last executing test programs: 41.463297229s ago: executing program 3: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000280)="ef831dc56dc3a0a4cc9fdc66", 0xc}], 0x2}, 0x0) 38.567843788s ago: executing program 3: capset(&(0x7f00000000c0)={0x20071026}, &(0x7f00000004c0)) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000980)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x0, 0x0}, &(0x7f0000000380)="169374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 38.562086269s ago: executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r1, &(0x7f00000004c0)="e2", 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000000)) 38.55639214s ago: executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@datasec={0x6, 0x2, 0x0, 0xc, 0x2, [{}], "da2a"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "759f"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x48}, 0x20) 38.55500244s ago: executing program 3: mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000000c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x35]}}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x320, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000040)={0x0, 0xc862, 0xd05, {}, 0x0, 0x4}) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) process_madvise(r0, 0x0, 0x0, 0x11, 0x0) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x0) ftruncate(r6, 0x0) sendfile(r0, r6, 0x0, 0x1000000201005) 38.541414353s ago: executing program 3: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x7, &(0x7f0000000040)={0x44, "df1e971e0b8ef396eeb581a2bd9d2ba55aeacc9859e566fe87ee9da7a227006623"}}) 34.738509232s ago: executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000002850000000f00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='jbd2_handle_stats\x00', r1}, 0x10) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 34.670274302s ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x80, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000007640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/211, 0xd3}}], 0x1, 0x2020, 0x0) 34.247364518s ago: executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x1f, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 34.033927472s ago: executing program 4: r0 = socket(0x2, 0x3, 0x9) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004780)=[{{&(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f00000031c0)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3000000000000000000000000700000001071c15"], 0x30}}], 0x2, 0x0) 33.98173068s ago: executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r4, 0x2, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 33.97868298s ago: executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000400)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3f, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x9, 0x0, @opaque="e7"}}}}}}, 0x0) 33.884136825s ago: executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000000c0), 0x4000000000001a7, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x0, 0x107, 0x0, 0x0, {0x1}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x24}}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x2284, &(0x7f0000000000)) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x41, &(0x7f0000000ac0)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast1}, "03f5b9"}}}}}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 33.872371206s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb8100000008004500005800000000402f"], 0x0) 33.668858248s ago: executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'ipvlan1\x00', &(0x7f0000000000)=@ethtool_gfeatures={0x51}}) 33.037943726s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x8}]}, 0x24}}, 0x0) 32.894250108s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)) 32.873868062s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 32.781762836s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 32.740127012s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x90}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x6}]}}}]}, 0x40}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x14) r2 = syz_open_dev$vcsn(&(0x7f0000000200), 0x1, 0x181) write$nbd(r2, &(0x7f0000000100)={0x67446698, 0x0, 0x0, 0x0, 0x0, "cf218de837f91abb4175bab93c3623359dfe4195c561029a750f337cf13683dfca6b26408944b057c4e99b80b3fdc3e107cfbf86c86e34260fa537d4232972063b"}, 0x51) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000f00)=@dellinkprop={0xa8, 0x6d, 0x2, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x2200, 0x49310}, [@IFLA_MTU={0x8, 0x4, 0x3}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x2405}, @IFLA_MTU={0x8, 0x4, 0x4}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}, @IFLA_PHYS_SWITCH_ID={0x1f, 0x24, "cc36bd26c0efe882d286407d07107df26b267b724cdf30be992074"}, @IFLA_MAP={0x24, 0xe, {0x10000, 0x1000, 0x7fff, 0x81, 0x1, 0xe7}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xffffffff}, @IFLA_IFALIAS={0x14, 0x14, 'ip6_vti0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x87}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) write(r4, &(0x7f0000000100), 0xfffffe5d) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x80400, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000002cf66000000005d0000", @ANYRES32=r8, @ANYBLOB="00000000060000001c0012000b000100627269646765"], 0x3c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x6}]}}}]}, 0x40}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000ac0)={0x428, 0x13, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0xe8, 0x8, "f35a66afa132b4bdc59d22812c44716e8fa47bce0799b2f8940d6c993b4480c65608409d38ba307be6b142e0460b101c08dea9bd317cfddedc6a39be00e62b33fdd6ea21db271ecbf8ea736477e0ad930b731490352e6ad7a473d8cc6203c0be1eebdc65f967538f0d88491d467ce1840fd6a904268b4ade4e03234ae64494e1d610d7027c1c2d2365fb4000beb7f3d2aac33ce0376ecfe23108fd1edd31cf3b47e3e0f49bbc484cc01c9f6d923d42211e713b250e969bfa581c27b82784bea4d88bb6e158e17944b78e2e082493daef51c97bea1ec4bb0058c667b14e0fa896676461cd"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xc6, 0x8, "013be990890893a49fc892c8da6525fdc0985f7fbace620a3f9d6fdacd15cfa8a4a079cb1beb88e93b1c11937d9047ce531142bfc27f0674ac32875f4fd82114733778188b48f360ce2dd0f30317281061bcfccfeff2146383728e5603569969d0c4dfa6de309b0059efb736fb084922fa051356215e3085e71a400f602e00aef026ee66d3c18d0387a79da8b1ba4060715cce416930220235281aae13ab623dabb29077256c61f9b5e2500df94e04a98c41056d4529762c3716a2a8401aa1dcafbe"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xbc, 0x8, "3b4c224b2de939841fcc518a7d0751e8461460b1ba773bac2d45f6a4fd9f2eaf3daaa8b17c2985f44f99ffd6bdf025249ed8e420e525532980c8c62688ae4bf54bff5b1e2e891cbf4a134cef1c17badd1442450df26f0c02a0be03945e66057a499ae4c486e03b9e8a948d99e8fe26510fc8211b8aaf44dffcc33ce21777024644a39c2a7e86e27c965f819b339ea872b0996a9107bde9213089b7145f07f3460ceb4f9e2aa5d5bebfd0ae00dd2f679f4f9aa225868d27b8"}, @NFTA_OBJ_USERDATA={0x7d, 0x8, "063572e4de95e23165ce24ae991dcbab1bce2794631fd82049f6d532765a271f160757d2ff6c6dc972863c6425a91d640e677105e79517137b9b0f94a9af64f8dbce9323e8f2b4fcb97d718bd736cd638efa80e103213ec03c003cf975f0794752a6fe07335c7eb41be39b15d8d6069d4d8d6e7ae3f860097a"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_USERDATA={0xf7, 0x8, "78381663c07ea4d6041ccfbdfff7b93ffe182b8d91a7aa46c301a71c355ebbebf620647a04ed24cdb6c958437a2ceb42083dd2c6112821b99db42c9e8749fb1ec4b26561c5e4536192d04d3740ca4718aa57fb847e5bcbfd282c7ffb74d1a52dc4ef455860b8ff80bf61f87339da47b6683b4f177d54ef712762cea016d1b914870851eca61d1ed84b927d6644acc3b32468e64dbffbdac77a0bc13bf7e69167764d4d6f9b471f07c5f438f2d3595c24006e8e868620ae30ba2fc6a18aceaf5823dcca0f429ad5525eaf902127709951a56a38b1ec49939ca4f82ba3e3384a596e50ab9e3621a209be78135f01e83fcfc21531"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x428}, 0x1, 0x0, 0x0, 0xc5}, 0xc0) r10 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x0, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @loopback}, 0x86dd}}}]}, 0x38}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r12}, 0x80) fcntl$dupfd(0xffffffffffffffff, 0x3, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x3, 0xffffffffffffffff) write(r14, &(0x7f0000000100), 0xfffffe5d) 31.893756743s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0200040000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb0000080003000300000008000500", @ANYRES32=r2], 0x68}}, 0x0) 30.470885903s ago: executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x1f, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 30.313824958s ago: executing program 2: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xb, 0x9, 0x10201, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f00000002c0), &(0x7f00000000c0)=""/157, 0x8}, 0x20) r3 = getpid() openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000900)='cpuset.memory_pressure\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYRES64=r3, @ANYRES16=r2], 0x32600) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f00000002c0), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r1, 0x0, 0x78, 0xab, &(0x7f0000000500)="ca9ffd8fb7f9e5e91fb2d32e042c11faf5db8d878624a2183892a33c82b004486a5b7fc402dd6d6019eed0d456a97aa42b9d0d3f0321073ba5989f6b5dfc872c7b942f1d035d06b9eeca1a78fa3a6fe2a0c3ccb9a486aa6b51aad13fcc84099a24cda133275daaa22172df83892c1439d6ce79d51b5bef91", &(0x7f0000000600)=""/171, 0x8, 0x0, 0x1b, 0xff, &(0x7f0000000440)="4a415fbec93c809b106234dbd31cf56673b197306d0042f4c9dee8", &(0x7f0000000700)="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", 0x1, 0x0, 0x10000}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702500000000fe1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.171281471s ago: executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, @isdn, @hci}) 30.093044723s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x408c5333, &(0x7f0000000180)) 30.023652123s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0x103, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffeffffff1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 2.76586048s ago: executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r0, &(0x7f0000fc4fbe)=""/80, 0x50) unlink(&(0x7f00000001c0)='./control/file0\x00') r1 = openat(r0, &(0x7f0000000280)='./control\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000003480)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000200)={0x71e5b314}) open_tree(r1, &(0x7f0000000380)='./control/file0\x00', 0x800) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000300)={'netpci0\x00'}) 2.717668358s ago: executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r0, &(0x7f0000fc4fbe)=""/80, 0x50) unlink(&(0x7f00000001c0)='./control/file0\x00') r1 = openat(r0, &(0x7f0000000280)='./control\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000003480)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000200)={0x71e5b314}) open_tree(r1, &(0x7f0000000380)='./control/file0\x00', 0x800) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000300)={'netpci0\x00'}) 1.86878339s ago: executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000000c0), 0x4000000000001a7, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x0, 0x107, 0x0, 0x0, {0x1}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x24}}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x2284, &(0x7f0000000000)) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x41, &(0x7f0000000ac0)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast1}, "03f5b9"}}}}}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 0s ago: executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x28, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9dd985d697979eb1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.635104][ T3582] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 128.218628][ T5588] loop1: detected capacity change from 0 to 128 [ 128.307107][ T5590] loop2: detected capacity change from 0 to 128 [ 128.516497][ T5576] loop4: detected capacity change from 0 to 32768 [ 128.533420][ T5576] XFS: attr2 mount option is deprecated. [ 128.541397][ T5576] XFS: ikeep mount option is deprecated. [ 128.563297][ T5576] XFS: noikeep mount option is deprecated. [ 128.625069][ T5576] XFS (loop4): Mounting V5 Filesystem [ 128.697231][ T5581] loop3: detected capacity change from 0 to 32768 [ 128.718867][ T5581] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5581) [ 128.739788][ T5581] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.757928][ T5581] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 128.767704][ T5581] BTRFS info (device loop3): using free space tree [ 128.774033][ T5576] XFS (loop4): Ending clean mount [ 128.791318][ T5576] XFS (loop4): Quotacheck needed: Please wait. [ 128.839458][ T5576] XFS (loop4): Quotacheck: Done. [ 128.851447][ T5626] bond0: (slave bond_slave_1): Releasing backup interface [ 128.869284][ T5626] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 128.940406][ T3568] XFS (loop4): Unmounting Filesystem [ 128.979481][ T5581] BTRFS info (device loop3): enabling ssd optimizations [ 129.104390][ T3577] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 129.231588][ T5646] loop0: detected capacity change from 0 to 128 [ 129.490964][ T5650] loop3: detected capacity change from 0 to 128 [ 129.566776][ T5652] Driver unsupported XDP return value 0 on prog (id 159) dev N/A, expect packet loss! [ 129.834008][ T5636] loop1: detected capacity change from 0 to 32768 [ 129.859391][ T5633] loop2: detected capacity change from 0 to 40427 [ 129.877009][ T5664] loop3: detected capacity change from 0 to 47 [ 129.899526][ T5633] F2FS-fs (loop2): invalid crc value [ 129.915298][ T5664] MINIX-fs: deleted inode referenced: 1 [ 129.922512][ T5636] XFS (loop1): Mounting V5 Filesystem [ 129.941241][ T5633] F2FS-fs (loop2): Found nat_bits in checkpoint [ 130.020730][ T5680] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 130.028662][ T5636] XFS (loop1): Ending clean mount [ 130.070129][ T5633] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 130.131126][ T4317] XFS (loop1): Unmounting Filesystem [ 130.140204][ T5633] F2FS-fs (loop2): Corrupted max_depth of 3: 4294967295 [ 130.246439][ T5689] loop4: detected capacity change from 0 to 128 [ 130.397025][ T5693] __nla_validate_parse: 10 callbacks suppressed [ 130.397044][ T5693] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.447939][ T5693] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.787063][ T5710] loop2: detected capacity change from 0 to 128 [ 130.829045][ T5712] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 130.959918][ T5684] loop3: detected capacity change from 0 to 32768 [ 130.971041][ T5684] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5684) [ 131.014362][ T5684] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.026966][ T5684] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 131.044828][ T5684] BTRFS info (device loop3): using free space tree [ 131.146789][ T5743] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 131.172947][ T5743] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.1'. [ 131.183358][ T5684] BTRFS info (device loop3): enabling ssd optimizations [ 131.297175][ T3577] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.871297][ T5714] loop4: detected capacity change from 0 to 32768 [ 131.941821][ T5714] XFS (loop4): Mounting V5 Filesystem [ 132.060015][ T5714] XFS (loop4): Ending clean mount [ 132.071844][ T5790] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.125367][ T5790] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.221512][ T3568] XFS (loop4): Unmounting Filesystem [ 132.360127][ T5753] loop2: detected capacity change from 0 to 32768 [ 132.398502][ T5753] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5753) [ 132.457193][ T5753] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.489764][ T5753] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 132.522919][ T5753] BTRFS info (device loop2): using free space tree [ 132.595357][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.601736][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.601411][ T5753] BTRFS info (device loop2): enabling ssd optimizations [ 133.644237][ T5836] loop4: detected capacity change from 0 to 128 [ 133.717688][ T5836] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 133.740245][ T3570] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.762489][ T5836] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 134.461167][ T3568] EXT4-fs (loop4): unmounting filesystem. [ 134.887984][ T4977] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 134.962623][ T27] audit: type=1326 audit(1716868424.852:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9599a7cee9 code=0x7ffc0000 [ 135.200707][ T27] audit: type=1326 audit(1716868424.852:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9599a7cee9 code=0x7ffc0000 [ 136.075338][ T27] audit: type=1326 audit(1716868425.062:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9599a7cee9 code=0x7ffc0000 [ 136.099064][ T4977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.124799][ T4977] usb 5-1: config 0 has no interfaces? [ 136.152942][ T4977] usb 5-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 136.191797][ T4977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.263028][ T27] audit: type=1326 audit(1716868425.062:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9599a7cee9 code=0x7ffc0000 [ 136.324322][ T4977] usb 5-1: config 0 descriptor?? [ 136.333801][ T27] audit: type=1326 audit(1716868425.062:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9599a7cee9 code=0x7ffc0000 [ 136.358220][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.367884][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.370967][ T5919] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 136.377377][ T27] audit: type=1326 audit(1716868425.062:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9599a7cee9 code=0x7ffc0000 [ 136.407289][ T5913] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.416997][ T27] audit: type=1326 audit(1716868425.062:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9599a7cee9 code=0x7ffc0000 [ 136.515223][ T27] audit: type=1326 audit(1716868425.062:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9599a7a667 code=0x7ffc0000 [ 136.583170][ T27] audit: type=1326 audit(1716868425.062:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9599a40329 code=0x7ffc0000 [ 136.661556][ T4894] usb 5-1: USB disconnect, device number 8 [ 136.681044][ T27] audit: type=1326 audit(1716868425.072:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5895 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9599a7a667 code=0x7ffc0000 [ 137.225424][ T5926] loop2: detected capacity change from 0 to 32768 [ 137.272406][ T5926] XFS (loop2): Mounting V5 Filesystem [ 137.326827][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.336369][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.350678][ T5957] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.368676][ T5926] XFS (loop2): Ending clean mount [ 137.441464][ T3570] XFS (loop2): Unmounting Filesystem [ 137.465017][ T5961] loop4: detected capacity change from 0 to 764 [ 137.519123][ T5964] x_tables: ip_tables: socket.2 match: invalid size 8 (kernel) != (user) 568 [ 137.557312][ T5961] rock: directory entry would overflow storage [ 137.567412][ T5961] rock: sig=0x4654, size=5, remaining=4 [ 137.576931][ T5964] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.795399][ T5976] x_tables: ip_tables: socket.2 match: invalid size 8 (kernel) != (user) 568 [ 137.818683][ T5976] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.830962][ T5978] x_tables: ip_tables: socket.2 match: invalid size 8 (kernel) != (user) 568 [ 137.855182][ T5978] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.881155][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.894634][ T5984] x_tables: ip_tables: socket.2 match: invalid size 8 (kernel) != (user) 568 [ 137.953954][ T5990] x_tables: ip_tables: socket.2 match: invalid size 8 (kernel) != (user) 568 [ 138.111162][ T6000] x_tables: ip_tables: socket.2 match: invalid size 8 (kernel) != (user) 568 [ 138.257598][ T6009] loop4: detected capacity change from 0 to 256 [ 138.265817][ T6009] exfat: Deprecated parameter 'namecase' [ 138.271599][ T6009] exfat: Deprecated parameter 'utf8' [ 138.279913][ T6009] exfat: Deprecated parameter 'namecase' [ 138.311646][ T6009] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 138.360332][ T6015] x_tables: ip_tables: socket.2 match: invalid size 8 (kernel) != (user) 568 [ 138.407673][ T6018] x_tables: ip_tables: socket.2 match: invalid size 8 (kernel) != (user) 568 [ 138.455158][ T6020] x_tables: ip_tables: socket.2 match: invalid size 8 (kernel) != (user) 568 [ 138.558833][ T6026] x_tables: ip_tables: socket.2 match: invalid size 8 (kernel) != (user) 568 [ 140.215327][ T1097] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.303633][ T1097] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.410292][ T1097] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.504620][ T1097] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.735462][ T3580] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 140.749633][ T3580] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 140.769374][ T3580] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 140.778159][ T3580] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 140.787740][ T3580] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 140.796465][ T3580] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 141.097679][ T6091] chnl_net:caif_netlink_parms(): no params data found [ 141.236479][ T6111] loop2: detected capacity change from 0 to 764 [ 141.251710][ T6111] rock: directory entry would overflow storage [ 141.258385][ T6111] rock: sig=0x4654, size=5, remaining=4 [ 141.323989][ T6091] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.331192][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.365949][ T6091] device bridge_slave_0 entered promiscuous mode [ 141.399835][ T6091] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.410973][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.429874][ T6091] device bridge_slave_1 entered promiscuous mode [ 141.532080][ T6091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.588784][ T6091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.669270][ T6091] team0: Port device team_slave_0 added [ 141.710019][ T6091] team0: Port device team_slave_1 added [ 141.750046][ T6091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.761259][ T6091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.801435][ T6091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.814457][ T6091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.821411][ T6091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.863784][ T6091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.882645][ T1097] device hsr_slave_0 left promiscuous mode [ 141.902648][ T1097] device hsr_slave_1 left promiscuous mode [ 141.913803][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.921408][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.938221][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.946006][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.955934][ T1097] device bridge_slave_1 left promiscuous mode [ 141.962788][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.974811][ T1097] device bridge_slave_0 left promiscuous mode [ 141.981258][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.997809][ T1097] device veth1_macvtap left promiscuous mode [ 142.004158][ T1097] device veth0_macvtap left promiscuous mode [ 142.011801][ T1097] device veth1_vlan left promiscuous mode [ 142.017893][ T1097] device veth0_vlan left promiscuous mode [ 142.380405][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 142.415002][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 142.432609][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.458479][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.530499][ T1097] bond0 (unregistering): Released all slaves [ 142.658897][ T6091] device hsr_slave_0 entered promiscuous mode [ 142.670723][ T6091] device hsr_slave_1 entered promiscuous mode [ 142.747492][ T6157] __nla_validate_parse: 20 callbacks suppressed [ 142.747511][ T6157] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.834133][ T3580] Bluetooth: hci1: command tx timeout [ 143.294308][ T6183] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.391295][ T6187] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.443511][ T6091] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.483793][ T6091] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 143.521193][ T6091] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 143.550227][ T6091] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 143.819569][ T6091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.868981][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.890469][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.914868][ T6213] loop2: detected capacity change from 0 to 512 [ 143.925075][ T6091] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.941785][ T6213] ext4: Unknown parameter 'obj_type' [ 143.972866][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.981570][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.004609][ T5075] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.011741][ T5075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.018426][ T6204] overlayfs: failed to clone upperpath [ 144.038504][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.050665][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.061772][ T5075] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.068930][ T5075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.130992][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.139488][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.163864][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.172631][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.188331][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.197374][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.206679][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.222370][ T6091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.241759][ T6091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.255582][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.272643][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.282979][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.291686][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.306145][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.319753][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.889412][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.899301][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.913044][ T3580] Bluetooth: hci1: command tx timeout [ 144.938488][ T6091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.004668][ T6258] xt_NFQUEUE: number of total queues is 0 [ 145.184565][ T6268] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.751879][ T6293] xt_NFQUEUE: number of total queues is 0 [ 145.833562][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.842522][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.895995][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.906582][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.940551][ T6091] device veth0_vlan entered promiscuous mode [ 145.965715][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.984192][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.992068][ T6301] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 146.029616][ T6091] device veth1_vlan entered promiscuous mode [ 146.106064][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.129699][ T6308] sctp: [Deprecated]: syz-executor.1 (pid 6308) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.129699][ T6308] Use struct sctp_sack_info instead [ 146.143523][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.176450][ T6091] device veth0_macvtap entered promiscuous mode [ 146.209566][ T6091] device veth1_macvtap entered promiscuous mode [ 146.271920][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.294889][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.340405][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.355630][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.378804][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.422865][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.426057][ T6322] xt_NFQUEUE: number of total queues is 0 [ 146.447149][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.461990][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.487617][ T6091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.531869][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.556418][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.571078][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.591576][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.604591][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.636565][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.654572][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.671931][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.683813][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.694426][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.704502][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.721784][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.748438][ T6091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.771846][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.788944][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.801186][ T6091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.815688][ T6091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.827186][ T6091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.847889][ T6091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.985386][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.002801][ T3580] Bluetooth: hci1: command tx timeout [ 147.010528][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.032135][ T6344] sctp: [Deprecated]: syz-executor.2 (pid 6344) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.032135][ T6344] Use struct sctp_sack_info instead [ 147.050462][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.076767][ T5831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.095671][ T5831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.116702][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 147.197921][ T6348] xt_check_match: 8 callbacks suppressed [ 147.197937][ T6348] x_tables: ip_tables: socket.2 match: invalid size 8 (kernel) != (user) 568 [ 147.242531][ T6348] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.293872][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.358453][ T6357] xt_NFQUEUE: number of total queues is 0 [ 147.572172][ T6367] loop2: detected capacity change from 0 to 128 [ 147.801172][ T6374] sctp: [Deprecated]: syz-executor.4 (pid 6374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.801172][ T6374] Use struct sctp_sack_info instead [ 147.838192][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.866857][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.907599][ T6378] overlayfs: failed to clone upperpath [ 147.994620][ T6380] loop4: detected capacity change from 0 to 2048 [ 148.046209][ T6380] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.169069][ T6394] netlink: 'syz-executor.1': attribute type 32 has an invalid length. [ 148.238732][ T27] kauditd_printk_skb: 249 callbacks suppressed [ 148.238747][ T27] audit: type=1326 audit(1716868438.132:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9599a7cee9 code=0x7ffc0000 [ 148.313471][ T27] audit: type=1326 audit(1716868438.162:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9599a7cee9 code=0x7ffc0000 [ 148.386014][ T27] audit: type=1326 audit(1716868438.172:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f9599a7cee9 code=0x7ffc0000 [ 148.502175][ T6407] loop4: detected capacity change from 0 to 2048 [ 148.513388][ T27] audit: type=1326 audit(1716868438.172:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9599a7cee9 code=0x7ffc0000 [ 148.599219][ T27] audit: type=1326 audit(1716868438.172:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9599a7cee9 code=0x7ffc0000 [ 148.665072][ T27] audit: type=1326 audit(1716868438.172:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9599a7cee9 code=0x7ffc0000 [ 148.696054][ T27] audit: type=1326 audit(1716868438.172:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9599a7cee9 code=0x7ffc0000 [ 148.696489][ T6408] overlayfs: failed to clone upperpath [ 148.722741][ T27] audit: type=1326 audit(1716868438.172:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6396 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9599a7cee9 code=0x7ffc0000 [ 148.750638][ T27] audit: type=1800 audit(1716868438.642:522): pid=6346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 148.766338][ T6416] loop2: detected capacity change from 0 to 64 [ 148.955323][ T6422] loop2: detected capacity change from 0 to 128 [ 149.014767][ T6422] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 149.020886][ T6427] loop4: detected capacity change from 0 to 2048 [ 149.043624][ T6422] FAT-fs (loop2): Filesystem has been set read-only [ 149.044644][ T27] audit: type=1326 audit(1716868438.942:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6429 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9599a7cee9 code=0x7ffc0000 [ 149.058341][ T6422] syz-executor.2: attempt to access beyond end of device [ 149.058341][ T6422] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 149.086734][ T6427] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.088364][ T3580] Bluetooth: hci1: command tx timeout [ 149.103236][ T6422] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 149.128414][ T6422] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 149.147021][ T6422] syz-executor.2: attempt to access beyond end of device [ 149.147021][ T6422] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 149.273085][ T6437] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 149.675641][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 149.704974][ T6463] loop4: detected capacity change from 0 to 2048 [ 149.722471][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 149.730966][ T6463] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.300793][ T6498] loop4: detected capacity change from 0 to 2048 [ 150.317674][ T6498] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.201174][ T6494] loop2: detected capacity change from 0 to 32768 [ 151.260040][ T6494] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 151.284235][ T6494] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 151.326682][ T6494] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 151.351240][ T4974] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 151.362851][ T4974] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 151.428617][ T4974] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 65ms [ 151.451748][ T4974] gfs2: fsid=syz:syz.0: jid=0: Done [ 151.458042][ T6494] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 151.887965][ T6578] device macvtap0 entered promiscuous mode [ 151.909296][ T6578] device veth0_macvtap left promiscuous mode [ 151.921980][ T6577] loop4: detected capacity change from 0 to 1024 [ 151.969203][ T6578] device macvtap0 left promiscuous mode [ 152.452274][ T6615] device macvtap0 entered promiscuous mode [ 152.479687][ T6615] device veth0_macvtap left promiscuous mode [ 152.550877][ T6615] device macvtap0 left promiscuous mode [ 153.493566][ T6695] overlayfs: empty lowerdir [ 153.628037][ T6702] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 153.829124][ T27] kauditd_printk_skb: 53 callbacks suppressed [ 153.829138][ T27] audit: type=1800 audit(1716868443.722:577): pid=6717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1948 res=0 errno=0 [ 153.903582][ T27] audit: type=1800 audit(1716868443.762:578): pid=6721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1948 res=0 errno=0 [ 153.906509][ T6722] overlayfs: empty lowerdir [ 153.963366][ T27] audit: type=1800 audit(1716868443.772:579): pid=6717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file2" dev="sda1" ino=1957 res=0 errno=0 [ 153.990864][ T6728] overlayfs: empty lowerdir [ 154.040646][ T27] audit: type=1800 audit(1716868443.772:580): pid=6717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file2" dev="sda1" ino=1957 res=0 errno=0 [ 154.247090][ T6740] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 154.277078][ T6738] [U] ^R [ 154.474071][ T6755] overlayfs: empty lowerdir [ 154.532350][ T27] audit: type=1800 audit(1716868444.422:581): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1948 res=0 errno=0 [ 154.550499][ T6760] overlayfs: empty lowerdir [ 154.600621][ T27] audit: type=1800 audit(1716868444.422:582): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1948 res=0 errno=0 [ 154.664527][ T27] audit: type=1800 audit(1716868444.422:583): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="sda1" ino=1949 res=0 errno=0 [ 154.728287][ T27] audit: type=1800 audit(1716868444.422:584): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="sda1" ino=1949 res=0 errno=0 [ 155.121440][ T6791] overlayfs: empty lowerdir [ 155.151607][ T6793] overlayfs: empty lowerdir [ 155.363147][ T27] audit: type=1800 audit(1716868445.262:585): pid=6804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=1951 res=0 errno=0 [ 155.392258][ T27] audit: type=1800 audit(1716868445.282:586): pid=6804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=1951 res=0 errno=0 [ 155.488023][ T6812] loop2: detected capacity change from 0 to 64 [ 155.569254][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 155.787825][ T3580] Bluetooth: hci1: ISO packet too small [ 155.860640][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 155.958763][ T6840] loop4: detected capacity change from 0 to 1024 [ 156.020599][ T6840] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 156.089613][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.150184][ T6091] EXT4-fs (loop4): unmounting filesystem. [ 156.252520][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 156.390334][ T6868] loop4: detected capacity change from 0 to 512 [ 156.427557][ T6868] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 156.450065][ T6868] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 156.452402][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 156.458478][ T6868] System zones: 0-2, 18-18, 34-35 [ 156.477708][ T6868] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 156.545432][ T6879] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 156.594603][ T6091] EXT4-fs (loop4): unmounting filesystem. [ 156.653161][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.250995][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 157.511523][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 157.529437][ T6935] device macvtap0 entered promiscuous mode [ 157.546169][ T6935] device veth0_macvtap left promiscuous mode [ 157.580038][ T6935] device macvtap0 left promiscuous mode [ 157.836830][ T6956] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 158.747381][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 159.265153][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 159.609692][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 159.609705][ T27] audit: type=1326 audit(1716868449.502:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb21ba7cee9 code=0x0 [ 159.981270][ T7053] loop4: detected capacity change from 0 to 32768 [ 160.008101][ T7053] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7053) [ 160.038193][ T7053] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.060853][ T7053] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 160.098457][ T7053] BTRFS info (device loop4): using free space tree [ 160.326003][ T7053] BTRFS info (device loop4): enabling ssd optimizations [ 160.440754][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.476490][ T6091] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.877232][ T27] audit: type=1326 audit(1716868450.772:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f0e7cee9 code=0x7ffc0000 [ 160.934416][ T27] audit: type=1326 audit(1716868450.772:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77f0e7cee9 code=0x7ffc0000 [ 161.042393][ T27] audit: type=1326 audit(1716868450.772:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f0e7cee9 code=0x7ffc0000 [ 161.129958][ T27] audit: type=1326 audit(1716868450.772:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77f0e7cee9 code=0x7ffc0000 [ 161.199760][ T27] audit: type=1326 audit(1716868450.802:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f0e7cee9 code=0x7ffc0000 [ 161.261618][ T27] audit: type=1326 audit(1716868450.822:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f77f0e7a667 code=0x7ffc0000 [ 161.323873][ T27] audit: type=1326 audit(1716868450.822:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f77f0e40329 code=0x7ffc0000 [ 161.347828][ T27] audit: type=1326 audit(1716868450.822:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f77f0e7a667 code=0x7ffc0000 [ 161.371636][ T27] audit: type=1326 audit(1716868450.822:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7112 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f77f0e40329 code=0x7ffc0000 [ 162.072935][ T7156] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 162.072935][ T7156] z,@qJ#"' [ 162.475196][ T7188] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 162.475196][ T7188] z,@qJ#"' [ 162.552530][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.034288][ T7217] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 163.034288][ T7217] z,@qJ#"' [ 163.170352][ T7178] loop4: detected capacity change from 0 to 32768 [ 163.209456][ T7178] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7178) [ 163.246415][ T7178] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 163.271745][ T7178] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 163.290438][ T7178] BTRFS info (device loop4): using free space tree [ 163.409101][ T7178] BTRFS info (device loop4): enabling ssd optimizations [ 163.604412][ T6091] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 163.699261][ T7259] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 163.699261][ T7259] z,@qJ#"' [ 163.959326][ T7273] loop4: detected capacity change from 0 to 128 [ 164.101992][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.477107][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.501690][ T7299] netlink: 'syz-executor.2': attribute type 18 has an invalid length. [ 164.544768][ T7299] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.553961][ T7299] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.562670][ T7299] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.571499][ T7299] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.641274][ T7299] device vxlan0 entered promiscuous mode [ 164.927590][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.602877][ T4980] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 165.751984][ T7337] 9pnet_fd: Insufficient options for proto=fd [ 165.869689][ T4980] usb 5-1: Using ep0 maxpacket: 32 [ 165.998861][ T4980] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 166.031707][ T4980] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 166.078453][ T4980] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.210045][ T7349] __sock_release: fasync list not empty! [ 166.273242][ T4980] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 166.293961][ T4980] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 166.311556][ T4980] usb 5-1: Product: syz [ 166.327261][ T4980] usb 5-1: Manufacturer: syz [ 166.351443][ T4980] usb 5-1: SerialNumber: syz [ 166.383155][ T7318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 166.407195][ T4980] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input5 [ 166.529532][ T7365] 9pnet_fd: Insufficient options for proto=fd [ 166.685240][ T4980] usb 5-1: USB disconnect, device number 9 [ 166.715686][ T4980] appletouch 5-1:1.0: input: appletouch disconnected [ 166.742066][ T7372] delete_channel: no stack [ 166.772006][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.784194][ T7374] netlink: 'syz-executor.3': attribute type 18 has an invalid length. [ 166.815167][ T7374] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.824208][ T7374] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.833562][ T7374] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.842281][ T7374] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.869103][ T7374] device vxlan0 entered promiscuous mode [ 166.997857][ T7377] __sock_release: fasync list not empty! [ 167.011327][ T7383] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.023921][ T7383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.563259][ T7412] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.864930][ T7425] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.095422][ T7430] Zero length message leads to an empty skb [ 168.304649][ T7436] loop4: detected capacity change from 0 to 2048 [ 168.319331][ T7438] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.459931][ T7444] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.543491][ T7446] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.571301][ T7446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.679309][ T7450] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.715356][ T7450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.832286][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 168.842686][ T7457] netlink: 'syz-executor.2': attribute type 18 has an invalid length. [ 168.886489][ T7458] delete_channel: no stack [ 168.971964][ T7464] 9pnet_fd: Insufficient options for proto=fd [ 169.067789][ T7469] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 169.271647][ T7476] __sock_release: fasync list not empty! [ 169.381348][ T7487] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.401490][ T7487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.528461][ T7494] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.774848][ T7508] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.825554][ T7509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.165558][ T7532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.289360][ T7541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.422150][ T7549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.430368][ T7553] syz-executor.3 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 170.449481][ T7550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.519288][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 170.519304][ T27] audit: type=1326 audit(1716868460.412:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d887cee9 code=0x7ffc0000 [ 170.562351][ T27] audit: type=1326 audit(1716868460.412:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d887cee9 code=0x7ffc0000 [ 170.662910][ T27] audit: type=1326 audit(1716868460.452:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64d887cee9 code=0x7ffc0000 [ 170.741736][ T27] audit: type=1326 audit(1716868460.452:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d887cee9 code=0x7ffc0000 [ 170.804056][ T27] audit: type=1326 audit(1716868460.452:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d887cee9 code=0x7ffc0000 [ 170.830947][ T27] audit: type=1326 audit(1716868460.452:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64d887cee9 code=0x7ffc0000 [ 170.862260][ T27] audit: type=1326 audit(1716868460.452:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d887cee9 code=0x7ffc0000 [ 170.905223][ T27] audit: type=1326 audit(1716868460.452:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f64d887a667 code=0x7ffc0000 [ 170.937129][ T27] audit: type=1326 audit(1716868460.452:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f64d8840329 code=0x7ffc0000 [ 171.031995][ T27] audit: type=1326 audit(1716868460.452:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f64d887a667 code=0x7ffc0000 [ 172.286372][ T7633] loop4: detected capacity change from 0 to 32768 [ 172.317999][ T7633] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7633) [ 172.355617][ T7633] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 172.399674][ T7633] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 172.421249][ T7633] BTRFS info (device loop4): doing ref verification [ 172.452674][ T7633] BTRFS info (device loop4): enabling ssd optimizations [ 172.461613][ T7633] BTRFS info (device loop4): turning on sync discard [ 172.475153][ T7633] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 172.499913][ T7633] BTRFS info (device loop4): use zstd compression, level 3 [ 172.511374][ T7633] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 172.532155][ T7633] BTRFS info (device loop4): trying to use backup root at mount time [ 172.548667][ T7633] BTRFS info (device loop4): using free space tree [ 172.849298][ T6091] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 173.612703][ T7735] loop4: detected capacity change from 0 to 4096 [ 173.662618][ T7735] ntfs: volume version 3.1. [ 174.037759][ T7758] loop4: detected capacity change from 0 to 1024 [ 174.417043][ T7773] loop4: detected capacity change from 0 to 4096 [ 174.481661][ T7773] ntfs: volume version 3.1. [ 174.669388][ T7785] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 174.697592][ T7785] File: /file0/root/syzkaller-testdir559853866/syzkaller.3X8C9P/296/memory.events PID: 7785 Comm: syz-executor.2 [ 175.678311][ T7839] fuse: Unknown parameter '!' [ 175.904266][ T27] kauditd_printk_skb: 114 callbacks suppressed [ 175.904281][ T27] audit: type=1800 audit(1716868465.802:782): pid=7853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1973 res=0 errno=0 [ 176.050825][ T7869] fuse: Unknown parameter '!' [ 176.178472][ T27] audit: type=1804 audit(1716868466.072:783): pid=7876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=1968 res=1 errno=0 [ 176.313509][ T7882] loop4: detected capacity change from 0 to 1024 [ 176.426177][ T7888] fscrypt (sda1, inode 1957): Unsupported encryption modes (contents 8, filenames 4) [ 176.468438][ T7890] __nla_validate_parse: 10 callbacks suppressed [ 176.468456][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.591821][ T7894] loop4: detected capacity change from 0 to 512 [ 176.611164][ T7898] fuse: Unknown parameter '!' [ 176.665277][ T7894] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 256 (level 2) [ 176.712592][ T7894] EXT4-fs (loop4): 2 truncates cleaned up [ 176.727659][ T7894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 176.835868][ T7909] overlayfs: failed to clone upperpath [ 176.936518][ T7915] overlayfs: failed to clone upperpath [ 176.994407][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 177.082252][ T7923] fscrypt (sda1, inode 1940): Unsupported encryption modes (contents 8, filenames 4) [ 177.437826][ T27] audit: type=1800 audit(1716868467.332:784): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 178.156376][ T6091] EXT4-fs (loop4): unmounting filesystem. [ 178.243777][ T7946] overlayfs: failed to clone upperpath [ 178.318731][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 179.789091][ T8004] trusted_key: encrypted_key: keylen parameter is missing [ 179.851351][ T8008] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 181.257232][ T8053] trusted_key: encrypted_key: keylen parameter is missing [ 182.848173][ T27] audit: type=1800 audit(1716868472.742:785): pid=8099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 184.441608][ T8133] loop4: detected capacity change from 0 to 512 [ 184.487129][ T8133] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 256 (level 2) [ 184.541704][ T8133] EXT4-fs (loop4): 2 truncates cleaned up [ 184.569595][ T8133] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 184.944356][ T8107] syz-executor.2 (8107) used greatest stack depth: 16600 bytes left [ 185.349283][ T27] audit: type=1800 audit(1716868475.242:786): pid=8133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 185.461926][ T6091] EXT4-fs (loop4): unmounting filesystem. [ 185.701745][ T27] audit: type=1800 audit(1716868475.592:787): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1964 res=0 errno=0 [ 185.759934][ T27] audit: type=1804 audit(1716868475.592:788): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="file0" dev="sda1" ino=1964 res=1 errno=0 [ 187.592111][ T8212] UBIFS error (pid: 8212): cannot open "uid=ignore,umask=00000000000000000000777,gid=0000000000000000000ubifs", error -22 [ 188.280444][ T8246] UBIFS error (pid: 8246): cannot open "uid=ignore,umask=00000000000000000000777,gid=0000000000000000000ubifs", error -22 [ 189.987789][ T8328] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 190.049828][ T8328] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 190.141968][ T8333] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.157086][ T8333] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.279354][ T27] audit: type=1800 audit(1716868480.172:789): pid=8342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1958 res=0 errno=0 [ 190.341693][ T27] audit: type=1800 audit(1716868480.182:790): pid=8347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 190.541492][ T8360] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.567161][ T8360] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.865923][ T27] audit: type=1800 audit(1716868480.762:791): pid=8373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 191.322443][ T27] audit: type=1800 audit(1716868481.212:792): pid=8393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 191.959350][ T8410] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.983247][ T8410] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 192.002973][ T8414] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 192.031816][ T8414] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 193.380019][ T8483] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 193.380019][ T8483] The task syz-executor.3 (8483) triggered the difference, watch for misbehavior. [ 193.479371][ T8486] overlayfs: missing 'lowerdir' [ 193.580321][ T8489] overlayfs: missing 'lowerdir' [ 193.916472][ T8516] overlayfs: missing 'lowerdir' [ 194.035209][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.041516][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.164935][ T8524] overlayfs: missing 'lowerdir' [ 194.476540][ T8536] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) [ 194.967305][ T8557] overlayfs: missing 'lowerdir' [ 196.904014][ T8600] __nla_validate_parse: 2 callbacks suppressed [ 196.904031][ T8600] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 196.958964][ T8600] unsupported nlmsg_type 40 [ 197.148745][ T8614] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 9 (only 8 groups) [ 197.411885][ T27] audit: type=1326 audit(1716868487.302:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64d887cee9 code=0x0 [ 197.897355][ T27] audit: type=1800 audit(1716868487.792:794): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 198.131233][ T8622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.981770][ T8652] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 202.044766][ T27] audit: type=1326 audit(1716868491.942:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8739 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9599a7cee9 code=0x0 [ 202.097948][ T27] audit: type=1326 audit(1716868491.992:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb21ba7cee9 code=0x0 [ 202.857300][ T8738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.229199][ T8787] overlayfs: failed to clone upperpath [ 204.532928][ T8809] device syzkaller0 entered promiscuous mode [ 204.579726][ T8809] device syzkaller0 left promiscuous mode [ 206.262353][ T8857] device syzkaller0 entered promiscuous mode [ 206.318848][ T8857] device syzkaller0 left promiscuous mode [ 207.984399][ T27] audit: type=1326 audit(1716868497.872:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d887cee9 code=0x7ffc0000 [ 208.195524][ T27] audit: type=1326 audit(1716868497.962:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d887cee9 code=0x7ffc0000 [ 208.237449][ T27] audit: type=1326 audit(1716868497.972:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64d887cee9 code=0x7ffc0000 [ 208.303264][ T27] audit: type=1326 audit(1716868498.172:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d887cee9 code=0x7ffc0000 [ 208.326804][ T27] audit: type=1326 audit(1716868498.172:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d887cee9 code=0x7ffc0000 [ 208.349740][ T27] audit: type=1326 audit(1716868498.172:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64d887cee9 code=0x7ffc0000 [ 208.392857][ T27] audit: type=1326 audit(1716868498.172:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64d887cee9 code=0x7ffc0000 [ 208.440387][ T27] audit: type=1326 audit(1716868498.172:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f64d887a667 code=0x7ffc0000 [ 208.479272][ T8901] device syzkaller0 entered promiscuous mode [ 208.498121][ T27] audit: type=1326 audit(1716868498.182:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f64d8840329 code=0x7ffc0000 [ 208.533952][ T8901] device syzkaller0 left promiscuous mode [ 208.556177][ T27] audit: type=1326 audit(1716868498.182:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f64d887a667 code=0x7ffc0000 [ 208.905893][ T8926] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.864468][ T8939] xt_bpf: check failed: parse error [ 210.027403][ T8951] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 210.690284][ T3582] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.701698][ T3582] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.711437][ T3582] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.724963][ T3582] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.732556][ T3582] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.741984][ T3582] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.768485][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.780146][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.900395][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.957704][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.134267][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.157812][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.261827][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.273209][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.449189][ T8970] chnl_net:caif_netlink_parms(): no params data found [ 211.562682][ T11] tipc: Disabling bearer [ 211.570325][ T11] tipc: Left network mode [ 211.639727][ T8970] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.653177][ T8970] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.662450][ T8970] device bridge_slave_0 entered promiscuous mode [ 211.712447][ T8970] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.735407][ T8970] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.750537][ T8970] device bridge_slave_1 entered promiscuous mode [ 211.763789][ T9012] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.772641][ T9012] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.814804][ T9015] 9pnet_fd: Insufficient options for proto=fd [ 211.841729][ T9015] device bridge_slave_1 left promiscuous mode [ 211.860279][ T9015] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.870797][ T9015] device bridge_slave_0 left promiscuous mode [ 211.877264][ T9015] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.969258][ T8970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.979002][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 212.041706][ T8970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.107198][ T8970] team0: Port device team_slave_0 added [ 212.139463][ T8970] team0: Port device team_slave_1 added [ 212.181518][ T8970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.188656][ T8970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.221771][ T8970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.244584][ T8970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.251633][ T8970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.278316][ T8970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.405732][ T8970] device hsr_slave_0 entered promiscuous mode [ 212.420775][ T8970] device hsr_slave_1 entered promiscuous mode [ 212.433613][ T8970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.441337][ T8970] Cannot create hsr debugfs directory [ 212.531454][ T9044] 9pnet_fd: Insufficient options for proto=fd [ 212.932411][ T3582] Bluetooth: hci2: command tx timeout [ 213.632341][ T11] device hsr_slave_0 left promiscuous mode [ 213.646656][ T11] device hsr_slave_1 left promiscuous mode [ 213.659388][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.669134][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.686020][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.687561][ T9068] ip6t_REJECT: ECHOREPLY is not supported [ 213.697546][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.711911][ T11] device bridge_slave_1 left promiscuous mode [ 213.728791][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.745443][ T11] device bridge_slave_0 left promiscuous mode [ 213.752599][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.776099][ T11] device veth1_macvtap left promiscuous mode [ 213.782227][ T11] device veth1_vlan left promiscuous mode [ 213.797125][ T11] device veth0_vlan left promiscuous mode [ 213.891252][ T9073] 9pnet_fd: Insufficient options for proto=fd [ 214.028522][ T11] team0 (unregistering): Port device team_slave_1 removed [ 214.050422][ T11] team0 (unregistering): Port device team_slave_0 removed [ 214.065748][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.080528][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.180739][ T11] bond0 (unregistering): Released all slaves [ 214.250837][ T9072] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.260853][ T9072] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.291633][ T9073] device bridge_slave_1 left promiscuous mode [ 214.298229][ T9073] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.308159][ T9073] device bridge_slave_0 left promiscuous mode [ 214.314725][ T9073] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.644115][ T9094] 9pnet_fd: Insufficient options for proto=fd [ 214.664528][ T8970] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 214.703105][ T8970] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 214.745495][ T8970] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 214.773264][ T8970] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.973402][ T8970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.992966][ T3582] Bluetooth: hci2: command tx timeout [ 215.032848][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.040718][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.080546][ T8970] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.134751][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.155638][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.187710][ T4975] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.194877][ T4975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.248705][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.269490][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.294154][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.308387][ T9121] ip6t_REJECT: ECHOREPLY is not supported [ 215.315136][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.322227][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.336313][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.348606][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.360746][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.385869][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.427063][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.439115][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.456736][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.483980][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 215.518953][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.552203][ T8970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.597871][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.653033][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 215.666136][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.870968][ T27] kauditd_printk_skb: 95 callbacks suppressed [ 215.870983][ T27] audit: type=1804 audit(1716868505.762:902): pid=9136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="file0" dev="sda1" ino=1956 res=1 errno=0 [ 216.129441][ T27] audit: type=1804 audit(1716868506.022:903): pid=9147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=1948 res=1 errno=0 [ 216.360113][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.368123][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.379571][ T8970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.072913][ T3582] Bluetooth: hci2: command tx timeout [ 217.134385][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.173288][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.231337][ T8970] device veth0_vlan entered promiscuous mode [ 217.249992][ T27] audit: type=1800 audit(1716868507.142:904): pid=9158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1955 res=0 errno=0 [ 217.333316][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.341726][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.393824][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.413562][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.425457][ T8970] device veth1_vlan entered promiscuous mode [ 217.439019][ T3580] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.451029][ T3580] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.459856][ T3580] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.470083][ T3580] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.477740][ T3580] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.486695][ T3580] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.538376][ T27] audit: type=1804 audit(1716868507.432:905): pid=9174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="bus" dev="sda1" ino=1953 res=1 errno=0 [ 217.571848][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.594904][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.633640][ T8970] device veth0_macvtap entered promiscuous mode [ 217.672946][ T8970] device veth1_macvtap entered promiscuous mode [ 217.738235][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.764515][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.787379][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.810516][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.838629][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.862865][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.885381][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.908296][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.944475][ T8970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.967051][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 217.981998][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.004511][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.039461][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.064640][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.091362][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.108394][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.126496][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.144207][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.166990][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.189611][ T8970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.218561][ T8970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.239854][ T8970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.259944][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.275102][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.298031][ T8970] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.321463][ T8970] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.337969][ T8970] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.361127][ T8970] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.633805][ T3676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.650982][ T3676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.695289][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.700581][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.732539][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.763466][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 218.814505][ T9167] chnl_net:caif_netlink_parms(): no params data found [ 218.841228][ T27] audit: type=1804 audit(1716868508.732:906): pid=9202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=1955 res=1 errno=0 [ 218.907494][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.910662][ T9208] loop2: detected capacity change from 0 to 128 [ 219.007542][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.037086][ T9167] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.044777][ T9167] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.053653][ T9167] device bridge_slave_0 entered promiscuous mode [ 219.062438][ T9167] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.069695][ T9167] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.078709][ T9167] device bridge_slave_1 entered promiscuous mode [ 219.097817][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.162924][ T3580] Bluetooth: hci2: command tx timeout [ 219.211697][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.270505][ T9167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.309693][ T9216] loop2: detected capacity change from 0 to 8192 [ 219.310311][ T9167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.321240][ T9216] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 219.347854][ T9216] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 219.357864][ T9216] REISERFS (device loop2): using ordered data mode [ 219.372511][ T9216] reiserfs: using flush barriers [ 219.384464][ T9216] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 219.405773][ T9216] REISERFS (device loop2): checking transaction log (loop2) [ 219.423907][ T9216] REISERFS (device loop2): Using tea hash to sort names [ 219.439513][ T9216] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 219.509794][ T9167] team0: Port device team_slave_0 added [ 219.550257][ T9167] team0: Port device team_slave_1 added [ 219.557453][ T3580] Bluetooth: hci1: command tx timeout [ 219.648351][ T9167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.673407][ T9167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.740327][ T9167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.778382][ T9167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.800311][ T9167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.884251][ T9167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.052108][ T9167] device hsr_slave_0 entered promiscuous mode [ 220.074665][ T9167] device hsr_slave_1 entered promiscuous mode [ 220.089159][ T9167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.131257][ T9167] Cannot create hsr debugfs directory [ 220.885320][ T9230] loop2: detected capacity change from 0 to 32768 [ 220.895037][ T9230] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (9230) [ 220.963924][ T9230] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.996341][ T11] device hsr_slave_0 left promiscuous mode [ 221.002330][ T9230] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 221.012064][ T11] device hsr_slave_1 left promiscuous mode [ 221.019266][ T9230] BTRFS info (device loop2): using free space tree [ 221.034822][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.050279][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.062856][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.072151][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.111296][ T11] device bridge_slave_1 left promiscuous mode [ 221.140677][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.162637][ T11] device bridge_slave_0 left promiscuous mode [ 221.212882][ T9230] BTRFS info (device loop2): enabling ssd optimizations [ 221.221246][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.305116][ T11] device veth1_macvtap left promiscuous mode [ 221.311209][ T11] device veth0_macvtap left promiscuous mode [ 221.342349][ T8970] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 221.363012][ T11] device veth1_vlan left promiscuous mode [ 221.379454][ T11] device veth0_vlan left promiscuous mode [ 221.633261][ T3580] Bluetooth: hci1: command tx timeout [ 221.669313][ T27] audit: type=1804 audit(1716868511.562:907): pid=9272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=1953 res=1 errno=0 [ 222.046941][ T11] team0 (unregistering): Port device team_slave_1 removed [ 222.070429][ T11] team0 (unregistering): Port device team_slave_0 removed [ 222.085667][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.098933][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.161234][ T11] bond0 (unregistering): Released all slaves [ 222.242491][ T9281] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 222.390550][ T9167] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.408827][ T9167] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.437941][ T27] audit: type=1804 audit(1716868512.332:908): pid=9291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="file0" dev="sda1" ino=1960 res=1 errno=0 [ 222.472597][ T9167] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.504001][ T9167] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.722914][ T9167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.763962][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.774054][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.800335][ T9167] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.828204][ T9297] loop2: detected capacity change from 0 to 8192 [ 222.845944][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.856596][ T9297] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 222.863904][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.889827][ T9297] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 222.905226][ T9297] REISERFS (device loop2): using ordered data mode [ 222.928330][ T9297] reiserfs: using flush barriers [ 222.944700][ T4977] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.951830][ T4977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.964620][ T9297] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 223.004468][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.038910][ T9305] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 223.083217][ T9297] REISERFS (device loop2): checking transaction log (loop2) [ 223.235908][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.256355][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.284813][ T9297] REISERFS (device loop2): Using tea hash to sort names [ 223.306403][ T9297] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 223.306661][ T4979] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.320390][ T4979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.346503][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.369754][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.371872][ T9297] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 223.396877][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.427505][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.494902][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.524387][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.549783][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.579161][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.605808][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.638683][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.664775][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.691778][ T9167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.723207][ T3580] Bluetooth: hci1: command tx timeout [ 223.954066][ T9321] device syzkaller0 entered promiscuous mode [ 224.379057][ T9346] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 224.631919][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.651218][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.685378][ T9167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.732539][ T9354] loop0: detected capacity change from 0 to 7 [ 224.809010][ T9354] Dev loop0: unable to read RDB block 7 [ 224.840788][ T9354] loop0: unable to read partition table [ 224.879267][ T9354] loop0: partition table beyond EOD, truncated [ 224.912630][ T9354] loop_reread_partitions: partition scan of loop0 (被xڬݡ [ 224.912630][ T9354] ) failed (rc=-5) [ 225.407003][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.422650][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.483798][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.501014][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.535503][ T9167] device veth0_vlan entered promiscuous mode [ 225.554048][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.561969][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.596728][ T9167] device veth1_vlan entered promiscuous mode [ 225.694497][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 225.709652][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 225.754667][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.767807][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.792966][ T3580] Bluetooth: hci1: command tx timeout [ 225.800062][ T9167] device veth0_macvtap entered promiscuous mode [ 225.823669][ T9167] device veth1_macvtap entered promiscuous mode [ 225.914463][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.950285][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.972930][ T4977] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 225.998747][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.024772][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.038478][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.049142][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.068693][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.086825][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.099101][ T9167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.112877][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.121002][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 226.157735][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.188230][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.221128][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.252254][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.280427][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.306729][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.320856][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.337816][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.350277][ T4977] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 226.365507][ T4977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.377684][ T9167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.395985][ T9167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.411093][ T9167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.429299][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.440987][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 226.460126][ T9167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.469644][ T4977] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 226.485488][ T4977] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 226.493739][ T9167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.502515][ T4977] usb 3-1: Manufacturer: syz [ 226.507356][ T9167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.518256][ T4977] usb 3-1: config 0 descriptor?? [ 226.526714][ T9167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.681314][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.700213][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.734865][ T4977] rc_core: IR keymap rc-hauppauge not found [ 226.740795][ T4977] Registered IR keymap rc-empty [ 226.751536][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 226.768600][ T4977] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 226.769602][ T7990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.781888][ T4977] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 226.830639][ T7990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.843826][ T9421] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 226.854049][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 227.148684][ T27] audit: type=1326 audit(1716868517.042:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5c67cee9 code=0x7ffc0000 [ 227.200291][ T27] audit: type=1326 audit(1716868517.042:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5c67cee9 code=0x7ffc0000 [ 227.228802][ T27] audit: type=1326 audit(1716868517.042:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f5c67cee9 code=0x7ffc0000 [ 227.263985][ T4977] usb 3-1: USB disconnect, device number 7 [ 227.281516][ T27] audit: type=1326 audit(1716868517.042:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5c67cee9 code=0x7ffc0000 [ 227.344453][ T27] audit: type=1326 audit(1716868517.042:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5c67cee9 code=0x7ffc0000 [ 227.383003][ T27] audit: type=1326 audit(1716868517.042:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f5c67cee9 code=0x7ffc0000 [ 227.407331][ T27] audit: type=1326 audit(1716868517.042:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5c67cee9 code=0x7ffc0000 [ 227.449986][ T9457] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 227.467307][ T27] audit: type=1326 audit(1716868517.042:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5c67cee9 code=0x7ffc0000 [ 227.499290][ T27] audit: type=1326 audit(1716868517.042:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f3f5c67cee9 code=0x7ffc0000 [ 227.534296][ T27] audit: type=1326 audit(1716868517.042:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5c67cee9 code=0x7ffc0000 [ 228.193064][ T4894] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 228.406264][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.432844][ T9500] loop4: detected capacity change from 0 to 256 [ 228.438339][ T9499] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.468343][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.485575][ T9500] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 228.493054][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.643196][ T4894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.660512][ T4894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.670668][ T4894] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 228.685666][ T4894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.715524][ T4894] usb 3-1: config 0 descriptor?? [ 228.936998][ T9524] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 229.204791][ T4894] itetech 0003:06CB:73F5.0009: unknown main item tag 0x0 [ 229.219934][ T4894] itetech 0003:06CB:73F5.0009: hidraw0: USB HID v0.00 Device [HID 06cb:73f5] on usb-dummy_hcd.2-1/input0 [ 229.274961][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.284630][ T9532] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.294059][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.303880][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.372098][ T9536] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 229.406041][ T4894] usb 3-1: USB disconnect, device number 8 [ 230.291791][ T9547] loop4: detected capacity change from 0 to 32768 [ 230.319607][ T9547] gfs2: fsid=([{{|Zp"t'I Jv$Z: Trying to join cluster "lock_nolock", "([{{|Zp"t'I Jv$Z" [ 230.348564][ T9547] gfs2: fsid=([{{|Zp"t'I Jv$Z: Now mounting FS (format 0)... [ 230.359103][ T9547] gfs2: not a GFS2 filesystem [ 230.364034][ T9547] gfs2: fsid=([{{|Zp"t'I Jv$Z: can't read superblock [ 230.375397][ T9547] gfs2: fsid=([{{|Zp"t'I Jv$Z: can't read superblock: -22 [ 230.654817][ T9593] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 231.248108][ T9607] loop2: detected capacity change from 0 to 32768 [ 231.386043][ T9607] XFS (loop2): Mounting V5 Filesystem [ 231.411936][ T9607] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x40. [ 231.435468][ T9607] XFS (loop2): Starting recovery (logdev: internal) [ 231.467903][ T9607] XFS (loop2): Ending recovery (logdev: internal) [ 231.651360][ T8970] XFS (loop2): Unmounting Filesystem [ 231.984062][ T9652] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 232.205963][ T9665] loop2: detected capacity change from 0 to 1024 [ 232.231840][ T9665] hfsplus: unable to parse mount options [ 232.515890][ T9676] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 232.644810][ T27] kauditd_printk_skb: 238 callbacks suppressed [ 232.644824][ T27] audit: type=1800 audit(1716868522.542:1157): pid=9680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1971 res=0 errno=0 [ 233.162216][ T9687] loop4: detected capacity change from 0 to 256 [ 233.576108][ T9699] loop4: detected capacity change from 0 to 1024 [ 233.617614][ T9703] tmpfs: Bad value for 'mpol' [ 233.750207][ T11] hfsplus: b-tree write err: -5, ino 4 [ 233.816533][ T9711] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 233.837715][ T27] audit: type=1800 audit(1716868523.732:1158): pid=9685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 233.971864][ T27] audit: type=1800 audit(1716868523.862:1159): pid=9721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=1951 res=0 errno=0 [ 234.051126][ T9727] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 234.337325][ T9735] x_tables: duplicate entry at hook 2 [ 235.102974][ T4893] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 235.356563][ T9761] tmpfs: Bad value for 'mpol' [ 235.362827][ T4893] usb 5-1: Using ep0 maxpacket: 8 [ 235.489318][ T4893] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 235.498524][ T4893] usb 5-1: config 0 has no interface number 0 [ 235.510784][ T4893] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.522109][ T4893] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 235.537290][ T4893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.548583][ T4893] usb 5-1: config 0 descriptor?? [ 235.606031][ T4893] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 235.826503][ T4894] usb 5-1: USB disconnect, device number 10 [ 235.838396][ T4894] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 236.072582][ T9767] loop2: detected capacity change from 0 to 32768 [ 236.529196][ T9792] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 237.355435][ T27] audit: type=1804 audit(1716868527.252:1160): pid=9815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="bus" dev="sda1" ino=1972 res=1 errno=0 [ 237.379697][ T9815] Invalid ELF header len 8 [ 237.412550][ T9794] loop4: detected capacity change from 0 to 32768 [ 237.412880][ T27] audit: type=1800 audit(1716868527.282:1161): pid=9815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 237.477661][ T9808] loop2: detected capacity change from 0 to 32768 [ 237.507890][ T9794] XFS (loop4): Mounting V5 Filesystem [ 237.540077][ T9794] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x40. [ 237.562371][ T9808] XFS (loop2): Mounting V5 Filesystem [ 237.586108][ T9794] XFS (loop4): Starting recovery (logdev: internal) [ 237.620467][ T9794] XFS (loop4): Ending recovery (logdev: internal) [ 237.641269][ T9808] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x40. [ 237.676898][ T9808] XFS (loop2): Starting recovery (logdev: internal) [ 237.701006][ T9808] XFS (loop2): Ending recovery (logdev: internal) [ 237.766128][ T9840] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 237.778083][ T9167] XFS (loop4): Unmounting Filesystem [ 237.822406][ T9842] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 237.841882][ T9842] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 237.856885][ T8970] XFS (loop2): Unmounting Filesystem [ 237.861925][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 238.407262][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.529654][ T9867] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 238.860517][ T9853] loop2: detected capacity change from 0 to 32768 [ 238.870004][ T9853] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (9853) [ 238.892117][ T9853] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 238.902531][ T9853] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 238.917672][ T9853] BTRFS info (device loop2): setting nodatacow, compression disabled [ 238.929112][ T9853] BTRFS info (device loop2): turning on flush-on-commit [ 238.949350][ T9853] BTRFS info (device loop2): enabling auto defrag [ 238.972535][ T9853] BTRFS info (device loop2): max_inline at 0 [ 238.985240][ T9853] BTRFS info (device loop2): using free space tree [ 238.990073][ T9859] loop4: detected capacity change from 0 to 32768 [ 239.027773][ T9883] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 239.041997][ T9883] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 239.054459][ T9883] netlink: 650 bytes leftover after parsing attributes in process `syz-executor.1'. [ 239.161888][ T9853] BTRFS info (device loop2): enabling ssd optimizations [ 239.285178][ T8970] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 239.589908][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 239.657784][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 239.841760][ T9919] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 239.869924][ T9919] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 239.897201][ T9919] netlink: 650 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.980988][ T9931] loop2: detected capacity change from 0 to 32768 [ 240.990095][ T9942] Error parsing options; rc = [-22] [ 241.338461][ T27] audit: type=1804 audit(1716868531.232:1162): pid=9952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="file0" dev="sda1" ino=1942 res=1 errno=0 [ 241.413375][ T27] audit: type=1804 audit(1716868531.312:1163): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="file0" dev="sda1" ino=1942 res=1 errno=0 [ 241.546877][ T27] audit: type=1800 audit(1716868531.442:1164): pid=9963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1973 res=0 errno=0 [ 241.651949][ T9970] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 241.677551][ T9971] loop4: detected capacity change from 0 to 2048 [ 241.698110][ T9971] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 241.714337][ T9971] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.783482][ T9974] overlayfs: missing 'lowerdir' [ 241.804369][ T9974] fuse: blksize only supported for fuseblk [ 241.826196][ T9974] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 241.953873][ T9976] overlayfs: missing 'lowerdir' [ 241.981224][ T27] audit: type=1804 audit(1716868531.872:1165): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="file0" dev="sda1" ino=1969 res=1 errno=0 [ 242.004214][ T9976] fuse: blksize only supported for fuseblk [ 242.018288][ T9958] loop2: detected capacity change from 0 to 32768 [ 242.029012][ T9976] input: syz1 as /devices/virtual/input/input7 [ 242.039247][ T9958] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (9958) [ 242.060458][ T9976] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 242.072080][ T9958] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.086909][ T9958] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 242.107774][ T9958] BTRFS info (device loop2): setting nodatacow, compression disabled [ 242.120691][ T9958] BTRFS info (device loop2): turning on flush-on-commit [ 242.135703][ T9958] BTRFS info (device loop2): enabling auto defrag [ 242.150013][ T9958] BTRFS info (device loop2): max_inline at 0 [ 242.164795][ T9958] BTRFS info (device loop2): using free space tree [ 242.177528][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 242.300467][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 242.311098][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 242.377507][ T9958] BTRFS info (device loop2): enabling ssd optimizations [ 242.403977][ T27] audit: type=1800 audit(1716868532.302:1166): pid=10012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1960 res=0 errno=0 [ 242.484051][ T8970] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.621218][T10020] overlayfs: missing 'lowerdir' [ 242.711223][T10020] fuse: blksize only supported for fuseblk [ 242.753409][T10020] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.875932][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 243.611980][T10042] loop4: detected capacity change from 0 to 32768 [ 243.621860][T10042] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (10042) [ 243.644265][T10042] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 243.665495][T10042] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 243.679502][T10042] BTRFS info (device loop4): setting nodatacow, compression disabled [ 243.688971][T10042] BTRFS info (device loop4): turning on flush-on-commit [ 243.705346][T10042] BTRFS info (device loop4): enabling auto defrag [ 243.722095][T10042] BTRFS info (device loop4): max_inline at 0 [ 243.739145][T10042] BTRFS info (device loop4): using free space tree [ 243.907639][T10042] BTRFS info (device loop4): enabling ssd optimizations [ 244.003925][T10078] overlayfs: missing 'lowerdir' [ 244.048551][T10078] fuse: blksize only supported for fuseblk [ 244.079158][T10078] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 244.108535][ T9167] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 244.191383][T10084] loop2: detected capacity change from 0 to 2048 [ 244.259688][T10084] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 244.302332][T10084] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.182830][T10127] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 247.468922][T10141] overlayfs: missing 'lowerdir' [ 247.504124][T10141] fuse: blksize only supported for fuseblk [ 247.524281][T10141] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.852210][T10159] loop4: detected capacity change from 0 to 2048 [ 247.903453][ T3582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 247.914169][ T3582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 247.924092][ T3571] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 247.933163][ T3582] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 247.940743][ T3582] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 247.948256][ T3571] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.012568][T10164] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.088136][ T7990] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.116898][ T7990] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.287821][ T7990] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.303480][ T7990] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.383867][ T7990] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.410552][T10178] i2c i2c-0: Invalid block write size 68 [ 248.412305][ T7990] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.515033][ T7990] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.528104][ T7990] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.717913][T10162] chnl_net:caif_netlink_parms(): no params data found [ 248.834974][T10200] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 248.897828][T10202] sock: sock_timestamping_bind_phc: sock not bind to device [ 248.906424][T10162] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.913795][T10162] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.921797][T10162] device bridge_slave_0 entered promiscuous mode [ 248.930990][T10162] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.938508][T10162] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.946594][T10162] device bridge_slave_1 entered promiscuous mode [ 249.026956][T10162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.072000][T10162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.143731][T10205] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 249.273215][T10211] device batadv0 entered promiscuous mode [ 249.283308][T10211] device netdevsim0 entered promiscuous mode [ 249.290478][T10215] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 249.304960][T10219] loop4: detected capacity change from 0 to 2048 [ 249.341523][T10221] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 249.375999][T10216] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 249.405870][T10162] team0: Port device team_slave_0 added [ 249.432354][T10162] team0: Port device team_slave_1 added [ 249.528225][T10162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.540024][T10162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.566533][ T4979] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 249.588829][T10162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.602637][T10228] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 249.642538][T10162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.663533][T10162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.756901][T10162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.784393][T10239] mmap: syz-executor.4 (10239) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 249.857985][T10162] device hsr_slave_0 entered promiscuous mode [ 249.873535][T10162] device hsr_slave_1 entered promiscuous mode [ 250.033226][ T3582] Bluetooth: hci4: command tx timeout [ 250.093113][ T4979] usb 3-1: New USB device found, idVendor=0424, idProduct=9e01, bcdDevice=da.85 [ 250.111488][ T4979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.140151][ T4979] usb 3-1: Product: syz [ 250.154294][ T4979] usb 3-1: Manufacturer: syz [ 250.167880][ T4979] usb 3-1: SerialNumber: syz [ 250.179509][ T4979] usb 3-1: config 0 descriptor?? [ 250.234072][ T4979] smsc95xx v2.0.0 [ 250.237760][ T4979] smsc95xx 3-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 250.259168][ T4979] smsc95xx: probe of 3-1:0.0 failed with error -22 [ 250.467440][ T7990] device hsr_slave_0 left promiscuous mode [ 250.476298][ T7990] device hsr_slave_1 left promiscuous mode [ 250.495468][ T7990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.510303][ T7990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.543720][ T7990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.551167][ T7990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.580775][ T7990] device bridge_slave_1 left promiscuous mode [ 250.607469][ T7990] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.635444][ T7990] device bridge_slave_0 left promiscuous mode [ 250.639546][ T27] audit: type=1800 audit(1716868540.532:1167): pid=10256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 250.641658][ T7990] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.668034][ T4228] usb 3-1: USB disconnect, device number 9 [ 250.715027][ T7990] device veth1_macvtap left promiscuous mode [ 250.721159][ T7990] device veth1_vlan left promiscuous mode [ 250.732265][ T27] audit: type=1800 audit(1716868540.582:1168): pid=10256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 250.755629][ T7990] device veth0_vlan left promiscuous mode [ 250.811837][T10259] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 251.288973][T10280] i2c i2c-0: Invalid block write size 68 [ 251.328289][ T7990] team0 (unregistering): Port device team_slave_1 removed [ 251.368597][ T7990] team0 (unregistering): Port device team_slave_0 removed [ 251.401708][ T7990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.429837][ T7990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.559907][ T7990] bond0 (unregistering): Released all slaves [ 251.632030][T10293] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 251.887726][T10162] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 252.013760][T10162] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 252.034402][T10162] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 252.044930][T10162] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 252.126991][ T3582] Bluetooth: hci4: command tx timeout [ 252.895624][T10162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.936711][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.949316][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.976151][T10162] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.193189][ T3582] Bluetooth: hci4: command tx timeout [ 255.474608][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.480933][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.282918][ T3582] Bluetooth: hci4: command tx timeout [ 283.241936][ T3580] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 283.251449][ T3580] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 283.265036][ T3580] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 283.278447][ T3580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 283.292898][ T3580] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 283.300147][ T3580] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.365336][ T3582] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 283.375355][ T3582] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 283.386190][ T3582] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 283.394088][ T3582] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 283.401551][ T3582] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 283.409016][ T3582] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 284.049036][ T3582] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 284.059337][ T3582] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 284.067841][ T3582] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 284.076318][ T3582] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 284.083892][ T3582] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 284.091083][ T3582] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 285.392904][ T3580] Bluetooth: hci5: command tx timeout [ 285.472864][ T3580] Bluetooth: hci6: command tx timeout [ 285.903467][ T3571] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 285.916264][ T3571] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 285.929016][ T3571] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 285.937376][ T3571] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 285.951427][ T3571] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 285.958744][ T3571] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 286.113000][ T3580] Bluetooth: hci7: command tx timeout [ 287.474751][ T3580] Bluetooth: hci5: command tx timeout [ 287.552889][ T3580] Bluetooth: hci6: command tx timeout [ 288.032858][ T3580] Bluetooth: hci8: command tx timeout [ 288.192981][ T3580] Bluetooth: hci7: command tx timeout [ 289.562805][ T3580] Bluetooth: hci5: command tx timeout [ 289.642807][ T3580] Bluetooth: hci6: command tx timeout [ 290.112785][ T3580] Bluetooth: hci8: command tx timeout [ 290.272992][ T3580] Bluetooth: hci7: command tx timeout [ 291.632899][ T3580] Bluetooth: hci5: command tx timeout [ 291.714119][ T3582] Bluetooth: hci6: command tx timeout [ 292.192843][ T3580] Bluetooth: hci8: command tx timeout [ 292.352890][ T3580] Bluetooth: hci7: command tx timeout [ 294.272864][ T3582] Bluetooth: hci8: command tx timeout [ 312.772608][ T3582] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 312.787343][ T3582] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 312.797165][ T3582] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 312.822900][ T3582] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 312.830346][ T3582] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 312.837763][ T3582] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 314.912812][ T3580] Bluetooth: hci9: command tx timeout [ 316.925458][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.931769][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.992796][ T3580] Bluetooth: hci9: command tx timeout [ 319.072807][ T3580] Bluetooth: hci9: command tx timeout [ 321.154631][ T3580] Bluetooth: hci9: command tx timeout [ 334.354335][ T3580] Bluetooth: hci2: command 0x0406 tx timeout [ 344.593027][ T3582] Bluetooth: hci1: command 0x0406 tx timeout [ 348.330576][ T3582] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 348.341507][ T3582] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 348.349755][ T3582] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 348.362962][ T3582] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 348.370553][ T3582] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 348.377966][ T3582] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 348.451191][ T3580] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 348.461661][ T3580] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 348.469864][ T3580] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 348.479411][ T3580] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 348.487779][ T3580] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 348.495224][ T3580] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 349.073268][ T3582] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 349.082870][ T3582] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 349.090856][ T3582] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 349.098707][ T3582] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 349.107490][ T3582] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 349.117382][ T3582] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 350.432877][ T3580] Bluetooth: hci10: command tx timeout [ 350.514761][ T3580] Bluetooth: hci11: command tx timeout [ 350.978177][ T3571] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 350.987557][ T3571] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 350.996755][ T3571] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 351.005205][ T3571] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 351.014007][ T3571] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 351.021357][ T3571] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 351.152824][ T3571] Bluetooth: hci12: command tx timeout [ 352.512851][ T3571] Bluetooth: hci10: command tx timeout [ 352.600536][ T3571] Bluetooth: hci11: command tx timeout [ 353.072961][ T3571] Bluetooth: hci13: command tx timeout [ 353.232786][ T3571] Bluetooth: hci12: command tx timeout [ 354.592844][ T3571] Bluetooth: hci10: command tx timeout [ 354.682778][ T3571] Bluetooth: hci11: command tx timeout [ 355.152870][ T3571] Bluetooth: hci13: command tx timeout [ 355.312876][ T3571] Bluetooth: hci12: command tx timeout [ 356.672785][ T3571] Bluetooth: hci10: command tx timeout [ 356.760801][ T3580] Bluetooth: hci11: command tx timeout [ 357.242828][ T3571] Bluetooth: hci13: command tx timeout [ 357.402767][ T3571] Bluetooth: hci12: command tx timeout [ 359.314836][ T3571] Bluetooth: hci13: command tx timeout [ 370.192835][ T3571] Bluetooth: hci4: command 0x0406 tx timeout [ 377.899991][ T3580] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 377.910925][ T3580] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 377.919159][ T3580] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 377.930074][ T3580] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 377.937833][ T3580] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 377.945191][ T3580] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 378.355142][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.361445][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.032972][ T3571] Bluetooth: hci14: command tx timeout [ 382.112823][ T3571] Bluetooth: hci14: command tx timeout [ 384.192736][ T3571] Bluetooth: hci14: command tx timeout [ 386.274073][ T3571] Bluetooth: hci14: command tx timeout [ 400.112849][ T28] INFO: task kworker/1:6:4222 blocked for more than 143 seconds. [ 400.121062][ T28] Not tainted 6.1.92-syzkaller #0 [ 400.127196][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.136040][ T28] task:kworker/1:6 state:D stack:20352 pid:4222 ppid:2 flags:0x00004000 [ 400.150907][ T28] Workqueue: events linkwatch_event [ 400.157553][ T28] Call Trace: 2024/05/28 03:58:10 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 400.160856][ T28] [ 400.192567][ T28] __schedule+0x142d/0x4550 [ 400.197212][ T28] ? preempt_schedule_common+0xa6/0xd0 [ 400.208683][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 400.213989][ T28] ? __sched_text_start+0x8/0x8 [ 400.220124][ T28] schedule+0xbf/0x180 [ 400.229560][ T28] schedule_preempt_disabled+0xf/0x20 [ 400.235032][ T28] __mutex_lock+0x6b9/0xd80 [ 400.239545][ T28] ? __mutex_lock+0x53c/0xd80 [ 400.249585][ T28] ? linkwatch_event+0xa/0x50 [ 400.254471][ T28] ? mutex_lock_nested+0x10/0x10 [ 400.259424][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 400.282721][ T28] ? process_one_work+0x7a9/0x11d0 [ 400.287871][ T28] linkwatch_event+0xa/0x50 [ 400.292385][ T28] process_one_work+0x8a9/0x11d0 [ 400.322760][ T28] ? worker_detach_from_pool+0x260/0x260 [ 400.328455][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 400.342678][ T28] ? kthread_data+0x4e/0xc0 [ 400.347215][ T28] ? wq_worker_running+0x97/0x190 [ 400.352264][ T28] worker_thread+0xa47/0x1200 [ 400.372721][ T28] kthread+0x28d/0x320 [ 400.376836][ T28] ? worker_clr_flags+0x190/0x190 [ 400.381875][ T28] ? kthread_blkcg+0xd0/0xd0 [ 400.404574][ T28] ret_from_fork+0x1f/0x30 [ 400.409046][ T28] [ 400.412101][ T28] INFO: task kworker/0:14:4979 blocked for more than 143 seconds. [ 400.450687][ T28] Not tainted 6.1.92-syzkaller #0 [ 400.460868][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.492699][ T28] task:kworker/0:14 state:D stack:22648 pid:4979 ppid:2 flags:0x00004000 [ 400.501962][ T28] Workqueue: ipv6_addrconf addrconf_dad_work [ 400.524662][ T28] Call Trace: [ 400.528401][ T28] [ 400.542684][ T28] __schedule+0x142d/0x4550 [ 400.547225][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 400.552466][ T28] ? __sched_text_start+0x8/0x8 [ 400.572715][ T28] ? print_irqtrace_events+0x210/0x210 [ 400.578224][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 400.583490][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 400.588699][ T28] ? lockdep_hardirqs_on+0x94/0x130 [