fs (loop4): unmounting filesystem. [ 534.019756][T13712] netlink: 872 bytes leftover after parsing attributes in process `syz-executor.3'. [ 534.103883][T13712] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 534.136079][T13712] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.3'. [ 534.414583][T13695] loop1: detected capacity change from 0 to 32768 [ 534.439536][T13536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.452381][T13693] loop0: detected capacity change from 0 to 32768 [ 534.461470][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 534.478167][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 534.545210][T13693] XFS (loop0): Mounting V5 Filesystem [ 534.604646][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 534.616914][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 534.693532][T13693] XFS (loop0): Ending clean mount [ 534.702839][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 534.725897][T13693] XFS (loop0): Quotacheck needed: Please wait. [ 534.739943][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 534.772235][T13536] device veth0_vlan entered promiscuous mode [ 534.802542][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 534.828085][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 534.870633][T13693] XFS (loop0): Quotacheck: Done. [ 534.874162][T13536] device veth1_vlan entered promiscuous mode [ 534.962775][T13408] XFS (loop0): Unmounting Filesystem [ 535.038628][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 535.049128][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 535.060906][T13536] device veth0_macvtap entered promiscuous mode [ 535.091938][T13536] device veth1_macvtap entered promiscuous mode [ 535.145555][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.158534][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.174669][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.185777][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.196114][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.210483][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.229724][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.248080][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.315557][T13536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.335394][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 535.362906][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 535.371448][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 535.380752][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 535.392128][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.411731][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.426917][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.454661][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.509055][ T3589] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 535.519537][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.530896][ T3589] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 535.542069][ T3589] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 535.550629][ T3589] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 535.562945][ T3589] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 535.570509][ T3589] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 535.573300][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.638221][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.676196][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.709111][T13536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.749821][T13536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.813091][T13536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.861600][T13536] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.897735][T13536] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.906581][T13536] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.942540][T13536] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.975157][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 535.994250][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 536.089943][T13749] netlink: 872 bytes leftover after parsing attributes in process `syz-executor.3'. [ 536.188524][T13749] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 536.209157][T13749] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.3'. [ 536.330474][ T3846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.358921][ T3846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.426477][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 536.559899][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.586345][T13736] chnl_net:caif_netlink_parms(): no params data found [ 536.611727][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.682357][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 536.875747][T13736] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.883334][T13736] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.892973][T13736] device bridge_slave_0 entered promiscuous mode [ 536.904452][T13736] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.912193][T13736] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.921193][T13736] device bridge_slave_1 entered promiscuous mode [ 537.006770][T13736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.072038][T13736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.208662][T13736] team0: Port device team_slave_0 added [ 537.219702][T13736] team0: Port device team_slave_1 added [ 537.347466][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.469285][T13736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.496479][T13736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.594612][T13736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.607854][ T3583] Bluetooth: hci4: command tx timeout [ 537.642724][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.712981][T13736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.722953][T13736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.806790][T13736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.838845][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.934025][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.035667][T13736] device hsr_slave_0 entered promiscuous mode [ 538.065077][T13736] device hsr_slave_1 entered promiscuous mode [ 538.093848][T13736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 538.121304][T13736] Cannot create hsr debugfs directory [ 538.163276][T13787] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 538.356423][T13775] loop2: detected capacity change from 0 to 32768 [ 538.358091][T13780] loop0: detected capacity change from 0 to 32768 [ 538.383698][T13775] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (13775) [ 538.468597][T13780] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (13780) [ 538.498286][T13775] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 538.521656][T13780] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 538.536273][T13775] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 538.555740][T13775] BTRFS info (device loop2): using free space tree [ 538.576115][T13780] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 538.604579][T13780] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 538.627187][T13780] BTRFS info (device loop0): use zstd compression, level 3 [ 538.636470][T13780] BTRFS info (device loop0): using free space tree [ 538.717034][T13780] BTRFS info (device loop0): enabling ssd optimizations [ 538.735133][T13775] BTRFS info (device loop2): enabling ssd optimizations [ 538.770922][T13780] BTRFS info (device loop0): checking UUID tree [ 538.961737][T13841] loop1: detected capacity change from 0 to 512 [ 539.019109][T13536] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 539.104245][T13841] EXT4-fs (loop1): 1 orphan inode deleted [ 539.133116][T13841] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 539.180957][T13841] ext4 filesystem being mounted at /root/syzkaller-testdir2404353966/syzkaller.aU9rsL/77/file1 supports timestamps until 2038 (0x7fffffff) [ 539.191111][T13408] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 539.430639][T13841] EXT4-fs error (device loop1): ext4_ext_remove_space:2842: inode #16: comm syz-executor.1: path[1].p_hdr == NULL [ 539.564911][T13841] EXT4-fs (loop1): Remounting filesystem read-only [ 539.585995][T13841] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 539.679999][T13841] EXT4-fs error (device loop1): ext4_punch_hole:4140: inode #16: comm syz-executor.1: mark_inode_dirty error [ 539.693769][ T3583] Bluetooth: hci4: command tx timeout [ 539.727833][T13839] EXT4-fs error (device loop1): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.1: bad extent address lblock: 0, depth: 1 pblock 0 [ 539.818139][T13839] EXT4-fs error (device loop1): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.1: bad extent address lblock: 0, depth: 1 pblock 0 [ 539.854785][T13839] EXT4-fs error (device loop1): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.1: bad extent address lblock: 0, depth: 1 pblock 0 [ 539.919577][T13839] EXT4-fs error (device loop1): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.1: bad extent address lblock: 0, depth: 1 pblock 0 [ 539.976684][T13839] EXT4-fs error (device loop1): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.1: bad extent address lblock: 0, depth: 1 pblock 0 [ 540.024656][T13839] EXT4-fs error (device loop1): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.1: bad extent address lblock: 0, depth: 1 pblock 0 [ 540.088710][T13839] EXT4-fs error (device loop1): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.1: bad extent address lblock: 0, depth: 1 pblock 0 [ 540.163353][T13736] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 540.183484][T13852] loop0: detected capacity change from 0 to 128 [ 540.218004][T13736] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 540.225759][T13852] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 540.284475][T13854] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 540.285903][T13736] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 540.306245][T13852] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 540.319512][T12727] EXT4-fs (loop1): unmounting filesystem. [ 540.403682][ T11] device hsr_slave_0 left promiscuous mode [ 540.475411][ T11] device hsr_slave_1 left promiscuous mode [ 540.482431][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.497784][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.508530][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.516023][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.547368][ T11] device bridge_slave_1 left promiscuous mode [ 540.561798][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.584901][ T11] device bridge_slave_0 left promiscuous mode [ 540.613195][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.624130][T13860] loop2: detected capacity change from 0 to 512 [ 540.645442][ T11] device bridge0 left promiscuous mode [ 540.645735][T13860] EXT4-fs: Ignoring removed mblk_io_submit option [ 540.660530][ T11] device veth1_macvtap left promiscuous mode [ 540.673593][ T11] device veth0_macvtap left promiscuous mode [ 540.695578][ T11] device veth1_vlan left promiscuous mode [ 540.736326][ T11] device veth0_vlan left promiscuous mode [ 540.846739][T13869] loop0: detected capacity change from 0 to 2048 [ 540.876874][T13869] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 540.892369][T13860] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 540.917232][T13860] EXT4-fs (loop2): Test dummy encryption mode enabled [ 540.924758][T13869] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 540.940680][T13860] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 540.955919][T13860] System zones: 1-12 [ 541.097982][T13860] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 541.158087][T13860] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: missing EA_INODE flag [ 541.213912][T13860] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 12 err=-117 [ 541.282977][T13860] EXT4-fs (loop2): 1 orphan inode deleted [ 541.323894][T13860] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 541.663553][T13860] EXT4-fs (loop2): unmounting filesystem. [ 541.696905][ T11] team0 (unregistering): Port device macvlan2 removed [ 541.768014][ T3583] Bluetooth: hci4: command tx timeout [ 542.270465][ T11] team0 (unregistering): Port device team_slave_1 removed [ 542.294102][ T11] team0 (unregistering): Port device team_slave_0 removed [ 542.326448][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.348673][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.449397][T13885] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 542.537087][ T11] bond0 (unregistering): Released all slaves [ 542.626759][T13736] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 542.902185][T13889] loop2: detected capacity change from 0 to 128 [ 542.943523][T13736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.992640][T13889] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 542.999098][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 543.015346][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 543.036168][T13736] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.081800][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 543.095251][T13889] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 543.099954][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 543.141795][ T4439] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.149091][ T4439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.216022][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 543.242514][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 543.299228][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 543.319736][ T3622] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.326984][ T3622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.353791][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 543.375899][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 543.391305][T13899] loop2: detected capacity change from 0 to 512 [ 543.426140][T13899] EXT4-fs: Ignoring removed mblk_io_submit option [ 543.433942][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 543.445713][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 543.458269][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 543.466638][T13899] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 543.493996][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 543.506317][T13899] EXT4-fs (loop2): Test dummy encryption mode enabled [ 543.539143][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 543.554205][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 543.566183][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 543.578639][T13899] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 543.622678][T13899] System zones: 1-12 [ 543.634612][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 543.658998][T13899] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 543.705110][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 543.731823][T13899] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: missing EA_INODE flag [ 543.756646][ T3575] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 543.767209][T13909] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 543.772323][T13736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 543.776959][ T3589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 543.795189][ T3589] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 543.811144][ T3589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 543.813576][T13899] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 12 err=-117 [ 543.834167][ T3589] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 543.841597][ T3589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 543.857757][ T3589] Bluetooth: hci4: command tx timeout [ 543.922572][T13899] EXT4-fs (loop2): 1 orphan inode deleted [ 543.959948][T13899] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 544.065984][T13899] EXT4-fs (loop2): unmounting filesystem. [ 544.504864][T13906] chnl_net:caif_netlink_parms(): no params data found [ 544.587444][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 544.608046][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 544.625060][T13736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.682818][T13934] loop2: detected capacity change from 0 to 128 [ 544.701176][T13934] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 544.802939][T13934] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 544.809775][T13902] loop0: detected capacity change from 0 to 32768 [ 544.820194][T13902] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (13902) [ 544.848355][T13902] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 544.894690][T13902] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 544.895769][T13906] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.922878][T13902] BTRFS info (device loop0): using free space tree [ 544.983701][T13906] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.006298][T13906] device bridge_slave_0 entered promiscuous mode [ 545.035945][T13906] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.082987][T13906] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.138626][T13902] BTRFS info (device loop0): enabling ssd optimizations [ 545.159714][T13906] device bridge_slave_1 entered promiscuous mode [ 545.335388][T13906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.387868][T13408] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 545.412706][T13906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.446114][T13972] loop2: detected capacity change from 0 to 512 [ 545.470282][T13972] EXT4-fs: Ignoring removed mblk_io_submit option [ 545.527498][T13972] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 545.564354][T13972] EXT4-fs (loop2): Test dummy encryption mode enabled [ 545.624403][T13972] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 545.633219][T13972] System zones: 1-12 [ 545.648142][T13972] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 545.709709][T13972] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: missing EA_INODE flag [ 545.786673][T13972] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 12 err=-117 [ 545.830980][T13906] team0: Port device team_slave_0 added [ 545.856949][T13906] team0: Port device team_slave_1 added [ 545.864348][T13972] EXT4-fs (loop2): 1 orphan inode deleted [ 545.878126][T13972] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 545.938190][ T3588] Bluetooth: hci1: command tx timeout [ 545.954472][T13972] EXT4-fs (loop2): unmounting filesystem. [ 546.065603][T13906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.083240][T13906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.196808][T13906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.256794][T13906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.279085][T13906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.345457][T13993] loop2: detected capacity change from 0 to 128 [ 546.368877][T13993] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 546.370857][T13906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.408452][T13993] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 546.453765][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 546.470814][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 546.578492][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 546.587357][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 546.627230][T13906] device hsr_slave_0 entered promiscuous mode [ 546.645969][T13906] device hsr_slave_1 entered promiscuous mode [ 546.660605][T13906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 546.679416][T13906] Cannot create hsr debugfs directory [ 546.696363][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 546.708058][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 546.733730][T13736] device veth0_vlan entered promiscuous mode [ 546.752955][T13736] device veth1_vlan entered promiscuous mode [ 546.919391][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 546.933118][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 547.614414][T13736] device veth0_macvtap entered promiscuous mode [ 547.709689][T13736] device veth1_macvtap entered promiscuous mode [ 547.717161][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 547.727121][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 547.736914][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 547.768797][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 547.820546][T13736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.848124][T13736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.871732][T13736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.899752][T13736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.911870][T14015] loop2: detected capacity change from 0 to 512 [ 547.926577][T13736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.947513][T13736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.960077][T13736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.971211][T13736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.972528][T14015] EXT4-fs (loop2): 1 truncate cleaned up [ 547.990076][T14015] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 548.003663][T13736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.018209][ T3588] Bluetooth: hci1: command tx timeout [ 548.045881][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 548.056285][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 548.073032][T13736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.085991][T13736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.104840][T13736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.115641][T13736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.125983][T13736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.138661][T13736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.150808][T13736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.165667][T13736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.176411][T13736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.187070][T13736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.205633][T13736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.214151][T13536] EXT4-fs (loop2): unmounting filesystem. [ 548.217266][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 548.231663][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 548.274701][T13736] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.293309][T13736] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.304563][T13736] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.326668][T13736] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.506464][T13906] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.551565][T14030] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 548.663105][T13906] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.678563][T14041] loop0: detected capacity change from 0 to 128 [ 548.703822][T14041] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 548.784403][T14041] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 548.789560][T13906] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.864806][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.884137][T13906] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.901673][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.936984][T14048] loop2: detected capacity change from 0 to 512 [ 548.965434][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 548.993770][T14048] EXT4-fs (loop2): 1 truncate cleaned up [ 549.014336][ T3806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.019527][T14048] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 549.040512][ T3806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.095482][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 549.195005][T13536] EXT4-fs (loop2): unmounting filesystem. [ 549.465997][T14067] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 549.525457][T13906] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 549.580034][T13906] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 549.601390][ T4590] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 549.602856][T13906] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 549.665779][T13906] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 549.673132][T14073] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 549.809413][ T11] device hsr_slave_0 left promiscuous mode [ 549.822968][ T11] device hsr_slave_1 left promiscuous mode [ 549.837881][T14082] loop4: detected capacity change from 0 to 512 [ 549.845121][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.855800][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.857805][ T4590] usb 3-1: Using ep0 maxpacket: 16 [ 549.871671][T14082] EXT4-fs (loop4): 1 truncate cleaned up [ 549.880164][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.888545][T14082] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 549.910381][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.958052][T13736] EXT4-fs (loop4): unmounting filesystem. [ 549.960026][ T11] device bridge_slave_1 left promiscuous mode [ 549.977204][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.989784][ T11] device bridge_slave_0 left promiscuous mode [ 549.997187][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.007982][ T4590] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 550.021801][ T4590] usb 3-1: config 0 has no interface number 0 [ 550.031471][ T4590] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 550.052672][ T4590] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 550.079675][ T11] device bridge0 left promiscuous mode [ 550.088176][ T3588] Bluetooth: hci1: command tx timeout [ 550.112489][ T11] device veth1_macvtap left promiscuous mode [ 550.122168][ T11] device veth0_macvtap left promiscuous mode [ 550.134774][ T11] device veth1_vlan left promiscuous mode [ 550.144414][ T11] device veth0_vlan left promiscuous mode [ 550.188021][ T4590] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 550.205637][ T4590] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 550.234665][ T4590] usb 3-1: Product: syz [ 550.250563][ T4590] usb 3-1: SerialNumber: syz [ 550.275247][ T4590] usb 3-1: config 0 descriptor?? [ 550.319707][ T4590] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 550.337236][ T4590] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input24 [ 550.355079][ T11] team0 (unregistering): Port device macvlan2 removed [ 550.461754][ T11] team0 (unregistering): Port device team_slave_1 removed [ 550.480246][ T11] team0 (unregistering): Port device team_slave_0 removed [ 550.495798][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.525399][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.538132][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 550.623676][ T11] bond0 (unregistering): Released all slaves [ 550.687099][T14087] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 550.698171][T14097] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 550.749778][ T3617] usb 3-1: USB disconnect, device number 16 [ 550.805361][ T3617] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 550.905585][T13906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.929640][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 550.944678][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 550.962915][T13906] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.974549][T14109] netlink: 'syz-executor.3': attribute type 30 has an invalid length. [ 551.003057][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 551.014570][ T3655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 551.031575][ T3655] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.038850][ T3655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.064517][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 551.073645][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 551.098578][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 551.115586][ T4438] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.121491][T14112] loop0: detected capacity change from 0 to 512 [ 551.122863][ T4438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.146654][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 551.176722][T14112] EXT4-fs (loop0): 1 truncate cleaned up [ 551.185016][T14112] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 551.212957][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 551.233606][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 551.277843][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 551.323429][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 551.363196][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 551.402770][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 551.460337][T13906] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 551.753881][T13906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 552.158497][T14126] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 552.237732][ T3588] Bluetooth: hci1: command tx timeout [ 552.264913][T14129] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 552.322919][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 552.365575][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 552.381968][T13408] EXT4-fs (loop0): unmounting filesystem. [ 552.395424][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 552.435114][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 552.457624][ T4163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 552.531242][T14140] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 552.865359][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 552.876661][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 552.913660][T13906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.992732][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 553.019004][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 553.080969][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 553.098485][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 553.125814][T13906] device veth0_vlan entered promiscuous mode [ 553.138415][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 553.152159][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 553.198789][T13906] device veth1_vlan entered promiscuous mode [ 553.292254][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 553.306626][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 553.334183][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 553.362390][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 553.395766][T13906] device veth0_macvtap entered promiscuous mode [ 553.470868][T13906] device veth1_macvtap entered promiscuous mode [ 553.622378][T13906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.895445][T13906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.155142][T13906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.460118][T13906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.525248][T13906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.572397][T13906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.583278][T13906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.595231][T13906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.611326][T13906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.623058][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 554.653544][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 554.688605][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 554.729725][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 554.769453][T13906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.817743][T13906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.848921][T13906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.876879][T13906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.920337][T13906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.957638][T13906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.991570][T13906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.015470][T13906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.047196][T13906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.071812][T13906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.110171][T14165] loop0: detected capacity change from 0 to 32768 [ 555.113738][T13906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.188196][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 555.201874][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 555.232399][T13906] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.244196][T13906] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.263525][T13906] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.287739][T13906] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.346422][T14207] loop4: detected capacity change from 0 to 512 [ 555.457526][T14207] EXT4-fs (loop4): 1 orphan inode deleted [ 555.469370][T14207] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 555.526947][T14207] ext4 filesystem being mounted at /root/syzkaller-testdir2826784812/syzkaller.HGalV5/22/file1 supports timestamps until 2038 (0x7fffffff) [ 555.563865][ T3886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.584100][ T3886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.715077][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.737386][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.970758][T14215] EXT4-fs error (device loop4): ext4_ext_remove_space:2842: inode #16: comm syz-executor.4: path[1].p_hdr == NULL [ 556.072340][T14215] EXT4-fs (loop4): Remounting filesystem read-only [ 556.113495][T14215] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 556.158949][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 556.168588][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 556.227884][T14215] EXT4-fs error (device loop4): ext4_punch_hole:4140: inode #16: comm syz-executor.4: mark_inode_dirty error [ 556.272603][T14206] EXT4-fs error (device loop4): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.4: bad extent address lblock: 0, depth: 1 pblock 0 [ 556.315386][T14206] EXT4-fs error (device loop4): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.4: bad extent address lblock: 0, depth: 1 pblock 0 [ 556.368322][T14206] EXT4-fs error (device loop4): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.4: bad extent address lblock: 0, depth: 1 pblock 0 [ 556.413166][T14206] EXT4-fs error (device loop4): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.4: bad extent address lblock: 0, depth: 1 pblock 0 [ 556.466730][T14206] EXT4-fs error (device loop4): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.4: bad extent address lblock: 0, depth: 1 pblock 0 [ 556.510320][T14206] EXT4-fs error (device loop4): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.4: bad extent address lblock: 0, depth: 1 pblock 0 [ 556.570162][T14206] EXT4-fs error (device loop4): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.4: bad extent address lblock: 0, depth: 1 pblock 0 [ 556.702998][T13736] EXT4-fs (loop4): unmounting filesystem. [ 556.817666][ T4592] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 556.955446][T14233] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 556.989035][T14233] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 557.060788][ T4592] usb 1-1: Using ep0 maxpacket: 16 [ 557.179477][ T4592] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 557.196425][ T4592] usb 1-1: config 0 has no interface number 0 [ 557.225336][ T4592] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 557.248969][ T4592] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 557.387937][ T4592] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 557.405053][ T4592] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 557.431351][ T4592] usb 1-1: Product: syz [ 557.444558][ T4592] usb 1-1: SerialNumber: syz [ 557.462898][ T4592] usb 1-1: config 0 descriptor?? [ 557.519707][ T4592] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 557.527448][ T4592] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input25 [ 557.754761][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.777681][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 557.888605][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.924472][T14240] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 557.989150][ T4592] usb 1-1: USB disconnect, device number 14 [ 558.009446][ T3588] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 558.023730][ T3588] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 558.033340][ T3588] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 558.041445][ T3588] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 558.054006][ T3588] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 558.061455][ T3588] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 558.084220][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.100774][ T4592] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 558.193168][T14236] loop1: detected capacity change from 0 to 32768 [ 558.211711][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.513478][T14251] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 558.579147][T14242] chnl_net:caif_netlink_parms(): no params data found [ 558.751081][T14242] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.759561][T14242] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.782799][T14242] device bridge_slave_0 entered promiscuous mode [ 558.838248][T14242] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.845611][T14242] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.882760][T14242] device bridge_slave_1 entered promiscuous mode [ 558.948526][T14269] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 559.055603][T14242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.119256][T14242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.316840][T14280] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 559.541444][T14281] IPVS: sync thread started: state = MASTER, mcast_ifn = xfrm0, syncid = 3, id = 0 [ 559.741799][T14242] team0: Port device team_slave_0 added [ 560.045200][T14242] team0: Port device team_slave_1 added [ 560.169655][ T3588] Bluetooth: hci4: command tx timeout [ 560.223461][T14242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.233084][T14291] loop2: detected capacity change from 0 to 512 [ 560.240980][T14242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.303901][T14242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.332443][T14242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.333507][T14291] EXT4-fs (loop2): 1 orphan inode deleted [ 560.367426][T14242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.412962][T14291] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 560.442804][ T27] audit: type=1326 audit(1717510879.734:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14301 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa8e7cee9 code=0x7ffc0000 [ 560.451940][T14291] ext4 filesystem being mounted at /root/syzkaller-testdir4228008158/syzkaller.mXSIJB/45/file1 supports timestamps until 2038 (0x7fffffff) [ 560.467986][ T27] audit: type=1326 audit(1717510879.764:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14301 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa8e7cee9 code=0x7ffc0000 [ 560.497478][T14242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.508400][ T27] audit: type=1326 audit(1717510879.804:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14301 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faaa8e7cee9 code=0x7ffc0000 [ 560.619906][ T27] audit: type=1326 audit(1717510879.804:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14301 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa8e7cee9 code=0x7ffc0000 [ 560.695930][ T27] audit: type=1326 audit(1717510879.804:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14301 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa8e7cee9 code=0x7ffc0000 [ 560.760372][T14291] EXT4-fs error (device loop2): ext4_ext_remove_space:2842: inode #16: comm syz-executor.2: path[1].p_hdr == NULL [ 560.779461][T14242] device hsr_slave_0 entered promiscuous mode [ 560.783663][ T27] audit: type=1326 audit(1717510879.844:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14301 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faaa8e7cee9 code=0x7ffc0000 [ 560.810899][T14242] device hsr_slave_1 entered promiscuous mode [ 560.822808][T14242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.840602][T14242] Cannot create hsr debugfs directory [ 560.846671][ T27] audit: type=1326 audit(1717510879.844:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14301 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa8e7cee9 code=0x7ffc0000 [ 560.877657][T14291] EXT4-fs (loop2): Remounting filesystem read-only [ 560.884259][T14291] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 560.912335][ T27] audit: type=1326 audit(1717510879.844:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14301 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faaa8e7a667 code=0x7ffc0000 [ 560.940205][ T11] device hsr_slave_0 left promiscuous mode [ 560.957887][T14291] EXT4-fs error (device loop2): ext4_punch_hole:4140: inode #16: comm syz-executor.2: mark_inode_dirty error [ 560.969918][ T11] device hsr_slave_1 left promiscuous mode [ 560.978194][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.984760][T14290] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 561.000344][ T27] audit: type=1326 audit(1717510879.844:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14301 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faaa8e40359 code=0x7ffc0000 [ 561.019619][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.031186][T14290] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 561.063616][ T27] audit: type=1326 audit(1717510879.844:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14301 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faaa8e7a667 code=0x7ffc0000 [ 561.082887][T14290] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 561.149783][T14290] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 561.174081][T14290] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 561.202128][T14290] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 561.228371][T14290] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 561.294593][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.302216][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.312572][ T11] device bridge_slave_1 left promiscuous mode [ 561.318982][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.328558][ T11] device bridge_slave_0 left promiscuous mode [ 561.334858][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.391861][ T11] device veth1_macvtap left promiscuous mode [ 561.419128][T14326] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 561.555454][ T11] device veth0_macvtap left promiscuous mode [ 561.731798][ T11] device veth1_vlan left promiscuous mode [ 562.024004][ T11] device veth0_vlan left promiscuous mode [ 562.058819][T13536] EXT4-fs (loop2): unmounting filesystem. [ 562.247775][ T3588] Bluetooth: hci4: command tx timeout [ 562.425208][T14337] fuse: Bad value for 'fd' [ 562.578720][ T11] team0 (unregistering): Port device team_slave_1 removed [ 562.596396][ T11] team0 (unregistering): Port device team_slave_0 removed [ 562.628591][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.643247][T14343] fuse: Bad value for 'fd' [ 562.655019][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.739821][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.746178][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.757102][ T11] bond0 (unregistering): Released all slaves [ 563.011115][T14349] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 563.047131][T14349] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 563.591384][T14362] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 564.359543][ T3588] Bluetooth: hci4: command tx timeout [ 564.800673][T14377] fuse: Bad value for 'fd' [ 564.853683][T14242] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 564.900142][T14242] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 564.941622][T14242] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 564.965494][T14242] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 564.977818][ T3624] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 565.035436][ T3583] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 565.059833][ T3583] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 565.070869][ T3575] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 565.081592][ T3575] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 565.089563][ T3575] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 565.099263][ T3575] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 565.247864][ T3624] usb 1-1: Using ep0 maxpacket: 16 [ 565.299473][T14242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.378052][ T3624] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 565.386206][ T3624] usb 1-1: config 0 has no interface number 0 [ 565.395927][T14242] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.414675][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 565.423422][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 565.444273][ T3624] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 565.486630][ T3624] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 565.546219][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 565.558771][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 565.570021][T14403] loop1: detected capacity change from 0 to 64 [ 565.588928][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.596125][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.626738][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 565.641078][ T3624] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 565.660096][ T3624] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 565.679790][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 565.699153][ T3624] usb 1-1: Product: syz [ 565.709935][ T3624] usb 1-1: SerialNumber: syz [ 565.715373][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.722598][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.734711][ T3624] usb 1-1: config 0 descriptor?? [ 565.751845][T14383] chnl_net:caif_netlink_parms(): no params data found [ 565.780123][ T3624] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 565.791985][ T3624] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input28 [ 565.802673][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 565.818243][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 565.827063][ T27] kauditd_printk_skb: 222 callbacks suppressed [ 565.827079][ T27] audit: type=1326 audit(1717510885.114:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14404 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1957c7cee9 code=0x7ffc0000 [ 565.861574][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 565.878716][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 565.891431][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 565.900417][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 565.908988][ T27] audit: type=1326 audit(1717510885.154:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14404 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1957c7cee9 code=0x7ffc0000 [ 565.944282][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 566.014239][ T27] audit: type=1326 audit(1717510885.164:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14404 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1957c7cee9 code=0x7ffc0000 [ 566.039367][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 566.063506][ T27] audit: type=1326 audit(1717510885.164:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14404 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1957c7cee9 code=0x7ffc0000 [ 566.090854][ T27] audit: type=1326 audit(1717510885.164:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14404 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1957c7cee9 code=0x7ffc0000 [ 566.116390][ T27] audit: type=1326 audit(1717510885.164:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14404 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1957c7cee9 code=0x7ffc0000 [ 566.146425][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 566.176242][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 566.198759][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 566.207346][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 566.219143][ T27] audit: type=1326 audit(1717510885.164:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14404 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1957c7cee9 code=0x7ffc0000 [ 566.247292][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 566.268883][ T3624] usb 1-1: USB disconnect, device number 15 [ 566.283201][ T3624] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 566.291924][ T27] audit: type=1326 audit(1717510885.164:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14404 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1957c7a667 code=0x7ffc0000 [ 566.296906][T14409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.319537][ T27] audit: type=1326 audit(1717510885.164:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14404 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1957c40359 code=0x7ffc0000 [ 566.328556][T14242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 566.348201][ T27] audit: type=1326 audit(1717510885.164:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14404 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1957c7a667 code=0x7ffc0000 [ 566.407916][ T3575] Bluetooth: hci4: command tx timeout [ 566.537048][T14383] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.565420][T14383] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.585399][T14383] device bridge_slave_0 entered promiscuous mode [ 566.596714][T14383] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.605962][T14383] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.614756][T14383] device bridge_slave_1 entered promiscuous mode [ 566.681274][T14383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.695289][T14383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.798209][T14383] team0: Port device team_slave_0 added [ 566.841072][T14383] team0: Port device team_slave_1 added [ 566.975089][T14383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.015900][T14383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.119191][T14383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.151683][T14383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.162675][ T3575] Bluetooth: hci2: command tx timeout [ 567.210244][T14383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.327091][T14383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.405737][T14431] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 567.642249][T14383] device hsr_slave_0 entered promiscuous mode [ 567.676709][T14383] device hsr_slave_1 entered promiscuous mode [ 567.701167][T14383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.754626][T14383] Cannot create hsr debugfs directory [ 568.102436][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 568.135888][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 568.285497][T14242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.336138][T14448] loop1: detected capacity change from 0 to 64 [ 568.398149][ T4438] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 568.693602][T14383] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.769622][ T4438] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.801973][ T4438] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.837256][ T4438] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 568.880780][ T4438] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 568.904871][ T4438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.927493][ T4438] usb 1-1: config 0 descriptor?? [ 568.954219][T14383] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.076436][T14383] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.094514][T14465] loop1: detected capacity change from 0 to 512 [ 569.165424][T14465] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 569.192433][T14465] ext4 filesystem being mounted at /root/syzkaller-testdir651240419/syzkaller.i3h75t/23/bus supports timestamps until 2038 (0x7fffffff) [ 569.207819][ T3588] Bluetooth: hci2: command tx timeout [ 569.227298][T14383] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.275404][T13906] EXT4-fs (loop1): unmounting filesystem. [ 569.367829][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 569.376750][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 569.445119][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 569.450256][ T4438] elo 0003:04E7:0009.0015: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.0-1/input0 [ 569.475823][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 569.496844][T14242] device veth0_vlan entered promiscuous mode [ 569.516285][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 569.524559][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 569.539248][T14242] device veth1_vlan entered promiscuous mode [ 569.667950][ T4436] usb 1-1: USB disconnect, device number 16 [ 571.287730][ T3588] Bluetooth: hci2: command tx timeout [ 573.367696][ T3588] Bluetooth: hci2: command tx timeout [ 599.884371][ T3575] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 599.899678][ T3575] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 599.915946][ T3575] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 599.926704][ T3575] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 599.934740][ T3575] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 599.944153][ T3575] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 600.519180][ T3575] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 600.532113][ T3575] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 600.542670][ T3575] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 600.552530][ T3575] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 600.560200][ T3575] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 600.569293][ T3575] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 601.358139][ T3588] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 601.377356][ T3588] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 601.388861][ T3588] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 601.397098][ T3588] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 601.410656][ T3588] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 601.418276][ T3588] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 602.007840][ T3588] Bluetooth: hci6: command tx timeout [ 602.647937][ T3588] Bluetooth: hci7: command tx timeout [ 603.447907][ T3588] Bluetooth: hci8: command tx timeout [ 604.087869][ T3588] Bluetooth: hci6: command tx timeout [ 604.727787][ T3588] Bluetooth: hci7: command tx timeout [ 605.527769][ T3588] Bluetooth: hci8: command tx timeout [ 606.167881][ T3588] Bluetooth: hci6: command tx timeout [ 606.817849][ T3588] Bluetooth: hci7: command tx timeout [ 607.607730][ T3588] Bluetooth: hci8: command tx timeout [ 608.247813][ T3588] Bluetooth: hci6: command tx timeout [ 608.888013][ T3575] Bluetooth: hci7: command tx timeout [ 609.687838][ T3575] Bluetooth: hci8: command tx timeout [ 622.783115][ T3575] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 622.796159][ T3575] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 622.810016][ T3575] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 622.821072][ T3575] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 622.830831][ T3575] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 622.838198][ T3575] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 624.169987][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.176343][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.887872][ T3575] Bluetooth: hci9: command tx timeout [ 626.967984][ T3575] Bluetooth: hci9: command tx timeout [ 628.873135][ T3588] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 628.887315][ T3588] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 628.896761][ T3588] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 628.907541][ T3588] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 628.923521][ T3588] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 628.931090][ T3588] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 629.047734][ T3575] Bluetooth: hci9: command tx timeout [ 630.967762][ T3575] Bluetooth: hci10: command tx timeout [ 631.127869][ T3575] Bluetooth: hci9: command tx timeout [ 633.047776][ T3575] Bluetooth: hci10: command tx timeout [ 635.137746][ T3575] Bluetooth: hci10: command tx timeout [ 637.207790][ T3575] Bluetooth: hci10: command tx timeout [ 641.616455][ T3575] Bluetooth: hci5: command 0x0406 tx timeout [ 664.867275][ T3583] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 664.881204][ T3583] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 664.893038][ T3583] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 664.904270][ T3583] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 664.913812][ T3583] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 664.921731][ T3583] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 665.517310][ T3588] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 665.536217][ T3588] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 665.545797][ T3588] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 665.556322][ T3588] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 665.564343][ T3588] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 665.574044][ T3588] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 666.350249][ T3588] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 666.361890][ T3588] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 666.373844][ T3588] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 666.390722][ T3588] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 666.400899][ T3588] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 666.409019][ T3588] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 666.967886][ T3583] Bluetooth: hci11: command tx timeout [ 667.207822][ T3583] Bluetooth: hci1: command 0x0406 tx timeout [ 667.607849][ T3583] Bluetooth: hci12: command tx timeout [ 668.487942][ T3583] Bluetooth: hci13: command tx timeout [ 669.047706][ T3583] Bluetooth: hci11: command tx timeout [ 669.687813][ T3583] Bluetooth: hci12: command tx timeout [ 670.568746][ T3583] Bluetooth: hci13: command tx timeout [ 671.127878][ T3583] Bluetooth: hci11: command tx timeout [ 671.767747][ T3583] Bluetooth: hci12: command tx timeout [ 672.648007][ T3583] Bluetooth: hci13: command tx timeout [ 673.207682][ T3583] Bluetooth: hci11: command tx timeout [ 673.847704][ T3583] Bluetooth: hci12: command tx timeout [ 674.728976][ T3583] Bluetooth: hci13: command tx timeout [ 682.567658][ T3575] Bluetooth: hci4: command 0x0406 tx timeout [ 685.614942][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.629817][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.696596][ T3575] Bluetooth: hci2: command 0x0406 tx timeout [ 687.738529][ T3583] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 687.750132][ T3583] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 687.759762][ T3583] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 687.769337][ T3583] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 687.777019][ T3583] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 687.784830][ T3583] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 689.847775][ T3575] Bluetooth: hci14: command tx timeout [ 691.937665][ T3575] Bluetooth: hci14: command tx timeout [ 693.800065][ T3583] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 693.811751][ T3583] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 693.820904][ T3583] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 693.828958][ T3583] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 693.836738][ T3583] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 693.844270][ T3583] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 694.007775][ T3575] Bluetooth: hci14: command tx timeout [ 695.927796][ T3575] Bluetooth: hci15: command tx timeout [ 696.087742][ T3575] Bluetooth: hci14: command tx timeout [ 698.007695][ T3575] Bluetooth: hci15: command tx timeout [ 700.087644][ T3575] Bluetooth: hci15: command tx timeout [ 702.167771][ T3575] Bluetooth: hci15: command tx timeout [ 715.048198][ T28] INFO: task kworker/u4:1:11 blocked for more than 143 seconds. [ 715.055929][ T28] Not tainted 6.1.92-syzkaller #0 [ 715.072389][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 715.084935][ T28] task:kworker/u4:1 state:D stack:19808 pid:11 ppid:2 flags:0x00004000 2024/06/04 14:23:54 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 715.103012][ T28] Workqueue: netns cleanup_net [ 715.130414][ T28] Call Trace: [ 715.133845][ T28] [ 715.136807][ T28] __schedule+0x142d/0x4550 [ 715.176245][ T28] ? __mutex_lock+0x6b4/0xd80 [ 715.181746][ T28] ? __sched_text_start+0x8/0x8 [ 715.186653][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 715.207695][ T28] ? wq_worker_sleeping+0x5f/0x270 [ 715.212892][ T28] schedule+0xbf/0x180 [ 715.217057][ T28] schedule_preempt_disabled+0xf/0x20 [ 715.237653][ T28] __mutex_lock+0x6b9/0xd80 [ 715.242233][ T28] ? __mutex_lock+0x53c/0xd80 [ 715.246966][ T28] ? xfrmi_exit_batch_net+0xb0/0x350 [ 715.277654][ T28] ? mutex_lock_nested+0x10/0x10 [ 715.282728][ T28] ? xfrmi6_input+0x270/0x270 [ 715.287466][ T28] xfrmi_exit_batch_net+0xb0/0x350 [ 715.293012][ T28] ? xfrmi6_input+0x270/0x270 [ 715.307587][ T28] ? __kmem_cache_free+0x25c/0x3c0 [ 715.312800][ T28] ? xfrmi6_input+0x270/0x270 [ 715.327572][ T28] cleanup_net+0x763/0xb60 [ 715.332070][ T28] ? ops_free_list+0x3b0/0x3b0 [ 715.336971][ T28] ? process_one_work+0x7a9/0x11d0 [ 715.358441][ T28] process_one_work+0x8a9/0x11d0 [ 715.363567][ T28] ? worker_detach_from_pool+0x260/0x260 [ 715.377640][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 715.383637][ T28] ? kthread_data+0x4e/0xc0 [ 715.397675][ T28] ? wq_worker_running+0x97/0x190 [ 715.402828][ T28] worker_thread+0xa47/0x1200 [ 715.417699][ T28] kthread+0x28d/0x320 [ 715.421855][ T28] ? worker_clr_flags+0x190/0x190 [ 715.426929][ T28] ? kthread_blkcg+0xd0/0xd0 [ 715.455950][ T28] ret_from_fork+0x1f/0x30 [ 715.460585][ T28] [ 715.463971][ T28] INFO: task kworker/1:2:155 blocked for more than 143 seconds. [ 715.487625][ T28] Not tainted 6.1.92-syzkaller #0 [ 715.493352][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 715.517739][ T28] task:kworker/1:2 state:D stack:23424 pid:155 ppid:2 flags:0x00004000 [ 715.527068][ T28] Workqueue: events linkwatch_event [ 715.547640][ T28] Call Trace: [ 715.551073][ T28] [ 715.554675][ T28] __schedule+0x142d/0x4550 [