last executing test programs: 49.111088323s ago: executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) ioprio_set$pid(0x1, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) 48.603135355s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_deladdr={0x34, 0x15, 0x101, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_FLAGS={0x8}]}, 0x34}}, 0x0) 47.987660664s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0xe, &(0x7f0000000080)={[{@noblock_validity}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@jqfmt_vfsv1}, {@noquota}]}, 0x3, 0x45f, &(0x7f0000000140)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 36.3027616s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000013c0)={@map=r0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 36.300034796s ago: executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) unshare(0x0) r0 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 36.298464065s ago: executing program 3: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f00000004c0)={[{@rodir}, {@shortname_win95}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@uni_xlate}, {@utf8no}, {@uni_xlateno}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@fat=@errors_continue}, {@uni_xlate}, {@fat=@check_strict}]}, 0x6, 0x2d5, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 36.276742073s ago: executing program 2: syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000040), 0x4, 0x9606, &(0x7f0000012cc0)="$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") rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) 36.27599854s ago: executing program 3: syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESHEX], 0x3, 0x18a, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/104, 0x4d) 36.275557467s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 36.275199206s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "18"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 35.967164341s ago: executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000013c0)=0xc) creat(&(0x7f0000000000)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x7fffdf00a000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f0000000100)='reno\x00', 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r7, 0xffffffffffffffff, 0x12, 0x0, 0x0, @prog_id}, 0x20) write$tcp_congestion(r6, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r7, 0xffffffffffffffff, 0x12, 0x0, 0x0, @prog_id}, 0x20) write$tcp_congestion(r6, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000090581030002"], 0x0) sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1c00"/16, @ANYRES32=r2, @ANYRES32=0xee00, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB], 0x38}}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r8, 0x0, 0x39000, 0x0) 35.761194106s ago: executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002006000000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 35.718206644s ago: executing program 4: r0 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x3, 0x1, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x8, &(0x7f0000000500)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, @alu={0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000004c0)='syzkaller\x00'}, 0x80) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) 34.209292712s ago: executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000006dc0)={0x0, 0x0, &(0x7f0000006d80)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x128, 0xc, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x10c, 0x3, 0x0, 0x1, [{0x108, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0xe4, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8}]}}}, {0x4c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x58, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_RESULT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELRULE={0x68, 0x8, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_USERDATA={0x51, 0x7, 0x1, 0x0, "03a6b50d67a29dbf4a58b5ce3bd6de95331467777c63f057335dea0d9eee2e1fdab3a7a68a2f955996c35a54a58c5e951bd9d87bd50dbbab5cab180e88c04cb16d775166b2929b4ae1a1425f15"}]}], {0x14}}, 0x1b8}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES16], 0x138) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 33.737401007s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff29, 0x0}}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000a00)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) 33.314979389s ago: executing program 4: r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 32.945077854s ago: executing program 4: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 32.49168933s ago: executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000021c0)={'vxcan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031400e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 32.035807211s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x83}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 31.830021436s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000013c0)={@map=r0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 31.639533594s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}]}, 0x50}}, 0x0) 31.43903088s ago: executing program 1: r0 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) fcntl$addseals(r0, 0x409, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) mmap(&(0x7f0000585000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000f40)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0xa0400, &(0x7f0000001500)={[{@bh}, {@minixdf}, {@discard}, {@nomblk_io_submit}, {@dax}, {@orlov}]}, 0x0, 0x50e, &(0x7f0000000f80)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000e00)=ANY=[@ANYBLOB="1f32beef7749456b196274a8e7b04c7940188a03df7d5786701ddcacd80224e3b9147be77d35d19059bcd447", @ANYBLOB], 0x4c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB='user_xattr,nouser_xattr,noacl,\x00\x00\x00\x00\x00\x00\x00'], 0x3, 0x1b1, &(0x7f0000000380)="$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") write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="0a000000010001", 0x7) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x264e33, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./bus\x00', 0x2, &(0x7f0000002b80)=ANY=[@ANYBLOB="309c75755ea8da46a04375ee876730a70624fab3d6a893791e94e151cda56f903645b7904fd4e87fb82b082781446a0b06e47bd0ea596e1fb2260a62333ee9ab0cffd02372abdaeface86093a5f958c08144c8ef91db60548c3154ac48c7573b49f96beb47240c7c172f94128e943bee3266d82e748e773232100660f7a02786c8b3ab057b06708138f3116a58ef2413887b99d56f84f2381cb3f087dee66d8c3d9dfb9946c85d273f1c2c079729e48668c6660f85911d5f6f8024fae1ab7ce6de19dc6b15463d56f9f37cfd113f79f494eb2f4dcd002f0231932b921f195f9165f3a32855c2edff414b9de4", @ANYRESOCT, @ANYRESHEX=r1, @ANYRESOCT=r2, @ANYRES32, @ANYRESOCT=r3, @ANYRESOCT=0x0, @ANYRESHEX=r3], 0x81, 0x14ea, &(0x7f0000001580)="$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") syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000002a80)=ANY=[@ANYRES16=r0, @ANYBLOB="b02e19e664a97b4f6e388ecd5ae901317141ed9f0556afa3701ff17fcdea044f55128b938a5b05f8b67e0e4dc2fc4adabae53145596abf14c5da2c1609098e7fec9c96d9cb943deb8f9153cb1c345483ff619b089363e0231e8a90405a815b7ea55c1fd586ce3443447497e252379e774e17cdce6740d0f4818809932a6032c97f85b76c713dc27bdba707194dc669302d3a431f986319ceb32b46630fc818cc56f118ab8cf297012605f348a46cb4389a89d751667de9c0d194aa89fb38249a28319e52db8967a1d3dfc195a2ed43eeeb79e769f90a4256864a", @ANYRESDEC], 0x0, 0xc2d, &(0x7f00000001c0)="$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") fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 30.856347375s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pread64(r0, &(0x7f0000000980)=""/209, 0xfffffffffffffd61, 0x0) 30.42662034s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x2c}}, 0x0) 30.048905535s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000140)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_PORT_MAX]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0xffffffffffffff64, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0x56}}}]}]}, 0xac}}, 0x0) 6.246651715s ago: executing program 2: r0 = io_uring_setup(0x7bda, &(0x7f0000000080)) syz_open_dev$midi(&(0x7f0000000000), 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x16, 0x20000002, r1) 5.739273952s ago: executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000500)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000580)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x264e33, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000100)={0x1f, @fixed}, 0x8) listen(r3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socket$unix(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000000)=0x200, 0x4) fallocate(0xffffffffffffffff, 0x40, 0x0, 0x0) 2.91176886s ago: executing program 4: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000026c0)={&(0x7f0000002640)='track_foreign_dirty\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000140), 0x12) 1.614723398s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}]}]}, 0x38}}, 0x0) 0s ago: executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$inet(0x2, 0x6, 0x0) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) kernel console output (not intermixed with test programs): root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b627cf69 code=0x7fc00000 [ 173.379158][ T29] audit: type=1326 audit(1717956215.861:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6425 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b627cf69 code=0x7fc00000 [ 173.565081][ T6446] netlink: 4716 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.625078][ T6446] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.4'. [ 174.073230][ T6452] loop3: detected capacity change from 0 to 8 [ 175.786346][ T5110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.880003][ T29] audit: type=1800 audit(1717956218.711:135): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1933 res=0 errno=0 [ 175.915392][ T5155] IPVS: starting estimator thread 0... [ 175.918937][ T6465] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 176.009860][ T6466] IPVS: using max 25 ests per chain, 60000 per kthread [ 177.926430][ T6485] netlink: 4716 bytes leftover after parsing attributes in process `syz-executor.4'. [ 177.952926][ T6485] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.603362][ T6501] loop4: detected capacity change from 0 to 16 [ 178.734540][ T6501] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.943181][ T29] audit: type=1800 audit(1717956221.771:136): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1960 res=0 errno=0 [ 181.318926][ T6528] loop1: detected capacity change from 0 to 2048 [ 182.125348][ T6528] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 182.173530][ T6528] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 182.213835][ T6528] UDF-fs: Scanning with blocksize 512 failed [ 182.238460][ T6528] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.459991][ T6532] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 183.055447][ T6537] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.338032][ T6543] loop1: detected capacity change from 0 to 64 [ 183.430006][ T6541] 9pnet_fd: Insufficient options for proto=fd [ 183.895510][ T29] audit: type=1800 audit(1717956226.721:137): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1954 res=0 errno=0 [ 184.327822][ T6551] loop1: detected capacity change from 0 to 1024 [ 184.396166][ T6551] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 184.418264][ T6551] JBD2: no valid journal superblock found [ 184.424869][ T6551] EXT4-fs (loop1): Could not load journal inode [ 184.694386][ T6555] loop3: detected capacity change from 0 to 24 [ 184.775153][ T6555] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 184.782210][ T6556] loop4: detected capacity change from 0 to 64 [ 184.810239][ T6555] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 187.483629][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 187.771391][ T6581] loop0: detected capacity change from 0 to 164 [ 191.037909][ T29] audit: type=1326 audit(1717956233.861:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6601 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28c447cf69 code=0x7fc00000 [ 191.650303][ T29] audit: type=1326 audit(1717956234.481:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6601 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f28c447cf69 code=0x7fc00000 [ 191.654106][ T6626] loop3: detected capacity change from 0 to 24 [ 191.718352][ T6626] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 191.734821][ T6626] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 192.416214][ T6634] loop4: detected capacity change from 0 to 64 [ 192.496634][ T6634] 9pnet_fd: Insufficient options for proto=fd [ 192.641215][ T6643] Zero length message leads to an empty skb [ 192.996183][ T6647] loop0: detected capacity change from 0 to 1024 [ 193.313065][ T35] hfsplus: b-tree write err: -5, ino 4 [ 193.927881][ T6665] loop4: detected capacity change from 0 to 24 [ 193.989377][ T6665] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 193.997434][ T6665] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 194.542599][ T6673] netlink: 65039 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.693903][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.716976][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.179013][ T6682] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 195.533762][ T6690] loop1: detected capacity change from 0 to 764 [ 195.587207][ T6690] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 196.000731][ T29] audit: type=1326 audit(1717956238.831:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6031e7cf69 code=0x7ffc0000 [ 196.028460][ T29] audit: type=1326 audit(1717956238.831:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6031e7cf69 code=0x7ffc0000 [ 196.058863][ T29] audit: type=1326 audit(1717956238.851:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f6031e7cf69 code=0x7ffc0000 [ 196.085938][ T29] audit: type=1326 audit(1717956238.851:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6031e7cf69 code=0x7ffc0000 [ 196.125953][ T29] audit: type=1326 audit(1717956238.851:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6031e7cf69 code=0x7ffc0000 [ 196.159339][ T29] audit: type=1326 audit(1717956238.851:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f6031e7cf69 code=0x7ffc0000 [ 196.189824][ T29] audit: type=1326 audit(1717956238.851:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6031e7cf69 code=0x7ffc0000 [ 196.224892][ T29] audit: type=1326 audit(1717956238.851:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6031e7cf69 code=0x7ffc0000 [ 196.251881][ T29] audit: type=1326 audit(1717956238.881:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f6031e7cf69 code=0x7ffc0000 [ 196.279371][ T29] audit: type=1326 audit(1717956238.881:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6031e7cf69 code=0x7ffc0000 [ 196.309427][ T29] audit: type=1326 audit(1717956238.881:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6031e7cf69 code=0x7ffc0000 [ 196.341834][ T29] audit: type=1326 audit(1717956238.911:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f6031e7cf69 code=0x7ffc0000 [ 196.779001][ T5111] Bluetooth: hci0: command 0x0406 tx timeout [ 196.782149][ T5105] Bluetooth: hci4: command 0x0406 tx timeout [ 196.788140][ T4477] Bluetooth: hci3: command 0x0406 tx timeout [ 196.791825][ T5105] Bluetooth: hci2: command 0x0406 tx timeout [ 197.152128][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.232919][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.523585][ T6719] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.771811][ T1109] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.872804][ T1109] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.975324][ T1109] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.093968][ T1109] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.185600][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 198.197503][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 198.213727][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 198.233507][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 198.243086][ T5114] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 198.251843][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 198.370033][ T1109] bridge_slave_1: left allmulticast mode [ 198.375756][ T1109] bridge_slave_1: left promiscuous mode [ 198.395120][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.420366][ T1109] bridge_slave_0: left allmulticast mode [ 198.426054][ T1109] bridge_slave_0: left promiscuous mode [ 198.470272][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.184896][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.203557][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.214708][ T1109] bond0 (unregistering): Released all slaves [ 199.620449][ T6746] loop4: detected capacity change from 0 to 256 [ 199.663365][ T6746] exfat: Deprecated parameter 'utf8' [ 199.716286][ T6746] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 199.783436][ T1109] hsr_slave_0: left promiscuous mode [ 199.793772][ T1109] hsr_slave_1: left promiscuous mode [ 199.809350][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.830551][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.848520][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.862202][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.884765][ T1109] veth1_macvtap: left promiscuous mode [ 199.890907][ T1109] veth0_macvtap: left promiscuous mode [ 199.898141][ T1109] veth1_vlan: left promiscuous mode [ 199.903688][ T1109] veth0_vlan: left promiscuous mode [ 200.292936][ T5114] Bluetooth: hci3: command tx timeout [ 200.614650][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 200.647180][ T6756] loop4: detected capacity change from 0 to 256 [ 200.752825][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 200.818186][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.830688][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.838817][ T6760] loop3: detected capacity change from 0 to 512 [ 200.861002][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.879564][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.909603][ T5118] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 200.922315][ T6760] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.933402][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 200.967338][ T6760] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 200.979805][ T6760] EXT4-fs (loop3): group descriptors corrupted! [ 201.617841][ T6760] loop3: detected capacity change from 0 to 32768 [ 201.696107][ T6757] vlan2: entered promiscuous mode [ 201.702074][ T6757] macvlan1: entered promiscuous mode [ 201.743142][ T6757] team0: Port device vlan2 added [ 201.777156][ T6729] chnl_net:caif_netlink_parms(): no params data found [ 201.866061][ T6760] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nodiscard,nojournal_transaction_names [ 201.929947][ T6760] bcachefs (loop3): recovering from clean shutdown, journal seq 13 [ 202.028075][ T6760] bcachefs (loop3): alloc_read... done [ 202.070042][ T6760] bcachefs (loop3): stripes_read... done [ 202.103539][ T6760] bcachefs (loop3): snapshots_read... done [ 202.142078][ T6760] bcachefs (loop3): journal_replay... done [ 202.177427][ T6760] bcachefs (loop3): resume_logged_ops... done [ 202.187765][ T6760] bcachefs (loop3): going read-write [ 202.213691][ T6760] bcachefs (loop3): done starting filesystem [ 202.229105][ T6729] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.264676][ T6729] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.290271][ T6729] bridge_slave_0: entered allmulticast mode [ 202.319311][ T6729] bridge_slave_0: entered promiscuous mode [ 202.370542][ T5114] Bluetooth: hci3: command tx timeout [ 202.422428][ T6729] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.431180][ T6729] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.438607][ T6729] bridge_slave_1: entered allmulticast mode [ 202.448477][ T6729] bridge_slave_1: entered promiscuous mode [ 202.541242][ T5711] bcachefs (loop3): shutting down [ 202.546327][ T5711] bcachefs (loop3): going read-only [ 202.552068][ T5711] bcachefs (loop3): finished waiting for writes to stop [ 202.564751][ T6729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.580966][ T5711] bcachefs (loop3): flushing journal and stopping allocators, journal seq 13 [ 202.602938][ T6729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.622197][ T5711] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13 [ 202.660134][ T6759] chnl_net:caif_netlink_parms(): no params data found [ 202.667599][ T5711] bcachefs (loop3): shutdown complete, journal seq 14 [ 202.689613][ T5711] bcachefs (loop3): marking filesystem clean [ 202.749510][ T6729] team0: Port device team_slave_0 added [ 202.767854][ T5711] bcachefs (loop3): shutdown complete [ 202.831597][ T2853] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.882108][ T6729] team0: Port device team_slave_1 added [ 203.010967][ T5118] Bluetooth: hci2: command tx timeout [ 203.042381][ T2853] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.153123][ T2853] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.190196][ T6729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.197315][ T6729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.232513][ T6729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.324284][ T6729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.340392][ T6729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.368340][ T6729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.477477][ T2853] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.530616][ T6759] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.538927][ T6759] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.552232][ T6759] bridge_slave_0: entered allmulticast mode [ 203.566600][ T6759] bridge_slave_0: entered promiscuous mode [ 203.567158][ T6792] loop4: detected capacity change from 0 to 1024 [ 203.579452][ T6759] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.595015][ T6759] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.606316][ T6759] bridge_slave_1: entered allmulticast mode [ 203.614655][ T6759] bridge_slave_1: entered promiscuous mode [ 203.651743][ T6792] hfsplus: unable to parse mount options [ 203.754753][ T6759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.769188][ T6759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.818438][ T6729] hsr_slave_0: entered promiscuous mode [ 203.833570][ T6729] hsr_slave_1: entered promiscuous mode [ 203.846641][ T6729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.866720][ T6729] Cannot create hsr debugfs directory [ 204.593098][ T5118] Bluetooth: hci3: command tx timeout [ 205.091760][ T5118] Bluetooth: hci2: command tx timeout [ 205.155983][ T6759] team0: Port device team_slave_0 added [ 205.188834][ T2853] bridge_slave_1: left allmulticast mode [ 205.200960][ T2853] bridge_slave_1: left promiscuous mode [ 205.209385][ T2853] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.268277][ T2853] bridge_slave_0: left allmulticast mode [ 205.281806][ T2853] bridge_slave_0: left promiscuous mode [ 205.288213][ T2853] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.904888][ T2853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.921489][ T2853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.956037][ T2853] bond0 (unregistering): Released all slaves [ 205.990776][ T6759] team0: Port device team_slave_1 added [ 206.075548][ T6802] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.089891][ T6802] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.248102][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.257657][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.292786][ T6759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.365239][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.378253][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.404417][ T5114] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.411814][ T6759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.411867][ T5114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.435084][ T5114] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.446818][ T5114] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.455804][ T5114] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 206.464100][ T5114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.595575][ T6759] hsr_slave_0: entered promiscuous mode [ 206.611239][ T6759] hsr_slave_1: entered promiscuous mode [ 206.619265][ T6759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.630864][ T6759] Cannot create hsr debugfs directory [ 206.644453][ T2853] hsr_slave_0: left promiscuous mode [ 206.652343][ T2853] hsr_slave_1: left promiscuous mode [ 206.658544][ T2853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.671586][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.683464][ T2853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.690061][ T5114] Bluetooth: hci3: command tx timeout [ 206.691815][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.738097][ T2853] veth1_macvtap: left promiscuous mode [ 206.748272][ T2853] veth0_macvtap: left promiscuous mode [ 206.755491][ T2853] veth1_vlan: left promiscuous mode [ 206.766805][ T2853] veth0_vlan: left promiscuous mode [ 206.775898][ T5152] IPVS: starting estimator thread 0... [ 206.904606][ T6810] IPVS: using max 17 ests per chain, 40800 per kthread [ 207.175142][ T5114] Bluetooth: hci2: command tx timeout [ 207.402260][ T6814] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.457782][ T2853] team0 (unregistering): Port device team_slave_1 removed [ 207.511072][ T2853] team0 (unregistering): Port device team_slave_0 removed [ 208.530053][ T5114] Bluetooth: hci4: command tx timeout [ 208.569590][ T6823] ipvlan2: entered promiscuous mode [ 208.576756][ T6823] ipvlan2: entered allmulticast mode [ 208.582575][ T6823] syz_tun: entered allmulticast mode [ 208.704909][ T2853] IPVS: stop unused estimator thread 0... [ 208.901353][ T6805] chnl_net:caif_netlink_parms(): no params data found [ 208.966296][ T2853] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.081110][ T2853] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.106938][ T6805] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.114653][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.125202][ T6805] bridge_slave_0: entered allmulticast mode [ 209.133428][ T6805] bridge_slave_0: entered promiscuous mode [ 209.142696][ T6805] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.150045][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.157286][ T6805] bridge_slave_1: entered allmulticast mode [ 209.165575][ T6805] bridge_slave_1: entered promiscuous mode [ 209.205478][ T2853] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.250825][ T5114] Bluetooth: hci2: command tx timeout [ 209.308143][ T2853] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.338769][ T6805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.370968][ T6805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.446490][ T6805] team0: Port device team_slave_0 added [ 209.457798][ T6805] team0: Port device team_slave_1 added [ 209.499984][ T6805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.507003][ T6805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.537398][ T6805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.553978][ T6805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.561040][ T6805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.594077][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 209.629786][ T6805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.872571][ T6805] hsr_slave_0: entered promiscuous mode [ 209.887199][ T6805] hsr_slave_1: entered promiscuous mode [ 209.894875][ T6805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.909752][ T6805] Cannot create hsr debugfs directory [ 209.930991][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.931563][ T6729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 209.949944][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.958597][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.967874][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.971326][ T6729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 209.982674][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.994454][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.066110][ T2853] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.090581][ T6729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.150134][ T6729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.187479][ T2853] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.244943][ T6759] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.298988][ T2853] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.328901][ T6759] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.402910][ T2853] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.418430][ T6759] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 210.429104][ T6759] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 210.611600][ T5114] Bluetooth: hci4: command tx timeout [ 210.838152][ T2853] bridge_slave_1: left allmulticast mode [ 210.856508][ T2853] bridge_slave_1: left promiscuous mode [ 210.865101][ T2853] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.882031][ T2853] bridge_slave_0: left allmulticast mode [ 210.888201][ T2853] bridge_slave_0: left promiscuous mode [ 210.894726][ T2853] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.906807][ T2853] bridge_slave_1: left allmulticast mode [ 210.912722][ T2853] bridge_slave_1: left promiscuous mode [ 210.918590][ T2853] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.932323][ T2853] bridge_slave_0: left allmulticast mode [ 210.938222][ T2853] bridge_slave_0: left promiscuous mode [ 210.947334][ T2853] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.636312][ T6846] loop3: detected capacity change from 0 to 1024 [ 211.693475][ T6846] hfsplus: unable to parse mount options [ 211.793328][ T2853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.806920][ T2853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.821278][ T2853] bond0 (unregistering): Released all slaves [ 212.017126][ T2853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.036588][ T2853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.054639][ T2853] bond0 (unregistering): Released all slaves [ 212.061499][ T5114] Bluetooth: hci0: command tx timeout [ 212.102517][ T6729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.946659][ T5114] Bluetooth: hci4: command tx timeout [ 213.072464][ T6729] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.084697][ T6832] chnl_net:caif_netlink_parms(): no params data found [ 213.301561][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.308770][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.323963][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.331259][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.454733][ T6759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.626790][ T6832] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.634452][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.642009][ T6832] bridge_slave_0: entered allmulticast mode [ 213.649412][ T6832] bridge_slave_0: entered promiscuous mode [ 213.694921][ T6832] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.703831][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.712365][ T6832] bridge_slave_1: entered allmulticast mode [ 213.721669][ T6832] bridge_slave_1: entered promiscuous mode [ 213.767823][ T6832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.788144][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 213.788164][ T29] audit: type=1326 audit(1717956256.611:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6854 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c4307cf69 code=0x0 [ 213.879335][ T6832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.936553][ T6759] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.970255][ T6832] team0: Port device team_slave_0 added [ 213.977051][ T6805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 214.002653][ T6832] team0: Port device team_slave_1 added [ 214.023993][ T2853] hsr_slave_0: left promiscuous mode [ 214.036497][ T2853] hsr_slave_1: left promiscuous mode [ 214.043077][ T2853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.053357][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.064023][ T2853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.072691][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.086093][ T2853] hsr_slave_0: left promiscuous mode [ 214.092384][ T2853] hsr_slave_1: left promiscuous mode [ 214.098734][ T2853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.106696][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.114887][ T2853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.123609][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.139919][ T5114] Bluetooth: hci0: command tx timeout [ 214.176411][ T2853] veth1_macvtap: left promiscuous mode [ 214.182247][ T2853] veth0_macvtap: left promiscuous mode [ 214.188034][ T2853] veth1_vlan: left promiscuous mode [ 214.195351][ T2853] veth0_vlan: left promiscuous mode [ 214.212999][ T2853] macvlan1: left promiscuous mode [ 214.218548][ T2853] veth1_macvtap: left promiscuous mode [ 214.224349][ T2853] veth0_macvtap: left promiscuous mode [ 214.232040][ T2853] veth1_vlan: left promiscuous mode [ 214.237460][ T2853] veth0_vlan: left promiscuous mode [ 214.962722][ T2853] team0 (unregistering): Port device team_slave_1 removed [ 215.014758][ T5114] Bluetooth: hci4: command tx timeout [ 215.029124][ T2853] team0 (unregistering): Port device team_slave_0 removed [ 215.133287][ T6858] Cannot find add_set index 0 as target [ 215.577069][ T2853] team0 (unregistering): Port device vlan2 removed [ 216.049048][ T2853] team0 (unregistering): Port device team_slave_1 removed [ 216.098413][ T2853] team0 (unregistering): Port device team_slave_0 removed [ 216.211386][ T5114] Bluetooth: hci0: command tx timeout [ 216.814700][ T6805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 216.886322][ T6805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 216.936427][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.943676][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.978012][ T6805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.020789][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.041011][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.070557][ T6832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.086202][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.093652][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.108956][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.116697][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.143298][ T6832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.368188][ T6832] hsr_slave_0: entered promiscuous mode [ 217.377627][ T6832] hsr_slave_1: entered promiscuous mode [ 217.592792][ T6729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.901280][ T6729] veth0_vlan: entered promiscuous mode [ 217.909365][ T6876] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 217.924783][ T6876] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 217.946745][ T6729] veth1_vlan: entered promiscuous mode [ 217.976433][ T2853] IPVS: stop unused estimator thread 0... [ 218.007790][ T6805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.080689][ T6759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.132187][ T6805] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.158280][ T6729] veth0_macvtap: entered promiscuous mode [ 218.182864][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.190176][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.219931][ T6729] veth1_macvtap: entered promiscuous mode [ 218.287198][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.294570][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.297869][ T6878] loop3: detected capacity change from 0 to 512 [ 218.311998][ T5114] Bluetooth: hci0: command tx timeout [ 218.346712][ T6878] EXT4-fs: Ignoring removed mblk_io_submit option [ 218.366610][ T6878] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 218.380359][ T6878] EXT4-fs (loop3): group descriptors corrupted! [ 218.419315][ T6759] veth0_vlan: entered promiscuous mode [ 218.465203][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.478129][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.495515][ T6729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.508646][ T6832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.527073][ T6832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.548242][ T6832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.574439][ T6832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.595776][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.614825][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.628036][ T6729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.639007][ T6759] veth1_vlan: entered promiscuous mode [ 218.686051][ T6729] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.710462][ T6729] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.719320][ T6729] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.738097][ T6729] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.891477][ T6759] veth0_macvtap: entered promiscuous mode [ 218.982817][ T6759] veth1_macvtap: entered promiscuous mode [ 219.056918][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.069193][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.082162][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.093202][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.105645][ T6759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.134582][ T975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.147322][ T975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.151523][ T6878] loop3: detected capacity change from 0 to 32768 [ 219.178514][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.191376][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.204086][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.215109][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.227444][ T6759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.243085][ T6805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.268333][ T6759] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.292018][ T6759] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.301399][ T6759] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.311852][ T6759] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.313080][ T6878] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nodiscard,nojournal_transaction_names [ 219.346947][ T6878] bcachefs (loop3): recovering from clean shutdown, journal seq 13 [ 219.363051][ T975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.373662][ T975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.408424][ T6878] bcachefs (loop3): alloc_read... done [ 219.415895][ T6878] bcachefs (loop3): stripes_read... done [ 219.431189][ T6878] bcachefs (loop3): snapshots_read... done [ 219.452613][ T6878] bcachefs (loop3): journal_replay... done [ 219.469065][ T6878] bcachefs (loop3): resume_logged_ops... done [ 219.477272][ T6878] bcachefs (loop3): going read-write [ 219.505853][ T6878] bcachefs (loop3): done starting filesystem [ 219.539116][ T6805] veth0_vlan: entered promiscuous mode [ 219.587359][ T6832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.604320][ T6805] veth1_vlan: entered promiscuous mode [ 219.660913][ T2853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.676815][ T2853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.726446][ T6832] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.735008][ T5711] bcachefs (loop3): shutting down [ 219.750386][ T5711] bcachefs (loop3): going read-only [ 219.757119][ T5711] bcachefs (loop3): finished waiting for writes to stop [ 219.788147][ T5711] bcachefs (loop3): flushing journal and stopping allocators, journal seq 13 [ 219.796054][ T6805] veth0_macvtap: entered promiscuous mode [ 219.804695][ T6893] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 219.819638][ T2853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.828633][ T2853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.838090][ T5711] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13 [ 219.852009][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.859165][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.881589][ T5711] bcachefs (loop3): shutdown complete, journal seq 14 [ 219.884216][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.895988][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.897762][ T5711] bcachefs (loop3): marking filesystem clean [ 219.942647][ T6805] veth1_macvtap: entered promiscuous mode [ 219.950701][ T5711] bcachefs (loop3): shutdown complete [ 220.073308][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.091457][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.104131][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.115868][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.128274][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.143033][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.156934][ T6805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.170518][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.182402][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.197566][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.227531][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.238695][ T6805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.251005][ T6805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.262942][ T6805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.328539][ T6805] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.356604][ T6805] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.368710][ T6805] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.390029][ T6805] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.444055][ T6832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.505810][ T6896] loop1: detected capacity change from 0 to 8192 [ 220.570460][ T6896] loop1: p2 p3 p4 [ 220.606186][ T6896] loop1: p2 start 14935 is beyond EOD, truncated [ 220.630282][ T6896] loop1: p3 size 196608 extends beyond EOD, truncated [ 220.720520][ T6896] loop1: p4 start 4026530307 is beyond EOD, truncated [ 220.764136][ T975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.799464][ T975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.927352][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.954005][ T6896] overlayfs: missing 'lowerdir' [ 220.956372][ T29] audit: type=1804 audit(1717956263.781:158): pid=6896 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2883924693/syzkaller.89q5EJ/0/bus" dev="sda1" ino=1947 res=1 errno=0 [ 221.002543][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.068918][ T6896] : Can't lookup blockdev [ 221.161932][ T6832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.452231][ T6832] veth0_vlan: entered promiscuous mode [ 221.476977][ T6832] veth1_vlan: entered promiscuous mode [ 221.528749][ T6832] veth0_macvtap: entered promiscuous mode [ 221.541337][ T6832] veth1_macvtap: entered promiscuous mode [ 221.563424][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.576032][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.586637][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.597646][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.608183][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.621103][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.634663][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.647414][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.665289][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.675270][ T6915] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 221.685721][ T6915] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 221.721366][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.736014][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.751187][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.762187][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.775928][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.787003][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.797431][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.808047][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.822701][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.837392][ T6832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.848469][ T6832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.876879][ T6832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.887147][ T6832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.057878][ T975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.160869][ T975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.075608][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.087018][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.493113][ T29] audit: type=1326 audit(1717956267.321:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6945 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986827cf69 code=0x7ffc0000 [ 224.515495][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.542478][ T29] audit: type=1326 audit(1717956267.321:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6945 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986827cf69 code=0x7ffc0000 [ 224.565279][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.585953][ T29] audit: type=1326 audit(1717956267.351:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6945 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f986827cf69 code=0x7ffc0000 [ 224.615058][ T29] audit: type=1326 audit(1717956267.361:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6945 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986827cf69 code=0x7ffc0000 [ 224.644438][ T29] audit: type=1326 audit(1717956267.361:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6945 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986827cf69 code=0x7ffc0000 [ 224.668967][ T29] audit: type=1326 audit(1717956267.361:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6945 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f986827cf69 code=0x7ffc0000 [ 224.674318][ T6951] tmpfs: Bad value for 'mpol' [ 224.698805][ T29] audit: type=1326 audit(1717956267.361:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6945 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986827cf69 code=0x7ffc0000 [ 224.731260][ T29] audit: type=1326 audit(1717956267.361:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6945 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f986827a6e7 code=0x7ffc0000 [ 224.760796][ T29] audit: type=1326 audit(1717956267.361:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6945 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f98682403b9 code=0x7ffc0000 [ 225.044475][ T6946] loop3: detected capacity change from 0 to 40427 [ 225.127834][ T6946] F2FS-fs (loop3): Found nat_bits in checkpoint [ 225.185096][ T6946] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 225.511717][ T5711] syz-executor.3: attempt to access beyond end of device [ 225.511717][ T5711] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 225.529586][ T5711] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 225.544609][ T5711] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 225.751189][ T6967] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.4'. [ 225.976512][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 226.293672][ T6975] loop2: detected capacity change from 0 to 512 [ 226.360918][ T6975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.377513][ T6975] ext4 filesystem being mounted at /root/syzkaller-testdir3009208966/syzkaller.9B4pHi/6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.479772][ T6982] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.494620][ T6975] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 226.495749][ T6982] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.525336][ T6975] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz-executor.2: mark_inode_dirty error [ 226.566707][ T6975] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 226.581200][ T6975] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz-executor.2: mark_inode_dirty error [ 226.642604][ T6975] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 226.669080][ T6986] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 226.709375][ T6985] loop1: detected capacity change from 0 to 4096 [ 226.724819][ T6986] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 226.748599][ T6985] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 226.775870][ T6985] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 226.918882][ T6805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.007383][ T6991] libceph: resolve '0.' (ret=-3): failed [ 227.124158][ T11] ntfs3: loop1: ino=5, ntfs3_write_inode failed, -22. [ 227.518563][ T6996] loop2: detected capacity change from 0 to 128 [ 227.555638][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 227.555658][ T29] audit: type=1800 audit(1717956270.381:246): pid=6996 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048620 res=0 errno=0 [ 227.608502][ T29] audit: type=1804 audit(1717956270.421:247): pid=6996 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3009208966/syzkaller.9B4pHi/7/file0/bus" dev="loop2" ino=1048620 res=1 errno=0 [ 227.638424][ T6996] syz-executor.2: attempt to access beyond end of device [ 227.638424][ T6996] loop2: rw=0, sector=97, nr_sectors = 64 limit=128 [ 228.611679][ T7014] loop0: detected capacity change from 0 to 64 [ 228.668820][ T29] audit: type=1800 audit(1717956271.491:248): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 228.703735][ T29] audit: type=1804 audit(1717956271.531:249): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3776932081/syzkaller.3csIHK/12/file1/file1" dev="loop0" ino=18 res=1 errno=0 [ 228.729109][ T29] audit: type=1800 audit(1717956271.531:250): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 229.036084][ T7020] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.1'. [ 230.291461][ T7031] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 230.507549][ T7034] loop3: detected capacity change from 0 to 128 [ 230.562635][ T29] audit: type=1800 audit(1717956273.391:251): pid=7034 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048623 res=0 errno=0 [ 230.580999][ T7034] syz-executor.3: attempt to access beyond end of device [ 230.580999][ T7034] loop3: rw=0, sector=97, nr_sectors = 64 limit=128 [ 230.585127][ T29] audit: type=1804 audit(1717956273.391:252): pid=7034 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1336651697/syzkaller.P6exsq/91/file0/bus" dev="loop3" ino=1048623 res=1 errno=0 [ 231.768372][ T7050] loop4: detected capacity change from 0 to 16 [ 231.815963][ T7050] erofs: (device loop4): mounted with root inode @ nid 36. [ 232.134484][ T7055] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.867783][ T7062] loop2: detected capacity change from 0 to 40427 [ 232.927746][ T7062] F2FS-fs (loop2): Found nat_bits in checkpoint [ 233.032758][ T7062] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 233.307210][ T6805] syz-executor.2: attempt to access beyond end of device [ 233.307210][ T6805] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 233.324401][ T6805] syz-executor.2: attempt to access beyond end of device [ 233.324401][ T6805] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 233.356051][ T6805] syz-executor.2: attempt to access beyond end of device [ 233.356051][ T6805] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 233.371431][ T6805] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 233.603804][ T7079] loop3: detected capacity change from 0 to 512 [ 233.864539][ T1109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.973737][ T1109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.069506][ T1109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.175413][ T1109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.290429][ T7087] loop4: detected capacity change from 0 to 2048 [ 234.346861][ T1109] bridge_slave_1: left allmulticast mode [ 234.355208][ T1109] bridge_slave_1: left promiscuous mode [ 234.356454][ T7087] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.362563][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.389080][ T1109] bridge_slave_0: left allmulticast mode [ 234.395014][ T1109] bridge_slave_0: left promiscuous mode [ 234.401477][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.415976][ T29] audit: type=1326 audit(1717956277.241:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7088 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3dd047cf69 code=0x0 [ 234.886956][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 234.906545][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 234.916843][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 234.928516][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 234.955993][ T5118] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 234.975256][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.165272][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.177952][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.193264][ T1109] bond0 (unregistering): Released all slaves [ 235.550955][ T1109] hsr_slave_0: left promiscuous mode [ 235.564148][ T1109] hsr_slave_1: left promiscuous mode [ 235.606815][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.615127][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.627886][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.635697][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.671782][ T1109] veth1_macvtap: left promiscuous mode [ 235.677391][ T1109] veth0_macvtap: left promiscuous mode [ 235.684232][ T1109] veth1_vlan: left promiscuous mode [ 235.689955][ T1109] veth0_vlan: left promiscuous mode [ 235.793302][ T7109] loop0: detected capacity change from 0 to 1024 [ 235.860488][ T7109] EXT4-fs: Ignoring removed orlov option [ 235.885346][ T7109] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 235.900037][ T7109] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 235.927643][ T7109] EXT4-fs (loop0): invalid journal inode [ 235.948356][ T7109] EXT4-fs (loop0): can't get journal size [ 235.990013][ T7109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 236.281437][ T6729] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.477267][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 236.556958][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 236.729381][ T7122] loop3: detected capacity change from 0 to 512 [ 236.881166][ T7122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.894183][ T7122] ext4 filesystem being mounted at /root/syzkaller-testdir1336651697/syzkaller.P6exsq/99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.090009][ T5118] Bluetooth: hci4: command tx timeout [ 237.158686][ T5711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.346764][ T7096] chnl_net:caif_netlink_parms(): no params data found [ 237.499085][ T7096] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.507687][ T7096] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.516097][ T7096] bridge_slave_0: entered allmulticast mode [ 237.524415][ T7096] bridge_slave_0: entered promiscuous mode [ 237.534436][ T7096] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.541898][ T7096] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.549437][ T7096] bridge_slave_1: entered allmulticast mode [ 237.557280][ T7096] bridge_slave_1: entered promiscuous mode [ 237.623747][ T7096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.646292][ T7096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.707855][ T7096] team0: Port device team_slave_0 added [ 237.718822][ T7096] team0: Port device team_slave_1 added [ 237.759229][ T7096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.766865][ T7096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.795645][ T7096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.816828][ T7096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.828779][ T7096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.861617][ T7096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.944159][ T7096] hsr_slave_0: entered promiscuous mode [ 237.951810][ T7096] hsr_slave_1: entered promiscuous mode [ 237.960728][ T7096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.968385][ T7096] Cannot create hsr debugfs directory [ 238.507891][ T7096] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 238.523166][ T7096] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 238.539588][ T7096] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 238.557465][ T7096] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 238.680593][ T7147] IPVS: length: 24 != 1244103992 [ 238.699389][ T7096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.736076][ T7096] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.755332][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.762567][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.784291][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.791665][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.874291][ T7096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.095015][ T7096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.156130][ T7096] veth0_vlan: entered promiscuous mode [ 239.169820][ T5118] Bluetooth: hci4: command tx timeout [ 239.184283][ T7096] veth1_vlan: entered promiscuous mode [ 239.232825][ T7096] veth0_macvtap: entered promiscuous mode [ 239.249287][ T7096] veth1_macvtap: entered promiscuous mode [ 239.270564][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.285401][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.306414][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.317237][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.327601][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.343943][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.357881][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.369784][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.382263][ T7096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.402945][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.418191][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.428552][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.440359][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.450727][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.464816][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.476687][ T7096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.487820][ T7096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.502413][ T7096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.517406][ T7096] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.526208][ T7096] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.535963][ T7096] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.545296][ T7096] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.656088][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.664617][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.705648][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.714857][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.468764][ T7173] loop3: detected capacity change from 0 to 256 [ 240.702763][ T5711] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 240.711965][ T5711] FAT-fs (loop3): Filesystem has been set read-only [ 240.725519][ T5711] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 241.249824][ T5114] Bluetooth: hci4: command tx timeout [ 241.272871][ T7186] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 241.404473][ T7190] loop4: detected capacity change from 0 to 2048 [ 241.467551][ T7190] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.793193][ T7196] IPVS: length: 24 != 1244103992 [ 242.850070][ T5114] Bluetooth: hci1: command 0x0406 tx timeout [ 243.222773][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.248314][ T7216] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 243.276361][ T7216] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 243.319306][ T29] audit: type=1326 audit(1717956286.131:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7208 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75e647cf69 code=0x0 [ 243.351497][ T5118] Bluetooth: hci4: command tx timeout [ 243.395310][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.499554][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.583903][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.719052][ T11] bridge_slave_1: left allmulticast mode [ 243.725464][ T11] bridge_slave_1: left promiscuous mode [ 243.733606][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.745644][ T11] bridge_slave_0: left allmulticast mode [ 243.752402][ T11] bridge_slave_0: left promiscuous mode [ 243.759714][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.410660][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.451707][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.474443][ T11] bond0 (unregistering): Released all slaves [ 244.494579][ T5114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.508099][ T5114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.519594][ T5114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.529471][ T5114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.539153][ T5114] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 244.548167][ T5114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.598390][ T7223] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 244.608185][ T7223] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 244.925921][ T7228] chnl_net:caif_netlink_parms(): no params data found [ 245.043536][ T11] hsr_slave_0: left promiscuous mode [ 245.054190][ T11] hsr_slave_1: left promiscuous mode [ 245.067871][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.080040][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.088869][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.096885][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.121034][ T11] veth1_macvtap: left promiscuous mode [ 245.126706][ T11] veth0_macvtap: left promiscuous mode [ 245.133064][ T11] veth1_vlan: left promiscuous mode [ 245.138515][ T11] veth0_vlan: left promiscuous mode [ 245.697869][ T29] audit: type=1804 audit(1717956288.521:255): pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4149462928/syzkaller.Slrzlu/7/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 245.955670][ T11] team0 (unregistering): Port device team_slave_1 removed [ 246.025043][ T7248] loop0: detected capacity change from 0 to 256 [ 246.036230][ T11] team0 (unregistering): Port device team_slave_0 removed [ 246.154475][ T7250] loop1: detected capacity change from 0 to 2048 [ 246.162587][ T7248] FAT-fs (loop0): Directory bread(block 64) failed [ 246.187510][ T7248] FAT-fs (loop0): Directory bread(block 65) failed [ 246.206733][ T7248] FAT-fs (loop0): Directory bread(block 66) failed [ 246.213548][ T7248] FAT-fs (loop0): Directory bread(block 67) failed [ 246.234841][ T7248] FAT-fs (loop0): Directory bread(block 68) failed [ 246.251948][ T7248] FAT-fs (loop0): Directory bread(block 69) failed [ 246.258775][ T7248] FAT-fs (loop0): Directory bread(block 70) failed [ 246.260786][ T7250] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.268071][ T7248] FAT-fs (loop0): Directory bread(block 71) failed [ 246.294438][ T7248] FAT-fs (loop0): Directory bread(block 72) failed [ 246.323187][ T7248] FAT-fs (loop0): Directory bread(block 73) failed [ 246.386983][ T7248] FAT-fs (loop0): Filesystem has been set read-only [ 246.617855][ T5118] Bluetooth: hci1: command tx timeout [ 246.845562][ T7228] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.854591][ T7228] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.865045][ T7228] bridge_slave_0: entered allmulticast mode [ 246.883386][ T7228] bridge_slave_0: entered promiscuous mode [ 246.908233][ T7228] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.916919][ T7228] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.924758][ T7228] bridge_slave_1: entered allmulticast mode [ 246.943552][ T7228] bridge_slave_1: entered promiscuous mode [ 247.029842][ T7228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.053803][ T7228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.096877][ T7228] team0: Port device team_slave_0 added [ 247.108134][ T7228] team0: Port device team_slave_1 added [ 247.179969][ T7228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.187220][ T7228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.214684][ T7228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.231463][ T7228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.238655][ T7228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.267485][ T7228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.297611][ T11] IPVS: stop unused estimator thread 0... [ 247.364628][ T7228] hsr_slave_0: entered promiscuous mode [ 247.371864][ T7228] hsr_slave_1: entered promiscuous mode [ 247.378522][ T7228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.386381][ T7228] Cannot create hsr debugfs directory [ 247.429763][ T9] IPVS: starting estimator thread 0... [ 247.447355][ T7258] loop2: detected capacity change from 0 to 256 [ 247.522286][ T7258] exfat: Deprecated parameter 'utf8' [ 247.536318][ T7257] IPVS: using max 15 ests per chain, 36000 per kthread [ 247.557056][ T7258] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 247.684725][ T7261] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 247.694430][ T7261] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 247.960170][ T7228] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 247.968754][ T7264] loop1: detected capacity change from 0 to 16 [ 247.974939][ T7228] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 247.990906][ T7228] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 248.017051][ T7264] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 248.018053][ T7228] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 248.207343][ T7228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.235021][ T7228] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.251643][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.258847][ T5108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.296559][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.305224][ T5108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.698215][ T7228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.706280][ T5118] Bluetooth: hci1: command tx timeout [ 248.779612][ T7228] veth0_vlan: entered promiscuous mode [ 248.794303][ T7228] veth1_vlan: entered promiscuous mode [ 248.864972][ T7228] veth0_macvtap: entered promiscuous mode [ 248.877105][ T7228] veth1_macvtap: entered promiscuous mode [ 248.903465][ T7228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.923124][ T7228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.934241][ T7228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.949379][ T7228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.960988][ T7228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.974286][ T7228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.984429][ T7228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.996913][ T7228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.016139][ T7228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.044211][ T7228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.054943][ T7228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.068143][ T7228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.078912][ T7228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.105864][ T7228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.116459][ T7228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.127001][ T7228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.137690][ T7228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.151259][ T7228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.164504][ T7228] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.174334][ T7228] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.186290][ T7228] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.195808][ T7228] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.490152][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.510529][ T7286] loop0: detected capacity change from 0 to 1024 [ 249.513085][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.517990][ T7288] loop1: detected capacity change from 0 to 256 [ 249.533364][ T7286] hfsplus: unable to parse mount options [ 249.588084][ T2853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.602495][ T2853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.677960][ T7288] FAT-fs (loop1): Directory bread(block 64) failed [ 249.695488][ T7288] FAT-fs (loop1): Directory bread(block 65) failed [ 249.713666][ T7288] FAT-fs (loop1): Directory bread(block 66) failed [ 249.738338][ T7288] FAT-fs (loop1): Directory bread(block 67) failed [ 249.766707][ T7288] FAT-fs (loop1): Directory bread(block 68) failed [ 249.790322][ T7288] FAT-fs (loop1): Directory bread(block 69) failed [ 249.816814][ T7288] FAT-fs (loop1): Directory bread(block 70) failed [ 249.850100][ T7288] FAT-fs (loop1): Directory bread(block 71) failed [ 249.873491][ T7288] FAT-fs (loop1): Directory bread(block 72) failed [ 249.895540][ T7288] FAT-fs (loop1): Directory bread(block 73) failed [ 249.958582][ T7288] FAT-fs (loop1): Filesystem has been set read-only [ 250.770078][ T5118] Bluetooth: hci1: command tx timeout [ 250.806268][ T29] audit: type=1326 audit(1717956293.631:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7301 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f986827cf69 code=0x0 [ 250.915085][ T7310] mmap: syz-executor.4 (7310): VmData 37380096 exceed data ulimit 65536. Update limits or use boot option ignore_rlimit_data. [ 251.170139][ T7313] loop1: detected capacity change from 0 to 16 [ 251.201868][ T7313] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 251.208391][ T7314] loop2: detected capacity change from 0 to 256 [ 251.256621][ T7314] exfat: Deprecated parameter 'namecase' [ 251.263275][ T7314] exfat: Deprecated parameter 'utf8' [ 251.268843][ T7314] exfat: Deprecated parameter 'namecase' [ 251.288013][ T7314] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 252.011638][ T29] audit: type=1326 audit(1717956294.841:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7322 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75e647cf69 code=0x0 [ 252.046065][ T7327] loop0: detected capacity change from 0 to 256 [ 252.145306][ T7327] FAT-fs (loop0): Directory bread(block 64) failed [ 252.152255][ T7327] FAT-fs (loop0): Directory bread(block 65) failed [ 252.159599][ T7327] FAT-fs (loop0): Directory bread(block 66) failed [ 252.166819][ T7327] FAT-fs (loop0): Directory bread(block 67) failed [ 252.173875][ T7327] FAT-fs (loop0): Directory bread(block 68) failed [ 252.182047][ T7327] FAT-fs (loop0): Directory bread(block 69) failed [ 252.188916][ T7327] FAT-fs (loop0): Directory bread(block 70) failed [ 252.195665][ T7327] FAT-fs (loop0): Directory bread(block 71) failed [ 252.202410][ T7327] FAT-fs (loop0): Directory bread(block 72) failed [ 252.209291][ T7327] FAT-fs (loop0): Directory bread(block 73) failed [ 252.251451][ T7327] FAT-fs (loop0): Filesystem has been set read-only [ 252.849932][ T5118] Bluetooth: hci1: command tx timeout [ 253.251595][ T7341] loop4: detected capacity change from 0 to 2048 [ 253.286907][ T7339] loop1: detected capacity change from 0 to 32768 [ 253.310393][ T7341] NILFS (loop4): invalid segment: Sequence number mismatch [ 253.318047][ T7341] NILFS (loop4): trying rollback from an earlier position [ 253.337462][ T7339] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7339) [ 253.346188][ T7341] NILFS (loop4): recovery complete [ 253.365343][ T7343] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.410806][ T7339] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 253.442624][ T7339] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 253.476668][ T7339] BTRFS info (device loop1): using free-space-tree [ 253.667315][ T7360] loop2: detected capacity change from 0 to 256 [ 254.475907][ T7360] exfat: Deprecated parameter 'namecase' [ 254.502287][ T7360] exfat: Deprecated parameter 'utf8' [ 254.519973][ T7360] exfat: Deprecated parameter 'namecase' [ 254.601634][ T7360] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 254.685007][ T7339] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 254.952372][ T7369] loop3: detected capacity change from 0 to 1024 [ 255.056765][ T7369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.096105][ T29] audit: type=1326 audit(1717956297.921:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f986827cf69 code=0x0 [ 255.133971][ T7369] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: inode #11: comm syz-executor.3: missing EA_INODE flag [ 255.137552][ T6759] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 255.166636][ T7369] EXT4-fs error (device loop3): ext4_xattr_inode_iget:445: comm syz-executor.3: error while reading EA inode 11 err=-117 [ 255.457632][ T7377] input: syz0 as /devices/virtual/input/input7 [ 255.478515][ T7228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.133497][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.140827][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.030457][ T7401] loop0: detected capacity change from 0 to 256 [ 258.086609][ T7401] exfat: Deprecated parameter 'namecase' [ 258.107461][ T7401] exfat: Deprecated parameter 'utf8' [ 258.113020][ T7401] exfat: Deprecated parameter 'namecase' [ 258.142258][ T7401] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 258.201205][ T7395] loop3: detected capacity change from 0 to 32768 [ 259.150348][ T7403] loop1: detected capacity change from 0 to 32768 [ 259.226172][ T7403] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7403) [ 259.257024][ T7403] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 259.283914][ T7403] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 259.303568][ T7403] BTRFS info (device loop1): using free-space-tree [ 259.396295][ T7403] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 259.679860][ T7433] loop0: detected capacity change from 0 to 64 [ 259.783283][ T29] audit: type=1804 audit(1717956302.611:259): pid=7435 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir146125784/syzkaller.Nrtb8A/9/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 259.852276][ T6759] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 260.726623][ T7447] process 'syz-executor.0' launched '/dev/fd/4' with NULL argv: empty string added [ 261.614701][ T7464] input: syz0 as /devices/virtual/input/input8 [ 261.631051][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 261.641095][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 261.661087][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 261.701064][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 261.712421][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 261.731045][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 261.751087][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 261.771041][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 261.781078][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 261.791079][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 261.811051][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 261.841053][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 261.861211][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 261.871938][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 261.901040][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 261.921043][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 261.941196][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 261.961063][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 261.981058][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 262.001220][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 262.011043][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 262.033483][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 262.083242][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 262.088218][ T7472] loop2: detected capacity change from 0 to 64 [ 262.111826][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 262.121137][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 262.121591][ T7468] loop0: detected capacity change from 0 to 8192 [ 262.161075][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 262.171072][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 262.198111][ T7468] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.201043][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 262.251072][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 262.291041][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 262.321558][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 262.351043][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 262.381040][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 262.411206][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 262.431044][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 262.451041][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 262.487126][ T7463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 262.906373][ T7471] loop1: detected capacity change from 0 to 32768 [ 262.960077][ T7475] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 262.967430][ T7471] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7471) [ 263.003088][ T7475] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 263.020057][ T7471] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 263.030946][ T7471] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 263.040010][ T7471] BTRFS info (device loop1): using free-space-tree [ 263.356831][ T7471] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 264.055295][ T6759] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 264.190608][ T7490] loop3: detected capacity change from 0 to 32768 [ 264.914944][ T5118] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 264.924129][ T5118] Bluetooth: hci3: Injecting HCI hardware error event [ 264.940977][ T5118] Bluetooth: hci3: hardware error 0x00 [ 265.220634][ T7490] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 265.270263][ T7490] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 265.356596][ T7490] bcachefs (loop3): alloc_read... done [ 265.363497][ T7490] bcachefs (loop3): stripes_read... done [ 265.369341][ T7490] bcachefs (loop3): snapshots_read... done [ 265.388165][ T7490] bcachefs (loop3): journal_replay... done [ 265.394300][ T7490] bcachefs (loop3): resume_logged_ops... done [ 265.405598][ T7490] bcachefs (loop3): going read-write [ 265.427171][ T7490] bcachefs (loop3): done starting filesystem [ 265.564455][ T7490] syz-executor.3 (7490) used greatest stack depth: 15544 bytes left [ 265.611643][ T7514] syz-executor.2[7514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.611804][ T7514] syz-executor.2[7514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.773371][ T7228] bcachefs (loop3): shutting down [ 265.800691][ T7228] bcachefs (loop3): going read-only [ 265.814667][ T7228] bcachefs (loop3): finished waiting for writes to stop [ 265.836145][ T7228] bcachefs (loop3): flushing journal and stopping allocators, journal seq 13 [ 265.909202][ T7228] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14 [ 265.945549][ T7228] bcachefs (loop3): shutdown complete, journal seq 15 [ 265.982624][ T7228] bcachefs (loop3): marking filesystem clean [ 266.080684][ T7228] bcachefs (loop3): shutdown complete [ 266.274237][ T7516] loop0: detected capacity change from 0 to 32768 [ 266.320702][ T7516] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (7516) [ 266.366608][ T7516] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 266.404535][ T7516] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 266.449327][ T7516] BTRFS info (device loop0): using free-space-tree [ 266.993594][ T6729] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 267.011165][ T5118] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 268.620271][ T7565] loop0: detected capacity change from 0 to 256 [ 268.690936][ T7565] FAT-fs (loop0): Directory bread(block 64) failed [ 268.697863][ T7565] FAT-fs (loop0): Directory bread(block 65) failed [ 268.706385][ T7567] loop2: detected capacity change from 0 to 1024 [ 268.707468][ T7565] FAT-fs (loop0): Directory bread(block 66) failed [ 268.723616][ T7565] FAT-fs (loop0): Directory bread(block 67) failed [ 268.730958][ T7565] FAT-fs (loop0): Directory bread(block 68) failed [ 268.737804][ T7565] FAT-fs (loop0): Directory bread(block 69) failed [ 268.751983][ T7567] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 268.753216][ T7565] FAT-fs (loop0): Directory bread(block 70) failed [ 268.768997][ T7565] FAT-fs (loop0): Directory bread(block 71) failed [ 268.776779][ T7567] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 268.776947][ T7565] FAT-fs (loop0): Directory bread(block 72) failed [ 268.790563][ T7567] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 268.800732][ T7565] FAT-fs (loop0): Directory bread(block 73) failed [ 268.805089][ T7567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 268.846771][ T7567] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (62631!=20869) [ 268.994961][ T7096] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.105329][ T7575] loop3: detected capacity change from 0 to 2048 [ 269.165914][ T7575] nilfs2: Unknown parameter '0x00000000000000030000000000000000000000000000000000000000000003' [ 271.604550][ T7606] loop1: detected capacity change from 0 to 128 [ 271.620754][ T7606] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 271.644807][ T29] audit: type=1326 audit(1717956314.471:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7604 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3dd047cf69 code=0x0 [ 271.739884][ T5108] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 271.932665][ T5108] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 271.945483][ T5108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.956483][ T5108] usb 1-1: config 0 descriptor?? [ 272.176322][ T5108] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0e [ 272.184506][ T5108] hackrf 1-1:0.0: Could not detect board [ 272.189087][ T7617] xt_policy: neither incoming nor outgoing policy selected [ 272.190653][ T5108] hackrf 1-1:0.0: probe with driver hackrf failed with error -71 [ 272.215461][ T5108] usb 1-1: USB disconnect, device number 4 [ 272.276006][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.285894][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.295888][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.305913][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.315887][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.325923][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.344092][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 272.345909][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.365907][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.385919][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.395901][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.405917][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.415900][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.436129][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.458597][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.475929][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.485901][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.495891][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.508586][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.525907][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.535893][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.545889][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.566030][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.575900][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.585927][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.595908][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.615909][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.625910][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.635918][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.637597][ T6759] sysv_free_block: trying to free block not in datazone [ 272.645906][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.665917][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.667362][ T6759] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 272.675955][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.695963][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.725892][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.735896][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.745909][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.755961][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.765929][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.775951][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.785933][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.795885][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.805997][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.835938][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.845918][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.855942][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.865949][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.875909][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.885892][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.895891][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.905869][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.920495][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.935904][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.945889][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.955883][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.965882][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.975885][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.985884][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 272.995890][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 273.005904][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 273.015907][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 273.035890][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 273.045889][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 273.055889][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 273.065896][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 273.075884][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 273.085913][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 273.099791][ T7618] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 273.124533][ T7624] netem: change failed [ 273.199149][ T7626] loop4: detected capacity change from 0 to 512 [ 273.281536][ T7626] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 273.295802][ T7626] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 273.814219][ T7632] loop3: detected capacity change from 0 to 32768 [ 274.392186][ T7642] loop2: detected capacity change from 0 to 1764 [ 274.530546][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.392204][ T7658] loop4: detected capacity change from 0 to 1024 [ 275.746257][ T7657] loop0: detected capacity change from 0 to 164 [ 276.036348][ T1109] hfsplus: b-tree write err: -5, ino 4 [ 276.057015][ T7664] loop1: detected capacity change from 0 to 1024 [ 276.106835][ T7664] hfsplus: failed to load root directory [ 278.086450][ T7695] loop2: detected capacity change from 0 to 1024 [ 278.441236][ T975] hfsplus: b-tree write err: -5, ino 4 [ 279.109656][ C0] sched: RT throttling activated [ 279.386551][ T7696] loop1: detected capacity change from 0 to 131072 [ 279.455451][ T7696] F2FS-fs (loop1): Found nat_bits in checkpoint [ 279.518817][ T7696] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 279.936164][ T29] audit: type=1800 audit(1717956322.751:261): pid=7721 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 280.308778][ T7726] loop4: detected capacity change from 0 to 1024 [ 280.458584][ T7726] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0002] [ 280.489993][ T7726] System zones: 0-1, 3-12 [ 280.508338][ T7726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.819463][ T6832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.261432][ T7736] loop0: detected capacity change from 0 to 32768 [ 281.304288][ T7736] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 281.400488][ T7736] XFS (loop0): Ending clean mount [ 281.413269][ T7736] XFS (loop0): Quotacheck needed: Please wait. [ 281.540566][ T7736] XFS (loop0): Quotacheck: Done. [ 281.966177][ T6729] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 282.277653][ T7749] [U]  [ 283.267260][ T7750] loop3: detected capacity change from 0 to 32768 [ 283.377349][ T7750] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 283.490491][ T7750] XFS (loop3): Ending clean mount [ 283.547418][ T29] audit: type=1804 audit(1717956326.371:262): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir146125784/syzkaller.Nrtb8A/29/file0/file1" dev="loop3" ino=9286 res=1 errno=0 [ 283.596327][ T7772] loop4: detected capacity change from 0 to 128 [ 283.608040][ T7772] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 283.637917][ T29] audit: type=1326 audit(1717956326.461:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7763 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f988c27cf69 code=0x0 [ 283.754824][ T7228] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 284.301409][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 284.502108][ T6832] sysv_free_block: trying to free block not in datazone [ 284.511358][ T6832] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 284.739368][ T7786] loop2: detected capacity change from 0 to 512 [ 284.776288][ T7786] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 284.819946][ T7786] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 284.856207][ T7786] EXT4-fs (loop2): 1 truncate cleaned up [ 284.863764][ T7786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.904103][ T7786] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 284.922543][ T7786] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 284.935015][ T7786] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 285.015681][ T7793] loop1: detected capacity change from 0 to 764 [ 285.073946][ T5232] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.087453][ T7793] Symlink component flag not implemented [ 285.096983][ T7793] Symlink component flag not implemented (129) [ 285.132154][ T7793] rock: directory entry would overflow storage [ 285.144379][ T7793] rock: sig=0x4f50, size=4, remaining=3 [ 285.151840][ T7793] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 285.567406][ T1109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.748287][ T1109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.886845][ T1109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.958748][ T5114] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.974151][ T5114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.985802][ T5114] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 286.002738][ T1109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.013445][ T5114] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 286.028163][ T5114] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 286.035895][ T5114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 286.177358][ T29] audit: type=1326 audit(1717956329.001:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7806 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986827cf69 code=0x7ffc0000 [ 286.208976][ T29] audit: type=1326 audit(1717956329.001:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7806 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986827cf69 code=0x7ffc0000 [ 286.253836][ T29] audit: type=1326 audit(1717956329.011:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7806 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f986827cf69 code=0x7ffc0000 [ 286.280743][ T29] audit: type=1326 audit(1717956329.011:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7806 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986827cf69 code=0x7ffc0000 [ 286.315557][ T29] audit: type=1326 audit(1717956329.011:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7806 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986827cf69 code=0x7ffc0000 [ 286.350204][ T29] audit: type=1326 audit(1717956329.011:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7806 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f986827cf69 code=0x7ffc0000 [ 286.374169][ T29] audit: type=1326 audit(1717956329.011:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7806 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986827cf69 code=0x7ffc0000 [ 286.431485][ T29] audit: type=1326 audit(1717956329.021:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7806 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986827cf69 code=0x7ffc0000 [ 286.470075][ T1109] bridge_slave_1: left allmulticast mode [ 286.476510][ T1109] bridge_slave_1: left promiscuous mode [ 286.477015][ T7817] loop3: detected capacity change from 0 to 256 [ 286.482812][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.496730][ T29] audit: type=1326 audit(1717956329.021:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7806 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f986827cf69 code=0x7ffc0000 [ 286.520168][ T29] audit: type=1326 audit(1717956329.021:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7806 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986827cf69 code=0x7ffc0000 [ 286.535517][ T7816] loop4: detected capacity change from 0 to 2048 [ 286.554158][ T1109] bridge_slave_0: left allmulticast mode [ 286.560727][ T1109] bridge_slave_0: left promiscuous mode [ 286.561675][ T7817] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 286.566753][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.602649][ T7816] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 286.616920][ T7816] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.189262][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.202718][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.214394][ T1109] bond0 (unregistering): Released all slaves [ 287.244120][ T7807] chnl_net:caif_netlink_parms(): no params data found [ 287.466683][ T7807] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.474171][ T7807] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.493335][ T7807] bridge_slave_0: entered allmulticast mode [ 287.506848][ T7807] bridge_slave_0: entered promiscuous mode [ 287.557874][ T7807] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.567720][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.576974][ T7807] bridge_slave_1: entered allmulticast mode [ 287.597269][ T7807] bridge_slave_1: entered promiscuous mode [ 287.675404][ T1109] hsr_slave_0: left promiscuous mode [ 287.683434][ T1109] hsr_slave_1: left promiscuous mode [ 287.694948][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.710871][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.727849][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.736925][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.775249][ T1109] veth1_macvtap: left promiscuous mode [ 287.781482][ T1109] veth0_macvtap: left promiscuous mode [ 287.787380][ T1109] veth1_vlan: left promiscuous mode [ 287.793606][ T1109] veth0_vlan: left promiscuous mode [ 288.136105][ T5118] Bluetooth: hci4: command tx timeout [ 288.699266][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 288.776804][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 289.468979][ T7849] loop3: detected capacity change from 0 to 256 [ 289.529131][ T7849] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 289.565622][ T7807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.604960][ T7807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.716188][ T7807] team0: Port device team_slave_0 added [ 289.739511][ T7807] team0: Port device team_slave_1 added [ 289.798893][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.815580][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.859489][ T7807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.879533][ T7807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.888238][ T7807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.924906][ T7807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.011185][ T7807] hsr_slave_0: entered promiscuous mode [ 290.025047][ T7807] hsr_slave_1: entered promiscuous mode [ 290.033147][ T7807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.040868][ T7807] Cannot create hsr debugfs directory [ 290.209963][ T5118] Bluetooth: hci4: command tx timeout [ 290.468102][ T7807] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 290.479467][ T7807] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 290.491592][ T7807] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 290.502602][ T7807] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 290.604435][ T7807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.637031][ T7807] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.649522][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.656716][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.673449][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.680695][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.732191][ T7807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.889925][ T7807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.947893][ T7807] veth0_vlan: entered promiscuous mode [ 290.962793][ T7807] veth1_vlan: entered promiscuous mode [ 290.996881][ T7807] veth0_macvtap: entered promiscuous mode [ 291.006864][ T7807] veth1_macvtap: entered promiscuous mode [ 291.027448][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.039097][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.050389][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.061065][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.071362][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.082000][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.093100][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.103735][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.115901][ T7807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.134341][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.146225][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.157078][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.167798][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.177865][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.188858][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.199026][ T7807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.210809][ T7807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.222413][ T7807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.236436][ T7807] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.247423][ T7807] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.257234][ T7807] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.266740][ T7807] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.358119][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.373278][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.399399][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.407482][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.856676][ T7859] loop2: detected capacity change from 0 to 32768 [ 291.895535][ T7859] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 291.956945][ T7859] XFS (loop2): Ending clean mount [ 291.992278][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 291.992300][ T29] audit: type=1804 audit(1717956334.821:289): pid=7859 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir536541298/syzkaller.JhMMBo/0/file0/file1" dev="loop2" ino=9286 res=1 errno=0 [ 292.146844][ T7807] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 292.290111][ T5118] Bluetooth: hci4: command tx timeout [ 294.369928][ T5118] Bluetooth: hci4: command tx timeout [ 296.320736][ T7875] loop3: detected capacity change from 0 to 8 [ 296.453227][ T7875] SQUASHFS error: Unable to read directory block [1d0:22] [ 296.482962][ T7875] SQUASHFS error: Unable to read directory block [1d0:22] [ 296.736318][ T7228] SQUASHFS error: Unable to read directory block [1d0:22] [ 296.782410][ T7228] SQUASHFS error: Unable to read directory block [1d0:22] [ 296.801964][ T7228] SQUASHFS error: Failed to read block 0x2d7: -5 [ 296.809091][ T7228] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 296.850885][ T7228] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 296.858340][ T7228] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 297.690025][ T5213] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 298.069382][ T5213] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.120983][ T5213] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 298.136270][ T5213] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.153039][ T5213] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.166906][ T5213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.178917][ T5213] usb 1-1: Product: syz [ 298.187299][ T5213] usb 1-1: Manufacturer: syz [ 298.194909][ T5213] usb 1-1: SerialNumber: syz [ 298.215820][ T5213] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 298.223539][ T5213] cdc_ncm 1-1:1.0: bind() failure [ 298.858851][ T7891] loop1: detected capacity change from 0 to 32768 [ 298.911019][ T7891] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7891) [ 298.952834][ T7891] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 298.980676][ T7891] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 298.995841][ T7891] BTRFS info (device loop1): using free-space-tree [ 299.148110][ T29] audit: type=1800 audit(1717956341.971:290): pid=7891 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 299.679562][ T6759] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 299.815442][ T58] usb 1-1: USB disconnect, device number 5 [ 301.182596][ T7928] loop1: detected capacity change from 0 to 512 [ 301.277087][ T7928] loop1: detected capacity change from 0 to 16 [ 301.321788][ T7928] erofs: (device loop1): mounted with root inode @ nid 36. [ 301.339597][ T7928] Bluetooth: MGMT ver 1.22 [ 303.410024][ T5118] Bluetooth: hci0: command tx timeout [ 317.580071][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.586441][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.769848][ T5118] Bluetooth: hci2: command 0x0406 tx timeout [ 327.507563][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 327.520705][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 327.531306][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 327.556246][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 327.564197][ T5118] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 327.571848][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 327.621288][ T5114] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 327.631714][ T5114] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 327.641129][ T5114] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 327.653163][ T5114] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 327.661199][ T5114] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 327.668718][ T5114] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 329.649833][ T5114] Bluetooth: hci5: command tx timeout [ 329.730282][ T5114] Bluetooth: hci6: command tx timeout [ 329.934705][ T5118] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 329.948363][ T5118] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 329.958488][ T5118] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 329.971861][ T5118] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 329.984579][ T5118] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 329.992032][ T5118] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 331.403309][ T5114] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 331.427214][ T5114] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 331.439970][ T5114] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 331.455533][ T5114] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 331.465924][ T5114] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 331.473567][ T5114] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 331.729835][ T5118] Bluetooth: hci5: command tx timeout [ 331.809856][ T5118] Bluetooth: hci6: command tx timeout [ 332.049857][ T5118] Bluetooth: hci7: command tx timeout [ 332.980388][ T5115] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 332.992515][ T5115] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 333.002230][ T5115] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 333.010538][ T5115] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 333.018336][ T5115] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 333.027637][ T5115] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 333.569975][ T5114] Bluetooth: hci8: command tx timeout [ 333.810304][ T5114] Bluetooth: hci5: command tx timeout [ 333.889853][ T5114] Bluetooth: hci6: command tx timeout [ 334.129826][ T5114] Bluetooth: hci7: command tx timeout [ 335.019865][ T5114] Bluetooth: hci0: command 0x0406 tx timeout [ 335.089921][ T5118] Bluetooth: hci9: command tx timeout [ 335.652894][ T5118] Bluetooth: hci8: command tx timeout [ 335.899770][ T5118] Bluetooth: hci5: command tx timeout [ 335.969894][ T5118] Bluetooth: hci6: command tx timeout [ 336.214299][ T5118] Bluetooth: hci7: command tx timeout [ 337.169807][ T5118] Bluetooth: hci9: command tx timeout [ 337.729998][ T5118] Bluetooth: hci8: command tx timeout [ 338.289830][ T5118] Bluetooth: hci7: command tx timeout [ 339.255872][ T5118] Bluetooth: hci9: command tx timeout [ 339.809953][ T5118] Bluetooth: hci8: command tx timeout [ 341.329953][ T5118] Bluetooth: hci9: command tx timeout [ 370.856182][ T5118] Bluetooth: hci1: command 0x0406 tx timeout [ 379.018185][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.027655][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.895407][ T5118] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 392.909465][ T6707] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 392.923351][ T5118] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 392.937312][ T5118] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 392.937383][ T6707] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 392.957428][ T5118] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 392.973294][ T6707] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 392.985650][ T5118] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 392.994821][ T6707] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 393.002525][ T5118] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 393.018777][ T6707] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 393.050777][ T6707] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 395.075957][ T6707] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 395.087513][ T6707] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 395.094917][ T5114] Bluetooth: hci11: command tx timeout [ 395.094966][ T5118] Bluetooth: hci10: command tx timeout [ 395.107818][ T6707] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 395.124054][ T6707] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 395.134413][ T6707] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 395.143453][ T6707] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 396.452780][ T5115] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 396.470717][ T5115] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 396.479465][ T5115] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 396.490516][ T5115] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 396.499028][ T5115] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 396.506746][ T5115] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 397.169815][ T6707] Bluetooth: hci10: command tx timeout [ 397.176125][ T5115] Bluetooth: hci11: command tx timeout [ 397.249959][ T5115] Bluetooth: hci12: command tx timeout [ 398.121501][ T6707] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 398.132577][ T6707] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 398.142344][ T6707] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 398.154754][ T6707] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 398.165713][ T6707] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 398.173349][ T6707] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 398.610003][ T6707] Bluetooth: hci13: command tx timeout [ 399.250428][ T6707] Bluetooth: hci11: command tx timeout [ 399.250438][ T5115] Bluetooth: hci10: command tx timeout [ 399.339755][ T6707] Bluetooth: hci12: command tx timeout [ 400.209847][ T6707] Bluetooth: hci14: command tx timeout [ 400.689740][ T6707] Bluetooth: hci13: command tx timeout [ 401.329755][ T6707] Bluetooth: hci10: command tx timeout [ 401.339822][ T6707] Bluetooth: hci11: command tx timeout [ 401.423177][ T5115] Bluetooth: hci12: command tx timeout [ 402.289888][ T5115] Bluetooth: hci14: command tx timeout [ 402.779768][ T5115] Bluetooth: hci13: command tx timeout [ 403.490074][ T5115] Bluetooth: hci12: command tx timeout [ 404.369831][ T5115] Bluetooth: hci14: command tx timeout [ 404.849800][ T5115] Bluetooth: hci13: command tx timeout [ 406.457304][ T5115] Bluetooth: hci14: command tx timeout [ 411.816922][ T5115] Bluetooth: hci4: command 0x0406 tx timeout [ 440.452751][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.459153][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.769847][ T5118] Bluetooth: hci5: command 0x0406 tx timeout [ 452.775939][ T5118] Bluetooth: hci7: command 0x0406 tx timeout [ 452.783837][ T53] Bluetooth: hci6: command 0x0406 tx timeout [ 457.900921][ T5118] Bluetooth: hci8: command 0x0406 tx timeout [ 457.907018][ T5118] Bluetooth: hci9: command 0x0406 tx timeout [ 458.202457][ T5118] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 458.213756][ T5118] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 458.224275][ T5118] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 458.235023][ T5118] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 458.243078][ T5118] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 458.257298][ T5118] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 458.422630][ T5118] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 458.433725][ T5118] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 458.458120][ T5118] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 458.482971][ T5118] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 458.495917][ T5118] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 458.504715][ T5118] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 460.252380][ T5118] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 460.280365][ T5118] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 460.289172][ T5118] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 460.296723][ T53] Bluetooth: hci15: command tx timeout [ 460.302809][ T30] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 460.314406][ T53] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 460.324540][ T53] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 460.332248][ T53] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 2024/06/09 18:08:23 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 460.349721][ T30] Not tainted 6.10.0-rc2-syzkaller-00366-g771ed66105de #0 [ 460.434574][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 460.469623][ T30] task:kworker/0:0 state:D stack:22672 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 460.494911][ T30] Workqueue: events bpf_prog_free_deferred [ 460.505227][ T30] Call Trace: [ 460.508545][ T30] [ 460.527206][ T30] __schedule+0x1796/0x49d0 [ 460.532040][ T6707] Bluetooth: hci16: command tx timeout [ 460.540626][ T30] ? __pfx___schedule+0x10/0x10 [ 460.545647][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 460.575518][ T30] ? __pfx_lock_release+0x10/0x10 [ 460.581723][ T30] ? kick_pool+0x1bd/0x620 [ 460.586378][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 460.609606][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 460.629658][ T30] ? schedule+0x90/0x320 [ 460.633980][ T30] schedule+0x14b/0x320 [ 460.638174][ T30] schedule_preempt_disabled+0x13/0x30 [ 460.669601][ T30] __mutex_lock+0x6a4/0xd70 [ 460.674368][ T30] ? __mutex_lock+0x527/0xd70 [ 460.679082][ T30] ? bpf_prog_dev_bound_destroy+0x76/0x590 [ 460.705866][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 460.725694][ T30] bpf_prog_dev_bound_destroy+0x76/0x590 [ 460.739667][ T30] ? __pfx_bpf_prog_dev_bound_destroy+0x10/0x10 [ 460.745992][ T30] ? bpf_prog_free_deferred+0x375/0x710 [ 460.769852][ T30] ? rcu_is_watching+0x15/0xb0 [ 460.774708][ T30] ? bpf_prog_free_deferred+0x375/0x710 [ 460.789689][ T30] ? kfree+0x4e/0x360 [ 460.793750][ T30] bpf_prog_free_deferred+0x3c5/0x710 [ 460.799176][ T30] ? process_scheduled_works+0x945/0x1830 [ 460.820722][ T30] process_scheduled_works+0xa2c/0x1830 [ 460.826478][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 460.849774][ T30] ? assign_work+0x364/0x3d0 [ 460.854452][ T30] worker_thread+0x86d/0xd70 [ 460.859098][ T30] ? __kthread_parkme+0x169/0x1d0 [ 460.869668][ T30] ? __pfx_worker_thread+0x10/0x10 [ 460.874838][ T30] kthread+0x2f0/0x390 [ 460.878951][ T30] ? __pfx_worker_thread+0x10/0x10 [ 460.899634][ T30] ? __pfx_kthread+0x10/0x10 [ 460.904303][ T30] ret_from_fork+0x4b/0x80 [ 460.908756][ T30] ? __pfx_kthread+0x10/0x10 [ 460.936771][ T30] ret_from_fork_asm+0x1a/0x30 [ 460.941767][ T30] [ 460.945192][ T30] INFO: task kworker/u8:5:975 blocked for more than 144 seconds. [ 460.959668][ T30] Not tainted 6.10.0-rc2-syzkaller-00366-g771ed66105de #0 [ 460.967407][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 460.977151][ T30] task:kworker/u8:5 state:D stack:18192 pid:975 tgid:975 ppid:2 flags:0x00004000 [ 460.987505][ T30] Workqueue: ipv6_addrconf addrconf_verify_work [ 460.993857][ T30] Call Trace: [ 460.997164][ T30] [ 461.000233][ T30] __schedule+0x1796/0x49d0 [ 461.004816][ T30] ? __pfx___schedule+0x10/0x10 [ 461.010091][ T30] ? __pfx_lock_release+0x10/0x10 [ 461.015165][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 461.020774][ T30] ? kthread_data+0x52/0xd0 [ 461.026978][ T30] ? schedule+0x90/0x320 [ 461.031313][ T30] ? wq_worker_sleeping+0x66/0x240 [ 461.036462][ T30] ? schedule+0x90/0x320 [ 461.040888][ T30] schedule+0x14b/0x320 [ 461.045087][ T30] schedule_preempt_disabled+0x13/0x30 [ 461.051022][ T30] __mutex_lock+0x6a4/0xd70 [ 461.055581][ T30] ? __mutex_lock+0x527/0xd70 [ 461.060418][ T30] ? addrconf_verify_work+0x19/0x30 [ 461.065688][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 461.070933][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 461.076956][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [