last executing test programs: 1m25.405216935s ago: executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x5452, &(0x7f0000000140)) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x14) 1m23.968738225s ago: executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x105, 0x4, 0x408, 0x108, 0x0, 0x218, 0x320, 0x320, 0x320, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'tunl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'ipvlan0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) 1m23.901408256s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x5, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x2, 0x0, 0x4000}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB='\x00'], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000500)=""/130, 0x0, 0x0, 0xdf, 0xc4, &(0x7f0000000840)="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", &(0x7f00000005c0)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x1, 0x8000, 0x1}, 0x24) 1m23.817129768s ago: executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0c200009078000002040500fe05f989be080a00000df30000000300"], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000180000/0x4000)=nil) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000075000/0x3000)=nil) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00', @ANYRES32=0x0, @ANYBLOB="0000000000001a00240012800b00010062726964676500001400028005002b0003000000080004"], 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) eventfd2(0x0, 0x0) io_setup(0x7, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x0, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x7, 0x0, r4, &(0x7f0000000080)='\r', 0x1}]) socket$igmp(0x2, 0x3, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0x18, {"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", 0x28d}}, 0x1006) ioctl$TIOCSSOFTCAR(r7, 0x541a, 0x0) 1m8.365844653s ago: executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0c200009078000002040500fe05f989be080a00000df30000000300"], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000180000/0x4000)=nil) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000075000/0x3000)=nil) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00', @ANYRES32=0x0, @ANYBLOB="0000000000001a00240012800b00010062726964676500001400028005002b0003000000080004"], 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) eventfd2(0x0, 0x0) io_setup(0x7, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x0, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x7, 0x0, r4, &(0x7f0000000080)='\r', 0x1}]) socket$igmp(0x2, 0x3, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0x18, {"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", 0x28d}}, 0x1006) ioctl$TIOCSSOFTCAR(r7, 0x541a, 0x0) 44.354752068s ago: executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0c200009078000002040500fe05f989be080a00000df30000000300"], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000180000/0x4000)=nil) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000075000/0x3000)=nil) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00', @ANYRES32=0x0, @ANYBLOB="0000000000001a00240012800b00010062726964676500001400028005002b0003000000080004"], 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) eventfd2(0x0, 0x0) io_setup(0x7, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x0, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x7, 0x0, r4, &(0x7f0000000080)='\r', 0x1}]) socket$igmp(0x2, 0x3, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f74f9b36096eff7fc6e5539b9b18098b9b4a1b2552091b080d29428f0e1ac6e7049b3468959b189a242a9b60f3988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00300300000000000000b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df34959eaef6572e1e007fa55a2999f596d0673f586749b25f5a448427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799ecb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a10010549820a73c8839475f732ae00398e4bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000204b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff9576abc9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf6c9c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x28d}}, 0x1006) ioctl$TIOCSSOFTCAR(r7, 0x541a, 0x0) 42.013391608s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='jbd2_handle_extend\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 39.316052246s ago: executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000140)={0x0, 0x0, {0x3, 0x0, 0x80000000}}) 39.103156464s ago: executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) socket$packet(0x11, 0x0, 0x300) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) 36.775627282s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) 36.450110386s ago: executing program 1: memfd_create(0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 34.315092415s ago: executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x64, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@broadcast, 0x2}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000140)='./file0\x00', 0x810, &(0x7f0000004800)=ANY=[@ANYBLOB='dmask=00000000000000000000007,utf8,iocharset=iso8859-1,allow_utime=00000000000000000002001,fmask=00000000000000000000002,allow_utime=00000000000000000000005,umask=00000000000000000000001,gid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX, @ANYRESHEX], 0x1, 0x14fe, &(0x7f0000002a40)="$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") 33.576965576s ago: executing program 0: syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x1, 0x142, &(0x7f0000000240)="$eJzszTFLAnEYx/Hfv7O0MBJ0sCALGpLEPE9MCBwslITsqJCgSdCLAs1ICMcK2hp6ATdUQtPha6hosTwIex1CQ9BYPHccOURD8/MZnoPv/+G5sJnOAj4AkGis1mtHx1qjoVVmt9RCbjtljC7D5gbg+Xm3Y+ae5j4N/1mfPhV4gdTeQVVbLNertJaxehgeIEpdBmDvjlHbpBZ32py1t0NN+aUlnOaaopZ27t180b15alnnHoCPph5pG88b3U4+unA3LeEiH5kBhH+wh7RLJTfZ8gYlFLWnWwBipam/xTrR11jb6JndwrpaUM2Eoiwl5LgsJ3vqSzefPL2Ca817Qr8Ru4P3RhAMuYpWPweEDgijqfcfxDiAx+tPtTbhDgB4P/QB4q+Xcik43CoFfEOQwhBgjDHGGGOMMcb+6TsAAP//i5BpfA==") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 33.229758819s ago: executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r2}, {}, {r2, 0x2000}, {r0}], 0x4, &(0x7f0000000480)={0x0, 0x989680}, 0x0, 0x0) 33.113196568s ago: executing program 1: socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x80, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) open(0x0, 0x40a80, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0x0, 0x0}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r8}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x940e, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9, 0xffffffffffffffff, 0x0, 0x800}, 0x48) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000380)='./bus\x00', 0x4400, &(0x7f00000004c0)=ANY=[@ANYBLOB='dmode=00000000000000000000006,rootdir=00000000000000000002,novrs,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c0000f1ffff071f1feea11e18ca67080dbf049f823016a5c7c47a3a3bb51f45eae4ad555aac29d4ec3686001e841ef39ec33701a5af414b075ddfc590e3020072233bf9fdc46d307eeac0d4dc7747d25891b39628dbf1eb25a11806b39a9c2c8f6d945ec2b7f50000000000003735d84a084013fa9de28d6c73c9b8547b8a866dd076e0b970531b8820bcae1200cdf884a9a2329c128dfbe875aa9b9102a133dbf8a7c42e0d3a0e561e0f75f0ab2b1467e90f2285f763bcdca0ebcf308971c01e788c8c04f6e501be393be94e"], 0x1, 0xa1b, &(0x7f0000001540)="$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") mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x2000, 0x103) r10 = creat(&(0x7f0000000300)='./bus\x00', 0x0) dup3(0xffffffffffffffff, r10, 0x0) io_setup(0x6, &(0x7f0000000240)) 33.07381582s ago: executing program 2: r0 = eventfd2(0x0, 0x0) syz_io_uring_setup(0x1b3f, &(0x7f0000000300), &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) write$eventfd(r0, &(0x7f00000000c0), 0x8) 32.447431799s ago: executing program 2: unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000000883ec0000000000010000000000000400048005000300010000000900010073797a3000000000060002"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x3}, 0x14}}, 0x0) 31.879613372s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) 31.809580098s ago: executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@local, @multicast1, 0x0, "d30f38d1a15892def51090dedbf3cd662e4ba38c52647612d91de4353d68bcfa"}, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000180), 0x4) 31.772978713s ago: executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r1, 0x8923, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e") setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000700)=0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d40845da05627d17b31db8eda6a842dc0b7bd93cf1e61df444"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000180)=0x1) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, 0xffffffffffffffff, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f00000065c0)=[{{&(0x7f0000000440)={0x2, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x28}}], 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000100)={0x0, 'team_slave_1\x00', {0x3}, 0x98}) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000640), 0x4) 31.644883894s ago: executing program 1: r0 = syz_open_dev$video(0x0, 0x400, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f00000000c0)) 31.505649339s ago: executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90424fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 31.414685796s ago: executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 31.329311264s ago: executing program 0: socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x40040) r0 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setown(r0, 0x8, 0xffffffffffffffff) dup(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0x4, 0x3, 0x7c3, 0x4}) 31.091417974s ago: executing program 0: memfd_create(0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 30.024944147s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000019000f0000000000000000000a"], 0x1c}}, 0x0) 2.40098797s ago: executing program 2: r0 = syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1b3f, &(0x7f0000000300), &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 1.392183217s ago: executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r2}, {}, {r2, 0x2000}, {}], 0x4, &(0x7f0000000480)={0x0, 0x989680}, 0x0, 0x0) 1.055625055s ago: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x1e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x18}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, 0x0, 0xd) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r3, &(0x7f0000002180)={0x50, 0x0, r4}, 0x50) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = gettid() tkill(r5, 0x15) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000045) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000a40)={0x14, r6, 0x1}, 0x14}}, 0x0) 0s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) kernel console output (not intermixed with test programs): 7d4412cf [ 746.242057][T13040] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 746.334910][T12923] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 746.420604][T13073] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 746.461697][T12923] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 746.492849][T12923] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 746.544194][T12923] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 746.790643][T12854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.912767][T12854] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.952634][T13078] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 746.970620][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.978014][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.989681][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.997636][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.184183][ T8] libceph: connect (1)[c::]:6789 error -101 [ 747.190760][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 747.193531][T12854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 747.344715][T12923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.407037][T12923] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.453646][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.460817][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.480854][ T1148] libceph: connect (1)[c::]:6789 error -101 [ 747.490158][ T1148] libceph: mon0 (1)[c::]:6789 connect error [ 747.508510][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.515768][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.557085][T13087] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 747.727764][T12954] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 747.772850][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.780166][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.800764][T12954] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 747.908589][T12954] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 747.920167][T12954] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 747.936758][T13079] ceph: No mds server is up or the cluster is laggy [ 747.955976][T12923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 748.034719][T12854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.043677][ T1148] libceph: connect (1)[c::]:6789 error -101 [ 748.059564][ T1148] libceph: mon0 (1)[c::]:6789 connect error [ 748.316542][T12854] veth0_vlan: entered promiscuous mode [ 748.415817][T12854] veth1_vlan: entered promiscuous mode [ 748.551855][T12954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.671041][T12854] veth0_macvtap: entered promiscuous mode [ 748.697248][T12954] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.723155][T12854] veth1_macvtap: entered promiscuous mode [ 748.753831][T12923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.774065][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.781589][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.835716][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.843321][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.014739][T12854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.026616][T12854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.041206][T12854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.057370][T12854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.098144][T12854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.150945][T12854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.163051][T12854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.175732][T12854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.191188][T12854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.205121][T12854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.280939][T12854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.323509][T12854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.341547][T12854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.352015][T12854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.486639][T12923] veth0_vlan: entered promiscuous mode [ 749.607072][T12923] veth1_vlan: entered promiscuous mode [ 749.669540][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.677402][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.810267][ T2847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.827362][T12923] veth0_macvtap: entered promiscuous mode [ 749.839584][ T2847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.860512][T12954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.912124][T12923] veth1_macvtap: entered promiscuous mode [ 750.008547][T12923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.045349][T13123] loop0: detected capacity change from 0 to 16 [ 750.063439][T13123] erofs: (device loop0): mounted with root inode @ nid 36. [ 750.072182][T12923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.249338][T12923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.267148][T12923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.278857][T12923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.234091][ T5160] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 751.298804][T12923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.352634][T12923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.402688][T12923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.451978][T12923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.499435][T12923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.513009][ T5160] usb 2-1: Using ep0 maxpacket: 8 [ 751.526685][T12923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.535763][ T5160] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 751.541639][T12923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.558530][ T5160] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 751.563160][T12923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.577150][ T5160] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 751.586091][T12923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.664451][T12923] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.668587][ T5160] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 751.673589][T12923] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.694284][T12923] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.704700][T12923] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.705795][ T5160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.765506][ T5160] usbtmc 2-1:16.0: bulk endpoints not found [ 752.065280][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.085299][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.175201][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.198500][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.249261][T12954] veth0_vlan: entered promiscuous mode [ 752.266126][T12954] veth1_vlan: entered promiscuous mode [ 752.325891][T12954] veth0_macvtap: entered promiscuous mode [ 752.373122][T12954] veth1_macvtap: entered promiscuous mode [ 752.377050][T13146] loop0: detected capacity change from 0 to 4096 [ 752.433424][T13146] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 752.463579][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.517306][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.545954][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.750082][T13157] loop2: detected capacity change from 0 to 128 [ 752.757747][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.784587][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.810582][T13157] FAT-fs (loop2): bogus number of FAT sectors [ 752.824856][T13157] FAT-fs (loop2): Can't find a valid FAT filesystem [ 752.832810][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.849000][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.861200][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.876383][T12954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.912173][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.945298][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.991950][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.008375][T13160] sctp: [Deprecated]: syz-executor.2 (pid 13160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 753.008375][T13160] Use struct sctp_sack_info instead [ 753.038841][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.063160][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.122247][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.187243][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.238152][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.293626][T12954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.365652][T12954] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.439854][T12954] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.495489][T12954] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.520776][T12954] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.588779][T13163] loop2: detected capacity change from 0 to 2048 [ 753.735808][ T5160] usb 2-1: USB disconnect, device number 5 [ 753.853599][T13164] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 753.903889][T13172] loop3: detected capacity change from 0 to 128 [ 753.946905][T13172] FAT-fs (loop3): bogus number of FAT sectors [ 753.976051][T13172] FAT-fs (loop3): Can't find a valid FAT filesystem [ 754.246753][T13172] sctp: [Deprecated]: syz-executor.3 (pid 13172) Use of struct sctp_assoc_value in delayed_ack socket option. [ 754.246753][T13172] Use struct sctp_sack_info instead [ 754.459436][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.467284][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.659774][T13175] loop3: detected capacity change from 0 to 2048 [ 755.140531][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.171901][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.198461][ T8] libceph: connect (1)[c::]:6789 error -101 [ 755.208679][T13183] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 755.223108][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 755.490786][T12773] libceph: connect (1)[c::]:6789 error -101 [ 755.496869][T12773] libceph: mon0 (1)[c::]:6789 connect error [ 755.839119][T13184] ceph: No mds server is up or the cluster is laggy [ 755.908857][ T5614] libceph: connect (1)[c::]:6789 error -101 [ 755.969540][ T5614] libceph: mon0 (1)[c::]:6789 connect error [ 756.024997][ T5614] libceph: connect (1)[c::]:6789 error -101 [ 756.080713][ T5614] libceph: mon0 (1)[c::]:6789 connect error [ 756.113199][T13196] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 756.202632][T13197] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 756.343880][T13196] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.360933][T13196] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.763471][T13191] ceph: No mds server is up or the cluster is laggy [ 756.782411][ T5614] libceph: connect (1)[c::]:6789 error -101 [ 756.848082][ T5614] libceph: mon0 (1)[c::]:6789 connect error [ 757.020234][T13196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.058862][T13196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.353634][T13196] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.379774][T13196] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.401750][T13196] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.453712][T13196] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.853577][T13201] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 758.687749][T13215] loop2: detected capacity change from 0 to 4096 [ 758.699536][T13215] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 758.733563][ T8] libceph: connect (1)[c::]:6789 error -101 [ 758.745851][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 758.770664][T13216] loop3: detected capacity change from 0 to 512 [ 758.867389][T13216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 759.037877][ T5153] libceph: connect (1)[c::]:6789 error -101 [ 759.104019][ T5153] libceph: mon0 (1)[c::]:6789 connect error [ 759.104223][T13216] ext4 filesystem being mounted at /root/syzkaller-testdir41053059/syzkaller.gp70Bh/10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 759.497680][ T5162] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 759.561117][ T1793] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 759.566019][T13209] ceph: No mds server is up or the cluster is laggy [ 759.642942][ T8] libceph: connect (1)[c::]:6789 error -101 [ 759.675939][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 759.717644][ T5162] usb 5-1: Using ep0 maxpacket: 8 [ 759.769953][ T1793] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 759.769951][ T5162] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 759.769983][ T1793] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.809010][ T5162] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 759.809701][ T1793] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 759.833302][ T1793] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.869509][ T5162] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 759.924270][ T1793] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 759.956050][ T5162] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 759.959759][ T1793] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 759.983718][ T1793] usb 4-1: Product: syz [ 759.991012][ T1793] usb 4-1: Manufacturer: syz [ 760.032243][ T1793] cdc_wdm 4-1:1.0: skipping garbage [ 760.042098][ T5162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.042131][ T1793] cdc_wdm 4-1:1.0: skipping garbage [ 760.088386][ T1793] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 760.095111][ T5162] usbtmc 5-1:16.0: bulk endpoints not found [ 760.106006][ T1793] cdc_wdm 4-1:1.0: Unknown control protocol [ 760.368562][ T1793] usb 4-1: USB disconnect, device number 7 [ 760.488795][T13234] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 760.571975][T13236] loop1: detected capacity change from 0 to 1024 [ 760.772767][ T81] hfsplus: b-tree write err: -5, ino 4 [ 761.083724][T12754] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.103441][ T1793] usb 5-1: USB disconnect, device number 8 [ 763.158792][T13263] loop4: detected capacity change from 0 to 8 [ 764.443781][ T5153] libceph: connect (1)[c::]:6789 error -101 [ 764.473453][ T5153] libceph: mon0 (1)[c::]:6789 connect error [ 764.502948][ T5153] libceph: connect (1)[c::]:6789 error -101 [ 764.524045][ T5153] libceph: mon0 (1)[c::]:6789 connect error [ 764.623232][T13285] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 764.848112][ T5162] libceph: connect (1)[c::]:6789 error -101 [ 764.856483][ T5162] libceph: mon0 (1)[c::]:6789 connect error [ 764.862595][T13282] loop1: detected capacity change from 0 to 4096 [ 764.989319][T13267] ceph: No mds server is up or the cluster is laggy [ 765.007912][T12812] libceph: connect (1)[c::]:6789 error -101 [ 765.014572][T12812] libceph: mon0 (1)[c::]:6789 connect error [ 765.031271][T13282] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 765.084235][T13294] loop4: detected capacity change from 0 to 128 [ 765.179621][T13294] FAT-fs (loop4): bogus number of FAT sectors [ 765.185839][T13294] FAT-fs (loop4): Can't find a valid FAT filesystem [ 765.408369][ T1793] libceph: connect (1)[c::]:6789 error -101 [ 765.454157][ T1793] libceph: mon0 (1)[c::]:6789 connect error [ 765.606828][T13304] sctp: [Deprecated]: syz-executor.4 (pid 13304) Use of struct sctp_assoc_value in delayed_ack socket option. [ 765.606828][T13304] Use struct sctp_sack_info instead [ 765.930601][T13294] loop4: detected capacity change from 0 to 2048 [ 765.997607][T13287] ceph: No mds server is up or the cluster is laggy [ 766.019464][ T1793] libceph: connect (1)[c::]:6789 error -101 [ 766.109686][ T1793] libceph: mon0 (1)[c::]:6789 connect error [ 766.123515][T13304] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 766.502464][T13312] loop1: detected capacity change from 0 to 32768 [ 766.522600][T13312] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (13312) [ 766.540034][T13312] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 766.550404][T13312] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 766.559238][T13312] BTRFS info (device loop1): using free-space-tree [ 773.805805][T12854] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 774.247741][ T5162] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 774.427705][ T5162] usb 5-1: Using ep0 maxpacket: 8 [ 774.455163][ T5162] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 774.468197][ T5162] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 774.479867][ T5162] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 774.491266][ T5162] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 774.504660][ T5162] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 774.525277][ T5162] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 774.535706][ T5162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.592284][ T1793] libceph: connect (1)[c::]:6789 error -101 [ 774.602549][ T1793] libceph: mon0 (1)[c::]:6789 connect error [ 774.897983][ T1793] libceph: connect (1)[c::]:6789 error -101 [ 774.926030][ T5162] usb 5-1: usb_control_msg returned -32 [ 774.934822][ T1793] libceph: mon0 (1)[c::]:6789 connect error [ 774.934825][ T5162] usbtmc 5-1:16.0: can't read capabilities [ 774.987146][T13368] netlink: 16398 bytes leftover after parsing attributes in process `syz-executor.1'. [ 775.007849][T13367] netlink: 16398 bytes leftover after parsing attributes in process `syz-executor.1'. [ 775.025253][ T5162] usb 5-1: USB disconnect, device number 9 [ 775.205735][T13371] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 775.416519][T13352] ceph: No mds server is up or the cluster is laggy [ 775.470150][ T1793] libceph: connect (1)[c::]:6789 error -101 [ 775.495689][ T1793] libceph: mon0 (1)[c::]:6789 connect error [ 776.486593][ T5614] libceph: connect (1)[c::]:6789 error -101 [ 776.518558][ T5614] libceph: mon0 (1)[c::]:6789 connect error [ 776.761422][T13380] loop1: detected capacity change from 0 to 32768 [ 776.769609][T13380] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (13380) [ 776.792627][T13380] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 776.802955][T13380] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 776.811718][T13380] BTRFS info (device loop1): using free-space-tree [ 777.568098][T12854] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 778.040384][T13405] loop0: detected capacity change from 0 to 16 [ 778.135617][T13405] erofs: (device loop0): mounted with root inode @ nid 36. [ 780.401979][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 780.452949][T13435] loop2: detected capacity change from 0 to 8 [ 781.592499][T13444] loop1: detected capacity change from 0 to 32768 [ 781.616617][T13444] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (13444) [ 781.652175][T13444] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 781.662809][T13444] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 781.662961][T13451] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 781.671706][T13444] BTRFS info (device loop1): using free-space-tree [ 782.089104][T13471] loop4: detected capacity change from 0 to 1024 [ 782.487550][T13471] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 783.564037][T12854] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 784.037038][T13484] loop4: detected capacity change from 0 to 32768 [ 784.061846][T13484] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (13484) [ 784.107582][T13484] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 784.118371][T13484] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 784.127817][T13484] BTRFS info (device loop4): using free-space-tree [ 784.135036][ T5614] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 784.309614][T13498] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 784.327923][ T5614] usb 1-1: Using ep0 maxpacket: 8 [ 784.390866][ T5614] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 784.401746][ T5614] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 784.412719][ T5614] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 784.422578][ T5614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.713049][T13504] loop1: detected capacity change from 0 to 16 [ 784.747031][T13504] erofs: (device loop1): mounted with root inode @ nid 36. [ 786.087811][ T29] audit: type=1804 audit(1717515644.868:248): pid=13507 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3633856233/syzkaller.EF9gbt/13/file0/file0/bus" dev="loop4" ino=263 res=1 errno=0 [ 787.179411][ T5153] usb 1-1: USB disconnect, device number 9 [ 787.556384][T13530] loop0: detected capacity change from 0 to 32768 [ 787.589894][T13530] BTRFS: device /dev/loop0 (7:0) using temp-fsid f83baa85-5ce6-4091-bca0-26e8e512cfa4 [ 787.599900][T13530] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (13530) [ 787.616507][T13530] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 787.627177][T13530] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 787.636197][T13530] BTRFS info (device loop0): using free-space-tree [ 788.543754][T13545] loop1: detected capacity change from 0 to 32768 [ 788.557086][T13545] BTRFS: device /dev/loop1 (7:1) using temp-fsid 46d71760-5856-4511-b555-1f15cfa3b2d3 [ 788.566808][T13545] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (13545) [ 788.582934][T13545] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 788.596085][T13545] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 788.605910][T13545] BTRFS info (device loop1): using free-space-tree [ 789.826796][T12687] BTRFS info (device loop0): last unmount of filesystem f83baa85-5ce6-4091-bca0-26e8e512cfa4 [ 789.988007][T12954] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 790.444617][ T29] audit: type=1804 audit(1717515649.218:249): pid=13587 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4173911247/syzkaller.VBpLZb/22/file0/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 791.226909][ T5162] libceph: connect (1)[c::]:6789 error -101 [ 791.233086][ T5162] libceph: mon0 (1)[c::]:6789 connect error [ 791.281175][ T5162] libceph: connect (1)[c::]:6789 error -101 [ 791.370505][ T5162] libceph: mon0 (1)[c::]:6789 connect error [ 791.637975][ T5153] libceph: connect (1)[c::]:6789 error -101 [ 791.654774][ T5153] libceph: mon0 (1)[c::]:6789 connect error [ 791.977348][T13598] ceph: No mds server is up or the cluster is laggy [ 792.027595][ T5614] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 792.259481][ T5614] usb 1-1: Using ep0 maxpacket: 8 [ 792.311581][ T5614] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 792.336966][ T5614] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 792.363235][ T5614] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 792.374959][ T5614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.744009][T12854] BTRFS info (device loop1): last unmount of filesystem 46d71760-5856-4511-b555-1f15cfa3b2d3 [ 792.856879][T13613] loop2: detected capacity change from 0 to 16 [ 792.872265][T13613] erofs: (device loop2): mounted with root inode @ nid 36. [ 794.512662][T13622] loop4: detected capacity change from 0 to 32768 [ 794.583172][T13622] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (13622) [ 794.601685][T13622] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 794.612093][T13622] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 794.621438][T13622] BTRFS info (device loop4): using free-space-tree [ 796.728329][T12773] usb 1-1: USB disconnect, device number 10 [ 796.827359][T13653] loop0: detected capacity change from 0 to 8 [ 798.100877][T12954] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 798.158077][ T5153] libceph: connect (1)[c::]:6789 error -101 [ 798.178909][ T5153] libceph: mon0 (1)[c::]:6789 connect error [ 798.252963][ T5153] libceph: connect (1)[c::]:6789 error -101 [ 798.264504][ T5153] libceph: mon0 (1)[c::]:6789 connect error [ 798.537980][T12773] libceph: connect (1)[c::]:6789 error -101 [ 798.544090][T12773] libceph: mon0 (1)[c::]:6789 connect error [ 799.512805][ T5153] libceph: connect (1)[c::]:6789 error -101 [ 799.581734][ T5153] libceph: mon0 (1)[c::]:6789 connect error [ 799.647011][T13662] ceph: No mds server is up or the cluster is laggy [ 799.780967][T13678] loop2: detected capacity change from 0 to 16 [ 799.879321][T13678] erofs: (device loop2): mounted with root inode @ nid 36. [ 800.409830][T13681] loop4: detected capacity change from 0 to 64 [ 800.638348][T13685] loop0: detected capacity change from 0 to 16 [ 800.710917][T13685] erofs: (device loop0): mounted with root inode @ nid 36. [ 802.447070][T13701] loop2: detected capacity change from 0 to 8 [ 805.491061][ T5162] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 805.509446][T13699] sctp: failed to load transform for md5: -4 [ 806.051530][T13721] loop1: detected capacity change from 0 to 32768 [ 806.060228][T13721] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (13721) [ 806.085950][T13721] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 806.096235][T13721] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 806.106099][T13721] BTRFS info (device loop1): using free-space-tree [ 806.568700][T13748] loop3: detected capacity change from 0 to 16 [ 806.587641][T13748] erofs: (device loop3): mounted with root inode @ nid 36. [ 806.617709][ T5153] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 806.699957][T12854] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 806.821099][ T5153] usb 3-1: Using ep0 maxpacket: 8 [ 806.860016][ T5153] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.887414][ T5153] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 806.908273][T13719] loop4: detected capacity change from 0 to 32768 [ 806.937807][ T5153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.971057][ T5153] usb 3-1: config 0 descriptor?? [ 806.995131][ T5153] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 807.006896][T13719] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (13719) [ 807.017665][ T5153] usb 3-1: No valid video chain found. [ 807.107909][T13719] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 807.181623][ T5153] usb 3-1: USB disconnect, device number 7 [ 807.189665][T13719] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 807.211356][T13719] BTRFS info (device loop4): using free-space-tree [ 808.204746][T13760] vivid-000: disconnect [ 809.269114][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.276611][T13743] vivid-000: reconnect [ 809.327805][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.807918][T13719] BTRFS error (device loop4): open_ctree failed [ 810.401915][T13782] loop1: detected capacity change from 0 to 512 [ 810.493952][T13782] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 810.583718][T13782] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e12c, mo2=0002] [ 810.627243][T13782] EXT4-fs (loop1): orphan cleanup on readonly fs [ 810.642952][T13782] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 361: padding at end of block bitmap is not set [ 810.666909][T13782] EXT4-fs (loop1): Remounting filesystem read-only [ 810.695938][T13782] EXT4-fs (loop1): 1 truncate cleaned up [ 810.724556][T13801] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 810.836002][T13802] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 810.928416][T13782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 811.312822][T13801] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.321836][T13801] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.627689][ T1148] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 811.997585][ T1148] usb 5-1: Using ep0 maxpacket: 8 [ 812.005427][ T1148] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 812.015182][ T1148] usb 5-1: config 1 has no interface number 1 [ 812.021745][ T1148] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 812.037651][ T1148] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 812.051368][ T1148] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 812.320393][ T1148] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 812.522654][ T1148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.688134][ T1148] usb 5-1: Product: syz [ 812.715306][ T1148] usb 5-1: Manufacturer: syz [ 812.742720][ T1148] usb 5-1: SerialNumber: syz [ 812.814222][T13801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.843562][ T1793] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 812.865953][T13801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.087806][ T1793] usb 3-1: Using ep0 maxpacket: 8 [ 813.156876][ T1793] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.315105][ T1793] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 813.460315][ T1793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.691816][ T1793] usb 3-1: config 0 descriptor?? [ 813.912088][ T1793] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 813.927811][ T29] audit: type=1804 audit(1717515672.698:250): pid=13806 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3633856233/syzkaller.EF9gbt/20/file0" dev="sda1" ino=1966 res=1 errno=0 [ 813.946074][ T1793] usb 3-1: No valid video chain found. [ 814.049185][T13801] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.114708][ T1793] usb 3-1: USB disconnect, device number 8 [ 814.124233][T13801] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.133393][T13801] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.142438][T13801] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.740372][T13828] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 815.749023][T13845] Cannot find set identified by id 0 to match [ 815.990809][T13828] usb 1-1: config 0 has no interfaces? [ 816.009086][T13828] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 816.044302][T13828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.079119][T13828] usb 1-1: config 0 descriptor?? [ 816.093312][T12854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 816.438254][T13856] loop3: detected capacity change from 0 to 4096 [ 816.446217][T13856] nilfs2: Unknown parameter 'Ž' [ 817.787730][ T1148] usb 5-1: USB disconnect, device number 11 [ 818.028074][ T29] audit: type=1800 audit(1717515676.818:251): pid=13871 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 818.266848][T13828] usb 1-1: USB disconnect, device number 11 [ 819.673785][T13877] loop4: detected capacity change from 0 to 262144 [ 819.713946][T13877] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (13877) [ 819.750859][T13877] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 819.761600][T13877] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 819.771514][T13877] BTRFS info (device loop4): using free-space-tree [ 819.874088][ T35] BTRFS warning (device loop4): checksum verify failed on logical 30457856 mirror 1 wanted 0x402e75f1de9ccfe6 found 0xf1f292946054726e level 0 [ 819.904624][T13877] BTRFS info (device loop4): read error corrected: ino 0 off 30457856 (dev /dev/loop4 sector 75872) [ 819.925554][T13877] BTRFS info (device loop4): read error corrected: ino 0 off 30461952 (dev /dev/loop4 sector 75880) [ 819.947914][T13877] BTRFS info (device loop4): read error corrected: ino 0 off 30466048 (dev /dev/loop4 sector 75888) [ 819.960246][T13877] BTRFS info (device loop4): read error corrected: ino 0 off 30470144 (dev /dev/loop4 sector 75896) [ 820.697621][T13810] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 820.801600][T12954] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 820.908484][T13810] usb 2-1: Using ep0 maxpacket: 8 [ 820.914551][T13904] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 820.984856][T13810] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 821.015379][T13904] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 821.022168][T13810] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 821.108624][T13810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.182312][T13810] usb 2-1: config 0 descriptor?? [ 821.201071][T13810] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 821.237764][T13810] usb 2-1: No valid video chain found. [ 821.423561][ T5157] usb 2-1: USB disconnect, device number 6 [ 821.529944][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 821.792696][ T2904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.978510][T13915] loop0: detected capacity change from 0 to 4096 [ 822.030498][T13915] NILFS (loop0): invalid segment: Checksum error in segment payload [ 822.075230][T13915] NILFS (loop0): trying rollback from an earlier position [ 822.130898][T13915] NILFS (loop0): recovery complete [ 822.154565][T13920] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 823.079972][ T29] audit: type=1800 audit(1717515681.858:252): pid=13921 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 823.106861][ T2904] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.631557][T13919] loop1: detected capacity change from 0 to 262144 [ 823.655014][T13919] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (13919) [ 823.677414][T13919] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 823.688025][T13919] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 823.697277][T13919] BTRFS info (device loop1): using free-space-tree [ 823.784026][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 823.813381][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 823.824064][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 823.832521][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 823.859329][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 823.866944][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 823.915958][ T2904] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.951262][T13257] BTRFS warning (device loop1): checksum verify failed on logical 30457856 mirror 1 wanted 0x402e75f1de9ccfe6 found 0xf1f292946054726e level 0 [ 823.985618][T13919] BTRFS info (device loop1): read error corrected: ino 0 off 30457856 (dev /dev/loop1 sector 75872) [ 823.996861][T13919] BTRFS info (device loop1): read error corrected: ino 0 off 30461952 (dev /dev/loop1 sector 75880) [ 824.008727][T13919] BTRFS info (device loop1): read error corrected: ino 0 off 30466048 (dev /dev/loop1 sector 75888) [ 824.019884][T13919] BTRFS info (device loop1): read error corrected: ino 0 off 30470144 (dev /dev/loop1 sector 75896) [ 824.180103][ T2904] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.185364][T12854] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 824.954107][ T2904] bridge_slave_1: left allmulticast mode [ 825.007568][ T2904] bridge_slave_1: left promiscuous mode [ 825.013406][ T2904] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.066386][ T2904] bridge_slave_0: left allmulticast mode [ 825.091161][ T2904] bridge_slave_0: left promiscuous mode [ 825.097047][ T2904] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.992572][ T53] Bluetooth: hci1: command tx timeout [ 826.474429][T13964] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 826.699973][T13968] loop3: detected capacity change from 0 to 512 [ 826.813228][T13968] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 827.038408][T13968] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e12c, mo2=0002] [ 827.039428][T13967] loop0: detected capacity change from 0 to 4096 [ 827.074432][T13967] nilfs2: Unknown parameter 'Ž' [ 827.089643][T13968] EXT4-fs (loop3): orphan cleanup on readonly fs [ 827.128999][T13968] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 361: padding at end of block bitmap is not set [ 827.234346][T13968] EXT4-fs (loop3): Remounting filesystem read-only [ 827.246071][T13968] EXT4-fs (loop3): 1 truncate cleaned up [ 827.258335][T13968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 827.388828][ T5160] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 827.614372][ T5160] usb 2-1: config 0 has no interfaces? [ 827.638131][ T5160] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 827.714473][ T5160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.753736][ T2904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.768110][T13974] loop0: detected capacity change from 0 to 8 [ 827.768602][ T2904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.776809][ T5160] usb 2-1: config 0 descriptor?? [ 827.805778][ T2904] bond0 (unregistering): Released all slaves [ 828.035587][ T53] Bluetooth: hci1: command tx timeout [ 828.066936][T13962] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 829.079189][T13962] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.086879][T13962] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.238044][ T5153] usb 2-1: USB disconnect, device number 7 [ 829.304384][T12754] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 829.399635][T13828] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 829.540586][T13962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.588644][T13962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 829.590772][T13828] usb 1-1: Using ep0 maxpacket: 8 [ 829.603529][T13828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.627732][T13828] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 829.641435][T13828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.680167][T13828] usb 1-1: config 0 descriptor?? [ 829.701403][T13828] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 829.720009][T13828] usb 1-1: No valid video chain found. [ 829.862262][T13962] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.886843][T13962] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.932893][T13962] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.955737][T13994] usb 1-1: USB disconnect, device number 12 [ 829.968502][T13962] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.087633][ T5116] Bluetooth: hci1: command tx timeout [ 830.206573][T13928] chnl_net:caif_netlink_parms(): no params data found [ 830.302802][T13999] loop4: detected capacity change from 0 to 4096 [ 830.336364][T13999] NILFS (loop4): invalid segment: Checksum error in segment payload [ 830.364192][T13999] NILFS (loop4): trying rollback from an earlier position [ 830.423138][T13999] NILFS (loop4): recovery complete [ 830.488024][T14004] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 830.647890][ T2904] hsr_slave_0: left promiscuous mode [ 830.674723][ T2904] hsr_slave_1: left promiscuous mode [ 830.698439][ T2904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 830.732804][ T2904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.757674][ T2904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 830.782616][ T2904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.898350][ T2904] veth1_macvtap: left promiscuous mode [ 830.922424][ T2904] veth0_macvtap: left promiscuous mode [ 830.951738][ T2904] veth1_vlan: left promiscuous mode [ 830.978308][ T2904] veth0_vlan: left promiscuous mode [ 831.806326][ T5116] Bluetooth: hci5: command 0x0406 tx timeout [ 832.359271][ T53] Bluetooth: hci1: command tx timeout [ 832.874728][T14002] loop3: detected capacity change from 0 to 262144 [ 832.934022][T14002] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (14002) [ 833.281733][T14002] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 833.292698][T14002] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 833.302073][T14002] BTRFS info (device loop3): using free-space-tree [ 833.336771][T14020] loop0: detected capacity change from 0 to 8 [ 833.374480][T14002] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 833.375336][T14002] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 833.386068][T14002] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 833.395703][T14002] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 833.405900][T14002] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 833.416543][T14002] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 833.427303][T14002] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 833.467806][T14002] BTRFS error (device loop3): open_ctree failed [ 833.596577][T14026] loop1: detected capacity change from 0 to 4096 [ 833.677312][T14026] nilfs2: Unknown parameter 'Ž' [ 833.732291][ T29] audit: type=1804 audit(1717515692.478:253): pid=14011 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3633856233/syzkaller.EF9gbt/25/bus" dev="sda1" ino=1941 res=1 errno=0 [ 834.948928][T14044] loop0: detected capacity change from 0 to 32768 [ 834.958864][T14044] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (14044) [ 834.992047][T14046] Cannot find set identified by id 0 to match [ 834.998941][T14044] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 835.009417][T14044] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 835.018252][T14044] BTRFS info (device loop0): using free-space-tree [ 835.596020][ T2904] team0 (unregistering): Port device team_slave_1 removed [ 835.816029][ T29] audit: type=1804 audit(1717515694.598:254): pid=14067 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2359851370/syzkaller.aj5e5K/61/file0/file0/bus" dev="loop0" ino=263 res=1 errno=0 [ 835.852963][ T2904] team0 (unregistering): Port device team_slave_0 removed [ 836.547758][ T1148] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 836.707828][ T1148] usb 5-1: device descriptor read/64, error -71 [ 836.934153][T12687] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 837.011138][ T1148] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 837.180837][ T1148] usb 5-1: device descriptor read/64, error -71 [ 837.310107][T13928] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.318199][T13928] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.325965][ T1148] usb usb5-port1: attempt power cycle [ 837.345910][T13928] bridge_slave_0: entered allmulticast mode [ 837.388100][T13928] bridge_slave_0: entered promiscuous mode [ 837.427943][T13928] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.464695][T13928] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.476094][T13928] bridge_slave_1: entered allmulticast mode [ 837.483925][T13928] bridge_slave_1: entered promiscuous mode [ 837.585256][T13928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.616492][T13928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.726411][T13928] team0: Port device team_slave_0 added [ 837.751999][T13928] team0: Port device team_slave_1 added [ 837.777655][ T1148] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 837.833252][ T1148] usb 5-1: device descriptor read/8, error -71 [ 837.909478][T13928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.925787][T13928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.952792][T13928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.127897][ T1148] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 838.175409][ T1148] usb 5-1: device descriptor read/8, error -71 [ 838.312154][ T1148] usb usb5-port1: unable to enumerate USB device [ 838.758118][T13928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.765130][T13928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.849398][T13928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.872859][T14098] loop3: detected capacity change from 0 to 4096 [ 838.902722][T14098] nilfs2: Unknown parameter 'Ž' [ 838.910497][T14100] Cannot find set identified by id 0 to match [ 838.995066][T13928] hsr_slave_0: entered promiscuous mode [ 839.014997][T13928] hsr_slave_1: entered promiscuous mode [ 839.024816][T13928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 839.035711][T13928] Cannot create hsr debugfs directory [ 839.235921][T14108] loop3: detected capacity change from 0 to 8 [ 840.543957][T14117] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 840.601757][T14119] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 840.793364][ T29] audit: type=1804 audit(1717515699.578:255): pid=14105 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4173911247/syzkaller.VBpLZb/42/bus" dev="sda1" ino=1954 res=1 errno=0 [ 840.829374][T14117] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.837056][T14117] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.525660][T14117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.566709][T14117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.115473][T14117] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.141703][T14117] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.175880][T14117] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.209630][T14117] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.218934][T13826] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 842.497610][T13826] usb 2-1: Using ep0 maxpacket: 8 [ 842.530318][T13826] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 842.601307][T13826] usb 2-1: config 1 has no interface number 1 [ 842.623665][T13826] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 842.640326][T13826] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 843.657878][T13826] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 843.710625][T13826] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 843.757428][T13826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.796562][T13826] usb 2-1: Product: syz [ 843.803314][T13826] usb 2-1: Manufacturer: syz [ 843.813166][T13826] usb 2-1: SerialNumber: syz [ 844.265994][ T29] audit: type=1804 audit(1717515702.898:256): pid=14141 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4173911247/syzkaller.VBpLZb/44/file0" dev="sda1" ino=1957 res=1 errno=0 [ 845.105831][ C0] hrtimer: interrupt took 140654 ns [ 845.128967][T13928] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 845.195917][T13928] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 845.220788][T13928] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 845.248986][T13928] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 846.028659][T13928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.072536][T13928] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.189065][T13994] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.196200][T13994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.257033][T13826] usb 2-1: USB disconnect, device number 8 [ 846.313827][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.321000][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.450105][ T29] audit: type=1326 audit(1717515705.238:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14178 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37bc27cf69 code=0x0 [ 846.488771][T13827] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 846.535812][ T53] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 846.697828][T13827] usb 4-1: Using ep0 maxpacket: 8 [ 846.706598][T13827] usb 4-1: config 0 has no interfaces? [ 846.744555][T13827] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 846.763229][T13827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.772510][T13827] usb 4-1: Product: syz [ 846.776960][T13827] usb 4-1: Manufacturer: syz [ 846.790882][T13827] usb 4-1: SerialNumber: syz [ 846.801245][T13827] usb 4-1: config 0 descriptor?? [ 846.993034][T13928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.045832][ T5160] usb 4-1: USB disconnect, device number 8 [ 847.111002][T13928] veth0_vlan: entered promiscuous mode [ 847.154161][T13928] veth1_vlan: entered promiscuous mode [ 847.255885][T13928] veth0_macvtap: entered promiscuous mode [ 847.365247][T13928] veth1_macvtap: entered promiscuous mode [ 847.607816][T13928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 847.622948][T14203] xt_bpf: check failed: parse error [ 847.711711][ T29] audit: type=1326 audit(1717515706.498:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14205 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b007cf69 code=0x7ffc0000 [ 847.741414][T13928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 847.862087][T13928] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.876244][ T29] audit: type=1326 audit(1717515706.498:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14205 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b007cf69 code=0x7ffc0000 [ 847.878609][T13928] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.962930][ T29] audit: type=1326 audit(1717515706.498:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14205 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc0b007cf69 code=0x7ffc0000 [ 848.039585][T13928] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.099809][T13928] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.141985][ T29] audit: type=1326 audit(1717515706.498:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14205 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b007cf69 code=0x7ffc0000 [ 848.261228][ T29] audit: type=1326 audit(1717515706.518:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14205 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b007cf69 code=0x7ffc0000 [ 848.446224][T14209] loop3: detected capacity change from 0 to 4096 [ 848.446982][T14209] nilfs2: Unknown parameter 'Ž' [ 848.557691][T13826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.557714][T13826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.624071][ T5162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.624096][ T5162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.770739][T14218] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 849.055663][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 849.062137][T14225] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 849.218139][T14228] binder: 14226:14228 ioctl f50f 0 returned -22 [ 850.578010][ T5116] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 850.587019][ T5116] Bluetooth: hci3: Injecting HCI hardware error event [ 850.599665][ T53] Bluetooth: hci3: hardware error 0x00 [ 851.937711][T13826] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 852.140844][T13826] usb 3-1: config 27 has an invalid descriptor of length 72, skipping remainder of the config [ 852.185839][T13826] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 231, changing to 11 [ 852.220293][T13826] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 25303, setting to 1024 [ 852.252512][T13826] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 852.287407][T13826] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 852.326096][T13826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.359680][T13826] usb 3-1: invalid MIDI in EP 0 [ 852.636538][T13826] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 852.700736][T13826] usb 3-1: USB disconnect, device number 9 [ 852.807915][ T53] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 853.041392][T14269] serio: Serial port pts0 [ 853.313944][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 853.344204][T14276] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 853.398474][T14274] loop2: detected capacity change from 0 to 4096 [ 853.417910][T14274] nilfs2: Unknown parameter 'Ž' [ 855.283766][ T29] audit: type=1804 audit(1717515714.068:263): pid=14281 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4173911247/syzkaller.VBpLZb/53/bus" dev="sda1" ino=1960 res=1 errno=0 [ 855.550950][T14319] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 855.593370][T14319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 855.604531][T14317] serio: Serial port pts0 [ 856.734056][T14320] loop4: detected capacity change from 0 to 4096 [ 856.743688][T14320] nilfs2: Unknown parameter 'Ž' [ 856.892045][T14335] x_tables: duplicate underflow at hook 2 [ 857.374976][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 857.914501][T11486] bridge_slave_1: left allmulticast mode [ 857.940703][T11486] bridge_slave_1: left promiscuous mode [ 857.948025][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 857.959327][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 857.968301][T11486] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.969673][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 857.985618][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 857.995014][T11486] bridge_slave_0: left allmulticast mode [ 858.000841][T11486] bridge_slave_0: left promiscuous mode [ 858.006619][T11486] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.020948][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 858.029007][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 858.667206][T14369] loop1: detected capacity change from 0 to 64 [ 858.773319][T14369] minix_free_block (loop1:1): bit already cleared [ 858.798815][T14371] loop4: detected capacity change from 0 to 512 [ 858.801504][T14369] minix_free_block (loop1:4): bit already cleared [ 858.837693][T14369] minix_free_block (loop1:3): bit already cleared [ 858.860717][T14369] minix_free_block (loop1:2): bit already cleared [ 858.901582][T14371] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz-executor.4: bg 0: block 5: invalid block bitmap [ 859.038156][T14371] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 859.048687][T14371] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 3 (level 2) [ 859.080038][T14375] loop0: detected capacity change from 0 to 512 [ 859.089488][T14371] EXT4-fs (loop4): 1 orphan inode deleted [ 859.092606][T11486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.097535][T14371] EXT4-fs (loop4): 1 truncate cleaned up [ 859.117735][T14375] EXT4-fs (loop0): orphan cleanup on readonly fs [ 859.125561][T14371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 859.141745][T14375] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 859.156559][T11486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.157958][T14375] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 859.175097][T14375] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz-executor.0: Failed to acquire dquot type 1 [ 859.188629][T11486] bond0 (unregistering): Released all slaves [ 859.370599][T14375] EXT4-fs (loop0): 1 truncate cleaned up [ 859.389388][T12954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.419177][T14375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 860.127885][ T5116] Bluetooth: hci4: command tx timeout [ 860.306552][T12687] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.379255][T14388] loop1: detected capacity change from 0 to 512 [ 860.441658][T14388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 860.462910][T14388] ext4 filesystem being mounted at /root/syzkaller-testdir4173911247/syzkaller.VBpLZb/61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 860.566627][T11486] hsr_slave_0: left promiscuous mode [ 860.573810][T11486] hsr_slave_1: left promiscuous mode [ 860.583853][T11486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.601069][T12854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.611279][T11486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.768397][T12812] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 860.938962][T14382] loop2: detected capacity change from 0 to 32768 [ 860.999632][T14382] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 861.011130][T12812] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.037318][T12812] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 861.046696][T12812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.058356][T12812] usb 1-1: Product: syz [ 861.062644][T12812] usb 1-1: Manufacturer: syz [ 861.067343][T12812] usb 1-1: SerialNumber: syz [ 861.262509][T14382] XFS (loop2): Ending clean mount [ 861.395681][T13928] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 861.702669][T14421] loop4: detected capacity change from 0 to 512 [ 861.725575][T14421] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 861.786105][T14421] EXT4-fs (loop4): 1 orphan inode deleted [ 861.800409][T14421] EXT4-fs (loop4): 1 truncate cleaned up [ 861.827898][T14421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 861.907355][T11486] team0 (unregistering): Port device team_slave_1 removed [ 861.983029][T11486] team0 (unregistering): Port device team_slave_0 removed [ 862.028210][T14421] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 862.069138][T14421] EXT4-fs (loop4): Remounting filesystem read-only [ 862.130715][T12954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.133868][T12812] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 862.149079][T12812] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 862.161800][T12812] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 862.168444][ T5116] Bluetooth: hci4: command tx timeout [ 862.368101][T12812] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 862.503779][T14426] loop2: detected capacity change from 0 to 32768 [ 862.515508][T14426] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (14426) [ 862.545921][T14426] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 862.573640][T14426] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 862.583379][T14426] BTRFS info (device loop2): using free-space-tree [ 862.952653][T14448] loop0: detected capacity change from 0 to 512 [ 862.982617][T14448] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #17: comm syz-executor.0: iget: bogus i_mode (0) [ 862.995132][T14448] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 17 (err -117) [ 863.013254][T14448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 863.036692][T14448] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz-executor.0: bg 0: block 7: invalid block bitmap [ 863.115647][T12687] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.213469][T12812] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 863.273509][T13928] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 863.306114][T12812] usb 1-1: USB disconnect, device number 13 [ 863.320606][T14454] loop0: detected capacity change from 0 to 2048 [ 863.335009][T13257] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 863.346947][T12812] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 863.365389][T14453] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 863.418695][T14454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 863.547610][T14454] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 863.731225][T14356] chnl_net:caif_netlink_parms(): no params data found [ 863.756243][T12687] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.853938][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 863.956436][ T5116] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 864.188493][T14356] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.223650][T14356] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.247207][T14485] blktrace: Concurrent blktraces are not allowed on loop5 [ 864.255270][ T5116] Bluetooth: hci4: command tx timeout [ 864.257720][T14356] bridge_slave_0: entered allmulticast mode [ 864.288846][T14356] bridge_slave_0: entered promiscuous mode [ 864.323059][T14485] Cannot find set identified by id 0 to match [ 864.348955][T14356] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.373393][T14356] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.408570][T14356] bridge_slave_1: entered allmulticast mode [ 864.416070][T14356] bridge_slave_1: entered promiscuous mode [ 864.586617][T14356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.621088][T14356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.732781][T14467] loop1: detected capacity change from 0 to 40427 [ 864.757305][T14356] team0: Port device team_slave_0 added [ 864.760087][T14467] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 864.796843][T14467] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 864.801500][T14356] team0: Port device team_slave_1 added [ 864.814328][T14467] F2FS-fs (loop1): invalid crc value [ 864.848182][T14467] F2FS-fs (loop1): Found nat_bits in checkpoint [ 864.988936][T14356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.022162][T14356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.080449][T14356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.096976][T14356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.109734][T14356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.179746][T14467] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 865.209666][T14467] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 865.226532][T14356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.286445][T14356] hsr_slave_0: entered promiscuous mode [ 866.298410][T14356] hsr_slave_1: entered promiscuous mode [ 866.327895][ T5116] Bluetooth: hci4: command tx timeout [ 866.387011][T14356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 866.408741][T14356] Cannot create hsr debugfs directory [ 866.457405][ T2904] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 866.535856][ T2904] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 867.063923][T14527] loop0: detected capacity change from 0 to 1024 [ 867.198497][ T2904] hfsplus: b-tree write err: -5, ino 4 [ 867.379499][ T5116] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 867.894356][T14356] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 867.934924][T14356] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 867.986632][T14356] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 868.041793][T14356] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 868.334781][ T29] audit: type=1326 audit(1717515727.118:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14541 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512e67cf69 code=0x7ffc0000 [ 868.374669][T14356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.437296][ T29] audit: type=1326 audit(1717515727.148:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14541 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512e67cf69 code=0x7ffc0000 [ 868.484561][T14356] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.549284][ T29] audit: type=1326 audit(1717515727.158:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14541 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f512e67cf69 code=0x7ffc0000 [ 868.628333][ T29] audit: type=1326 audit(1717515727.158:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14541 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512e67cf69 code=0x7ffc0000 [ 868.664741][T14356] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 868.716425][T14356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 868.740573][ T29] audit: type=1326 audit(1717515727.168:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14541 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f512e67cf69 code=0x7ffc0000 [ 868.835703][ T29] audit: type=1326 audit(1717515727.168:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14541 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512e67cf69 code=0x7ffc0000 [ 868.835831][ T29] audit: type=1326 audit(1717515727.168:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14541 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512e67cf69 code=0x7ffc0000 [ 868.835873][ T29] audit: type=1326 audit(1717515727.178:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14541 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f512e67cf69 code=0x7ffc0000 [ 868.835912][ T29] audit: type=1326 audit(1717515727.178:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14541 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512e67cf69 code=0x7ffc0000 [ 868.835953][ T29] audit: type=1326 audit(1717515727.178:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14541 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512e67cf69 code=0x7ffc0000 [ 868.862943][T12773] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 869.012541][T12812] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.012643][T12812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.014612][T12812] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.014710][T12812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.049770][T12773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.049793][T12773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.049816][T12773] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 869.049830][T12773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.051238][T12773] usb 3-1: config 0 descriptor?? [ 869.113479][T14552] loop1: detected capacity change from 0 to 256 [ 869.465982][T12773] hid (null): bogus close delimiter [ 869.685692][T14356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.881269][T12773] usb 3-1: string descriptor 0 read error: -71 [ 869.881896][T12773] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 869.881951][T12773] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 869.881969][T12773] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 869.882023][T12773] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 869.882123][T12773] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 869.886866][T12773] usb 3-1: USB disconnect, device number 10 [ 870.005424][T14356] veth0_vlan: entered promiscuous mode [ 870.043660][T14356] veth1_vlan: entered promiscuous mode [ 870.135591][T14356] veth0_macvtap: entered promiscuous mode [ 870.145736][T14356] veth1_macvtap: entered promiscuous mode [ 870.203498][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.203523][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.205255][T14356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.226928][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.226953][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.232381][T14356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.241286][T14356] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.241325][T14356] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.241353][T14356] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.241379][T14356] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.519075][T12773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.519101][T12773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.579762][ T2904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.579787][ T2904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.606016][T14561] loop4: detected capacity change from 0 to 1024 [ 870.653420][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.653481][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.753800][ T2904] hfsplus: b-tree write err: -5, ino 4 [ 870.805714][T14568] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 870.835357][T14568] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 871.153896][T14594] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 871.292514][T14603] Cannot find set identified by id 0 to match [ 872.216330][ T81] bridge_slave_1: left allmulticast mode [ 872.238147][ T81] bridge_slave_1: left promiscuous mode [ 872.261556][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.296233][ T81] bridge_slave_0: left allmulticast mode [ 872.316589][ T81] bridge_slave_0: left promiscuous mode [ 872.338630][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.436783][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 872.455316][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 872.467336][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 872.480689][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 872.491998][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 872.510520][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 873.447308][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 873.479461][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 873.503326][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 873.512656][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 873.521889][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 873.545820][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 873.693323][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 873.710376][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.723523][ T81] bond0 (unregistering): Released all slaves [ 873.752040][T14673] pimreg: entered allmulticast mode [ 873.825147][T14672] pimreg: left allmulticast mode [ 874.149606][ T81] hsr_slave_0: left promiscuous mode [ 874.155728][ T81] hsr_slave_1: left promiscuous mode [ 874.168895][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.179363][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.583740][ T5116] Bluetooth: hci2: command tx timeout [ 875.057897][T14700] hub 6-0:1.0: USB hub found [ 875.069168][T14700] hub 6-0:1.0: 1 port detected [ 875.489160][T14701] hub 6-0:1.0: USB hub found [ 875.500702][T14701] hub 6-0:1.0: 1 port detected [ 875.700046][ T5116] Bluetooth: hci4: command tx timeout [ 875.998703][T14705] hub 6-0:1.0: USB hub found [ 876.004738][T14705] hub 6-0:1.0: 1 port detected [ 876.657208][ T5116] Bluetooth: hci2: command tx timeout [ 876.698852][T14709] loop1: detected capacity change from 0 to 8 [ 876.707072][T14709] cramfs: Unknown parameter '' [ 876.714125][ T81] team0 (unregistering): Port device team_slave_1 removed [ 876.837962][T14712] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'. [ 876.909902][ T81] team0 (unregistering): Port device team_slave_0 removed [ 877.777995][ T5116] Bluetooth: hci4: command tx timeout [ 877.965868][T14664] chnl_net:caif_netlink_parms(): no params data found [ 878.352278][T14649] chnl_net:caif_netlink_parms(): no params data found [ 878.403892][T14664] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.411744][T14664] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.420965][T14664] bridge_slave_0: entered allmulticast mode [ 878.429700][T14664] bridge_slave_0: entered promiscuous mode [ 878.478740][T14664] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.485883][T14664] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.526316][T14664] bridge_slave_1: entered allmulticast mode [ 878.544685][T14664] bridge_slave_1: entered promiscuous mode [ 878.787825][ T5116] Bluetooth: hci2: command tx timeout [ 878.928309][T14664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.948682][T14744] loop2: detected capacity change from 0 to 32768 [ 878.957420][T14744] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (14744) [ 878.971989][T14664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.984237][T14744] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 878.994649][T14744] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 879.003493][T14744] BTRFS info (device loop2): using free-space-tree [ 879.135134][T13928] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 879.173189][T14649] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.173286][T14649] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.173435][T14649] bridge_slave_0: entered allmulticast mode [ 879.174820][T14649] bridge_slave_0: entered promiscuous mode [ 879.191207][T14664] team0: Port device team_slave_0 added [ 879.236315][T14664] team0: Port device team_slave_1 added [ 879.268213][T14649] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.275572][T14649] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.321723][T14649] bridge_slave_1: entered allmulticast mode [ 879.333756][T14649] bridge_slave_1: entered promiscuous mode [ 879.382553][T14768] loop0: detected capacity change from 0 to 128 [ 879.459348][T14768] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 879.498325][T14768] ext4 filesystem being mounted at /root/syzkaller-testdir2359851370/syzkaller.aj5e5K/112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 879.744786][ T81] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.765497][T14768] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 879.801458][T14649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.807242][T12687] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 879.819296][T14664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.837954][T14664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.871861][ T5116] Bluetooth: hci4: command tx timeout [ 879.883903][T14664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.913869][T14649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.033536][ T81] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.076505][T14664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.092039][T14664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.122724][T14664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 880.193335][T14649] team0: Port device team_slave_0 added [ 880.276399][ T81] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.483239][T14649] team0: Port device team_slave_1 added [ 880.620201][ T81] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.695668][T14664] hsr_slave_0: entered promiscuous mode [ 880.721035][T14664] hsr_slave_1: entered promiscuous mode [ 880.730729][T14664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 880.747295][T14664] Cannot create hsr debugfs directory [ 880.771337][T14649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.781527][T14649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.807997][ T5116] Bluetooth: hci2: command tx timeout [ 880.827505][T14649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.270715][T14649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.352906][T14649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.487134][T14649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.884988][T14815] loop1: detected capacity change from 0 to 2048 [ 881.929906][ T5116] Bluetooth: hci4: command tx timeout [ 881.934059][T14815] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 882.305851][T14817] loop2: detected capacity change from 0 to 40427 [ 882.332112][T12854] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 882.343455][T14817] F2FS-fs (loop2): invalid crc value [ 882.362801][T12854] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 882.374475][T14817] F2FS-fs (loop2): Found nat_bits in checkpoint [ 882.431262][T14817] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 882.524772][T14649] hsr_slave_0: entered promiscuous mode [ 882.534621][T14649] hsr_slave_1: entered promiscuous mode [ 882.566301][T14649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 882.576863][T14649] Cannot create hsr debugfs directory [ 882.591492][T13928] syz-executor.2: attempt to access beyond end of device [ 882.591492][T13928] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 882.624138][T13928] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 882.673200][ T81] bridge_slave_1: left allmulticast mode [ 882.697858][ T81] bridge_slave_1: left promiscuous mode [ 882.705461][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.746247][ T81] bridge_slave_0: left allmulticast mode [ 882.746276][ T81] bridge_slave_0: left promiscuous mode [ 882.746471][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.938638][T14834] loop0: detected capacity change from 0 to 256 [ 883.104859][ T5116] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 883.501885][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 883.515428][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 883.526789][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 883.537067][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 883.558683][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 883.574479][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 883.627647][T13827] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 883.814928][T13827] usb 3-1: Using ep0 maxpacket: 32 [ 883.856297][T13827] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 883.869698][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 883.880660][T13827] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 883.889956][T13827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.898353][T13827] usb 3-1: Product: syz [ 883.902557][T13827] usb 3-1: Manufacturer: syz [ 883.910505][T13827] usb 3-1: SerialNumber: syz [ 883.915693][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 883.932027][ T81] bond0 (unregistering): Released all slaves [ 884.133947][T13827] usb 3-1: USB disconnect, device number 11 [ 884.360956][ T81] hsr_slave_0: left promiscuous mode [ 884.367285][ T81] hsr_slave_1: left promiscuous mode [ 884.374818][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 884.382781][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 884.392554][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 884.400161][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 884.431857][ T81] veth1_macvtap: left promiscuous mode [ 884.437428][ T81] veth0_macvtap: left promiscuous mode [ 884.443198][ T81] veth1_vlan: left promiscuous mode [ 884.448724][ T81] veth0_vlan: left promiscuous mode [ 885.120437][T14851] hub 6-0:1.0: USB hub found [ 885.128490][T14851] hub 6-0:1.0: 1 port detected [ 885.186832][ T81] team0 (unregistering): Port device team_slave_1 removed [ 885.248082][ T81] team0 (unregistering): Port device team_slave_0 removed [ 885.607864][ T53] Bluetooth: hci3: command tx timeout [ 886.272193][T14843] chnl_net:caif_netlink_parms(): no params data found [ 886.544286][T14857] loop2: detected capacity change from 0 to 40427 [ 886.561614][T14857] F2FS-fs (loop2): invalid crc value [ 886.592199][T14857] F2FS-fs (loop2): Found nat_bits in checkpoint [ 886.637695][T14857] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 886.722308][T14843] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.738079][T14843] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.745323][T14843] bridge_slave_0: entered allmulticast mode [ 886.774150][T13928] syz-executor.2: attempt to access beyond end of device [ 886.774150][T13928] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 886.790672][T14843] bridge_slave_0: entered promiscuous mode [ 886.823384][T13928] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 886.882520][T14664] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 886.910697][T14843] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.927678][T14843] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.934969][T14843] bridge_slave_1: entered allmulticast mode [ 886.958659][T14843] bridge_slave_1: entered promiscuous mode [ 887.001341][T14664] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 887.022163][T14664] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 887.115640][T14843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.127742][ T5116] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 887.136524][ T5116] Bluetooth: hci0: Injecting HCI hardware error event [ 887.146410][T14843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.163085][ T5116] Bluetooth: hci0: hardware error 0x00 [ 887.192092][T14664] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 887.297075][T14874] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 887.431565][T14843] team0: Port device team_slave_0 added [ 887.453614][T14843] team0: Port device team_slave_1 added [ 887.596558][T14843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.606016][T14843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.649862][T14843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.663194][T14843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.670436][T14843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.696738][T11901] Bluetooth: hci3: command tx timeout [ 887.703422][T14843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.902425][T14877] loop2: detected capacity change from 0 to 32768 [ 887.923122][T14843] hsr_slave_0: entered promiscuous mode [ 887.930863][T14843] hsr_slave_1: entered promiscuous mode [ 887.943022][T14843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 887.951117][T14843] Cannot create hsr debugfs directory [ 888.106137][T14649] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 888.150844][T14649] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 888.200789][ T81] bridge_slave_1: left allmulticast mode [ 888.206521][ T81] bridge_slave_1: left promiscuous mode [ 888.228305][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.240849][ T81] bridge_slave_0: left allmulticast mode [ 888.246595][ T81] bridge_slave_0: left promiscuous mode [ 888.252917][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.356162][T14882] loop2: detected capacity change from 0 to 8 [ 888.390017][T14882] Major/Minor mismatch, trying to mount newer 256.0 filesystem [ 888.399439][T14882] Please update your kernel [ 888.473328][T14884] loop0: detected capacity change from 0 to 2048 [ 888.486542][T14884] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 888.897229][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 888.907421][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 888.917196][ T81] bond0 (unregistering): Released all slaves [ 888.949487][T14649] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 889.078182][T14649] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 889.135085][T14896] random: crng reseeded on system resumption [ 889.208065][ T5116] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 889.510820][T14899] hub 6-0:1.0: USB hub found [ 889.528206][T14899] hub 6-0:1.0: 1 port detected [ 889.613240][T14664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.764931][ T81] hsr_slave_0: left promiscuous mode [ 889.770500][ T5116] Bluetooth: hci3: command 0x040f tx timeout [ 889.795679][ T81] hsr_slave_1: left promiscuous mode [ 889.808760][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.824715][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.976169][T14902] syz-executor.0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 890.110857][T14903] loop0: detected capacity change from 0 to 2048 [ 890.172476][T14903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 890.207157][T14903] ext4 filesystem being mounted at /root/syzkaller-testdir2359851370/syzkaller.aj5e5K/133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 890.445179][T14910] loop2: detected capacity change from 0 to 1024 [ 890.677884][ T5160] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 890.989812][T12779] hfsplus: b-tree write err: -5, ino 4 [ 891.032298][ T5160] usb 1-1: Using ep0 maxpacket: 8 [ 891.039980][ T5160] usb 1-1: config index 0 descriptor too short (expected 255, got 27) [ 891.048293][ T5160] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.058717][ T5160] usb 1-1: config 0 has no interfaces? [ 891.067375][ T5160] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=59.31 [ 891.077421][ T5160] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.085590][ T5160] usb 1-1: Product: syz [ 891.096390][ T5160] usb 1-1: Manufacturer: syz [ 891.112372][ T5160] usb 1-1: SerialNumber: syz [ 891.119873][ T5160] usb 1-1: config 0 descriptor?? [ 891.335486][T14902] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 891.425197][ T5160] usb 1-1: USB disconnect, device number 14 [ 891.434116][ T81] team0 (unregistering): Port device team_slave_1 removed [ 891.493128][ T81] team0 (unregistering): Port device team_slave_0 removed [ 891.850131][ T53] Bluetooth: hci3: command 0x040f tx timeout [ 891.970706][T12687] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.259090][T14916] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.266799][T14916] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.314654][T14925] loop0: detected capacity change from 0 to 1024 [ 892.324564][T14664] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.393371][T13257] hfsplus: b-tree write err: -5, ino 4 [ 892.415440][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.422743][ T5614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.433086][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.440325][ T5614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.536640][T14929] loop0: detected capacity change from 0 to 16 [ 892.565662][T14929] erofs: (device loop0): mounted with root inode @ nid 36. [ 892.606893][T14649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.640440][T14931] loop2: detected capacity change from 0 to 512 [ 892.654367][T14931] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent [ 892.829358][T14649] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.866818][T14843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 892.955181][T14843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 892.988357][T14940] loop0: detected capacity change from 0 to 512 [ 892.997995][T13826] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.005142][T13826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.015934][T14940] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 893.025460][T14940] UDF-fs: Scanning with blocksize 512 failed [ 893.032388][T14843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 893.039930][T14940] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 893.051829][T14940] UDF-fs: Scanning with blocksize 1024 failed [ 893.063630][T14843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 893.071229][T14940] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 893.141102][T13826] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.147648][T14940] UDF-fs: Scanning with blocksize 2048 failed [ 893.148289][T13826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.169890][T14940] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 893.220525][T14664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 893.233418][T14940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 893.286273][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 893.286387][ T29] audit: type=1800 audit(1717515752.068:281): pid=14940 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=26 res=0 errno=0 [ 893.397278][T14649] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 893.417111][T14649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 893.524881][T14944] loop2: detected capacity change from 0 to 32768 [ 893.533669][T14944] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (14944) [ 893.558709][T14944] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 893.558798][T14944] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 893.558830][T14944] BTRFS info (device loop2): using free-space-tree [ 893.917168][T14967] loop0: detected capacity change from 0 to 2048 [ 893.929493][ T53] Bluetooth: hci3: command 0x040f tx timeout [ 893.941806][T14967] udf: Unknown parameter 'ÿ' [ 893.951486][T14664] veth0_vlan: entered promiscuous mode [ 893.972588][T14843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.996853][T14664] veth1_vlan: entered promiscuous mode [ 894.046145][T14843] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.057037][T14649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.092000][ T6096] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.099352][ T6096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.128294][T12812] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.135647][T12812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.170390][T14664] veth0_macvtap: entered promiscuous mode [ 894.211359][T14664] veth1_macvtap: entered promiscuous mode [ 894.234433][T13928] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 894.375240][T12773] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 894.408026][T14664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.420873][T14664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.450122][T14664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 894.500475][T14664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.533426][T14664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.582273][T12773] usb 1-1: Using ep0 maxpacket: 16 [ 894.588291][T14664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 894.608102][T12773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 252, changing to 11 [ 894.632398][T12773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 34585, setting to 1024 [ 894.645952][T14664] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.663413][T14664] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.678898][T14664] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.680882][T12773] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 894.691559][T14664] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.709228][T12773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.717306][T12773] usb 1-1: Product: syz [ 894.747826][T12773] usb 1-1: Manufacturer: syz [ 894.752534][T12773] usb 1-1: SerialNumber: syz [ 894.785746][T12773] usb 1-1: config 0 descriptor?? [ 894.804666][T14967] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 894.926054][T14649] veth0_vlan: entered promiscuous mode [ 894.948384][T12773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.960005][T14649] veth1_vlan: entered promiscuous mode [ 894.965722][T12773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.022486][T14843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.029672][T13822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.048823][T13822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.057407][T13822] usb 1-1: USB disconnect, device number 15 [ 895.075826][T14649] veth0_macvtap: entered promiscuous mode [ 895.112885][T14649] veth1_macvtap: entered promiscuous mode [ 895.194747][T14984] loop2: detected capacity change from 0 to 1024 [ 895.326416][T14649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.390954][T14649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.433748][T14649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.472714][T14649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.635877][T14649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.772303][T14649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.850440][T14649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.872604][T14649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.883308][T14649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.900929][T14649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.058343][T14843] veth0_vlan: entered promiscuous mode [ 896.065269][T14649] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.075465][T14649] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.084320][T14649] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.105236][T14649] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.357407][T14843] veth1_vlan: entered promiscuous mode [ 896.726687][ T1048] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.119206][ T1048] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.154777][T14843] veth0_macvtap: entered promiscuous mode [ 897.199957][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.209437][T14843] veth1_macvtap: entered promiscuous mode [ 897.221189][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.316860][ T1048] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.355465][ T5116] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 897.367249][ T5116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 897.391723][ T5116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 897.403386][T14843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.415148][T14843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.427248][T14843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.442595][T14843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.455057][T13822] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 897.463824][ T5116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 897.482836][ T5116] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 897.490269][ T5116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 897.512704][T14843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.527301][T14843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.554513][T14843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.616010][ T1048] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.655105][T14843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.667194][T13822] usb 1-1: Using ep0 maxpacket: 16 [ 897.667601][T14843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.683166][T14843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.696633][T14843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.704829][T13822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.717757][T14843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.723335][T13822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.738572][T14843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.743643][T13822] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 897.753279][T14843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.765120][T13822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.787838][T11486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.796156][T11486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.829213][T14843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.829962][T13822] usb 1-1: config 0 descriptor?? [ 897.842708][T14843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.860161][T14843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.877153][T14843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.091912][T15013] loop2: detected capacity change from 0 to 4096 [ 898.115387][T15013] nilfs2: Unknown parameter 'Ž' [ 898.304906][T13822] lenovo 0003:17EF:6009.0003: hidraw0: USB HID vff.fe Device [HID 17ef:6009] on usb-dummy_hcd.0-1/input0 [ 898.311145][ T6096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.355139][ T6096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.454968][ T1048] bridge_slave_1: left allmulticast mode [ 898.475835][ T1048] bridge_slave_1: left promiscuous mode [ 898.486176][ T1048] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.520923][ T1048] bridge_slave_0: left allmulticast mode [ 898.535882][ T1048] bridge_slave_0: left promiscuous mode [ 898.543995][T13827] usb 1-1: USB disconnect, device number 16 [ 898.563656][ T1048] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.292582][T15026] loop4: detected capacity change from 0 to 1024 [ 899.301492][T15026] hfsplus: unable to parse mount options [ 899.548878][ T53] Bluetooth: hci4: command tx timeout [ 899.958745][T15030] loop4: detected capacity change from 0 to 2048 [ 900.072339][T15030] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 900.591576][T15030] UDF-fs: error (device loop4): udf_read_inode: (ino 1329) failed !bh [ 901.282680][ T1048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 901.318149][ T1048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 901.345532][ T1048] bond0 (unregistering): Released all slaves [ 901.379192][T13257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.387992][T13257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.569981][T15036] Cannot find set identified by id 0 to match [ 901.608701][ T53] Bluetooth: hci4: command tx timeout [ 901.696862][T15028] loop0: detected capacity change from 0 to 32768 [ 901.714198][T15028] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (15028) [ 901.766024][T15028] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 901.831771][T15028] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 901.894772][T15028] BTRFS info (device loop0): using free-space-tree [ 902.355082][ T1048] hsr_slave_0: left promiscuous mode [ 902.370606][ T1048] hsr_slave_1: left promiscuous mode [ 902.386038][ T1048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 902.394971][ T1048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.403495][ T1048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 902.408510][T12687] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 902.415081][ T1048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.486347][ T1048] veth1_macvtap: left promiscuous mode [ 902.509101][ T1048] veth0_macvtap: left promiscuous mode [ 902.538738][ T1048] veth1_vlan: left promiscuous mode [ 902.566397][ T1048] veth0_vlan: left promiscuous mode [ 903.089597][T15074] loop0: detected capacity change from 0 to 2048 [ 903.183659][T13994] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 903.218916][T15074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.367575][T15081] loop1: detected capacity change from 0 to 1024 [ 903.412950][T15081] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 903.476186][T15074] ext4 filesystem being mounted at /root/syzkaller-testdir2359851370/syzkaller.aj5e5K/146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 903.719662][ T53] Bluetooth: hci4: command tx timeout [ 903.902044][T15074] fs-verity: sha512 using implementation "sha512-avx2" [ 904.052241][T13994] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 904.062767][T13994] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 904.074926][T13994] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 904.084434][T13994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 904.093376][T13994] usb 5-1: SerialNumber: syz [ 904.134130][T12687] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.353611][T13994] usb 5-1: 0:2 : does not exist [ 904.408513][T13994] usb 5-1: USB disconnect, device number 16 [ 904.454154][T15089] loop0: detected capacity change from 0 to 1024 [ 904.461782][T15089] hfsplus: unable to parse mount options [ 904.833898][T15092] loop0: detected capacity change from 0 to 2048 [ 905.104278][T15092] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 905.805776][ T53] Bluetooth: hci4: command tx timeout [ 905.888691][T15092] UDF-fs: error (device loop0): udf_read_inode: (ino 1329) failed !bh [ 906.238425][ T1048] team0 (unregistering): Port device team_slave_1 removed [ 906.431279][T15096] Cannot find set identified by id 0 to match [ 906.441128][ T1048] team0 (unregistering): Port device team_slave_0 removed [ 906.968267][T15102] loop0: detected capacity change from 0 to 256 [ 906.998676][T15102] exfat: Deprecated parameter 'utf8' [ 907.004061][T15102] exfat: Bad value for 'gid' [ 907.305546][T15107] loop0: detected capacity change from 0 to 8 [ 907.313277][T15107] cramfs: Unknown parameter '' [ 907.461507][T15108] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 907.705509][T15010] chnl_net:caif_netlink_parms(): no params data found [ 908.080241][T15119] loop1: detected capacity change from 0 to 1024 [ 908.840092][T15119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 908.958155][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 909.192693][T15010] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.210852][T15010] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.218953][T15010] bridge_slave_0: entered allmulticast mode [ 909.227445][T15010] bridge_slave_0: entered promiscuous mode [ 909.292252][T15010] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.318032][T15010] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.338080][T15010] bridge_slave_1: entered allmulticast mode [ 909.345815][T15010] bridge_slave_1: entered promiscuous mode [ 909.495531][T15010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.563602][T15010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.090868][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.097240][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.688019][ T5116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 938.707877][ T5116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 938.720858][ T5116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 938.729098][ T5116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 938.738846][ T5116] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 938.747942][ T5116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 939.728068][ T5116] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 939.753509][ T5116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 939.765538][ T5116] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 939.777040][ T5116] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 939.785291][ T5116] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 939.793193][ T5116] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 940.145898][ T5116] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 940.158268][ T5116] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 940.168376][ T5116] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 940.176520][ T5116] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 940.190939][ T5116] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 940.203032][ T5116] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 940.807673][ T53] Bluetooth: hci5: command tx timeout [ 941.177231][ T5116] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 941.198129][ T5116] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 941.208092][ T5116] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 941.216122][ T5116] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 941.225646][ T5116] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 941.233106][ T5116] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 941.848949][ T53] Bluetooth: hci6: command tx timeout [ 942.258088][ T53] Bluetooth: hci7: command tx timeout [ 942.887614][ T53] Bluetooth: hci5: command tx timeout [ 943.287716][ T53] Bluetooth: hci8: command tx timeout [ 943.937711][ T53] Bluetooth: hci6: command tx timeout [ 944.327678][ T53] Bluetooth: hci7: command tx timeout [ 944.967622][ T53] Bluetooth: hci5: command tx timeout [ 945.368231][ T53] Bluetooth: hci8: command tx timeout [ 946.007881][ T53] Bluetooth: hci6: command tx timeout [ 946.407723][ T53] Bluetooth: hci7: command tx timeout [ 947.047731][ T53] Bluetooth: hci5: command tx timeout [ 947.458094][T11901] Bluetooth: hci8: command tx timeout [ 948.087654][T11901] Bluetooth: hci6: command tx timeout [ 948.487677][T11901] Bluetooth: hci7: command tx timeout [ 949.527643][T11901] Bluetooth: hci1: command 0x0406 tx timeout [ 949.527668][ T5116] Bluetooth: hci8: command tx timeout [ 962.272863][ T5116] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 962.285107][ T5116] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 962.296361][ T5116] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 962.304721][ T5116] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 962.312486][ T5116] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 962.319920][ T5116] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 964.407779][ T5116] Bluetooth: hci9: command tx timeout [ 966.487586][ T5116] Bluetooth: hci9: command tx timeout [ 968.567859][ T5116] Bluetooth: hci9: command tx timeout [ 970.647701][ T5116] Bluetooth: hci9: command tx timeout [ 993.530995][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.537349][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.618212][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 1003.796267][T11901] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1003.810052][T11901] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1003.822122][T11901] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1003.831632][T11901] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1003.850082][T11901] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1003.863709][T11901] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1004.790332][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1004.807978][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1004.818112][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1004.827010][ T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1004.836682][ T53] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1004.857174][ T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1005.193756][ T53] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1005.205563][ T53] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1005.214630][ T53] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1005.222844][ T53] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1005.230753][ T53] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1005.238273][ T53] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1005.858552][T11901] Bluetooth: hci3: command 0x040f tx timeout [ 1005.927688][ T5116] Bluetooth: hci10: command tx timeout [ 1006.220728][T11901] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1006.232550][T11901] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1006.242833][T11901] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1006.252565][T11901] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1006.260645][T11901] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1006.268344][T11901] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1006.967667][T11901] Bluetooth: hci11: command tx timeout [ 1007.295957][T11901] Bluetooth: hci12: command tx timeout [ 1008.007764][T11901] Bluetooth: hci10: command tx timeout [ 1008.327708][T11901] Bluetooth: hci13: command tx timeout [ 1009.047758][T11901] Bluetooth: hci11: command tx timeout [ 1009.368150][T11901] Bluetooth: hci12: command tx timeout [ 1010.087583][T11901] Bluetooth: hci10: command tx timeout [ 1010.407652][T11901] Bluetooth: hci13: command tx timeout [ 1011.127586][T11901] Bluetooth: hci11: command tx timeout [ 1011.447756][T11901] Bluetooth: hci12: command tx timeout [ 1012.167651][T11901] Bluetooth: hci10: command tx timeout [ 1012.493339][T11901] Bluetooth: hci13: command tx timeout [ 1013.207684][T11901] Bluetooth: hci11: command tx timeout [ 1013.527803][T11901] Bluetooth: hci12: command tx timeout [ 1014.567617][T11901] Bluetooth: hci13: command tx timeout [ 1021.207825][ T5116] Bluetooth: hci4: command 0x0406 tx timeout [ 1027.472097][ T5116] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1027.490055][ T5116] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1027.508195][ T5116] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1027.516444][ T5116] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1027.537784][ T5116] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1027.545395][ T5116] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1029.617790][ T5116] Bluetooth: hci14: command tx timeout [ 1031.687634][ T5116] Bluetooth: hci14: command tx timeout [ 1033.767887][ T5116] Bluetooth: hci14: command tx timeout [ 1035.847669][ T5116] Bluetooth: hci14: command tx timeout [ 1054.969975][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.976336][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.087784][ T30] INFO: task kworker/u8:6:1048 blocked for more than 143 seconds. [ 1060.123330][ T30] Not tainted 6.10.0-rc2-syzkaller-00010-g2ab795141095 #0 [ 1060.137499][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1060.146189][ T30] task:kworker/u8:6 state:D stack:20632 pid:1048 tgid:1048 ppid:2 flags:0x00004000 2024/06/04 15:45:18 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 1060.247523][ T30] Workqueue: netns cleanup_net [ 1060.252378][ T30] Call Trace: [ 1060.255670][ T30] [ 1060.279048][ T30] __schedule+0x1796/0x49d0 [ 1060.283645][ T30] ? __pfx___schedule+0x10/0x10 [ 1060.307941][ T30] ? __pfx_lock_release+0x10/0x10 [ 1060.313024][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1060.337700][ T30] ? kthread_data+0x52/0xd0 [ 1060.342268][ T30] ? schedule+0x90/0x320 [ 1060.346529][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1060.357507][ T30] ? schedule+0x90/0x320 [ 1060.361795][ T30] schedule+0x14b/0x320 [ 1060.366757][ T30] schedule_preempt_disabled+0x13/0x30 [ 1060.387533][ T30] __mutex_lock+0x6a4/0xd70 [ 1060.392109][ T30] ? __mutex_lock+0x527/0xd70 [ 1060.396811][ T30] ? ct_exit_net+0x30/0x100 [ 1060.417842][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1060.422938][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 1060.437546][ T30] ? kfree+0x149/0x360 [ 1060.446026][ T30] ? __pfx_ct_exit_net+0x10/0x10 [ 1060.457507][ T30] ct_exit_net+0x30/0x100 [ 1060.461876][ T30] ? __pfx_ct_exit_net+0x10/0x10 [ 1060.493130][ T30] cleanup_net+0x89d/0xcc0 [ 1060.497753][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 1060.502727][ T30] ? process_scheduled_works+0x945/0x1830 [ 1060.527538][ T30] process_scheduled_works+0xa2c/0x1830 [ 1060.533260][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1060.567591][ T30] ? assign_work+0x364/0x3d0 [ 1060.572258][ T30] worker_thread+0x86d/0xd70 [ 1060.576878][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1060.617594][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1060.622693][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1060.644034][ T30] kthread+0x2f0/0x390 [ 1060.663113][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1060.675562][ T30] ? __pfx_kthread+0x10/0x10 [ 1060.687759][ T30] ret_from_fork+0x4b/0x80 [ 1060.692247][ T30] ? __pfx_kthread+0x10/0x10 [ 1060.696858][ T30] ret_from_fork_asm+0x1a/0x30 [ 1060.723319][ T30] [ 1060.726470][ T30] INFO: task kworker/0:15:13827 blocked for more than 143 seconds. [ 1060.747730][ T30] Not tainted 6.10.0-rc2-syzkaller-00010-g2ab795141095 #0 [ 1060.755429][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1060.780568][ T30] task:kworker/0:15 state:D stack:23808 pid:13827 tgid:13827 ppid:2 flags:0x00004000 [ 1060.807723][ T30] Workqueue: events linkwatch_event [ 1060.812999][ T30] Call Trace: [ 1060.816290][ T30] [ 1060.827518][ T30] __schedule+0x1796/0x49d0 [ 1060.832116][ T30] ? __pfx___schedule+0x10/0x10 [ 1060.836991][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1060.857538][ T30] ? __pfx_lock_release+0x10/0x10 [ 1060.862626][ T30] ? kick_pool+0x45c/0x620 [ 1060.867065][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1060.907712][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1060.912977][ T30] ? schedule+0x90/0x320 [ 1060.917237][ T30] schedule+0x14b/0x320 [ 1060.927512][ T30] schedule_preempt_disabled+0x13/0x30 [ 1060.933025][ T30] __mutex_lock+0x6a4/0xd70 [ 1060.947534][ T30] ? __mutex_lock+0x527/0xd70 [ 1060.952272][ T30] ? linkwatch_event+0xe/0x60 [ 1060.956969][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1060.987540][ T30] ? process_scheduled_works+0x945/0x1830 [ 1060.993327][ T30] linkwatch_event+0xe/0x60 [ 1061.017515][ T30] process_scheduled_works+0xa2c/0x1830 [ 1061.023157][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [