last executing test programs: 4m7.410420246s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000029c0)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x5e, 0x33, @probe_response={{{}, {}, @device_a, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @void, @val, @val={0x3, 0x1}, @void, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}}}]}, 0x80}}, 0x0) 4m3.632026163s ago: executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x7c, &(0x7f0000000100)={r3}, &(0x7f0000002380)=0x18) 3m38.33712492s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000029c0)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x5e, 0x33, @probe_response={{{}, {}, @device_a, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @void, @val, @val={0x3, 0x1}, @void, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}}}]}, 0x80}}, 0x0) 3m33.37319657s ago: executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x7c, &(0x7f0000000100)={r3}, &(0x7f0000002380)=0x18) 2m57.41197319s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000029c0)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x5e, 0x33, @probe_response={{{}, {}, @device_a, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @void, @val, @val={0x3, 0x1}, @void, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}}}]}, 0x80}}, 0x0) 2m47.284840614s ago: executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x7c, &(0x7f0000000100)={r3}, &(0x7f0000002380)=0x18) 2m21.62504443s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000029c0)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x5e, 0x33, @probe_response={{{}, {}, @device_a, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @void, @val, @val={0x3, 0x1}, @void, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}}}]}, 0x80}}, 0x0) 2m17.528078351s ago: executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x7c, &(0x7f0000000100)={r3}, &(0x7f0000002380)=0x18) 1m40.990583509s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000029c0)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x5e, 0x33, @probe_response={{{}, {}, @device_a, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @void, @val, @val={0x3, 0x1}, @void, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}}}]}, 0x80}}, 0x0) 1m31.965100821s ago: executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x7c, &(0x7f0000000100)={r3}, &(0x7f0000002380)=0x18) 1m5.287900231s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000029c0)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x5e, 0x33, @probe_response={{{}, {}, @device_a, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @void, @val, @val={0x3, 0x1}, @void, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}}}]}, 0x80}}, 0x0) 59.074224231s ago: executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x7c, &(0x7f0000000100)={r3}, &(0x7f0000002380)=0x18) 36.791059054s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendfile(r1, r1, &(0x7f0000000040)=0x3, 0x8000) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000e00000008000300", @ANYRES32=r3], 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) truncate(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$nl_route_sched(r6, &(0x7f0000004e00)={0x0, 0x0, &(0x7f0000003680)={&(0x7f0000000940)=@getqdisc={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xd}}}, 0x24}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @dev}}}}) 35.563282265s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000040000a8c000000060a0904000000000000000002000000600004805c0001800b000100736f636b657400004c000280080003000000007c080002400000000f080003000000003008000140000000000800030000000064080003000000001b0800030000000032080001400000000308000240000000140900010073797a30000000000900020073797a320000000014000000110001"], 0xb4}}, 0x0) 35.384617554s ago: executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) 35.341012506s ago: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@migrate={0x50, 0x11, [{@in6=@loopback, @in=@broadcast, @in=@rand_addr=0x64010101, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa0}}, 0x0) 35.255763844s ago: executing program 4: r0 = socket(0x1, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000cc0)=0x1, 0x4) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001f00)=""/169, 0x40000}], 0x1}, 0x0) sendmmsg$unix(r0, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000300)="d6", 0x33fe0}], 0x1}}], 0x1, 0x0) 35.153774565s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001200010e"], 0x20}}, 0x0) recvfrom(r0, 0x0, 0xf00, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 35.125164803s ago: executing program 2: syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000700)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC], 0x1, 0x5b41, &(0x7f0000011200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r0, 0xde34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x13, r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 35.082901571s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$join(0x1, &(0x7f00000003c0)={'syz', 0x1}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200020000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 34.677200294s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x9, 'vlan1\x00'}) io_uring_setup(0xfc2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0xa00) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x6da24b7ebfdfaf83}, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000009ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10065, 0x0) 33.810092098s ago: executing program 4: socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 32.942920386s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendfile(r1, r1, &(0x7f0000000040)=0x3, 0x8000) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000e00000008000300", @ANYRES32=r3], 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) truncate(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$nl_route_sched(r6, &(0x7f0000004e00)={0x0, 0x0, &(0x7f0000003680)={&(0x7f0000000940)=@getqdisc={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xd}}}, 0x24}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @dev}}}}) 31.982994837s ago: executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) r1 = fanotify_init(0x4, 0x0) fanotify_mark(r1, 0x1, 0x4800003a, r0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) fcntl$setlease(r2, 0x400, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 31.552680647s ago: executing program 2: r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x10001, &(0x7f0000000100)={[{@datasum}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_INO_PATHS(r0, 0xd000943e, &(0x7f0000000400)={0x100, 0x0, [], 0x0}) 31.427304962s ago: executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 31.299828916s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x7d, &(0x7f0000000500)={r1}, 0x8) 31.232270651s ago: executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x9, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 30.999582532s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)={0x48, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}]}]}, 0x48}}, 0x0) 30.648630556s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b1000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 30.204640683s ago: executing program 2: mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) mremap(&(0x7f0000e95000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 30.019795784s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x6e}, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x30}}, 0x0) 3.768253434s ago: executing program 4: r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000000)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000080)={r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000280)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000340)={r8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000300)={r7}) 2.90907176s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x3, 0xb, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) 977.737046ms ago: executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x19) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 0s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000040000a8c000000060a0904000000000000000002000000600004805c0001800b000100736f636b657400004c000280080003000000007c080002400000000f080003000000003008000140000000000800030000000064080003000000001b0800030000000032080001400000000308000240000000140900010073797a30000000000900020073797a320000000014000000110001"], 0xb4}}, 0x0) kernel console output (not intermixed with test programs): amily 0 port 6081 - 0 [ 403.962543][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.981419][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.014865][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.025780][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.236949][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.689137][ T5126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 404.703002][ T5126] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 404.711394][ T5126] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 404.728963][ T5126] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 404.738501][ T5126] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 404.751405][ T5126] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 405.128591][T10390] use of bytesused == 0 is deprecated and will be removed in the future, [ 405.138113][T10390] use the actual size instead. [ 405.140704][T10375] chnl_net:caif_netlink_parms(): no params data found [ 405.205861][T10393] loop3: detected capacity change from 0 to 128 [ 405.237837][T10393] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (16076!=39978) [ 405.279799][T10393] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 405.385024][T10393] EXT4-fs error (device loop3): __ext4_find_entry:1695: inode #2: comm syz-executor.3: checksumming directory block 0 [ 405.566716][T10393] EXT4-fs error (device loop3): htree_dirblock_to_tree:1082: inode #2: comm syz-executor.3: Directory block failed checksum [ 406.493332][ T5251] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 406.571904][T10406] loop4: detected capacity change from 0 to 4096 [ 406.610013][T10406] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 406.698867][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.785216][T10375] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.790373][ T5119] Bluetooth: hci2: command tx timeout [ 406.799421][T10375] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.806310][ T8413] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 406.809222][T10375] bridge_slave_0: entered allmulticast mode [ 406.846273][ T5251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.859282][T10375] bridge_slave_0: entered promiscuous mode [ 407.049187][ T5251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.059945][ T5251] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 407.072251][ T5251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.083120][ T5251] usb 3-1: config 0 descriptor?? [ 409.010217][ T5119] Bluetooth: hci2: command tx timeout [ 409.265740][ T5251] usbhid 3-1:0.0: can't add hid device: -71 [ 409.342827][ T5251] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 409.562023][ T5251] usb 3-1: USB disconnect, device number 12 [ 410.543425][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.661166][T10375] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.668457][T10375] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.692546][T10375] bridge_slave_1: entered allmulticast mode [ 410.712598][T10375] bridge_slave_1: entered promiscuous mode [ 411.201160][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.239080][T10448] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 411.254714][T10451] loop0: detected capacity change from 0 to 128 [ 411.270534][ T5119] Bluetooth: hci2: command tx timeout [ 411.293009][T10451] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (16076!=39978) [ 411.324203][T10456] loop2: detected capacity change from 0 to 8 [ 411.332474][T10375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.347647][T10375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.358523][T10451] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 411.487276][T10375] team0: Port device team_slave_0 added [ 411.539539][T10375] team0: Port device team_slave_1 added [ 411.560258][T10451] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz-executor.0: checksumming directory block 0 [ 411.721003][T10465] EXT4-fs error (device loop0): htree_dirblock_to_tree:1082: inode #2: comm syz-executor.0: Directory block failed checksum [ 411.767121][T10375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.774993][T10467] xt_socket: unknown flags 0xc [ 411.810244][T10375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.877413][T10375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.970730][ T5126] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 411.983892][T10375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.992485][T10375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.018813][ T5126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 412.034039][ T5126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 412.050875][T10375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.064578][ T5126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 412.083047][ T5126] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 412.090690][ T5126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 412.191854][ T9334] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 412.209786][T10478] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 412.310714][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 412.502526][T10495] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 412.707233][T10499] loop4: detected capacity change from 0 to 1024 [ 412.745101][T10375] hsr_slave_0: entered promiscuous mode [ 412.753183][T10499] EXT4-fs: Ignoring removed orlov option [ 412.762441][T10375] hsr_slave_1: entered promiscuous mode [ 412.772309][T10375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.779952][T10375] Cannot create hsr debugfs directory [ 412.786331][T10499] EXT4-fs (loop4): Test dummy encryption mode enabled [ 412.800631][T10499] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 412.812946][ T11] bridge_slave_1: left allmulticast mode [ 412.818650][ T11] bridge_slave_1: left promiscuous mode [ 412.837625][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.867077][ T11] bridge_slave_0: left allmulticast mode [ 412.867727][T10506] loop2: detected capacity change from 0 to 1024 [ 412.894262][T10499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.909012][ T11] bridge_slave_0: left promiscuous mode [ 412.916309][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.959565][T10499] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 413.206884][ T7685] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.327384][T10515] loop3: detected capacity change from 0 to 4096 [ 413.340950][ T5126] Bluetooth: hci2: command tx timeout [ 413.376395][T10515] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 414.156517][ T5126] Bluetooth: hci3: command tx timeout [ 414.381727][T10555] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 414.413267][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.492198][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.536384][ T11] bond0 (unregistering): Released all slaves [ 415.492144][T10587] loop0: detected capacity change from 0 to 1024 [ 416.230876][ T5126] Bluetooth: hci3: command 0x041b tx timeout [ 416.264788][ T2833] hfsplus: b-tree write err: -5, ino 4 [ 416.472898][ T11] hsr_slave_0: left promiscuous mode [ 416.484177][ T11] hsr_slave_1: left promiscuous mode [ 416.509920][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.540602][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.571342][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.578942][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.665144][ T11] veth1_macvtap: left promiscuous mode [ 416.689177][ T11] veth0_macvtap: left promiscuous mode [ 416.695873][ T11] veth1_vlan: left promiscuous mode [ 416.710432][ T11] veth0_vlan: left promiscuous mode [ 417.127379][T10596] loop2: detected capacity change from 0 to 32768 [ 417.669796][T10625] loop2: detected capacity change from 0 to 4096 [ 418.114545][ T11] team0 (unregistering): Port device team_slave_1 removed [ 418.223754][ T11] team0 (unregistering): Port device team_slave_0 removed [ 418.301601][ T5119] Bluetooth: hci3: command 0x041b tx timeout [ 419.000413][T10616] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 419.014268][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 419.437144][T10475] chnl_net:caif_netlink_parms(): no params data found [ 419.579670][T10656] gre0: entered promiscuous mode [ 419.600868][T10656] vlan3: entered promiscuous mode [ 419.611233][T10656] vlan3: entered allmulticast mode [ 419.616391][T10656] gre0: entered allmulticast mode [ 420.093426][T10658] loop2: detected capacity change from 0 to 32768 [ 420.264733][T10375] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 420.285040][T10475] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.300212][T10475] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.307638][T10475] bridge_slave_0: entered allmulticast mode [ 420.323954][T10475] bridge_slave_0: entered promiscuous mode [ 420.362887][T10375] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 420.390416][ T5119] Bluetooth: hci3: command 0x041b tx timeout [ 420.394595][T10375] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 420.453546][T10475] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.490748][T10475] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.503297][T10475] bridge_slave_1: entered allmulticast mode [ 420.512410][T10475] bridge_slave_1: entered promiscuous mode [ 420.601497][T10375] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 420.678487][T10475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.693886][T10475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.868369][T10703] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 420.893109][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.109583][T10714] loop2: detected capacity change from 0 to 512 [ 421.185952][T10711] loop4: detected capacity change from 0 to 4096 [ 421.196735][T10711] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 421.230046][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.296390][T10711] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 421.298821][T10716] loop0: detected capacity change from 0 to 4096 [ 421.320766][T10475] team0: Port device team_slave_0 added [ 421.437809][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.458743][T10722] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 421.501509][T10711] loop4: detected capacity change from 4096 to 11 [ 421.518475][T10725] ntfs3: loop4: failed to read volume at offset 0x45000 [ 421.542179][T10725] syz-executor.4: attempt to access beyond end of device [ 421.542179][T10725] loop4: rw=2049, sector=164, nr_sectors = 4 limit=11 [ 421.565033][T10475] team0: Port device team_slave_1 added [ 421.593169][T10725] Buffer I/O error on dev loop4, logical block 41, lost sync page write [ 421.618246][T10725] ntfs3: loop4: ino=21, "bus" ntfs3_write_inode failed, -5. [ 421.639751][T10711] ntfs3: loop4: failed to read volume at offset 0x45000 [ 421.647459][T10711] syz-executor.4: attempt to access beyond end of device [ 421.647459][T10711] loop4: rw=2049, sector=164, nr_sectors = 4 limit=11 [ 421.670758][T10711] Buffer I/O error on dev loop4, logical block 41, lost sync page write [ 421.684740][T10711] ntfs3: loop4: ino=21, "bus" ntfs3_write_inode failed, -5. [ 421.698443][T10716] NILFS error (device loop0): nilfs_readdir: zero-length directory entry [ 421.759653][T10716] Remounting filesystem read-only [ 421.768443][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.769107][ T7685] ntfs3: loop4: failed to read volume at offset 0x45000 [ 421.795077][ T7685] ntfs3: loop4: failed to read volume at offset 0x45000 [ 421.796790][T10729] NILFS error (device loop0): nilfs_readdir: zero-length directory entry [ 421.831074][ T3976] ntfs3: loop4: ino=5, ntfs3_write_inode failed, -22. [ 421.839055][ T7685] syz-executor.4: attempt to access beyond end of device [ 421.839055][ T7685] loop4: rw=2049, sector=2044, nr_sectors = 4 limit=11 [ 421.871938][T10475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.879379][ T7685] Buffer I/O error on dev loop4, logical block 511, lost sync page write [ 421.890517][T10475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.918001][ T7685] syz-executor.4: attempt to access beyond end of device [ 421.918001][ T7685] loop4: rw=0, sector=2044, nr_sectors = 4 limit=11 [ 421.958175][T10475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.979386][T10475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.989114][T10475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.017344][T10475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.032307][T10735] misc userio: The device must be registered before sending interrupts [ 422.333601][T10475] hsr_slave_0: entered promiscuous mode [ 422.382192][T10475] hsr_slave_1: entered promiscuous mode [ 422.396054][T10475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.429774][T10475] Cannot create hsr debugfs directory [ 422.461797][ T5119] Bluetooth: hci3: command 0x041b tx timeout [ 422.836235][ T11] bridge_slave_1: left allmulticast mode [ 422.845291][ T11] bridge_slave_1: left promiscuous mode [ 422.861920][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.909166][ T11] bridge_slave_0: left allmulticast mode [ 422.915224][ T11] bridge_slave_0: left promiscuous mode [ 422.925645][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.012546][T10760] loop2: detected capacity change from 0 to 4096 [ 423.477905][ T5126] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 423.494860][ T5126] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 423.514194][ T5126] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 423.551015][ T5126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 423.563006][ T5126] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 423.573245][ T5126] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 423.838447][T10759] loop3: detected capacity change from 0 to 40427 [ 423.862934][T10759] F2FS-fs (loop3): Ignore s_resuid=3, s_resgid=0 w/o reserve_root [ 423.907315][T10759] F2FS-fs (loop3): Found nat_bits in checkpoint [ 424.011991][T10759] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 424.305917][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.348690][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.374437][ T11] bond0 (unregistering): Released all slaves [ 424.427186][T10752] gre0: entered promiscuous mode [ 424.444782][T10752] vlan2: entered promiscuous mode [ 424.450064][T10752] vlan2: entered allmulticast mode [ 424.490384][T10752] gre0: entered allmulticast mode [ 424.707729][ T29] audit: type=1326 audit(1718164593.404:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4a87cea9 code=0x7ffc0000 [ 424.748643][ T29] audit: type=1326 audit(1718164593.434:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fef4a87cea9 code=0x7ffc0000 [ 424.773954][ T29] audit: type=1326 audit(1718164593.434:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4a87cea9 code=0x7ffc0000 [ 424.818221][T10375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.903924][T10797] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 424.946944][T10803] loop3: detected capacity change from 0 to 512 [ 424.972356][T10803] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 4 [ 424.991738][T10803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.039945][T10375] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.119026][T10803] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz-executor.3: bg 0: block 3: invalid block bitmap [ 425.179452][ T11] hsr_slave_0: left promiscuous mode [ 425.204393][ T11] hsr_slave_1: left promiscuous mode [ 425.214226][ T8413] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.227091][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.234998][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.252887][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.272528][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.299499][ T11] veth1_macvtap: left promiscuous mode [ 425.305349][ T11] veth0_macvtap: left promiscuous mode [ 425.311288][ T11] veth1_vlan: left promiscuous mode [ 425.316730][ T11] veth0_vlan: left promiscuous mode [ 425.661017][ T5119] Bluetooth: hci5: command tx timeout [ 428.244158][ T5119] Bluetooth: hci5: command tx timeout [ 429.038474][T10846] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 429.192050][T10848] loop2: detected capacity change from 0 to 64 [ 429.206562][ T11] team0 (unregistering): Port device team_slave_1 removed [ 429.299492][ T11] team0 (unregistering): Port device team_slave_0 removed [ 429.458360][T10854] tmpfs: Bad value for 'mpol' [ 430.218982][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.226245][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.238313][T10837] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 430.432964][ T5126] Bluetooth: hci5: command tx timeout [ 430.460265][T10837] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 431.246875][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.254039][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.434194][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 431.677329][T10891] loop0: detected capacity change from 0 to 1024 [ 431.926999][ T62] hfsplus: b-tree write err: -5, ino 4 [ 431.956930][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 432.060090][T10897] bond1: entered promiscuous mode [ 432.155933][T10896] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 432.198968][T10896] bond1: (slave vti0): Error -95 calling set_mac_address [ 432.314598][T10475] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 432.359326][T10475] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 432.434605][T10763] chnl_net:caif_netlink_parms(): no params data found [ 432.470698][ T5126] Bluetooth: hci5: command tx timeout [ 432.493036][T10475] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 432.562103][T10475] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 433.485403][T10375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.597252][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.974159][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.983210][T10940] loop0: detected capacity change from 0 to 1024 [ 434.019486][T10763] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.045137][T10763] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.087400][T10763] bridge_slave_0: entered allmulticast mode [ 434.117433][T10763] bridge_slave_0: entered promiscuous mode [ 434.146887][T10763] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.163605][T10763] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.184217][T10763] bridge_slave_1: entered allmulticast mode [ 434.227473][ T12] hfsplus: b-tree write err: -5, ino 4 [ 434.233050][T10763] bridge_slave_1: entered promiscuous mode [ 434.314044][T10946] tmpfs: Bad value for 'mpol' [ 434.328271][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.583463][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.761418][T10763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.874217][T10763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.216001][T10763] team0: Port device team_slave_0 added [ 435.318076][T10763] team0: Port device team_slave_1 added [ 435.371993][T10375] veth0_vlan: entered promiscuous mode [ 435.398186][T10375] veth1_vlan: entered promiscuous mode [ 435.480010][T10763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.493809][T10964] loop3: detected capacity change from 0 to 512 [ 435.509059][T10763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.543646][T10763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.557138][T10964] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 4 [ 435.575251][T10763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.576978][ T29] audit: type=1326 audit(1718164604.274:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825607cea9 code=0x7ffc0000 [ 435.585154][T10964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.605834][T10763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.605875][T10763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.728238][T10964] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz-executor.3: bg 0: block 3: invalid block bitmap [ 435.764292][T10475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.781048][ T29] audit: type=1326 audit(1718164604.274:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825607cea9 code=0x7ffc0000 [ 435.851228][ T11] bridge_slave_1: left allmulticast mode [ 435.857511][ T29] audit: type=1326 audit(1718164604.364:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f825607cea9 code=0x7ffc0000 [ 435.867515][ T11] bridge_slave_1: left promiscuous mode [ 435.889295][ T29] audit: type=1326 audit(1718164604.364:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825607cea9 code=0x7ffc0000 [ 435.929347][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.939944][ T8413] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.965151][ T11] bridge_slave_0: left allmulticast mode [ 435.978695][ T11] bridge_slave_0: left promiscuous mode [ 435.986084][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.091324][T10972] loop0: detected capacity change from 0 to 1024 [ 436.296694][ T2514] hfsplus: b-tree write err: -5, ino 4 [ 436.358058][T10976] loop3: detected capacity change from 0 to 4096 [ 436.373497][T10976] ntfs3: loop3: mft corrupted [ 436.400468][T10976] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 436.416388][T10976] ntfs3: loop3: Failed to load $MFT. [ 436.462265][T10981] tmpfs: Bad value for 'mpol' [ 436.894804][ T781] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 437.065013][T10990] xt_socket: unknown flags 0xc [ 437.113474][ T781] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 437.135917][ T781] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 437.147310][ T781] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 437.179568][ T781] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 437.198016][ T781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.199387][T10989] loop0: detected capacity change from 0 to 32768 [ 437.210653][ T781] usb 4-1: Product: syz [ 437.229023][ T781] usb 4-1: Manufacturer: syz [ 437.242473][ T781] usb 4-1: SerialNumber: syz [ 437.262554][T10989] Dev loop0 SGI disklabel: csum bad, label corrupted [ 437.296169][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.311135][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.329932][ T11] bond0 (unregistering): Released all slaves [ 437.445135][T10763] hsr_slave_0: entered promiscuous mode [ 437.477420][T10763] hsr_slave_1: entered promiscuous mode [ 437.477831][ T781] usb 4-1: 0:2 : does not exist [ 437.501012][T10763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.508796][T10763] Cannot create hsr debugfs directory [ 437.520039][ T781] usb 4-1: USB disconnect, device number 7 [ 437.528149][T10992] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 437.645839][T10995] loop2: detected capacity change from 0 to 1024 [ 437.735201][T10995] loop2: detected capacity change from 0 to 1024 [ 437.757276][T10375] veth0_macvtap: entered promiscuous mode [ 437.819929][T10375] veth1_macvtap: entered promiscuous mode [ 437.983365][T10475] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.125000][ T11] hsr_slave_0: left promiscuous mode [ 438.150661][ T11] hsr_slave_1: left promiscuous mode [ 438.163563][T11001] loop2: detected capacity change from 0 to 16 [ 438.172130][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.179587][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.202168][T11001] erofs: (device loop2): mounted with root inode @ nid 36. [ 438.218465][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.244894][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.263655][T11001] syz-executor.2: attempt to access beyond end of device [ 438.263655][T11001] loop2: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 438.345168][ T11] veth1_macvtap: left promiscuous mode [ 438.371763][ T11] veth0_macvtap: left promiscuous mode [ 438.383016][ T11] veth1_vlan: left promiscuous mode [ 438.388449][ T11] veth0_vlan: left promiscuous mode [ 439.610457][ T8093] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 439.744908][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.751348][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.824977][ T8093] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 439.847884][ T8093] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 439.858859][ T8093] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 439.871606][ T8093] usb 1-1: SerialNumber: syz [ 439.892787][ T8093] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 440.097338][ T8093] usb 1-1: USB disconnect, device number 5 [ 440.357129][ T11] team0 (unregistering): Port device team_slave_1 removed [ 440.441977][ T11] team0 (unregistering): Port device team_slave_0 removed [ 440.680493][ T29] audit: type=1326 audit(1718164609.374:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825607cea9 code=0x7ffc0000 [ 440.746947][ T29] audit: type=1326 audit(1718164609.374:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825607cea9 code=0x7ffc0000 [ 440.777093][ T29] audit: type=1326 audit(1718164609.404:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f825607cea9 code=0x7ffc0000 [ 440.809386][ T29] audit: type=1326 audit(1718164609.404:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825607cea9 code=0x7ffc0000 [ 440.844106][ T29] audit: type=1326 audit(1718164609.404:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825607cea9 code=0x7ffc0000 [ 440.876432][ T29] audit: type=1326 audit(1718164609.404:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f825607cea9 code=0x7ffc0000 [ 440.902052][ T29] audit: type=1326 audit(1718164609.404:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825607cea9 code=0x7ffc0000 [ 440.934247][ T29] audit: type=1326 audit(1718164609.404:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f825607a627 code=0x7ffc0000 [ 440.978695][ T29] audit: type=1326 audit(1718164609.404:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f82560402e9 code=0x7ffc0000 [ 441.020073][ T29] audit: type=1326 audit(1718164609.404:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11027 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f825607cea9 code=0x7ffc0000 [ 441.278748][T11030] loop0: detected capacity change from 0 to 32768 [ 441.287710][T11030] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (11030) [ 441.307395][T11030] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 441.319955][T11030] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 441.462202][T11030] BTRFS info (device loop0): rebuilding free space tree [ 441.493418][T11030] BTRFS info (device loop0): disabling free space tree [ 441.501060][T11030] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 441.520881][T10375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.535387][T11030] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 441.536911][T10375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.564569][T10375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.579811][T10375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.598368][T10375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.609065][T10375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.621815][T10375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.637514][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.644740][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.746746][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.753996][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.827070][T10375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.840280][T10375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.850291][T10375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.861840][T10375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.879786][T10375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.105755][T11051] loop2: detected capacity change from 0 to 4096 [ 442.151662][T10375] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.163697][T10375] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.174364][T10375] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.190679][T10375] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.434067][ T9334] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 444.955593][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.988452][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.107869][ T2514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.150618][ T2514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.263111][T11068] loop3: detected capacity change from 0 to 64 [ 445.368149][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.370637][T11068] hfs: request for non-existent node 1291 in B*Tree [ 445.422484][T11068] hfs: request for non-existent node 1291 in B*Tree [ 445.526898][ T2514] hfs: request for non-existent node 1291 in B*Tree [ 445.556318][ T2514] hfs: request for non-existent node 1291 in B*Tree [ 445.564858][ T2514] hfs: request for non-existent node 1291 in B*Tree [ 445.571964][ T2514] hfs: request for non-existent node 1291 in B*Tree [ 445.684524][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 445.684543][ T29] audit: type=1326 audit(1718164614.384:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdac7cea9 code=0x7ffc0000 [ 445.746811][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.784366][ T29] audit: type=1326 audit(1718164614.384:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdac7cea9 code=0x7ffc0000 [ 445.846660][ T29] audit: type=1326 audit(1718164614.394:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cdac7cea9 code=0x7ffc0000 [ 445.914471][T10475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.948156][ T29] audit: type=1326 audit(1718164614.394:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdac7cea9 code=0x7ffc0000 [ 445.958647][T11078] loop2: detected capacity change from 0 to 256 [ 445.990521][T10763] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 445.991114][ T29] audit: type=1326 audit(1718164614.404:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cdac7cea9 code=0x7ffc0000 [ 446.036278][T10763] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 446.100238][ T29] audit: type=1326 audit(1718164614.424:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdac7cea9 code=0x7ffc0000 [ 446.180344][ T29] audit: type=1326 audit(1718164614.434:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0cdac7a627 code=0x7ffc0000 [ 446.218617][ T29] audit: type=1326 audit(1718164614.434:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cdac402e9 code=0x7ffc0000 [ 446.245615][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.282230][ T29] audit: type=1326 audit(1718164614.434:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0cdac7a627 code=0x7ffc0000 [ 446.340490][T10763] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 446.365627][ T29] audit: type=1326 audit(1718164614.434:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cdac402e9 code=0x7ffc0000 [ 446.394921][T10763] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 446.514725][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.028725][T10763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.146173][T10763] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.219105][ T781] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.226470][ T781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.337999][ T781] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.345347][ T781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.730482][T11101] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 448.296809][T10475] veth0_vlan: entered promiscuous mode [ 448.353069][T10763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.373523][T10475] veth1_vlan: entered promiscuous mode [ 448.517048][T10475] veth0_macvtap: entered promiscuous mode [ 448.564399][T10475] veth1_macvtap: entered promiscuous mode [ 448.656411][T10475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.696790][T10475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.737118][T10475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.765648][T10475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.799611][T10475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.840425][T10475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.858959][T10475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.877624][T10475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.900209][T10475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.912941][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 448.930381][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 448.939424][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 448.948801][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 448.957363][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 448.965068][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 448.990713][ T781] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 449.063027][T10475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.098006][T10475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.115681][T10475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.130916][T10475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.154125][T10475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.171755][T10475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.189857][T10475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.205313][T10475] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.242501][ T781] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 449.265204][T10475] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.278160][T10475] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.296516][ T781] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 449.305993][T10475] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.320700][ T781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 449.351101][ T781] usb 4-1: SerialNumber: syz [ 449.387467][ T781] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 449.638272][ T781] usb 4-1: USB disconnect, device number 8 [ 449.651223][ T5126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 449.670352][ T5126] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 449.688934][ T5126] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 449.700084][ T5126] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 449.709461][ T5126] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 449.717471][ T5126] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 450.297260][T11127] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 450.503809][T10763] veth0_vlan: entered promiscuous mode [ 450.558846][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.580242][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.594073][ T11] bridge_slave_1: left allmulticast mode [ 450.599875][ T11] bridge_slave_1: left promiscuous mode [ 450.606087][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.632607][ T11] bridge_slave_0: left allmulticast mode [ 450.643054][ T11] bridge_slave_0: left promiscuous mode [ 450.656148][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.858391][ T11] gre0: left allmulticast mode [ 451.031325][ T5119] Bluetooth: hci0: command tx timeout [ 451.741804][T11139] loop2: detected capacity change from 0 to 32768 [ 451.830412][ T5119] Bluetooth: hci2: command tx timeout [ 452.043514][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.083756][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.128195][ T11] bond0 (unregistering): Released all slaves [ 452.129722][T11145] loop3: detected capacity change from 0 to 32768 [ 452.162143][T10763] veth1_vlan: entered promiscuous mode [ 452.199244][T11145] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 452.291430][T11157] loop2: detected capacity change from 0 to 256 [ 452.299529][ T180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.339390][ T180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.383054][T11145] XFS (loop3): Ending clean mount [ 452.414927][T11145] XFS (loop3): Quotacheck needed: Please wait. [ 452.430180][T10763] veth0_macvtap: entered promiscuous mode [ 452.520747][T11145] XFS (loop3): Quotacheck: Done. [ 452.641599][T10763] veth1_macvtap: entered promiscuous mode [ 452.883788][ T8413] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 453.782332][ T5119] Bluetooth: hci0: command tx timeout [ 453.908185][ T5126] Bluetooth: hci2: command tx timeout [ 453.988345][T11096] chnl_net:caif_netlink_parms(): no params data found [ 454.058060][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.071459][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.081331][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.091814][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.101784][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.118151][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.128163][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.145020][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.170163][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.187864][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.231181][T10763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.269704][T11170] loop2: detected capacity change from 0 to 256 [ 454.402722][T11170] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.429572][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.440417][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.451415][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.464335][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.474536][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.489852][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.502681][T10763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.515185][T10763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.526847][T10763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.555055][T11174] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.562344][T11174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.596019][T11098] chnl_net:caif_netlink_parms(): no params data found [ 454.686531][T10763] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.720164][T10763] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.769707][T10763] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.826903][T10763] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.950350][ T11] hsr_slave_0: left promiscuous mode [ 454.976234][ T11] hsr_slave_1: left promiscuous mode [ 454.995000][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.010292][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.063005][ T11] veth1_macvtap: left promiscuous mode [ 455.070414][T11179] loop3: detected capacity change from 0 to 32768 [ 455.080275][ T11] veth0_macvtap: left promiscuous mode [ 455.086295][ T11] veth1_vlan: left promiscuous mode [ 455.093185][ T11] veth0_vlan: left promiscuous mode [ 455.132076][T11179] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 455.241214][T11179] XFS (loop3): Ending clean mount [ 455.499615][ T8413] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 455.719826][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 455.729286][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 455.760706][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 455.801289][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 455.820927][ T5119] Bluetooth: hci0: command tx timeout [ 455.831776][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 455.850679][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 455.980549][ T5126] Bluetooth: hci2: command tx timeout [ 456.031082][T11201] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 456.084221][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 456.299081][ T11] team0 (unregistering): Port device team_slave_1 removed [ 456.374059][ T11] team0 (unregistering): Port device team_slave_0 removed [ 457.580490][T11096] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.589900][T11096] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.605290][T11096] bridge_slave_0: entered allmulticast mode [ 457.616917][T11096] bridge_slave_0: entered promiscuous mode [ 457.661789][T11096] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.700862][T11096] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.708172][T11096] bridge_slave_1: entered allmulticast mode [ 457.732062][T11096] bridge_slave_1: entered promiscuous mode [ 457.823035][T11215] loop2: detected capacity change from 0 to 16 [ 457.833643][T11215] erofs: (device loop2): mounted with root inode @ nid 36. [ 457.852416][T11215] syz-executor.2: attempt to access beyond end of device [ 457.852416][T11215] loop2: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 457.901320][ T5126] Bluetooth: hci0: command tx timeout [ 457.911314][ T5126] Bluetooth: hci3: command tx timeout [ 458.070875][ T5126] Bluetooth: hci2: command tx timeout [ 458.076076][T11208] loop3: detected capacity change from 0 to 32768 [ 458.092500][T11098] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.099887][T11098] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.107235][T11098] bridge_slave_0: entered allmulticast mode [ 458.113422][T11208] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (11208) [ 458.114964][T11098] bridge_slave_0: entered promiscuous mode [ 458.142814][T11208] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 458.154269][T11208] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 458.233795][T11096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.246653][T11208] BTRFS info (device loop3): rebuilding free space tree [ 458.261155][T11098] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.268305][T11098] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.272835][T11208] BTRFS info (device loop3): disabling free space tree [ 458.282500][T11208] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 458.292364][T11208] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 458.310467][T11098] bridge_slave_1: entered allmulticast mode [ 458.336049][T11098] bridge_slave_1: entered promiscuous mode [ 458.373399][T11096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.684007][T11098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.755783][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.780397][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.802471][T11096] team0: Port device team_slave_0 added [ 458.822331][T11098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.847374][T11096] team0: Port device team_slave_1 added [ 458.904774][ T8413] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 459.085142][T11096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.100430][T11096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.164716][T11096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.330048][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.407014][T11098] team0: Port device team_slave_0 added [ 459.502671][T11096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.509745][T11096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.550232][T11096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.571444][ T2808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.579274][ T2808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.582425][T11098] team0: Port device team_slave_1 added [ 459.678552][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.887780][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.982457][ T5126] Bluetooth: hci3: command tx timeout [ 460.008679][T11096] hsr_slave_0: entered promiscuous mode [ 460.021675][T11096] hsr_slave_1: entered promiscuous mode [ 460.044091][T11096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.056116][T11096] Cannot create hsr debugfs directory [ 460.127585][T11098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.145011][T11098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.200198][T11098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.231144][T11246] loop2: detected capacity change from 0 to 32768 [ 460.279426][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 460.291727][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 460.299847][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 460.308773][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 460.312615][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.319289][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 460.340310][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 460.389192][T11196] chnl_net:caif_netlink_parms(): no params data found [ 460.457570][T11098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.484638][T11098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.527771][T11254] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 460.533828][T11098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.581988][T11255] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 460.747785][T11259] loop4: detected capacity change from 0 to 128 [ 460.766410][T11259] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 460.782659][T11259] qnx6: wrong signature (magic) in superblock #1. [ 460.789148][T11259] qnx6: unable to read the first superblock [ 460.947794][T11261] netlink: 404 bytes leftover after parsing attributes in process `syz-executor.2'. [ 460.970289][T11261] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 460.979625][T11261] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 461.011533][T11261] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 461.044506][T11098] hsr_slave_0: entered promiscuous mode [ 461.057353][T11098] hsr_slave_1: entered promiscuous mode [ 461.074475][T11098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.100450][T11098] Cannot create hsr debugfs directory [ 461.458197][T11196] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.474349][T11196] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.486560][T11196] bridge_slave_0: entered allmulticast mode [ 461.501189][T11196] bridge_slave_0: entered promiscuous mode [ 461.706567][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.753851][T11196] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.769585][T11196] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.778734][T11196] bridge_slave_1: entered allmulticast mode [ 461.786410][T11196] bridge_slave_1: entered promiscuous mode [ 461.945287][T11286] loop4: detected capacity change from 0 to 256 [ 461.974234][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.069433][ T5126] Bluetooth: hci3: command tx timeout [ 462.169302][T11196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.186675][T11291] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 462.271932][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.280550][T11292] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 462.382107][ T5126] Bluetooth: hci4: command tx timeout [ 462.405471][T11196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.573251][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.600851][T11289] loop4: detected capacity change from 0 to 32768 [ 462.653870][T11289] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 462.673347][T11196] team0: Port device team_slave_0 added [ 462.775921][T11196] team0: Port device team_slave_1 added [ 462.825043][T11307] loop2: detected capacity change from 0 to 128 [ 462.838548][T11251] chnl_net:caif_netlink_parms(): no params data found [ 462.858872][T11289] XFS (loop4): Ending clean mount [ 462.929737][T11196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.950488][T11196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.981966][T11196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.074296][T10763] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 463.082949][T11196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.082970][T11196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.083006][T11196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.377045][T11312] netlink: 404 bytes leftover after parsing attributes in process `syz-executor.2'. [ 463.390529][T11312] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 463.399926][T11312] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 463.448816][T11312] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 463.623345][T11196] hsr_slave_0: entered promiscuous mode [ 463.651834][T11196] hsr_slave_1: entered promiscuous mode [ 463.681697][T11196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.689336][T11196] Cannot create hsr debugfs directory [ 463.803772][T11096] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 463.951459][ T11] bridge_slave_1: left allmulticast mode [ 463.960978][ T11] bridge_slave_1: left promiscuous mode [ 463.974576][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.997117][ T11] bridge_slave_0: left allmulticast mode [ 464.014968][ T11] bridge_slave_0: left promiscuous mode [ 464.021706][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.051361][ T11] bridge_slave_1: left allmulticast mode [ 464.057080][ T11] bridge_slave_1: left promiscuous mode [ 464.081836][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.122131][ T11] bridge_slave_0: left allmulticast mode [ 464.127947][ T11] bridge_slave_0: left promiscuous mode [ 464.138325][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.146797][ T5126] Bluetooth: hci3: command tx timeout [ 464.338937][T11332] loop2: detected capacity change from 0 to 4096 [ 464.463319][ T5126] Bluetooth: hci4: command tx timeout [ 465.188120][T11343] loop2: detected capacity change from 0 to 32768 [ 465.578205][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.592886][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.614499][ T11] bond0 (unregistering): Released all slaves [ 465.768199][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.782241][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.794018][ T11] bond0 (unregistering): Released all slaves [ 465.837454][T11096] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 465.883638][T11251] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.903149][T11251] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.910572][T11251] bridge_slave_0: entered allmulticast mode [ 465.927484][T11251] bridge_slave_0: entered promiscuous mode [ 465.999092][T11096] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 466.033441][T11096] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 466.119544][T11251] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.129946][T11251] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.137483][T11251] bridge_slave_1: entered allmulticast mode [ 466.145585][T11251] bridge_slave_1: entered promiscuous mode [ 466.214541][T11348] netlink: 404 bytes leftover after parsing attributes in process `syz-executor.2'. [ 466.227727][T11348] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 466.237316][T11348] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 466.247048][T11348] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 466.470862][T11251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.560659][ T5126] Bluetooth: hci4: command tx timeout [ 466.821815][T11251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.934987][T11364] loop4: detected capacity change from 0 to 4096 [ 466.952961][T11364] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 467.135130][T11251] team0: Port device team_slave_0 added [ 467.218451][T11251] team0: Port device team_slave_1 added [ 467.522683][T11370] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 467.541773][T11370] netlink: 4608 bytes leftover after parsing attributes in process `syz-executor.2'. [ 470.401049][ T5126] Bluetooth: hci4: command tx timeout [ 470.463146][ T11] hsr_slave_0: left promiscuous mode [ 470.490179][ T11] hsr_slave_1: left promiscuous mode [ 470.502182][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.509792][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.519111][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.528005][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.554905][ T11] hsr_slave_0: left promiscuous mode [ 470.559469][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 470.559487][ T29] audit: type=1326 audit(1718164639.254:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11375 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c1da7cea9 code=0x0 [ 470.589373][ T11] hsr_slave_1: left promiscuous mode [ 470.595790][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.603417][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.617220][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.624813][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.672974][ T11] veth1_macvtap: left promiscuous mode [ 470.684134][ T11] veth0_macvtap: left promiscuous mode [ 470.689889][ T11] veth1_vlan: left promiscuous mode [ 470.700525][ T11] veth0_vlan: left promiscuous mode [ 470.714548][ T11] veth1_macvtap: left promiscuous mode [ 470.723315][ T11] veth0_macvtap: left promiscuous mode [ 470.729840][ T11] veth1_vlan: left promiscuous mode [ 470.738568][ T11] veth0_vlan: left promiscuous mode [ 471.747312][ T11] team0 (unregistering): Port device team_slave_1 removed [ 471.807634][T11384] loop4: detected capacity change from 0 to 256 [ 471.831525][ T11] team0 (unregistering): Port device team_slave_0 removed [ 472.207056][T11394] loop4: detected capacity change from 0 to 1024 [ 472.246729][T11394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.259263][T11394] ext4 filesystem being mounted at /root/syzkaller-testdir682762227/syzkaller.rDgNCC/33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.345349][ T29] audit: type=1804 audit(1718164641.034:373): pid=11394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir682762227/syzkaller.rDgNCC/33/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 472.370930][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.429125][T10763] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.135665][ T11] team0 (unregistering): Port device team_slave_1 removed [ 473.195847][ T11] team0 (unregistering): Port device team_slave_0 removed [ 473.770865][T11251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.777855][T11251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.807290][T11251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.892991][T11251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.900015][T11251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.954877][T11251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.064666][T11098] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 474.113851][T11098] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 474.274099][T11098] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 474.304918][T11098] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 474.380821][T11251] hsr_slave_0: entered promiscuous mode [ 474.387407][T11251] hsr_slave_1: entered promiscuous mode [ 474.406862][T11251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.430316][T11251] Cannot create hsr debugfs directory [ 474.674943][T11418] loop4: detected capacity change from 0 to 2048 [ 474.698262][T11418] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 474.704068][T11096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.759791][T11418] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 232 with incorrect tag 0 [ 474.965484][T11420] loop4: detected capacity change from 0 to 1024 [ 474.988423][T11420] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a841c118, mo2=0002] [ 474.997320][T11420] System zones: 0-1, 3-12 [ 475.008692][T11420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.055684][T11096] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.095356][ T5251] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.102780][ T5251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.147489][ T781] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.154702][ T781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.165986][T11420] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 475.237806][T11426] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a841c118, mo2=0002] [ 475.310015][T11426] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 475.314725][T11251] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.335563][T11430] loop2: detected capacity change from 0 to 256 [ 475.336923][T11251] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.344453][T11430] exfat: Unknown parameter '0xffffffffffffffff' [ 475.377317][T11196] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 475.386907][T10763] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.478940][T11196] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 475.504848][T11196] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 475.652835][T11251] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.663281][T11251] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.694847][T11196] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 475.965416][T11251] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.005928][T11251] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.799168][T11251] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.840368][T11251] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.927925][T11098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.984440][T11098] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.026387][T11433] loop2: detected capacity change from 0 to 40427 [ 477.063229][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.070502][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.164995][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.172265][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.405751][T11251] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 477.448522][T11098] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 477.477383][T11098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 477.530819][T11251] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 477.554676][T11251] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 477.621237][T11251] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 477.696851][T11096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.808626][T11196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.002573][T11196] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.053358][ T781] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.060579][ T781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.095391][T11098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.139839][T11096] veth0_vlan: entered promiscuous mode [ 478.185750][ T5251] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.192988][ T5251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.209834][T11469] loop2: detected capacity change from 0 to 256 [ 478.210073][T11467] loop4: detected capacity change from 0 to 4096 [ 478.230284][T11467] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 478.241651][T11469] exfat: Unknown parameter '0xffffffffffffffff' [ 478.271816][T11096] veth1_vlan: entered promiscuous mode [ 478.291748][T11467] ntfs3: loop4: failed to convert "c46c" to macceltic [ 478.389095][T11251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.477141][T11251] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.519266][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.526558][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.575640][T11096] veth0_macvtap: entered promiscuous mode [ 478.602874][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.610162][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.639554][T11096] veth1_macvtap: entered promiscuous mode [ 478.679903][T11476] loop4: detected capacity change from 0 to 64 [ 478.693304][T11098] veth0_vlan: entered promiscuous mode [ 478.718397][T11478] loop2: detected capacity change from 0 to 8 [ 478.764491][T11098] veth1_vlan: entered promiscuous mode [ 478.779419][T11096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.800332][T11096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.810891][T11096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.830509][T11096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.840774][T11096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.851463][T11096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.869363][T11096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.955811][T11096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.975249][T11096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.987749][T11096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.999524][T11096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.010228][T11096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.030132][T11096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.049760][T11096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.136106][T11478] loop2: detected capacity change from 0 to 1024 [ 479.147745][T11096] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.181038][T11096] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.200265][T11096] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.209079][T11096] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.305621][T11098] veth0_macvtap: entered promiscuous mode [ 479.346772][T11098] veth1_macvtap: entered promiscuous mode [ 479.434864][T11494] syz-executor.4[11494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.435042][T11494] syz-executor.4[11494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.451928][T11196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.564528][T11098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.584438][T11478] loop2: detected capacity change from 0 to 4096 [ 479.592531][T11478] ntfs3: Unknown parameter '000000000000000000000000xffffffffffffffff' [ 479.620297][T11098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.659157][T11098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.693697][T11098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.713286][T11098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.723973][T11098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.734148][T11098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.746365][T11098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.759324][T11098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.783619][T11098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.794672][T11098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.815777][T11098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.828240][T11098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.847428][T11098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.859454][T11098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.879571][T11098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.898623][T11098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.922659][T11098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.942959][T11098] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.959927][T11098] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.973667][T11098] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.984532][T11098] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.037047][ T3976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.080456][ T3976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.156148][T11251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.224778][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.250214][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.309682][T11515] loop4: detected capacity change from 0 to 256 [ 480.349738][T11515] exfat: Unknown parameter '0xffffffffffffffff' [ 480.541816][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.549693][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.593428][ T29] audit: type=1800 audit(1718164649.284:374): pid=11523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file2" dev="sda1" ino=1944 res=0 errno=0 [ 480.614475][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.657570][T11196] veth0_vlan: entered promiscuous mode [ 480.659438][T11525] loop0: detected capacity change from 0 to 64 [ 480.750278][T11251] veth0_vlan: entered promiscuous mode [ 480.776555][ T180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.802012][T11196] veth1_vlan: entered promiscuous mode [ 480.819994][ T180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.822241][T11251] veth1_vlan: entered promiscuous mode [ 480.908678][T11533] syz-executor.2[11533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 480.908862][T11533] syz-executor.2[11533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 481.211943][T11251] veth0_macvtap: entered promiscuous mode [ 481.219834][T11543] loop0: detected capacity change from 0 to 1024 [ 481.253235][T11251] veth1_macvtap: entered promiscuous mode [ 481.267926][T11196] veth0_macvtap: entered promiscuous mode [ 481.302880][T11196] veth1_macvtap: entered promiscuous mode [ 481.330816][T11543] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a841c118, mo2=0002] [ 481.342167][T11543] System zones: 0-1, 3-12 [ 481.372363][T11543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.494532][T11543] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 481.512495][T11543] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a841c118, mo2=0002] [ 481.524000][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.539638][T11543] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 481.579497][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.603261][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.621238][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.632332][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.643619][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.654298][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.667042][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.680252][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.693138][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.704072][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.717593][T11096] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.718645][T11251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.914210][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.918303][T11560] loop0: detected capacity change from 0 to 64 [ 481.976359][T11560] Trying to free block not in datazone [ 482.015143][T11560] minix_free_block (loop0:21): bit already cleared [ 482.028968][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.062805][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.082621][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.110292][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.127026][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.150283][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.169120][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.179722][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.193610][T11251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.207871][T11251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.221087][T11251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.367918][T11566] loop4: detected capacity change from 0 to 64 [ 482.388044][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.403694][T11568] loop2: detected capacity change from 0 to 8 [ 482.467893][T11251] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.487937][ T5126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 482.498577][ T5126] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 482.500297][T11251] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.518755][ T5126] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 482.526189][T11251] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.535574][T11251] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.546344][ T5126] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 482.554451][T11568] overlayfs: overlapping lowerdir path [ 482.561238][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.571875][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.582502][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.593787][ T5126] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 482.607779][ T5126] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 482.615581][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.635592][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.655760][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.679423][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.699905][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.721288][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.742814][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.760753][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.771570][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.807833][T11196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.854278][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.885205][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.904855][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.929403][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.941585][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.952444][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.962358][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.977361][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.988072][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.998919][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.009247][T11196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.022507][T11196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.051393][T11196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.128164][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.207150][T11196] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.250744][T11196] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.259656][T11196] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.271315][T11196] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.828314][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.861205][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.151411][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.176794][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.389539][ T11] bridge_slave_1: left allmulticast mode [ 484.415208][ T11] bridge_slave_1: left promiscuous mode [ 484.433481][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.486900][ T11] bridge_slave_0: left allmulticast mode [ 484.503283][T11616] loop2: detected capacity change from 0 to 256 [ 484.508058][ T11] bridge_slave_0: left promiscuous mode [ 484.517680][T11616] exfat: Unknown parameter '0xffffffffffffffff' [ 484.518271][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.704426][ T5126] Bluetooth: hci2: command tx timeout [ 484.735908][T11622] loop2: detected capacity change from 0 to 128 [ 485.581967][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.595504][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.609426][ T11] bond0 (unregistering): Released all slaves [ 485.733970][ T2808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.755029][ T2808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.779482][T11571] chnl_net:caif_netlink_parms(): no params data found [ 486.518155][ T180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.785818][ T180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.801700][ T5126] Bluetooth: hci2: command tx timeout [ 487.027545][T11650] loop4: detected capacity change from 0 to 64 [ 487.115531][T11650] Trying to free block not in datazone [ 487.138927][T11650] minix_free_block (loop4:21): bit already cleared [ 487.472454][T11661] loop0: detected capacity change from 0 to 4096 [ 487.481360][T11661] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 487.619709][T11661] ntfs3: loop0: failed to convert "c46c" to macceltic [ 487.905325][T11679] loop2: detected capacity change from 0 to 512 [ 488.211671][ T11] hsr_slave_0: left promiscuous mode [ 488.247501][ T11] hsr_slave_1: left promiscuous mode [ 488.395296][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.435629][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.483702][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.527858][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.863744][ T5126] Bluetooth: hci2: command tx timeout [ 489.219776][ T11] veth1_macvtap: left promiscuous mode [ 489.270231][ T5126] Bluetooth: hci0: command 0x0406 tx timeout [ 489.321873][ T11] veth0_macvtap: left promiscuous mode [ 489.327616][ T11] veth1_vlan: left promiscuous mode [ 489.404782][ T11] veth0_vlan: left promiscuous mode [ 489.556551][T11697] loop0: detected capacity change from 0 to 512 [ 489.595168][T11702] loop2: detected capacity change from 0 to 64 [ 489.629372][ T5126] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 489.657835][ T5126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 489.669210][ T5126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 489.683245][ T5126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 489.691717][T11697] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz-executor.0: Parent and EA inode have the same ino 15 [ 489.705795][ T5126] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 489.720568][ T5126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 489.749124][T11697] EXT4-fs (loop0): 1 orphan inode deleted [ 489.787121][T11697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.814630][T11697] EXT4-fs warning (device loop0): __ext4_unlink:3286: inode #15: comm syz-executor.0: Deleting file 'file1' with no links [ 489.963965][T11096] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.434166][ T29] audit: type=1326 audit(1718164659.134:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11716 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50b707cea9 code=0x0 [ 490.950196][ T5119] Bluetooth: hci2: command tx timeout [ 491.074902][T11737] loop4: detected capacity change from 0 to 64 [ 491.295182][ T11] team0 (unregistering): Port device team_slave_1 removed [ 491.425093][ T5119] Bluetooth: hci5: command 0x0406 tx timeout [ 491.442559][T11741] loop4: detected capacity change from 0 to 512 [ 491.443649][ T11] team0 (unregistering): Port device team_slave_0 removed [ 491.497993][T11741] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz-executor.4: Parent and EA inode have the same ino 15 [ 491.522027][T11741] EXT4-fs (loop4): 1 orphan inode deleted [ 491.533822][T11741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.557591][T11741] EXT4-fs warning (device loop4): __ext4_unlink:3286: inode #15: comm syz-executor.4: Deleting file 'file1' with no links [ 491.621245][T10763] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.826166][ T5119] Bluetooth: hci3: command tx timeout [ 492.448059][T11571] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.455460][T11571] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.471379][T11571] bridge_slave_0: entered allmulticast mode [ 492.481049][T11571] bridge_slave_0: entered promiscuous mode [ 492.526687][T11728] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 492.562215][T11729] wg2: entered promiscuous mode [ 492.572529][T11729] wg2: entered allmulticast mode [ 492.589438][T11759] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 492.612071][T11571] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.635434][T11571] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.670669][T11571] bridge_slave_1: entered allmulticast mode [ 492.686818][T11571] bridge_slave_1: entered promiscuous mode [ 492.817294][T11768] loop4: detected capacity change from 0 to 64 [ 492.864028][ T29] audit: type=1800 audit(1718164661.564:376): pid=11771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1961 res=0 errno=0 [ 492.939851][ T29] audit: type=1804 audit(1718164661.634:377): pid=11772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1977882519/syzkaller.1aVVjq/4/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 493.018979][T11571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.093291][T11571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.149561][T11774] loop2: detected capacity change from 0 to 512 [ 493.357922][T11571] team0: Port device team_slave_0 added [ 493.413449][T11571] team0: Port device team_slave_1 added [ 493.561478][ T29] audit: type=1326 audit(1718164662.254:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11781 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdac7cea9 code=0x7ffc0000 [ 493.667823][ T29] audit: type=1326 audit(1718164662.254:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11781 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdac7cea9 code=0x7ffc0000 [ 493.747963][ T29] audit: type=1326 audit(1718164662.264:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11781 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cdac7cea9 code=0x7ffc0000 [ 493.780952][T11571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.797103][T11571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.839262][ T29] audit: type=1326 audit(1718164662.264:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11781 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdac7cea9 code=0x7ffc0000 [ 493.867180][T11571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.881581][ T29] audit: type=1326 audit(1718164662.264:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11781 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdac7cea9 code=0x7ffc0000 [ 493.911671][ T5119] Bluetooth: hci3: command tx timeout [ 493.921968][T11571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.950435][T11571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.961504][ T29] audit: type=1326 audit(1718164662.264:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11781 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cdac7cea9 code=0x7ffc0000 [ 493.980662][T11571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.027509][T11794] loop3: detected capacity change from 0 to 512 [ 494.060037][ T29] audit: type=1326 audit(1718164662.284:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11781 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdac7cea9 code=0x7ffc0000 [ 494.203345][T11794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.264616][T11794] ext4 filesystem being mounted at /root/syzkaller-testdir1977882519/syzkaller.1aVVjq/7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.492001][T11251] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.033877][T11571] hsr_slave_0: entered promiscuous mode [ 495.088698][T11571] hsr_slave_1: entered promiscuous mode [ 495.110626][T11571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.146374][T11571] Cannot create hsr debugfs directory [ 495.153185][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 495.272562][T11814] loop0: detected capacity change from 0 to 64 [ 495.439846][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.555463][T11822] loop4: detected capacity change from 0 to 512 [ 495.604521][T11822] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz-executor.4: Parent and EA inode have the same ino 15 [ 495.658451][T11822] EXT4-fs (loop4): 1 orphan inode deleted [ 495.686077][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.693834][T11822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.718849][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 495.718871][ T29] audit: type=1326 audit(1718164664.414:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b707cea9 code=0x7ffc0000 [ 495.768809][ T29] audit: type=1326 audit(1718164664.414:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b707cea9 code=0x7ffc0000 [ 495.813954][ T29] audit: type=1326 audit(1718164664.454:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50b707cea9 code=0x7ffc0000 [ 495.818818][T11831] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 495.847211][ T29] audit: type=1326 audit(1718164664.454:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b707cea9 code=0x7ffc0000 [ 495.870261][ T29] audit: type=1326 audit(1718164664.464:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50b707cea9 code=0x7ffc0000 [ 495.893520][ T29] audit: type=1326 audit(1718164664.464:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b707cea9 code=0x7ffc0000 [ 495.906005][T11822] EXT4-fs warning (device loop4): __ext4_unlink:3286: inode #15: comm syz-executor.4: Deleting file 'file1' with no links [ 495.923155][ T29] audit: type=1326 audit(1718164664.464:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f50b707a627 code=0x7ffc0000 [ 495.960869][ T29] audit: type=1326 audit(1718164664.464:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f50b70402e9 code=0x7ffc0000 [ 495.985822][ T5119] Bluetooth: hci3: command tx timeout [ 495.994227][ T29] audit: type=1326 audit(1718164664.464:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f50b707a627 code=0x7ffc0000 [ 496.018118][ T29] audit: type=1326 audit(1718164664.464:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11828 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f50b70402e9 code=0x7ffc0000 [ 496.162104][T10763] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.184167][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.387229][T11846] loop0: detected capacity change from 0 to 512 [ 496.425019][T11846] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 496.435779][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.471139][T11846] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8002c128, mo2=0102] [ 496.502671][T11846] EXT4-fs (loop0): orphan cleanup on readonly fs [ 496.592819][T11846] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz-executor.0: Failed to acquire dquot type 1 [ 496.616548][T11846] EXT4-fs (loop0): Remounting filesystem read-only [ 496.654688][T11846] EXT4-fs (loop0): 1 orphan inode deleted [ 496.697931][T11846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 496.752815][T11846] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 496.762425][T11700] chnl_net:caif_netlink_parms(): no params data found [ 496.837576][T11096] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.362957][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 497.457913][ T11] bridge_slave_1: left allmulticast mode [ 497.473954][ T11] bridge_slave_1: left promiscuous mode [ 497.497817][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.548962][ T11] bridge_slave_0: left allmulticast mode [ 497.577186][ T11] bridge_slave_0: left promiscuous mode [ 497.599919][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.064284][ T5119] Bluetooth: hci3: command tx timeout [ 498.454469][T11898] loop3: detected capacity change from 0 to 512 [ 498.503568][T11898] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8002c128, mo2=0102] [ 498.512237][T11898] EXT4-fs (loop3): orphan cleanup on readonly fs [ 498.549515][T11898] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz-executor.3: Failed to acquire dquot type 1 [ 498.593594][T11898] EXT4-fs (loop3): Remounting filesystem read-only [ 498.608814][T11898] EXT4-fs (loop3): 1 orphan inode deleted [ 498.622406][T11898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 498.646435][T11898] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 498.732297][T11251] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.525254][T11909] loop0: detected capacity change from 0 to 32768 [ 499.546323][T11909] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (11909) [ 499.618058][T11909] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 499.639966][T11909] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 499.648884][T11909] BTRFS info (device loop0): using free-space-tree [ 499.755973][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.769975][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.783290][ T11] bond0 (unregistering): Released all slaves [ 499.817482][T11700] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.825333][T11700] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.848431][T11700] bridge_slave_0: entered allmulticast mode [ 499.858783][T11700] bridge_slave_0: entered promiscuous mode [ 499.936782][T11700] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.944853][T11700] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.952576][T11700] bridge_slave_1: entered allmulticast mode [ 499.970365][T11700] bridge_slave_1: entered promiscuous mode [ 499.996557][T11096] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 500.582357][T11700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.644993][T11700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.280780][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.287132][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.390642][T11952] wg2: entered promiscuous mode [ 501.407956][T11952] wg2: entered allmulticast mode [ 501.608502][T11965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 501.624841][T11967] loop3: detected capacity change from 0 to 512 [ 501.673754][T11967] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8002c128, mo2=0102] [ 501.711460][T11967] EXT4-fs (loop3): orphan cleanup on readonly fs [ 501.738701][T11967] __quota_error: 139 callbacks suppressed [ 501.738721][T11967] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 501.764202][T11967] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 501.774951][T11967] EXT4-fs error (device loop3): ext4_acquire_dquot:6860: comm syz-executor.3: Failed to acquire dquot type 1 [ 501.789624][T11967] EXT4-fs (loop3): Remounting filesystem read-only [ 501.796459][T11967] EXT4-fs (loop3): 1 orphan inode deleted [ 501.804226][T11967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 501.840041][ T29] audit: type=1326 audit(1718164670.534:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50b707cea9 code=0x0 [ 501.894489][T11967] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 501.972807][T11251] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.087193][T11700] team0: Port device team_slave_0 added [ 502.143218][ T11] hsr_slave_0: left promiscuous mode [ 502.158791][ T11] hsr_slave_1: left promiscuous mode [ 502.186023][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.201361][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.236044][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.251776][T11987] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 502.252733][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.806799][ T11] veth1_macvtap: left promiscuous mode [ 503.019738][ T11] veth0_macvtap: left promiscuous mode [ 503.031096][ T11] veth1_vlan: left promiscuous mode [ 503.037493][ T11] veth0_vlan: left promiscuous mode [ 504.276679][T11979] loop4: detected capacity change from 0 to 32768 [ 504.285627][T11979] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (11979) [ 504.493690][T11979] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 504.504051][T11979] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 504.512710][T11979] BTRFS info (device loop4): using free-space-tree [ 504.973627][T11979] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 505.044319][T11979] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 505.233233][T11979] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 505.305497][T11979] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 505.400180][T11979] BTRFS error (device loop4): open_ctree failed [ 506.016229][T12027] loop4: detected capacity change from 0 to 164 [ 506.028414][T12027] Unable to read rock-ridge attributes [ 506.049142][T12027] Unable to read rock-ridge attributes [ 506.088149][T12027] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 506.281770][ T11] team0 (unregistering): Port device team_slave_1 removed [ 506.381425][ T11] team0 (unregistering): Port device team_slave_0 removed [ 506.431817][T12031] loop4: detected capacity change from 0 to 512 [ 506.443241][T12031] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8002c128, mo2=0102] [ 506.461357][T12031] EXT4-fs (loop4): orphan cleanup on readonly fs [ 506.471348][T12031] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 506.485399][T12031] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 506.495027][T12031] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz-executor.4: Failed to acquire dquot type 1 [ 506.507690][T12031] EXT4-fs (loop4): Remounting filesystem read-only [ 506.517177][T12031] EXT4-fs (loop4): 1 orphan inode deleted [ 506.532219][T12031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 506.578969][T12031] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 506.616397][T10763] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.769152][T12034] loop4: detected capacity change from 0 to 1024 [ 506.797473][T12034] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 506.838510][T12034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.033225][T10763] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.262860][T11700] team0: Port device team_slave_1 added [ 507.333412][T11571] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 507.362446][T11571] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 507.384472][T11571] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 507.444494][T11571] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 507.593561][T12043] loop2: detected capacity change from 0 to 128 [ 507.649790][T12043] loop2: detected capacity change from 0 to 256 [ 507.765087][T11700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.786058][T11700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.846203][T11700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.910469][T11700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.932063][T11700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.029951][T11700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.423152][T11700] hsr_slave_0: entered promiscuous mode [ 508.474171][T11700] hsr_slave_1: entered promiscuous mode [ 508.682299][T11700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.689873][T11700] Cannot create hsr debugfs directory [ 509.874050][T12073] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. [ 510.130749][T12075] tmpfs: Bad value for 'mpol' [ 511.127067][T11571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.388290][T11571] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.613016][ T5251] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.620250][ T5251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.661701][ T5251] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.668909][ T5251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.652738][T12100] loop2: detected capacity change from 0 to 32768 [ 513.682691][T12100] bcachefs (/dev/loop2): error reading superblock: error opening /dev/loop2: EACCES [ 513.714585][T12127] loop3: detected capacity change from 0 to 64 [ 513.821475][T12129] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 515.746390][T12139] loop2: detected capacity change from 0 to 32768 [ 515.761010][T12139] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (12139) [ 515.792981][T12139] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 515.810244][T12139] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 515.818734][T12139] BTRFS info (device loop2): using free-space-tree [ 515.959433][ T7602] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 516.619545][T12169] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 543.455908][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 543.466365][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 543.478982][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 543.505181][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 543.517410][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 543.529227][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 544.164344][ T5119] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 544.174956][ T5119] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 544.184343][ T5119] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 544.192691][ T5119] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 544.200642][ T5119] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 544.208012][ T5119] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 545.580394][ T5119] Bluetooth: hci6: command tx timeout [ 546.034210][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 546.050484][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 546.059666][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 546.069467][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 546.080591][ T53] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 546.087983][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 546.300923][ T5119] Bluetooth: hci7: command tx timeout [ 547.223009][ T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 547.233125][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 547.250240][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 547.259436][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 547.280524][ T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 547.287887][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 547.360671][ T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 547.378795][ T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 547.387474][ T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 547.399993][ T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 547.408589][ T53] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 547.420348][ T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 547.660506][ T53] Bluetooth: hci6: command tx timeout [ 548.141116][ T53] Bluetooth: hci8: command tx timeout [ 548.380822][ T53] Bluetooth: hci7: command tx timeout [ 549.340793][ T53] Bluetooth: hci9: command tx timeout [ 549.500592][ T53] Bluetooth: hci10: command tx timeout [ 549.750334][ T53] Bluetooth: hci6: command tx timeout [ 550.220531][ T53] Bluetooth: hci8: command tx timeout [ 550.461443][ T5119] Bluetooth: hci7: command tx timeout [ 551.430524][ T53] Bluetooth: hci9: command tx timeout [ 551.580665][ T53] Bluetooth: hci10: command tx timeout [ 551.822687][ T53] Bluetooth: hci6: command tx timeout [ 552.301965][ T53] Bluetooth: hci8: command tx timeout [ 552.540571][ T53] Bluetooth: hci7: command tx timeout [ 553.427625][ T5119] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 553.440358][ T5119] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 553.448698][ T5119] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 553.459857][ T5119] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 553.470609][ T5119] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 553.478129][ T5119] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 553.510263][ T53] Bluetooth: hci9: command tx timeout [ 553.661242][ T53] Bluetooth: hci10: command tx timeout [ 554.380483][ T53] Bluetooth: hci8: command tx timeout [ 555.500771][ T53] Bluetooth: hci11: command tx timeout [ 555.580571][ T53] Bluetooth: hci9: command tx timeout [ 555.740675][ T53] Bluetooth: hci10: command tx timeout [ 557.580735][ T53] Bluetooth: hci11: command tx timeout [ 559.660560][ T53] Bluetooth: hci11: command tx timeout [ 561.740796][ T53] Bluetooth: hci11: command tx timeout [ 562.627362][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.640172][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 605.670242][T12189] Bluetooth: hci4: command 0x0406 tx timeout [ 605.677739][T12189] Bluetooth: hci2: command 0x0406 tx timeout [ 609.218151][ T53] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 609.228074][ T53] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 609.240545][ T53] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 609.260531][ T53] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 609.268414][ T53] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 609.279314][ T53] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 609.387248][ T5126] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 609.397306][ T5126] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 609.406294][ T5126] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 609.418262][ T5126] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 609.426298][ T5126] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 609.434996][ T5126] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 611.068395][ T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 611.100513][ T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 611.113459][ T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 611.124484][ T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 611.140847][ T53] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 611.148446][ T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 611.340448][ T5126] Bluetooth: hci12: command tx timeout [ 611.500557][ T5126] Bluetooth: hci13: command tx timeout [ 612.141795][ T53] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 612.161580][ T53] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 612.171364][ T53] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 612.179804][ T53] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 612.213451][ T53] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 612.223680][ T53] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 612.391738][ T53] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 612.402755][ T53] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 612.412037][ T53] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 612.430920][ T53] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 612.439950][ T53] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 612.447807][ T53] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 613.260521][ T5126] Bluetooth: hci14: command tx timeout [ 613.430313][ T5126] Bluetooth: hci12: command tx timeout [ 613.580699][ T5126] Bluetooth: hci13: command tx timeout [ 614.300431][ T5126] Bluetooth: hci15: command tx timeout [ 614.540541][ T5126] Bluetooth: hci16: command tx timeout [ 615.340506][ T5126] Bluetooth: hci14: command tx timeout [ 615.500247][ T5126] Bluetooth: hci12: command tx timeout [ 615.672621][ T5126] Bluetooth: hci13: command tx timeout [ 615.900263][ T5126] Bluetooth: hci3: command 0x0406 tx timeout [ 616.381520][ T53] Bluetooth: hci15: command tx timeout [ 616.620283][ T53] Bluetooth: hci16: command tx timeout [ 617.420199][ T53] Bluetooth: hci14: command tx timeout [ 617.580570][ T53] Bluetooth: hci12: command tx timeout [ 617.740541][ T53] Bluetooth: hci13: command tx timeout [ 618.462658][ T53] Bluetooth: hci15: command tx timeout [ 618.700158][ T53] Bluetooth: hci16: command tx timeout [ 618.721888][ T5126] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 618.733602][ T5126] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 618.741728][ T5126] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 618.760521][ T5126] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 618.768438][ T5126] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 618.778385][ T5126] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 619.500442][ T5126] Bluetooth: hci14: command tx timeout [ 620.540842][ T5126] Bluetooth: hci15: command tx timeout [ 620.790242][ T5126] Bluetooth: hci16: command tx timeout [ 620.870488][ T5126] Bluetooth: hci17: command tx timeout [ 622.940661][ T5126] Bluetooth: hci17: command tx timeout [ 624.074850][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.087034][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.020368][ T5126] Bluetooth: hci17: command tx timeout [ 627.100793][ T5126] Bluetooth: hci17: command tx timeout [ 664.380293][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 664.388003][ T30] Not tainted 6.10.0-rc3-syzkaller-00021-g2ef5971ff345 #0 [ 664.404913][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 664.417073][ T30] task:kworker/u8:0 state:D stack:19344 pid:11 tgid:11 ppid:2 flags:0x00004000 2024/06/12 04:00:33 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 664.438904][ T30] Workqueue: netns cleanup_net [ 664.502503][ T30] Call Trace: [ 664.505818][ T30] [ 664.508762][ T30] __schedule+0x17e8/0x4a20 [ 664.522966][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.528647][ T30] ? __pfx___schedule+0x10/0x10 [ 664.540478][ T30] ? __pfx_lock_release+0x10/0x10 [ 664.545536][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 664.560096][ T30] ? kthread_data+0x52/0xd0 [ 664.564634][ T30] ? schedule+0x90/0x320 [ 664.568903][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.588066][ T30] ? wq_worker_sleeping+0x66/0x240 [ 664.594436][ T30] ? schedule+0x90/0x320 [ 664.598707][ T30] schedule+0x14b/0x320 [ 664.614272][ T30] schedule_preempt_disabled+0x13/0x30 [ 664.619765][ T30] __mutex_lock+0x6a4/0xd70 [ 664.630214][ T30] ? __mutex_lock+0x527/0xd70 [ 664.635096][ T30] ? wg_netns_pre_exit+0x1f/0x1e0 [ 664.648622][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 664.653877][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.659538][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 664.665283][ T30] ? cleanup_net+0x427/0xcc0 [ 664.669934][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 664.689687][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.696992][ T30] wg_netns_pre_exit+0x1f/0x1e0 [ 664.715588][ T30] cleanup_net+0x617/0xcc0 [ 664.722639][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 664.727639][ T30] ? process_scheduled_works+0x945/0x1830 [ 664.735176][ T30] process_scheduled_works+0xa2e/0x1830 [ 664.748159][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 664.755446][ T30] ? assign_work+0x364/0x3d0 [ 664.760334][ T30] worker_thread+0x86d/0xd70 [ 664.764970][ T30] ? __kthread_parkme+0x169/0x1d0 [ 664.785969][ T30] ? __pfx_worker_thread+0x10/0x10 [ 664.791478][ T30] kthread+0x2f2/0x390 [ 664.795584][ T30] ? __pfx_worker_thread+0x10/0x10 [ 664.810999][ T30] ? __pfx_kthread+0x10/0x10 [ 664.815666][ T30] ret_from_fork+0x4d/0x80 [ 664.820416][ T30] ? __pfx_kthread+0x10/0x10 [ 664.825042][ T30] ret_from_fork_asm+0x1a/0x30 [ 664.829861][ T30] [ 664.843867][ T30] INFO: task kworker/u8:7:2808 blocked for more than 143 seconds. [ 664.859044][ T30] Not tainted 6.10.0-rc3-syzkaller-00021-g2ef5971ff345 #0 [ 664.866997][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 664.889511][ T30] task:kworker/u8:7 state:D stack:22416 pid:2808 tgid:2808 ppid:2 flags:0x00004000 [ 664.911376][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 664.917436][ T30] Call Trace: [ 664.928711][ T30] [ 664.931738][ T30] __schedule+0x17e8/0x4a20 [ 664.936300][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.942662][ T30] ? __pfx___schedule+0x10/0x10 [ 664.947562][ T30] ? __pfx_lock_release+0x10/0x10 [ 664.963735][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 664.969276][ T30] ? kthread_data+0x52/0xd0 [ 664.974021][ T30] ? schedule+0x90/0x320 [ 664.978301][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.995511][ T30] ? wq_worker_sleeping+0x66/0x240 [ 665.000819][ T30] ? schedule+0x90/0x320 [ 665.005096][ T30] schedule+0x14b/0x320 [ 665.009281][ T30] schedule_preempt_disabled+0x13/0x30 [ 665.029484][ T30] __mutex_lock+0x6a4/0xd70 [ 665.038388][ T30] ? mark_lock+0x9a/0x350 [ 665.047121][ T30] ? __mutex_lock+0x527/0xd70 [ 665.052085][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 665.057247][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 665.078810][ T30] addrconf_dad_work+0xd0/0x16f0 [ 665.090378][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 665.096088][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [