last executing test programs: 43.213009057s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=@setlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MTU={0x8, 0x4, 0x6a9}]}, 0x48}}, 0x0) 43.025539008s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800020001010000080003"], 0x44}}, 0x0) 42.688574691s ago: executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) sendto(r1, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 41.593925669s ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008006a020000000008000b01"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 40.678100888s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800020001010000080003"], 0x44}}, 0x0) 40.309601855s ago: executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESHEX, @ANYRES32, @ANYBLOB="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", @ANYRES8, @ANYRESDEC, @ANYRES32, @ANYBLOB="c5c52941a9eacffa0b431af409dfbeb2db5c161e5c6e75e2d0d596cc5c556407e8da8bc3b5848e4e650bd1261a5f9c182652ca463adc1b0fd75c7e4e8a91"], 0xd, 0x2a4, &(0x7f0000001b00)="$eJzs3U9rK1UYB+B3krnpiIsEcaMIDujCVbl166YVriB2pUTQjTd47wVNwoUWAnZh7Kqfwu/hR3DjpltXglvBnV1URiYz0zRt+ocaU7DPszrMmd85b+aEZJU3T98aD5+9TOLwr98iy5Jobcd2nCTRi1Y0fog0AID/j5OiiD+LuyTT1uqrAQDWofr+r9x3LQDAenz2xZef7OzuPvk0z7N4o3s06ScRMT6a9Kv5nRfxTYzieTyObpxGFGeq8Ucf7z6JNC/14t3xdNIvk+OvfqnX3/kjYpbfim70lue38sq5/HTSf/T0QqndeH15/v0l+eh34r13ztW/Gd04/jpexiieRZmd57/fypP5NmU+aUV/Y3ZfJSsT7TUcBwAAAAAAAAAAAAAAAAAAAAAAD8RmnidV+55Z/57yUt1/p306m9/MG73F/jxV/qxxTtUfqIi6Rc+0iB+b/jqP8zwv6hsnsy46ZT6NN1N/LAAAAAAAAAAAAAAAAAAAAACl/e8OhoPR6PneSgZNN4DmZ/13XWf73JW342A4aF+94Mbt95p3GziOstZrb440jRU9lpsGr0TE6lfemB/u51ENmoNZ6V6vfVgtejAc5PVU85iHg+SmvbLm4H6aT0XaiX9bWDF7S5wWi2eanZW6mOqs6Gl0Xl069XdRFLdb54PfqzOqrySzFhsX35nfvvh1SfxRPVj6AstBdvksfr66nis/Mtor+ugBAAAAAAAAAAAAAAAAAAAumP/od8nk4bXR1n9WFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACs2fz//5tBFhGLVy4NpnX4unvqQSf29u/5JQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAA/BMAAP//ICFKyQ==") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FITRIM(r0, 0x80047210, &(0x7f0000000040)) 39.081190472s ago: executing program 4: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000080)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffb) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) sync_file_range(r1, 0x0, 0x38d9, 0x2) 36.88031619s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001880)={0x30, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x30}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) 36.651897766s ago: executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400060082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 36.357476074s ago: executing program 1: mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000540)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1) 36.346576451s ago: executing program 4: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000015b80)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000580), 0x24, 0x0) mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) 36.193839212s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0xc0189436, 0xb) 36.082092399s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 34.870633331s ago: executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000400)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@dioread_lock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@noload}, {@user_xattr}, {@max_batch_time={'max_batch_time', 0x3d, 0x7268}}]}, 0x1, 0x579, &(0x7f0000000780)="$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") statx(r0, 0x0, 0x100, 0x800, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file1\x00', 0x100080d, &(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYRES16, @ANYBLOB="9cf45332f216e72f1916be622afc444f62ea0b68c42a77b352fe0afddfb1cc8ff9c0f9e899ea9ae7c30f5a192b0b16000080dfa20a2768950b186e295805038569d0c9f57f41da86410da421701f524e99d5bea9716fa0990dd3611859be346c36edb30828401d5122a1bad83ae10d49e288b3950ae045ad2a04ddc191fcc6abf55e98491049b415163b7e3a99c0a4544190c2011be3a25a85ceab73485f64f25ad6d435b24f2f400d9bef712f399339d02bfd26bf20324b098b673189cd82a5cbf5c5a53fbda881d47d43e25919884a8cd525436c46d28d7c4173aabcc00da4ac21514eb67e0eb9849548fe217ab6bb03ac5d203f8427c8402b016b5b9e83d16cb759a42b6a7f7115433776b3eb8091edf8030f522ae488d96280e59d5b0ddc36f441dfff7700000000000000000000000000000000000000000000000000000000000000000000002c14da6155698f83a9e5d32830f3dc68cfff8cf5b7e936b51590ec6fc503b6ca46a5aa1b35163c0081ae2491391194d483d35de250e75d7d6ae7901b6c9663ddcbecd4bc17a043808b280000000000000000000000000000c8f455465cbebc162473fbee10d24b1e5aded77bc959e4d72cb67a00491fd4696da9de540e0d9ecefa00648305f1ea375309bb41460389068a12930587eef76c7e0359b64a2153d2c1e1a07b0125808f1805beb49929003354aab5fe9f966009e4f90fc66cc885c9406c532a40ec0b76a3757cf11d9e907a44cbc32dbb10", @ANYRESDEC, @ANYRESOCT, @ANYRESOCT, @ANYRES8=r3, @ANYRES32], 0xff, 0x1f7, &(0x7f0000000200)="$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") getgid() r5 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="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", 0x1000, 0xffffffffffffffff) keyctl$update(0x2, r7, &(0x7f0000001080)="83817e708fa6cb01ff2d30978362dbd2a526e9702e2798932ae7611c9a47c25cc2bbed73e28484e8ff401a7f653e30c60cd884e22506ddf175c118606d63e5b1431fcf42c8635877d968904a49cc2dbb4b7db0450192d3c7f5a5b9c10daf3a83738367", 0x63) keyctl$read(0xb, r7, &(0x7f0000001100)=""/215, 0xd7) add_key$user(&(0x7f0000001200), &(0x7f0000001240)={'syz', 0x3}, &(0x7f0000001280)="d1850cbfd6b64af6d981c3466b6c853d276bc8f51ad9a2cbe4650fe433e838f9c0cbfbd6dece0e40058ea94c3804de364c1261fb8feff2b7af398b67abc1beebef5e30e0e1b69ca83808d11adbb2f42e03a6268d561807f6868696b65cbce17aaae309f6ccafae164d63c6fd5e9f5ee30200987cf6b978770cc7f3e9bd9b81651b8a1d5d8017215556dc66dccec11e0c03e86c0c0705c718f33fdfea645f6b6c76ba3345a8415a3a5c0b68c5a6436028b94a065215ee91e8fd403419e28c34e7f4c72834a585549b4b1673260d4c8c76bbb06ecce6e3ae1b3f48", 0xda, 0xfffffffffffffffc) keyctl$setperm(0x5, 0x0, 0x10200000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0}, 0x0) keyctl$chown(0x4, r7, r8, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000000240), 0x2000) getresgid(&(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300)) setregid(0x0, 0x0) setgroups(0x6, &(0x7f0000000340)=[r1, r4, 0x0, 0xee00, 0x0, 0x0]) 34.589737534s ago: executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r0, 0x4147, 0x0) 34.433205261s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000400)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0xd, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) 34.199409341s ago: executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8], [0x10000], [0x6]], '\x00', [{}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}], '\x00', 0x1000}) 34.130643582s ago: executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90) syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000000)='./file0\x00', 0x410, &(0x7f0000000240)=ANY=[], 0x11, 0x489, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_init() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400027e) r1 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r1, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@hci={0x1f, 0x6488, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10"], 0x10}}], 0x1, 0x0) r2 = creat(&(0x7f0000000180)='./control\x00', 0x0) r3 = inotify_init() r4 = epoll_create(0xfd) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00007a8000)) inotify_add_watch(r3, &(0x7f0000000400)='./control\x00', 0x10000029) open$dir(&(0x7f00000000c0)='./control\x00', 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000140)={'xfrm0\x00', 0xa46}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000240)='./bus\x00', r5, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 34.019754211s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001880)={0x30, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x30}], 0x1}, 0x0) socket(0x0, 0x0, 0x0) 32.984299158s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 30.756233523s ago: executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x835, 0x0) unlink(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) 30.621914647s ago: executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ppoll(&(0x7f0000000080)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0x40045612, &(0x7f0000000040)) 30.381802929s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000020850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='jbd2_handle_stats\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 30.270267597s ago: executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1a49002, 0x0) syz_open_procfs(0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000021c0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x33}, 0x0, @in6=@private2}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(&(0x7f0000000600), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) sendfile(r2, r0, 0x0, 0x100800001) mount$9p_xen(&(0x7f0000000040), &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0), 0x1002, &(0x7f0000000240)={'trans=xen,', {[{@cache_none}, {@access_any}, {@nodevmap}]}}) 30.014053863s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 10.274920863s ago: executing program 3: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) recvmmsg(r0, &(0x7f0000002dc0)=[{{0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/175, 0xaf}], 0x1, &(0x7f0000000300)=""/49, 0x31}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000003c0)=""/4, 0x4}], 0x296}}], 0x2, 0x0, 0x0) 6.062911814s ago: executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) recvmsg(r0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x141) 3.975350816s ago: executing program 0: syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x1, 0x5b3d, &(0x7f0000024780)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000080)='./bus\x00', r1, &(0x7f0000001240)='./file0\x00', 0x0) 2.942702975s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") creat(&(0x7f00000006c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2012026, 0x0) 0s ago: executing program 2: r0 = syz_io_uring_setup(0x3b, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080), &(0x7f0000000500)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, r1, &(0x7f0000000a40)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 104.630044][ T6346] EXT4-fs (loop0): blocks per group (255) and clusters per group (8192) inconsistent [ 104.652371][ T6292] chnl_net:caif_netlink_parms(): no params data found [ 104.770927][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.796845][ T6349] Zero length message leads to an empty skb [ 104.879988][ T6282] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.900853][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.908472][ T6282] bridge_slave_0: entered allmulticast mode [ 104.923274][ T6282] bridge_slave_0: entered promiscuous mode [ 104.977450][ T6282] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.997691][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.007116][ T6282] bridge_slave_1: entered allmulticast mode [ 105.017767][ T6282] bridge_slave_1: entered promiscuous mode [ 105.062815][ T5117] Bluetooth: hci1: command tx timeout [ 105.066596][ T4481] Bluetooth: hci0: command tx timeout [ 105.264801][ T6282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.399783][ T6282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.430106][ T5117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.440671][ T5117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 105.454137][ T5117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 105.462966][ T5117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 105.471159][ T5117] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 105.492984][ T5117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.519055][ T6292] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.533850][ T6292] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.546611][ T6292] bridge_slave_0: entered allmulticast mode [ 105.559684][ T6292] bridge_slave_0: entered promiscuous mode [ 105.612276][ T6292] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.633100][ T6292] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.651545][ T6292] bridge_slave_1: entered allmulticast mode [ 105.658793][ T6292] bridge_slave_1: entered promiscuous mode [ 105.702074][ T6282] team0: Port device team_slave_0 added [ 105.769892][ T6282] team0: Port device team_slave_1 added [ 105.782880][ T5117] Bluetooth: hci2: command tx timeout [ 105.856680][ T6292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.887886][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.902823][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.930303][ T6282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.977598][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.031931][ T6292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.062127][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.075010][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.101415][ T6282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.167269][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.233902][ T6180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.264744][ T6292] team0: Port device team_slave_0 added [ 106.307238][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.329542][ T6180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.342140][ T6292] team0: Port device team_slave_1 added [ 106.381971][ T6282] hsr_slave_0: entered promiscuous mode [ 106.394031][ T6282] hsr_slave_1: entered promiscuous mode [ 106.400372][ T6282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.412555][ T6282] Cannot create hsr debugfs directory [ 106.418667][ T6372] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.436264][ T6372] bond_slave_0: entered promiscuous mode [ 106.441940][ T6372] bond_slave_1: entered promiscuous mode [ 106.452146][ T6180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.501041][ T6292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.509245][ T6292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.535803][ T6292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.568092][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.570768][ T6377] ptrace attach of "/root/syz-executor.0 exec"[5105] was attempted by ""[6377] [ 106.596756][ T6180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.640230][ T6292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.647408][ T6292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.674598][ T6292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.801087][ T6292] hsr_slave_0: entered promiscuous mode [ 106.808026][ T6292] hsr_slave_1: entered promiscuous mode [ 106.815109][ T6292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.823971][ T6292] Cannot create hsr debugfs directory [ 107.041599][ T6355] chnl_net:caif_netlink_parms(): no params data found [ 107.142873][ T5117] Bluetooth: hci1: command tx timeout [ 107.264510][ T12] bridge_slave_1: left allmulticast mode [ 107.272753][ T12] bridge_slave_1: left promiscuous mode [ 107.277488][ T6383] loop0: detected capacity change from 0 to 40427 [ 107.287274][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.297546][ T6383] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.310003][ T12] bridge_slave_0: left allmulticast mode [ 107.316162][ T12] bridge_slave_0: left promiscuous mode [ 107.321924][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.345499][ T12] bridge_slave_1: left allmulticast mode [ 107.351188][ T12] bridge_slave_1: left promiscuous mode [ 107.356065][ T6383] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.357614][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.375984][ T12] bridge_slave_0: left allmulticast mode [ 107.382119][ T12] bridge_slave_0: left promiscuous mode [ 107.388801][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.417810][ T5105] syz-executor.0: attempt to access beyond end of device [ 107.417810][ T5105] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.433032][ T5105] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 107.553094][ T5117] Bluetooth: hci4: command tx timeout [ 107.866849][ T5117] Bluetooth: hci2: command tx timeout [ 107.889976][ T6393] loop0: detected capacity change from 0 to 47 [ 108.226906][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.244880][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.257750][ T12] bond0 (unregistering): Released all slaves [ 108.334657][ T6402] loop0: detected capacity change from 0 to 512 [ 108.353508][ T6402] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.391898][ T6402] EXT4-fs (loop0): orphan cleanup on readonly fs [ 108.433993][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.449190][ T6402] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 248: padding at end of block bitmap is not set [ 108.471222][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.484484][ T6402] __quota_error: 10 callbacks suppressed [ 108.486352][ T6402] Quota error (device loop0): write_blk: dquota write failed [ 108.500062][ T12] bond0 (unregistering): Released all slaves [ 108.502904][ T6402] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 108.528217][ T6402] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz-executor.0: Failed to acquire dquot type 1 [ 108.591914][ T6402] EXT4-fs (loop0): 1 truncate cleaned up [ 108.614427][ T6402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.691091][ T5105] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.802179][ T6355] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.817244][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.825503][ T6355] bridge_slave_0: entered allmulticast mode [ 108.832283][ T6355] bridge_slave_0: entered promiscuous mode [ 108.880263][ T6355] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.887586][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.895009][ T6355] bridge_slave_1: entered allmulticast mode [ 108.903672][ T6355] bridge_slave_1: entered promiscuous mode [ 108.956637][ T6408] ptrace attach of "/root/syz-executor.0 exec"[5105] was attempted by ""[6408] [ 108.982410][ T6180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.067105][ T6355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.093976][ T6355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.224445][ T6355] team0: Port device team_slave_0 added [ 109.232832][ T5117] Bluetooth: hci1: command tx timeout [ 109.249508][ T6355] team0: Port device team_slave_1 added [ 109.374745][ T6412] process 'syz-executor.0' launched '/dev/fd/9' with NULL argv: empty string added [ 109.606770][ T6355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.625000][ T5117] Bluetooth: hci4: command tx timeout [ 109.661421][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.774174][ T6355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.931197][ T6180] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.952502][ T5117] Bluetooth: hci2: command tx timeout [ 110.066158][ T6355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.074070][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.100896][ T6355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.186191][ T6355] hsr_slave_0: entered promiscuous mode [ 110.204786][ T6355] hsr_slave_1: entered promiscuous mode [ 110.211148][ T6355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.219201][ T6355] Cannot create hsr debugfs directory [ 110.304145][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.311242][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.321101][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.328299][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.394708][ T12] hsr_slave_0: left promiscuous mode [ 110.401245][ T12] hsr_slave_1: left promiscuous mode [ 110.410410][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.420276][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.428887][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.437031][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.447969][ T12] hsr_slave_0: left promiscuous mode [ 110.458056][ T12] hsr_slave_1: left promiscuous mode [ 110.464826][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.472326][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.494994][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.502451][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.526374][ T6425] loop0: detected capacity change from 0 to 256 [ 110.537695][ T6425] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.547925][ T12] veth1_macvtap: left promiscuous mode [ 110.554491][ T12] veth0_macvtap: left promiscuous mode [ 110.560167][ T12] veth1_vlan: left promiscuous mode [ 110.567119][ T12] veth0_vlan: left promiscuous mode [ 110.570776][ T6425] overlay: ./file0 is not a directory [ 110.579807][ T12] veth1_macvtap: left promiscuous mode [ 110.588810][ T6425] overlay: ./file0 is not a directory [ 110.592962][ T12] veth0_macvtap: left promiscuous mode [ 110.609025][ T12] veth1_vlan: left promiscuous mode [ 110.616689][ T12] veth0_vlan: left promiscuous mode [ 111.434902][ T12] team0 (unregistering): Port device team_slave_1 removed [ 111.477226][ T12] team0 (unregistering): Port device team_slave_0 removed [ 111.703006][ T5117] Bluetooth: hci4: command tx timeout [ 112.211530][ T12] team0 (unregistering): Port device team_slave_1 removed [ 112.250494][ T12] team0 (unregistering): Port device team_slave_0 removed [ 112.754779][ T6282] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.769949][ T6282] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.834074][ T6435] tipc: Started in network mode [ 112.839116][ T6435] tipc: Node identity e0000002, cluster identity 4711 [ 112.846613][ T6435] tipc: Enabling of bearer rejected, failed to enable media [ 112.855819][ T6282] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.876259][ T6282] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.972917][ T6180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.994977][ T6180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.879082][ T5117] Bluetooth: hci4: command tx timeout [ 114.042851][ T6355] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.130809][ T6180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.157150][ T6355] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.237646][ T6355] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.278584][ T6282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.311915][ T6180] veth0_vlan: entered promiscuous mode [ 114.340930][ T6282] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.367439][ T6355] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.390118][ T6180] veth1_vlan: entered promiscuous mode [ 114.446503][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.453689][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.468060][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.475179][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.497510][ T6180] veth0_macvtap: entered promiscuous mode [ 114.521922][ T6180] veth1_macvtap: entered promiscuous mode [ 114.553946][ T12] bridge_slave_1: left allmulticast mode [ 114.560420][ T12] bridge_slave_1: left promiscuous mode [ 114.567707][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.579878][ T12] bridge_slave_0: left allmulticast mode [ 114.587744][ T12] bridge_slave_0: left promiscuous mode [ 114.593681][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.615740][ T12] bond_slave_0: left promiscuous mode [ 114.621404][ T12] bond_slave_1: left promiscuous mode [ 114.947638][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.964771][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.976293][ T12] bond0 (unregistering): Released all slaves [ 114.999434][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.019108][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.031882][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.045116][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.057186][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.074692][ T6455] loop0: detected capacity change from 0 to 256 [ 115.084964][ T6455] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.116716][ T6455] overlay: ./file0 is not a directory [ 115.135392][ T6455] overlay: ./file0 is not a directory [ 115.187266][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.201571][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.211855][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.224112][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.237625][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.297804][ T6180] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.310921][ T6180] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.322724][ T6180] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.331455][ T6180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.433795][ T6355] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 115.544569][ T6355] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 115.566450][ T6355] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 115.636709][ T6355] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.718933][ T12] hsr_slave_0: left promiscuous mode [ 115.728858][ T12] hsr_slave_1: left promiscuous mode [ 115.741938][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.761296][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.771283][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.779195][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.797775][ T12] veth1_macvtap: left promiscuous mode [ 115.803959][ T12] veth0_macvtap: left promiscuous mode [ 115.809641][ T12] veth1_vlan: left promiscuous mode [ 115.818127][ T12] veth0_vlan: left promiscuous mode [ 116.431838][ T12] team0 (unregistering): Port device team_slave_1 removed [ 116.491984][ T12] team0 (unregistering): Port device team_slave_0 removed [ 117.328922][ T6292] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.351332][ T6292] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.369701][ T6292] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.394930][ T2914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.413099][ T2914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.441979][ T6282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.461713][ T6292] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.547584][ T2447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.559478][ T2447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.778985][ T6282] veth0_vlan: entered promiscuous mode [ 117.822656][ T6355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.873210][ T6292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.900481][ T6282] veth1_vlan: entered promiscuous mode [ 117.953402][ T6355] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.968714][ T6292] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.977748][ T6472] loop1: detected capacity change from 0 to 64 [ 117.994614][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.001782][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.050621][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.057836][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.070031][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.077232][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.088677][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.095867][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.117217][ T6282] veth0_macvtap: entered promiscuous mode [ 118.174880][ T6282] veth1_macvtap: entered promiscuous mode [ 118.309634][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.331732][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.353406][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.375578][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.401301][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.480789][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.515243][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.525193][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.536907][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.548901][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.577947][ T6282] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.656619][ T6481] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 118.711731][ T6282] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.820824][ T6282] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.997431][ T6282] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.461083][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.501592][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.550137][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.572753][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.638143][ T6292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.679887][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.760639][ T6355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.947249][ T6355] veth0_vlan: entered promiscuous mode [ 119.963517][ T6498] loop2: detected capacity change from 0 to 4096 [ 119.991681][ T6355] veth1_vlan: entered promiscuous mode [ 120.091022][ T6502] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.111017][ T6355] veth0_macvtap: entered promiscuous mode [ 120.147311][ T6355] veth1_macvtap: entered promiscuous mode [ 120.212617][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.229465][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.251556][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.262330][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.283068][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.304158][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.324688][ T6355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.358262][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.386723][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.400702][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.411657][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.430293][ T6355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.449624][ T6355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.470781][ T6355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.520520][ T6355] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.542210][ T6355] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.571429][ T6355] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.582659][ T6355] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.679267][ T6292] veth0_vlan: entered promiscuous mode [ 120.759579][ T6292] veth1_vlan: entered promiscuous mode [ 120.906286][ T2471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.924819][ T2471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.960005][ T6495] loop1: detected capacity change from 0 to 40427 [ 121.020880][ T2471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.034301][ T2471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.048739][ T6292] veth0_macvtap: entered promiscuous mode [ 121.067587][ T6495] F2FS-fs (loop1): Found nat_bits in checkpoint [ 121.128235][ T6292] veth1_macvtap: entered promiscuous mode [ 121.194723][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.239888][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.251152][ T6495] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 121.268609][ T6515] loop2: detected capacity change from 0 to 16 [ 121.275098][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.298663][ T6515] erofs: (device loop2): mounted with root inode @ nid 36. [ 121.301880][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.347409][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.350826][ T29] audit: type=1800 audit(1717791492.542:53): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=49 res=0 errno=0 [ 121.369803][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.390745][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.393184][ T6516] loop3: detected capacity change from 0 to 256 [ 121.401651][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.427839][ T6292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.439356][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.453530][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.464621][ T6180] syz-executor.1: attempt to access beyond end of device [ 121.464621][ T6180] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 121.480184][ T6180] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 121.492779][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.516145][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.528885][ T6518] loop0: detected capacity change from 0 to 128 [ 121.536449][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.557953][ T6518] FAT-fs (loop0): bogus number of FAT sectors [ 121.561086][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.579630][ T6518] FAT-fs (loop0): Can't find a valid FAT filesystem [ 121.589457][ T6292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.616225][ T6292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.651203][ T6292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.679246][ T29] audit: type=1804 audit(1717791492.872:54): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D74657374646972323732343434353734332F73797A6B616C6C65722E4743594F6B752F302F66696C65302FE91F7189591E9233614B dev="overlay" ino=1951 res=1 errno=0 [ 121.721557][ T6516] Process accounting resumed [ 121.750622][ T6292] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.781587][ T6292] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.801717][ T6292] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.821285][ T6292] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.005663][ T6529] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 122.069158][ T2447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.077221][ T6526] loop0: detected capacity change from 0 to 4096 [ 122.092420][ T2447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.135066][ T6526] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 122.171954][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.186987][ T6526] ntfs3: loop0: Failed to load $MFT. [ 122.198373][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.618992][ T6553] Cannot find del_set index 0 as target [ 122.745953][ T6558] loop1: detected capacity change from 0 to 256 [ 122.769045][ T6558] exfat: Unknown parameter 'ÿÿNFxX]Ãß%Q¡jEÐ(@…»Æ–š¶PÈîôýè¸*ã½O eì7z¡ò[ÅliÜŒÇÛÂ]@#ktTúv2n0ÜiG§í„0S™½[IDþ¸fŠ¡™þf;ÈmpÄBº‚®sj¯*iH‰®Qy¾„£ºH˜1-Å#]}ª&<ÊŽ£Ôm£zh©Ê¯È•ÐU"†ÏN»jr)ãñú©V' [ 122.938409][ T6568] loop0: detected capacity change from 0 to 64 [ 123.029894][ T6571] loop4: detected capacity change from 0 to 64 [ 123.767872][ T4481] Bluetooth: hci3: command tx timeout [ 123.808453][ T6580] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 123.818081][ T6580] 0ªX¹¦À: renamed from caif0 [ 123.851791][ T6580] 0ªX¹¦À: entered allmulticast mode [ 123.862578][ T6580] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 123.880830][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.863022][ T29] audit: type=1326 audit(1717791496.002:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bfa7cf69 code=0x7ffc0000 [ 124.993920][ T29] audit: type=1326 audit(1717791496.012:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bfa7cf69 code=0x7ffc0000 [ 125.039887][ T29] audit: type=1326 audit(1717791496.032:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7bfa7cf69 code=0x7ffc0000 [ 125.062218][ T29] audit: type=1326 audit(1717791496.042:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bfa7cf69 code=0x7ffc0000 [ 125.086551][ T29] audit: type=1326 audit(1717791496.042:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bfa7cf69 code=0x7ffc0000 [ 125.125131][ T29] audit: type=1326 audit(1717791496.042:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7bfa7cf69 code=0x7ffc0000 [ 125.171969][ T6601] loop3: detected capacity change from 0 to 4096 [ 125.190925][ T6601] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 125.201708][ T29] audit: type=1326 audit(1717791496.042:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7bfa7cf69 code=0x7ffc0000 [ 125.218446][ T6603] loop1: detected capacity change from 0 to 1024 [ 125.225923][ T29] audit: type=1326 audit(1717791496.082:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6594 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd7bfa7a6e7 code=0x7ffc0000 [ 125.260519][ T6603] journal_path: not usable as path [ 125.266868][ T6603] EXT4-fs: error: could not find journal device path [ 125.320098][ T6601] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 125.402576][ T6611] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 125.427802][ T6611] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 125.598956][ T6612] loop2: detected capacity change from 0 to 4096 [ 125.613078][ T6612] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 125.837902][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.867444][ T6643] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 126.923819][ T6643] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.074565][ T4481] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 127.083345][ T4481] Bluetooth: hci0: Injecting HCI hardware error event [ 127.095240][ T5117] Bluetooth: hci0: hardware error 0x00 [ 127.137720][ T6650] loop1: detected capacity change from 0 to 64 [ 127.221744][ T6645] loop4: detected capacity change from 0 to 4096 [ 127.312232][ T6645] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 127.361122][ T6645] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 127.372632][ T6656] loop2: detected capacity change from 0 to 256 [ 127.396779][ T6656] exfat: Unknown parameter 'ÿÿNFxX]Ãß%Q¡jEÐ(@…»Æ–š¶PÈîôýè¸*ã½O eì7z¡ò[ÅliÜŒÇÛÂ]@#ktTúv2n0ÜiG§í„0S™½[IDþ¸fŠ¡™þf;ÈmpÄBº‚®sj¯*iH‰®Qy¾„£ºH˜1-Å#]}ª&<ÊŽ£Ôm£zh©Ê¯È•ÐU"†ÏN»jr)ãñú©V' [ 127.476428][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 127.476444][ T29] audit: type=1800 audit(1717791498.672:80): pid=6645 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 127.570220][ T29] audit: type=1800 audit(1717791498.702:81): pid=6645 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 127.632644][ T6668] Cannot find del_set index 0 as target [ 127.660162][ T29] audit: type=1804 audit(1717791498.802:82): pid=6667 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1550290994/syzkaller.xC7gHg/9/bus/bus" dev="loop4" ino=33 res=1 errno=0 [ 127.806006][ T6639] loop0: detected capacity change from 0 to 40427 [ 127.810896][ T6639] F2FS-fs (loop0): invalid crc value [ 127.850501][ T6639] F2FS-fs (loop0): Found nat_bits in checkpoint [ 127.998461][ T6639] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 128.047484][ T6639] Process accounting resumed [ 128.115925][ T5105] syz-executor.0: attempt to access beyond end of device [ 128.115925][ T5105] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.128276][ T6690] loop4: detected capacity change from 0 to 2048 [ 128.140461][ T5105] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 128.185581][ T6690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.216303][ T6696] loop2: detected capacity change from 0 to 24 [ 128.232191][ T6690] ext4 filesystem being mounted at /root/syzkaller-testdir1550290994/syzkaller.xC7gHg/11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.234976][ T6696] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 128.271119][ T6696] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 128.387763][ T6690] fs-verity: sha512 using implementation "sha512-avx2" [ 128.476610][ T6292] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.527805][ T6705] loop2: detected capacity change from 0 to 512 [ 128.544749][ T6705] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.562057][ T6705] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 128.587922][ T6705] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 128.639998][ T6705] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.853757][ T6710] loop1: detected capacity change from 0 to 2048 [ 128.888660][ T6282] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 128.899082][ T6710] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 128.905003][ T6708] loop4: detected capacity change from 0 to 4096 [ 128.943894][ T6708] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 128.964884][ T6710] syz-executor.1: attempt to access beyond end of device [ 128.964884][ T6710] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 128.979763][ T6714] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.024171][ T6708] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 129.050690][ T29] audit: type=1800 audit(1717791500.242:83): pid=6708 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 129.058257][ T29] audit: type=1800 audit(1717791500.252:84): pid=6708 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 129.143938][ T5117] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 129.169913][ T29] audit: type=1804 audit(1717791500.322:85): pid=6708 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1550290994/syzkaller.xC7gHg/12/bus/bus" dev="loop4" ino=33 res=1 errno=0 [ 129.251195][ T6703] loop3: detected capacity change from 0 to 40427 [ 129.261949][ T6703] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 129.276584][ T6703] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 129.356728][ T6703] F2FS-fs (loop3): Found nat_bits in checkpoint [ 129.461154][ T6737] loop1: detected capacity change from 0 to 24 [ 129.481958][ T6737] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 129.504936][ T6737] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 129.516654][ T6703] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 129.538813][ T6703] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 129.626931][ T6745] loop0: detected capacity change from 0 to 512 [ 129.635888][ T6745] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.662600][ T6745] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 129.700088][ T6745] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 12 (err -117) [ 129.745538][ T6745] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.817668][ T5105] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 129.892900][ T6750] loop1: detected capacity change from 0 to 2048 [ 129.924231][ T6750] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 129.983422][ T6753] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.984799][ T6750] syz-executor.1: attempt to access beyond end of device [ 129.984799][ T6750] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 130.098784][ T6743] loop2: detected capacity change from 0 to 32768 [ 130.129829][ T6743] JFS: wontinuž¹e is an invalid error handler [ 130.793597][ T6770] loop0: detected capacity change from 0 to 1024 [ 131.430403][ T6773] loop4: detected capacity change from 0 to 4096 [ 131.449168][ T6779] loop3: detected capacity change from 0 to 128 [ 131.478909][ T6773] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 131.501198][ T6779] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 131.533926][ T6773] ntfs3: loop4: Failed to load $MFT. [ 131.542885][ T5117] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 131.553194][ T5117] Bluetooth: hci1: Injecting HCI hardware error event [ 131.562992][ T4481] Bluetooth: hci1: hardware error 0x00 [ 131.603196][ T12] hfsplus: b-tree write err: -5, ino 4 [ 131.818421][ T6789] loop0: detected capacity change from 0 to 64 [ 131.975190][ T29] audit: type=1326 audit(1717791503.172:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6794 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c7907cf69 code=0x0 [ 132.619703][ T6785] loop2: detected capacity change from 0 to 40427 [ 132.638868][ T6785] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 132.655796][ T6785] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 132.719125][ T6785] F2FS-fs (loop2): Found nat_bits in checkpoint [ 132.864102][ T6816] loop1: detected capacity change from 0 to 164 [ 133.228158][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.237710][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.876203][ T4481] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 134.062816][ T6785] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 134.096798][ T6785] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 134.135437][ T6822] netlink: 'syz-executor.3': attribute type 28 has an invalid length. [ 134.487571][ T6809] loop0: detected capacity change from 0 to 32768 [ 134.522608][ T6809] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6809) [ 134.590386][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.612864][ T6809] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 134.626014][ T6809] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 134.653627][ T6809] BTRFS info (device loop0): using free-space-tree [ 134.864400][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.056472][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.213429][ T5105] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 135.258405][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.332264][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 135.369483][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 135.378069][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 135.390201][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 135.405646][ T5117] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 135.417313][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 135.488816][ T12] bridge_slave_1: left allmulticast mode [ 135.500253][ T12] bridge_slave_1: left promiscuous mode [ 135.506809][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.544306][ T12] bridge_slave_0: left allmulticast mode [ 135.556781][ T12] bridge_slave_0: left promiscuous mode [ 135.562547][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.348849][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.375571][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.390874][ T12] bond0 (unregistering): Released all slaves [ 137.067329][ T12] hsr_slave_0: left promiscuous mode [ 137.079800][ T12] hsr_slave_1: left promiscuous mode [ 137.102909][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.118628][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.118966][ T6861] loop0: detected capacity change from 0 to 32768 [ 137.134277][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.155578][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.163450][ T6861] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6861) [ 137.193970][ T6869] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 137.233243][ T12] veth1_macvtap: left promiscuous mode [ 137.246748][ T6861] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 137.247826][ T12] veth0_macvtap: left promiscuous mode [ 137.273284][ T6861] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 137.293511][ T6861] BTRFS info (device loop0): using free-space-tree [ 137.300320][ T12] veth1_vlan: left promiscuous mode [ 137.300644][ T12] veth0_vlan: left promiscuous mode [ 137.467357][ T4481] Bluetooth: hci0: command tx timeout [ 137.490629][ T6861] BTRFS info (device loop0): rebuilding free space tree [ 137.564190][ T5117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.583326][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.599361][ T5117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.608723][ T5117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.624794][ T5117] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 137.639579][ T5117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 137.794684][ T5105] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 138.380248][ T12] team0 (unregistering): Port device team_slave_1 removed [ 138.387103][ T6899] loop2: detected capacity change from 0 to 32768 [ 138.437100][ T12] team0 (unregistering): Port device team_slave_0 removed [ 138.448550][ T6899] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 138.544489][ T6899] XFS (loop2): Ending clean mount [ 138.594207][ T6899] XFS (loop2): Quotacheck needed: Please wait. [ 138.671983][ T6899] XFS (loop2): Quotacheck: Done. [ 138.854969][ T6282] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 139.292643][ T6842] chnl_net:caif_netlink_parms(): no params data found [ 139.542949][ T4481] Bluetooth: hci0: command tx timeout [ 139.702849][ T4481] Bluetooth: hci2: command tx timeout [ 140.061153][ T6842] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.102090][ T6842] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.139921][ T6842] bridge_slave_0: entered allmulticast mode [ 140.152541][ T6842] bridge_slave_0: entered promiscuous mode [ 140.202080][ T6842] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.250535][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.273141][ T6842] bridge_slave_1: entered allmulticast mode [ 140.295973][ T5117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 140.306785][ T5117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 140.325868][ T6842] bridge_slave_1: entered promiscuous mode [ 140.327184][ T5117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 140.346754][ T5117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 140.357116][ T5117] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 140.364542][ T5117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 140.455013][ T6912] loop2: detected capacity change from 0 to 40427 [ 140.465323][ T6912] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 140.490358][ T6912] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 140.507660][ T6912] F2FS-fs (loop2): Found nat_bits in checkpoint [ 140.520592][ T6842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.564049][ T6842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.664294][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.745273][ T6893] chnl_net:caif_netlink_parms(): no params data found [ 140.777946][ T6912] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 140.783393][ T6842] team0: Port device team_slave_0 added [ 140.791938][ T6912] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 140.838498][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.870174][ T6842] team0: Port device team_slave_1 added [ 140.951408][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.991193][ T6842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.025222][ T6842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.066513][ T6842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.105074][ T6945] loop0: detected capacity change from 0 to 512 [ 141.113899][ T6945] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 141.130803][ T6945] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2c02c, mo2=0002] [ 141.142352][ T6945] EXT4-fs (loop0): orphan cleanup on readonly fs [ 141.151548][ T6945] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 141.167517][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.169757][ T6945] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 141.190164][ T6945] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz-executor.0: Failed to acquire dquot type 1 [ 141.195335][ T6842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.204006][ T6945] EXT4-fs (loop0): Remounting filesystem read-only [ 141.211742][ T6842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.242327][ T6842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.253408][ T6945] EXT4-fs (loop0): 1 orphan inode deleted [ 141.304411][ T6945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.325649][ T6893] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.342982][ T6893] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.350398][ T6893] bridge_slave_0: entered allmulticast mode [ 141.358147][ T6893] bridge_slave_0: entered promiscuous mode [ 141.374479][ T5105] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.418738][ T6893] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.434074][ T6893] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.441338][ T6893] bridge_slave_1: entered allmulticast mode [ 141.455630][ T6893] bridge_slave_1: entered promiscuous mode [ 141.507585][ T6842] hsr_slave_0: entered promiscuous mode [ 141.519327][ T6842] hsr_slave_1: entered promiscuous mode [ 141.522122][ T6951] loop0: detected capacity change from 0 to 164 [ 141.615194][ T6893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.623721][ T5117] Bluetooth: hci0: command tx timeout [ 141.636186][ T6893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.775478][ T6893] team0: Port device team_slave_0 added [ 141.783198][ T5117] Bluetooth: hci2: command tx timeout [ 141.860359][ T6893] team0: Port device team_slave_1 added [ 141.929323][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.012198][ T6893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.021240][ T6893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.047912][ T6893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.086939][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.119383][ T6893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.138378][ T6893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.171192][ T6893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.220577][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.247164][ T6927] chnl_net:caif_netlink_parms(): no params data found [ 142.387430][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.423136][ T5117] Bluetooth: hci4: command tx timeout [ 142.436731][ T6893] hsr_slave_0: entered promiscuous mode [ 142.448263][ T6893] hsr_slave_1: entered promiscuous mode [ 142.454854][ T6893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.462514][ T6893] Cannot create hsr debugfs directory [ 142.629907][ T4481] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.643877][ T4481] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.653446][ T4481] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.666859][ T4481] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.674848][ T4481] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 142.682244][ T4481] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 142.865362][ T6927] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.873794][ T6927] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.881947][ T6927] bridge_slave_0: entered allmulticast mode [ 142.889011][ T6927] bridge_slave_0: entered promiscuous mode [ 142.923885][ T6927] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.943341][ T6927] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.954737][ T6927] bridge_slave_1: entered allmulticast mode [ 142.954742][ T29] audit: type=1326 audit(1717791514.152:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b72c7cf69 code=0x7fc00000 [ 142.976175][ T29] audit: type=1326 audit(1717791514.152:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f7b72c7cf69 code=0x7fc00000 [ 142.993049][ T6927] bridge_slave_1: entered promiscuous mode [ 143.072086][ T12] bridge_slave_1: left allmulticast mode [ 143.077899][ T12] bridge_slave_1: left promiscuous mode [ 143.084376][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.095072][ T12] bridge_slave_0: left allmulticast mode [ 143.100832][ T12] bridge_slave_0: left promiscuous mode [ 143.107185][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.120635][ T12] bridge_slave_1: left allmulticast mode [ 143.126516][ T12] bridge_slave_1: left promiscuous mode [ 143.132238][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.160346][ T12] bridge_slave_0: left allmulticast mode [ 143.166397][ T12] bridge_slave_0: left promiscuous mode [ 143.172151][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.692214][ T29] audit: type=1326 audit(1717791514.872:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b72c7cf69 code=0x7fc00000 [ 143.714321][ T4481] Bluetooth: hci0: command tx timeout [ 143.728501][ T29] audit: type=1326 audit(1717791514.872:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b72c7cf69 code=0x7fc00000 [ 143.760432][ T29] audit: type=1326 audit(1717791514.872:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b72c7cf69 code=0x7fc00000 [ 143.795850][ T29] audit: type=1326 audit(1717791514.872:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b72c7cf69 code=0x7fc00000 [ 143.826445][ T29] audit: type=1326 audit(1717791514.872:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b72c7cf69 code=0x7fc00000 [ 143.858533][ T29] audit: type=1326 audit(1717791514.872:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6967 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b72c7cf69 code=0x7fc00000 [ 143.885390][ T4481] Bluetooth: hci2: command tx timeout [ 144.155426][ T6977] loop2: detected capacity change from 0 to 256 [ 144.168924][ T6977] exFAT-fs (loop2): failed to read boot sector [ 144.176088][ T6977] exFAT-fs (loop2): failed to recognize exfat type [ 144.259777][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.290210][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.302219][ T12] bond0 (unregistering): Released all slaves [ 144.428235][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.456279][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.477594][ T12] bond0 (unregistering): Released all slaves [ 144.502845][ T4481] Bluetooth: hci4: command tx timeout [ 144.527864][ T6927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.685662][ T6927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.724361][ T6977] loop2: detected capacity change from 0 to 32768 [ 144.743923][ T4481] Bluetooth: hci3: command tx timeout [ 144.809143][ T6977] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 144.825776][ T6977] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 144.856595][ T6927] team0: Port device team_slave_0 added [ 144.871916][ T6927] team0: Port device team_slave_1 added [ 144.893826][ T6977] bcachefs (loop2): alloc_read... done [ 144.899408][ T6977] bcachefs (loop2): stripes_read... done [ 144.908217][ T6977] bcachefs (loop2): snapshots_read... done [ 144.920843][ T6977] bcachefs (loop2): journal_replay... done [ 144.926985][ T6977] bcachefs (loop2): resume_logged_ops... done [ 144.935113][ T6977] bcachefs (loop2): going read-write [ 144.950342][ T6977] bcachefs (loop2): done starting filesystem [ 144.982244][ T6842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 145.050372][ T6282] bcachefs (loop2): shutting down [ 145.059881][ T6282] bcachefs (loop2): going read-only [ 145.072084][ T6282] bcachefs (loop2): finished waiting for writes to stop [ 145.080684][ T6842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 145.090583][ T6282] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10 [ 145.093915][ T6842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 145.107157][ T6282] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10 [ 145.129830][ T6282] bcachefs (loop2): shutdown complete, journal seq 11 [ 145.130524][ T6927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.139331][ T6282] bcachefs (loop2): marking filesystem clean [ 145.161449][ T6927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.188396][ T6927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.201231][ T6927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.208263][ T6927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.217201][ T6282] bcachefs (loop2): shutdown complete [ 145.241452][ T6927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.321125][ T6842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 145.459236][ T6927] hsr_slave_0: entered promiscuous mode [ 145.481217][ T6927] hsr_slave_1: entered promiscuous mode [ 145.487891][ T6927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.502814][ T6927] Cannot create hsr debugfs directory [ 145.735039][ T12] hsr_slave_0: left promiscuous mode [ 145.741067][ T12] hsr_slave_1: left promiscuous mode [ 145.753675][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.761140][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.776439][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.791250][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.811678][ T12] hsr_slave_0: left promiscuous mode [ 145.820375][ T12] hsr_slave_1: left promiscuous mode [ 145.829354][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.837332][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.845434][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.853033][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.904438][ T12] veth1_macvtap: left promiscuous mode [ 145.910025][ T12] veth0_macvtap: left promiscuous mode [ 145.916188][ T12] veth1_vlan: left promiscuous mode [ 145.921542][ T12] veth0_vlan: left promiscuous mode [ 145.928333][ T12] veth1_macvtap: left promiscuous mode [ 145.934273][ T12] veth0_macvtap: left promiscuous mode [ 145.939877][ T12] veth1_vlan: left promiscuous mode [ 145.947491][ T12] veth0_vlan: left promiscuous mode [ 145.953709][ T5117] Bluetooth: hci2: command tx timeout [ 146.392052][ T6994] loop2: detected capacity change from 0 to 32768 [ 146.456391][ T6994] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 146.544266][ T6994] XFS (loop2): Ending clean mount [ 146.564059][ T6994] XFS (loop2): Quotacheck needed: Please wait. [ 146.595476][ T5117] Bluetooth: hci4: command tx timeout [ 146.628980][ T6994] XFS (loop2): Quotacheck: Done. [ 146.742091][ T6282] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 146.826381][ T5117] Bluetooth: hci3: command tx timeout [ 146.958375][ T12] team0 (unregistering): Port device team_slave_1 removed [ 147.012432][ T12] team0 (unregistering): Port device team_slave_0 removed [ 147.949618][ T7017] kvm: emulating exchange as write [ 148.254356][ T12] team0 (unregistering): Port device team_slave_1 removed [ 148.344966][ T12] team0 (unregistering): Port device team_slave_0 removed [ 148.663345][ T5117] Bluetooth: hci4: command tx timeout [ 148.903756][ T5117] Bluetooth: hci3: command tx timeout [ 149.184153][ T6962] chnl_net:caif_netlink_parms(): no params data found [ 149.464303][ T6893] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 149.501733][ T7036] loop2: detected capacity change from 0 to 512 [ 149.517948][ T7036] EXT4-fs: Invalid want_extra_isize 1048622 [ 149.538168][ T6893] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 149.548992][ T6893] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 149.585231][ T6893] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 149.656496][ T6842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.742461][ T6962] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.749917][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.759257][ T6962] bridge_slave_0: entered allmulticast mode [ 149.781158][ T6962] bridge_slave_0: entered promiscuous mode [ 149.816761][ T6962] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.824341][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.831596][ T6962] bridge_slave_1: entered allmulticast mode [ 149.839377][ T6962] bridge_slave_1: entered promiscuous mode [ 149.872167][ T6962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.895526][ T6962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.962537][ T6842] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.984749][ T6962] team0: Port device team_slave_0 added [ 150.018723][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.025927][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.038472][ T6962] team0: Port device team_slave_1 added [ 150.114004][ T5207] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.121168][ T5207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.140756][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.151633][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.182354][ T6962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.197411][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.205226][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.231961][ T6962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.344384][ T6927] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 150.378397][ T6962] hsr_slave_0: entered promiscuous mode [ 150.385049][ T6962] hsr_slave_1: entered promiscuous mode [ 150.391475][ T6962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.400640][ T6962] Cannot create hsr debugfs directory [ 150.406981][ T6927] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 150.417562][ T6927] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 150.432577][ T6927] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 150.471285][ T6893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.624821][ T6893] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.680686][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.721495][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.728824][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.765836][ T5207] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.773028][ T5207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.858976][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.984314][ T5117] Bluetooth: hci3: command tx timeout [ 150.995613][ T6842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.025354][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.144193][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.298211][ T6842] veth0_vlan: entered promiscuous mode [ 151.360418][ T6927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.421659][ T6842] veth1_vlan: entered promiscuous mode [ 151.493056][ T12] bridge_slave_1: left allmulticast mode [ 151.498751][ T12] bridge_slave_1: left promiscuous mode [ 151.506252][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.520787][ T12] bridge_slave_0: left allmulticast mode [ 151.527270][ T12] bridge_slave_0: left promiscuous mode [ 151.533851][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.559527][ T12] bond_slave_0: left promiscuous mode [ 151.566490][ T12] bond_slave_1: left promiscuous mode [ 152.002254][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.017282][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.030565][ T12] bond0 (unregistering): Released all slaves [ 152.077589][ T7071] loop2: detected capacity change from 0 to 40427 [ 152.079169][ T6927] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.090165][ T7071] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 152.122597][ T7071] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 152.160161][ T6842] veth0_macvtap: entered promiscuous mode [ 152.176840][ T12] tipc: Left network mode [ 152.188140][ T7071] F2FS-fs (loop2): Found nat_bits in checkpoint [ 152.254082][ T7071] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 152.270520][ T7071] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 152.274074][ T5207] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.285208][ T5207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.301593][ T6842] veth1_macvtap: entered promiscuous mode [ 152.335942][ T7071] syz-executor.2: attempt to access beyond end of device [ 152.335942][ T7071] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 152.361812][ T6893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.381719][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.407076][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.425931][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.437538][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.457646][ T6842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.479276][ T5207] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.486484][ T5207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.565690][ T6282] syz-executor.2: attempt to access beyond end of device [ 152.565690][ T6282] loop2: rw=2051, sector=45096, nr_sectors = 16 limit=40427 [ 152.592453][ T6282] F2FS-fs (loop2): Issue discard(5637, 5637, 2) failed, ret: -5 [ 152.641628][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.663572][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.682945][ T6842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.693822][ T6842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.705610][ T6842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.717157][ T6842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.727011][ T6842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.739452][ T6842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.749053][ T6842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.811249][ T12] hsr_slave_0: left promiscuous mode [ 152.817584][ T12] hsr_slave_1: left promiscuous mode [ 152.833730][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.841190][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.863301][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.870716][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.911838][ T12] veth1_macvtap: left promiscuous mode [ 152.933325][ T12] veth0_macvtap: left promiscuous mode [ 152.938963][ T12] veth1_vlan: left promiscuous mode [ 153.229143][ T7089] loop2: detected capacity change from 0 to 1024 [ 153.567165][ T12] team0 (unregistering): Port device team_slave_1 removed [ 153.644576][ T12] team0 (unregistering): Port device team_slave_0 removed [ 153.793434][ T7093] loop2: detected capacity change from 0 to 32768 [ 153.811841][ T7093] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (7093) [ 153.834748][ T7093] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.845052][ T7093] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 153.856191][ T7093] BTRFS info (device loop2): disk space caching is enabled [ 153.983788][ T7093] BTRFS info (device loop2): rebuilding free space tree [ 154.051001][ T7093] BTRFS info (device loop2): disabling free space tree [ 154.058305][ T7093] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 154.077530][ T7093] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 154.228454][ T6282] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 154.571895][ T6893] veth0_vlan: entered promiscuous mode [ 154.627590][ T6962] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 154.652549][ T6893] veth1_vlan: entered promiscuous mode [ 154.705346][ T2450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.722354][ T6962] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 154.746181][ T2450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.770550][ T6962] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 154.790206][ T6962] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 154.870784][ T6927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.902553][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.926472][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.009389][ T6893] veth0_macvtap: entered promiscuous mode [ 155.081175][ T6927] veth0_vlan: entered promiscuous mode [ 155.100092][ T6893] veth1_macvtap: entered promiscuous mode [ 155.206886][ T6927] veth1_vlan: entered promiscuous mode [ 155.252576][ T6893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.272785][ T6893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.288327][ T6893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.299511][ T6893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.322189][ T6893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.329395][ T7114] loop2: detected capacity change from 0 to 32768 [ 155.340055][ T7114] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (7114) [ 155.386876][ T7114] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 155.413716][ T7114] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 155.425173][ T6927] veth0_macvtap: entered promiscuous mode [ 155.437943][ T6893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.438572][ T7114] BTRFS info (device loop2): using free-space-tree [ 155.460045][ T6893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.471031][ T6893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.483061][ T6893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.502348][ T6893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.521253][ T6927] veth1_macvtap: entered promiscuous mode [ 155.535687][ T784] kernel write not supported for file bpf-prog (pid: 784 comm: kworker/0:2) [ 155.560000][ T6893] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.570602][ T6893] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.580320][ T6893] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.602804][ T6893] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.645730][ T6962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.665214][ T6282] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 155.714364][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.735776][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.780400][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.797580][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.809764][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.822169][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.845463][ T6927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.940695][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.982812][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.002764][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.019316][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.031746][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.042239][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.062007][ T6927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.122426][ T6962] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.181550][ T6927] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.193005][ T6927] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.206612][ T6927] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.216696][ T6927] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.273755][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.280942][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.313898][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.321118][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.337399][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.348653][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.540264][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.554944][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.568190][ T2450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.573604][ T784] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 156.577682][ T2450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.705012][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.733088][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.843746][ T784] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=af.86 [ 156.866661][ T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.890669][ T7171] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 156.924457][ T784] usb 2-1: config 0 descriptor?? [ 157.006809][ T784] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 157.088748][ T6962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.224452][ T784] usb 2-1: USB disconnect, device number 2 [ 157.265915][ T6962] veth0_vlan: entered promiscuous mode [ 157.308124][ T6962] veth1_vlan: entered promiscuous mode [ 157.435313][ T6962] veth0_macvtap: entered promiscuous mode [ 157.465866][ T6962] veth1_macvtap: entered promiscuous mode [ 157.535278][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.563235][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.584592][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.618387][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.638086][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.665017][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.699613][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.734572][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.765748][ T6962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.776239][ T7164] loop2: detected capacity change from 0 to 32768 [ 157.788787][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.805886][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.819283][ T7164] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (7164) [ 157.853535][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.886534][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.898434][ T7164] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 157.915855][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.934801][ T7164] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 157.953118][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.963139][ T7164] BTRFS info (device loop2): using free-space-tree [ 157.971416][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.005123][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.033001][ T6962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.070725][ T6962] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.091558][ T6962] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.114066][ T6962] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.123706][ T6962] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.306529][ T7175] loop3: detected capacity change from 0 to 32768 [ 158.313179][ T2447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.321011][ T2447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.366092][ T6282] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 158.386237][ T7175] XFS (loop3): Mounting V5 filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 in no-recovery mode. Filesystem will be inconsistent. [ 158.421401][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.436314][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.509551][ T6927] XFS (loop3): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 158.963352][ T7210] binder: 7207:7210 ioctl c018620b 0 returned -14 [ 159.000115][ T7215] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 159.164707][ T7221] loop4: detected capacity change from 0 to 1764 [ 159.292993][ T5207] kernel write not supported for file bpf-prog (pid: 5207 comm: kworker/1:6) [ 159.516346][ T7226] loop1: detected capacity change from 0 to 512 [ 160.013772][ T7226] EXT4-fs: Ignoring removed oldalloc option [ 160.086066][ T7226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b842e02d, mo2=0002] [ 160.104160][ T7226] System zones: 1-12 [ 160.126389][ T7226] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 1 (level 1) [ 160.177087][ T7226] EXT4-fs (loop1): Remounting filesystem read-only [ 160.226011][ T7226] EXT4-fs (loop1): 1 truncate cleaned up [ 160.248950][ T7226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.272066][ T7226] EXT4-fs warning (device loop1): ext4_empty_dir:3089: inode #2: lblock 0: comm syz-executor.1: error -117 reading directory block [ 160.389273][ T6842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.500053][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.569241][ T7254] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.574539][ T5150] kernel write not supported for file bpf-prog (pid: 5150 comm: kworker/0:5) [ 160.604046][ T7254] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.803622][ T7262] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 160.819547][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 160.819558][ T29] audit: type=1326 audit(1717791532.012:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7260 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e09a7cf69 code=0x7ffc0000 [ 160.904024][ T29] audit: type=1326 audit(1717791532.012:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7260 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e09a7cf69 code=0x7ffc0000 [ 160.990729][ T29] audit: type=1326 audit(1717791532.052:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7260 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e09a7cf69 code=0x7ffc0000 [ 161.093601][ T29] audit: type=1326 audit(1717791532.052:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7260 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e09a7cf69 code=0x7ffc0000 [ 161.177600][ T29] audit: type=1326 audit(1717791532.052:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7260 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e09a7cf69 code=0x7ffc0000 [ 161.242215][ T29] audit: type=1326 audit(1717791532.052:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7260 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e09a7cf69 code=0x7ffc0000 [ 161.323880][ T29] audit: type=1326 audit(1717791532.062:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7260 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e09a7cf69 code=0x7ffc0000 [ 161.398613][ T29] audit: type=1326 audit(1717791532.072:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7260 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e09a7cf69 code=0x7ffc0000 [ 161.439425][ T7279] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 161.461579][ T7279] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 161.468393][ T7247] loop2: detected capacity change from 0 to 32768 [ 161.490405][ T29] audit: type=1326 audit(1717791532.082:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7260 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3e09a7cf69 code=0x7ffc0000 [ 161.587386][ T29] audit: type=1326 audit(1717791532.082:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7260 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e09a7cf69 code=0x7ffc0000 [ 162.523069][ T7247] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nocow [ 162.568218][ T7247] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 162.656035][ T7247] bcachefs (loop2): alloc_read... done [ 162.661717][ T7247] bcachefs (loop2): stripes_read... done [ 162.679052][ T7302] loop4: detected capacity change from 0 to 128 [ 162.680192][ T7247] bcachefs (loop2): snapshots_read... [ 162.697997][ T7302] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 162.698362][ T7247] done [ 162.730146][ T7302] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.739710][ T7247] bcachefs (loop2): journal_replay... done [ 162.754655][ T7247] bcachefs (loop2): resume_logged_ops... done [ 162.775847][ T7247] bcachefs (loop2): going read-write [ 162.785663][ T7247] bcachefs (loop2): done starting filesystem [ 162.902838][ T5150] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 163.102321][ T7321] loop0: detected capacity change from 0 to 512 [ 163.131066][ T5150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x37 has an invalid bInterval 55, changing to 9 [ 163.182707][ T5150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x37 has invalid maxpacket 10039, setting to 1024 [ 163.205396][ T7321] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz-executor.0: bg 0: block 5: invalid block bitmap [ 163.241604][ T5150] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 163.263233][ T5150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.272936][ T7321] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 163.294543][ T5150] usb 4-1: config 0 descriptor?? [ 163.301518][ T7308] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 163.310735][ T7321] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 3 (level 2) [ 163.377298][ T7321] EXT4-fs (loop0): 1 orphan inode deleted [ 163.393101][ T7321] EXT4-fs (loop0): 1 truncate cleaned up [ 163.417153][ T6282] bcachefs (loop2): shutting down [ 163.422253][ T6282] bcachefs (loop2): going read-only [ 163.429130][ T7321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.451932][ T7281] loop1: detected capacity change from 0 to 32768 [ 163.460326][ T6282] bcachefs (loop2): finished waiting for writes to stop [ 163.469710][ T6282] bcachefs (loop2): flushing journal and stopping allocators, journal seq 12 [ 163.490954][ T7281] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7281) [ 163.527070][ T6282] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 14 [ 163.537888][ T6962] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.552697][ T7281] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 163.568182][ T6282] bcachefs (loop2): shutdown complete, journal seq 15 [ 163.576106][ T7281] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 163.581288][ T6282] bcachefs (loop2): marking filesystem clean [ 163.585399][ T7281] BTRFS info (device loop1): using free-space-tree [ 163.635098][ T6282] bcachefs (loop2): shutdown complete [ 163.686778][ T5150] usb 4-1: USB disconnect, device number 2 [ 163.703707][ T5207] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 163.916777][ T5207] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 163.947919][ T5207] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.961517][ T5207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 163.981398][ T7281] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 163.999387][ T5207] usb 5-1: SerialNumber: syz [ 164.411769][ T7353] loop0: detected capacity change from 0 to 4096 [ 164.430527][ T7357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.452212][ T7353] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 164.463063][ T5207] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 164.490316][ T5207] usb 5-1: USB disconnect, device number 2 [ 164.575042][ T7353] ntfs3: loop0: failed to convert "c46c" to iso8859-2 [ 164.897970][ T6842] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 164.899625][ T7370] Illegal XDP return value 1650054164 on prog (id 123) dev N/A, expect packet loss! [ 165.325541][ T7383] loop1: detected capacity change from 0 to 8 [ 165.335857][ T7384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.374221][ T5151] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 165.566990][ T5151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x37 has an invalid bInterval 55, changing to 9 [ 165.594522][ T5151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x37 has invalid maxpacket 10039, setting to 1024 [ 165.619686][ T5151] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 165.622586][ T7396] loop1: detected capacity change from 0 to 256 [ 165.629877][ T5151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.661403][ T5151] usb 5-1: config 0 descriptor?? [ 165.672064][ T7376] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 165.983024][ T5150] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 166.028294][ T5151] usb 5-1: USB disconnect, device number 3 [ 166.106200][ T7407] binder: 7406:7407 ioctl 4018620d 0 returned -22 [ 166.123302][ T7407] binder: 7406:7407 ioctl c0306201 20000380 returned -11 [ 166.171471][ T7390] loop0: detected capacity change from 0 to 32768 [ 166.189521][ T7390] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (7390) [ 166.200070][ T7407] block device autoloading is deprecated and will be removed. [ 166.221821][ T7407] syz-executor.3: attempt to access beyond end of device [ 166.221821][ T7407] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 166.235941][ T5150] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.267264][ T7390] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.278275][ T5150] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.298459][ T5150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 166.302188][ T7390] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 166.308266][ T5150] usb 3-1: SerialNumber: syz [ 166.330550][ T7390] BTRFS info (device loop0): using free-space-tree [ 166.359888][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 166.359905][ T29] audit: type=1400 audit(1717791537.552:331): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7410 comm="syz-executor.3" saddr=172.30.0.4 daddr=172.20.20.170 netif=wpan0 [ 166.419440][ T29] audit: type=1326 audit(1717791537.612:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7426 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d627cf69 code=0x7ffc0000 [ 166.462015][ T29] audit: type=1326 audit(1717791537.612:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7426 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d627cf69 code=0x7ffc0000 [ 166.489295][ T29] audit: type=1326 audit(1717791537.642:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7426 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f15d627cf69 code=0x7ffc0000 [ 166.499413][ T7390] BTRFS info (device loop0): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 166.514340][ T29] audit: type=1326 audit(1717791537.642:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7426 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d627cf69 code=0x7ffc0000 [ 166.543844][ T29] audit: type=1326 audit(1717791537.642:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7426 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d627cf69 code=0x7ffc0000 [ 166.611663][ T29] audit: type=1326 audit(1717791537.642:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7426 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f15d627cf69 code=0x7ffc0000 [ 166.666481][ T29] audit: type=1326 audit(1717791537.642:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7426 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d627cf69 code=0x7ffc0000 [ 166.703650][ T7436] loop3: detected capacity change from 0 to 8 [ 166.733534][ T29] audit: type=1326 audit(1717791537.642:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7426 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f15d627cf69 code=0x7ffc0000 [ 166.763902][ T29] audit: type=1326 audit(1717791537.642:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7426 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d627cf69 code=0x7ffc0000 [ 166.800292][ T5150] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 166.829899][ T5150] usb 3-1: USB disconnect, device number 2 [ 167.179672][ T7441] loop3: detected capacity change from 0 to 2048 [ 167.186004][ T6962] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.388146][ T7441] hpfs: filesystem error: improperly stopped; already mounted read-only [ 167.416287][ T7441] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 7b318cc4 [ 167.494784][ T7445] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 167.585271][ T7446] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 168.154711][ T7475] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 168.302894][ T5207] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 168.505998][ T7484] syz-executor.0[7484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.506503][ T7484] syz-executor.0[7484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.123408][ T5207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x37 has an invalid bInterval 55, changing to 9 [ 169.152910][ T5207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x37 has invalid maxpacket 10039, setting to 1024 [ 169.164458][ T5207] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 169.175488][ T5207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.231550][ T5207] usb 2-1: config 0 descriptor?? [ 169.273407][ T7460] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 169.555717][ T7494] loop3: detected capacity change from 0 to 4096 [ 169.580571][ T7494] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 169.584776][ T5207] usb 2-1: USB disconnect, device number 3 [ 169.732896][ T7494] ntfs3: loop3: failed to convert "c46c" to iso8859-2 [ 170.041087][ T7520] serio: Serial port pts0 [ 170.045279][ T7517] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 170.370989][ T7538] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.400229][ T7538] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.435285][ T7538] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.693307][ T7555] serio: Serial port pts0 [ 170.946734][ T7564] loop2: detected capacity change from 0 to 128 [ 171.383114][ T7571] loop4: detected capacity change from 0 to 8 [ 171.567300][ T7571] SQUASHFS error: lzo decompression failed, data probably corrupt [ 171.575733][ T7571] SQUASHFS error: Failed to read block 0x91: -5 [ 171.582042][ T7571] SQUASHFS error: Unable to read metadata cache entry [8f] [ 171.590257][ T7571] SQUASHFS error: Unable to read inode 0x11f [ 171.609222][ T7564] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 171.695224][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 171.695242][ T29] audit: type=1326 audit(1717791542.892:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7563 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b72c7cf69 code=0x0 [ 171.925861][ T7581] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.943593][ T7581] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.080054][ T7581] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.860890][ T6282] sysv_free_block: trying to free block not in datazone [ 172.956690][ T6282] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 173.039457][ T7552] loop1: detected capacity change from 0 to 32768 [ 173.192327][ T7552] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 173.193787][ T7602] syz-executor.0[7602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.201098][ T7602] syz-executor.0[7602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.314906][ T29] audit: type=1326 audit(1717791544.492:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa93c07cf69 code=0x0 [ 173.540415][ T7552] XFS (loop1): AIL initialisation failed: error -12 [ 173.783998][ T7552] XFS (loop1): log mount failed [ 173.843044][ T29] audit: type=1800 audit(1717791544.842:359): pid=7613 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 173.920181][ T7603] 9pnet_fd: Insufficient options for proto=fd [ 173.943445][ T7603] loop3: detected capacity change from 0 to 256 [ 173.950646][ T7603] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value [ 174.089348][ T7626] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 174.099357][ T7626] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 174.427672][ T7628] loop4: detected capacity change from 0 to 4096 [ 174.439544][ T7628] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 174.498202][ T7628] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 174.551278][ T7641] loop2: detected capacity change from 0 to 16 [ 174.574890][ T7641] erofs: (device loop2): mounted with root inode @ nid 36. [ 174.590958][ T29] audit: type=1326 audit(1717791545.782:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7642 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d627cf69 code=0x7ffc0000 [ 174.629199][ T7645] binder: 7644:7645 ioctl 4018620d 0 returned -22 [ 174.632165][ T29] audit: type=1326 audit(1717791545.782:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7642 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d627cf69 code=0x7ffc0000 [ 174.665310][ T7645] binder: 7644:7645 ioctl c0306201 20000380 returned -11 [ 174.669742][ T29] audit: type=1326 audit(1717791545.812:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7642 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f15d627cf69 code=0x7ffc0000 [ 174.675423][ T7645] syz-executor.3: attempt to access beyond end of device [ 174.675423][ T7645] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 174.711483][ T29] audit: type=1326 audit(1717791545.812:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7642 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d627cf69 code=0x7ffc0000 [ 174.733885][ T29] audit: type=1326 audit(1717791545.812:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7642 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d627cf69 code=0x7ffc0000 [ 174.774440][ T29] audit: type=1326 audit(1717791545.822:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7642 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f15d627cf69 code=0x7ffc0000 [ 174.833950][ T29] audit: type=1326 audit(1717791545.822:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7642 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d627cf69 code=0x7ffc0000 [ 174.878276][ T7652] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 174.898992][ T7652] veth0_macvtap: left promiscuous mode [ 174.926412][ T7652] macvtap0: entered promiscuous mode [ 174.940156][ T7652] macvtap0: refused to change device tx_queue_len [ 175.027991][ T7654] loop4: detected capacity change from 0 to 2048 [ 175.050671][ T7654] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.260700][ T7658] loop3: detected capacity change from 0 to 2048 [ 175.281162][ T7658] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 175.926972][ T7666] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.985950][ T7660] 9pnet_fd: Insufficient options for proto=fd [ 176.020761][ T7670] loop1: detected capacity change from 0 to 512 [ 176.075819][ T7670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.091821][ T7670] ext4 filesystem being mounted at /root/syzkaller-testdir1499057931/syzkaller.joQh9w/32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.286788][ T7678] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz-executor.1: Failed to acquire dquot type 0 [ 176.541401][ T6842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.843869][ T7698] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 176.855978][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 176.855996][ T29] audit: type=1326 audit(1717791548.052:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7701 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80bcc7cf69 code=0x0 [ 177.301197][ T7727] ieee802154 phy0 wpan0: encryption failed: -90 [ 177.398489][ T7731] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 177.398489][ T7731] The task syz-executor.1 (7731) triggered the difference, watch for misbehavior. [ 177.468981][ T7733] loop3: detected capacity change from 0 to 8 [ 177.488220][ T7733] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 177.581760][ T7737] macvlan0: entered allmulticast mode [ 177.619643][ T7737] veth1_vlan: entered allmulticast mode [ 177.634680][ T7737] macvlan0: left allmulticast mode [ 177.641808][ T7737] veth1_vlan: left allmulticast mode [ 178.599539][ T7763] loop2: detected capacity change from 0 to 8 [ 178.614839][ T7763] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 178.653163][ T29] audit: type=1804 audit(1717791549.842:379): pid=7755 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3927645848/syzkaller.F9h7yi/51/bus" dev="sda1" ino=1943 res=1 errno=0 [ 178.892969][ T7772] ieee802154 phy0 wpan0: encryption failed: -90 [ 178.942898][ T29] audit: type=1804 audit(1717791550.132:380): pid=7776 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3927645848/syzkaller.F9h7yi/52/bus" dev="sda1" ino=1954 res=1 errno=0 [ 180.072613][ T7800] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.094707][ T7801] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 180.332133][ T7817] syz-executor.4[7817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.332279][ T7817] syz-executor.4[7817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.939179][ T7837] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 181.018838][ T7838] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 181.482199][ T5207] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 181.512524][ T7814] loop2: detected capacity change from 0 to 40427 [ 181.539638][ T7814] F2FS-fs (loop2): invalid crc value [ 181.564531][ T7814] F2FS-fs (loop2): Found nat_bits in checkpoint [ 181.642901][ T7814] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 181.682799][ T5207] usb 1-1: Using ep0 maxpacket: 16 [ 181.690580][ T5207] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.701267][ T5207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 181.718892][ T5207] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.817186][ T5207] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 181.829973][ T5207] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 181.890102][ T5207] usb 1-1: Product: syz [ 181.908806][ T5207] usb 1-1: Manufacturer: syz [ 181.916885][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.931848][ T5207] usb 1-1: SerialNumber: syz [ 181.943643][ T6282] syz-executor.2: attempt to access beyond end of device [ 181.943643][ T6282] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.962420][ T5207] usb 1-1: config 0 descriptor?? [ 182.002133][ T5207] usb 1-1: NFC: intf ffff888052766000 id ffffffff8ec9b140 [ 182.019851][ T6282] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 182.269058][ T784] usb 1-1: USB disconnect, device number 2 [ 182.624871][ T29] audit: type=1804 audit(1717791553.822:381): pid=7857 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1499057931/syzkaller.joQh9w/51/bus/file0" dev="overlay" ino=1961 res=1 errno=0 [ 184.145756][ T7868] loop2: detected capacity change from 0 to 128 [ 184.200402][ T7868] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 184.247932][ T7868] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.392442][ T29] audit: type=1804 audit(1717791555.582:382): pid=7868 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4066021533/syzkaller.3PCPy9/132/file0/control" dev="loop2" ino=125 res=1 errno=0 [ 184.781456][ T29] audit: type=1326 audit(1717791555.972:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80bcc7cf69 code=0x0 [ 185.411108][ T7876] 9pnet_fd: Insufficient options for proto=fd [ 185.924359][ T7896] Bluetooth: MGMT ver 1.22 [ 186.195912][ T7872] loop4: detected capacity change from 0 to 32768 [ 186.208994][ T7872] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7872) [ 186.244691][ T7872] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 186.255206][ T7872] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 186.277360][ T7872] BTRFS info (device loop4): using free-space-tree [ 186.661314][ T7924] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 186.703540][ T7924] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.733340][ T7924] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.037295][ T6893] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 187.354942][ T7901] loop2: detected capacity change from 0 to 32768 [ 187.722430][ T7901] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 187.745016][ T7901] bcachefs (loop2): recovering from clean shutdown, journal seq 8 [ 187.839556][ T7901] bcachefs (loop2): alloc_read... done [ 187.854751][ T7901] bcachefs (loop2): stripes_read... done [ 187.860490][ T7901] bcachefs (loop2): snapshots_read... done [ 187.910443][ T7901] bcachefs (loop2): journal_replay... done [ 187.942979][ T7901] bcachefs (loop2): resume_logged_ops... done [ 187.949195][ T7901] bcachefs (loop2): going read-write [ 188.002783][ T7901] bcachefs (loop2): done starting filesystem [ 188.290428][ T6282] bcachefs (loop2): shutting down [ 188.307641][ T6282] bcachefs (loop2): going read-only [ 188.342774][ T6282] bcachefs (loop2): finished waiting for writes to stop [ 188.370287][ T6282] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10 [ 188.428878][ T6282] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 11 [ 188.487487][ T6282] bcachefs (loop2): shutdown complete, journal seq 12 [ 188.526147][ T6282] bcachefs (loop2): marking filesystem clean [ 188.674250][ T6282] bcachefs (loop2): shutdown complete [ 188.696174][ T7941] loop4: detected capacity change from 0 to 40427 [ 188.771626][ T7941] F2FS-fs (loop4): invalid crc value [ 188.796241][ T7941] F2FS-fs (loop4): Found nat_bits in checkpoint [ 188.948551][ T7941] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 189.080009][ T6893] syz-executor.4: attempt to access beyond end of device [ 189.080009][ T6893] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 189.114338][ T6893] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 190.026328][ T7967] loop4: detected capacity change from 0 to 128 [ 190.050725][ T7967] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 190.081867][ T7967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.150158][ T29] audit: type=1804 audit(1717791561.342:384): pid=7967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir424677956/syzkaller.wM4oFL/54/file0/control" dev="loop4" ino=125 res=1 errno=0 [ 190.678475][ T7965] loop2: detected capacity change from 0 to 40427 [ 190.694855][ T7965] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 190.712917][ T7965] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 190.736811][ T7965] F2FS-fs (loop2): invalid crc value [ 190.762783][ T7965] F2FS-fs (loop2): Found nat_bits in checkpoint [ 190.871344][ T7965] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 190.892804][ T7965] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 190.936738][ T29] audit: type=1800 audit(1717791562.132:385): pid=7965 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 191.038364][ T29] audit: type=1800 audit(1717791562.222:386): pid=7974 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 191.075233][ T7974] syz-executor.2: attempt to access beyond end of device [ 191.075233][ T7974] loop2: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 191.201284][ T7975] syz-executor.2: attempt to access beyond end of device [ 191.201284][ T7975] loop2: rw=34817, sector=77832, nr_sectors = 848 limit=40427 [ 191.440735][ T2502] kworker/u8:11: attempt to access beyond end of device [ 191.440735][ T2502] loop2: rw=1, sector=77824, nr_sectors = 8 limit=40427 [ 191.492114][ T6282] syz-executor.2: attempt to access beyond end of device [ 191.492114][ T6282] loop2: rw=2051, sector=77832, nr_sectors = 848 limit=40427 [ 191.536799][ T6282] F2FS-fs (loop2): Issue discard(9729, 9729, 106) failed, ret: -5 [ 194.603280][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.609715][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 213.246389][ T5117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.262297][ T5117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.273992][ T5117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.284890][ T5117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.294408][ T5117] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.301843][ T5117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.382805][ T4481] Bluetooth: hci4: command tx timeout [ 217.403067][ T5117] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.417243][ T5117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.426212][ T5117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.438289][ T5117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.460895][ T5117] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.467965][ T5107] Bluetooth: hci4: command tx timeout [ 217.476050][ T5107] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.545548][ T53] Bluetooth: hci4: command tx timeout [ 219.551113][ T5117] Bluetooth: hci5: command tx timeout [ 219.560267][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 219.572152][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 219.585090][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 219.597203][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 219.607206][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 219.615915][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 220.507390][ T5107] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 220.520400][ T5107] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.529102][ T5107] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.539122][ T5107] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 220.548420][ T5107] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 220.556001][ T5107] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 221.622857][ T5107] Bluetooth: hci4: command tx timeout [ 221.628331][ T53] Bluetooth: hci5: command tx timeout [ 221.702995][ T53] Bluetooth: hci6: command tx timeout [ 222.588507][ T53] Bluetooth: hci7: command tx timeout [ 223.528534][ T5107] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 223.539677][ T5107] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 223.549289][ T5107] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 223.557729][ T5107] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 223.565762][ T5107] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 223.579992][ T5107] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 223.702740][ T5107] Bluetooth: hci5: command tx timeout [ 223.789674][ T5107] Bluetooth: hci6: command tx timeout [ 224.663381][ T5107] Bluetooth: hci7: command tx timeout [ 225.622804][ T5107] Bluetooth: hci8: command tx timeout [ 225.782823][ T5107] Bluetooth: hci5: command tx timeout [ 225.865782][ T5107] Bluetooth: hci6: command tx timeout [ 226.742799][ T5107] Bluetooth: hci7: command tx timeout [ 227.704298][ T5107] Bluetooth: hci8: command tx timeout [ 227.950495][ T5107] Bluetooth: hci6: command tx timeout [ 228.822941][ T5107] Bluetooth: hci7: command tx timeout [ 229.792784][ T5107] Bluetooth: hci8: command tx timeout [ 231.872816][ T5107] Bluetooth: hci8: command tx timeout [ 256.030882][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.037352][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.109360][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 263.222801][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 268.357147][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 278.772338][ T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 278.790633][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 278.805213][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 278.815447][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 278.831438][ T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 278.842825][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 280.903028][ T5107] Bluetooth: hci9: command tx timeout [ 282.513999][ T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 282.526447][ T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 282.535433][ T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 282.543868][ T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 282.554829][ T53] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 282.562292][ T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 282.987197][ T5107] Bluetooth: hci9: command tx timeout [ 284.522203][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 284.535983][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 284.554951][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 284.565786][ T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 284.573850][ T53] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 284.584469][ T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 284.667143][ T53] Bluetooth: hci10: command tx timeout [ 285.062775][ T53] Bluetooth: hci9: command tx timeout [ 285.591817][ T5107] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 285.609194][ T5107] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 285.622958][ T5107] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 285.631358][ T5107] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 285.639241][ T5107] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 285.647051][ T5107] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 286.662951][ T53] Bluetooth: hci11: command tx timeout [ 286.761008][ T53] Bluetooth: hci10: command tx timeout [ 287.142820][ T53] Bluetooth: hci9: command tx timeout [ 287.702903][ T53] Bluetooth: hci12: command tx timeout [ 288.550872][ T5107] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 288.562885][ T5107] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 288.577215][ T5107] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 288.589162][ T5107] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 288.597175][ T5107] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 288.606193][ T5107] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 288.742721][ T53] Bluetooth: hci11: command tx timeout [ 288.822803][ T53] Bluetooth: hci10: command tx timeout [ 289.782752][ T53] Bluetooth: hci12: command tx timeout [ 290.662849][ T53] Bluetooth: hci13: command tx timeout [ 290.822726][ T53] Bluetooth: hci11: command tx timeout [ 290.912756][ T53] Bluetooth: hci10: command tx timeout [ 291.867150][ T53] Bluetooth: hci12: command tx timeout [ 292.742768][ T53] Bluetooth: hci13: command tx timeout [ 292.902914][ T53] Bluetooth: hci11: command tx timeout [ 293.942822][ T53] Bluetooth: hci12: command tx timeout [ 294.824842][ T53] Bluetooth: hci13: command tx timeout [ 296.902817][ T53] Bluetooth: hci13: command tx timeout [ 317.467804][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.474231][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 337.308795][ T30] INFO: task syz-executor.0:7960 blocked for more than 143 seconds. [ 337.317675][ T30] Not tainted 6.10.0-rc2-syzkaller-00235-g8a92980606e3 #0 [ 337.330811][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 337.339685][ T30] task:syz-executor.0 state:D stack:25264 pid:7960 tgid:7959 ppid:6962 flags:0x00004006 [ 337.352610][ T30] Call Trace: [ 337.355909][ T30] 2024/06/07 20:21:48 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 337.358856][ T30] __schedule+0x1796/0x49d0 [ 337.422676][ T30] ? __pfx___schedule+0x10/0x10 [ 337.427598][ T30] ? __pfx_lock_release+0x10/0x10 [ 337.442644][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 337.448158][ T30] ? schedule+0x90/0x320 [ 337.452420][ T30] schedule+0x14b/0x320 [ 337.472690][ T30] schedule_preempt_disabled+0x13/0x30 [ 337.478221][ T30] __mutex_lock+0x6a4/0xd70 [ 337.492713][ T30] ? __mutex_lock+0x527/0xd70 [ 337.497450][ T30] ? tc_get_tfilter+0x57b/0xfb0 [ 337.502323][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 337.522686][ T30] ? arch_stack_walk+0x16d/0x1b0 [ 337.527692][ T30] ? rcu_is_watching+0x15/0xb0 [ 337.532471][ T30] ? tcf_proto_lookup_ops+0x25b/0x280 [ 337.562632][ T30] tc_get_tfilter+0x57b/0xfb0 [ 337.567401][ T30] ? __pfx_tc_get_tfilter+0x10/0x10 [ 337.584739][ T30] ? rcu_read_unlock+0x87/0xa0 [ 337.589559][ T30] ? do_syscall_64+0xf3/0x230 [ 337.612706][ T30] ? __pfx_lock_release+0x10/0x10 [ 337.617810][ T30] ? __pfx_tc_get_tfilter+0x10/0x10 [ 337.642801][ T30] rtnetlink_rcv_msg+0x8f0/0x1180 [ 337.647913][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 337.662647][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 337.668161][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 337.699717][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 337.706225][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 337.711617][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 337.737950][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 337.752924][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 337.758252][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 337.772688][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 337.792701][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 337.797878][ T30] ? __dev_queue_xmit+0x16c9/0x3d30 [ 337.822651][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 337.827837][ T30] ? ref_tracker_free+0x643/0x7e0 [ 337.842687][ T30] netlink_rcv_skb+0x1e3/0x430 [ 337.847508][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 337.862654][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.868012][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 337.884848][ T30] netlink_unicast+0x7ea/0x980 [ 337.889770][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 337.911108][ T30] ? __virt_addr_valid+0x183/0x520 [ 337.916435][ T30] ? __check_object_size+0x49c/0x900 [ 337.921742][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [