last executing test programs: 46.23157323s ago: executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0xffffffff, 0x4) 44.765742253s ago: executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f03900000000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 44.542331166s ago: executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x87f, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x80, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)) 44.155720673s ago: executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 43.947386368s ago: executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000ad000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 43.578669053s ago: executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000800)={0x18, 0x2, {0xfeff, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) 43.40370399s ago: executing program 3: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x0, 0x9e3, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2}, 0xfff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x687c}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x1, 0x3, 0x0) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_gettime(0x0, &(0x7f0000000040)) 43.132500359s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000080007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) setresuid(0xee00, 0xee00, 0x0) setreuid(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r3, &(0x7f0000000300)=""/150, 0x96, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r6, &(0x7f0000000380), 0x20000000}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r7}, 0x10) pwritev(r5, 0x0, 0x0, 0x0, 0x0) 42.87731989s ago: executing program 3: socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 41.762452284s ago: executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9000000010000305000000000000000000cf0000", @ANYBLOB="0000000000000000300012800800010067726500240002800600020006"], 0x90}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000600000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) 39.351127446s ago: executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) writev(r0, &(0x7f0000000940)=[{&(0x7f00000005c0)="8a", 0x1}, {&(0x7f0000002400)='\\', 0x1}], 0x2) 38.488926284s ago: executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)=0xfbe9}}) 38.059297637s ago: executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000003840)="bf", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) 37.664585045s ago: executing program 5: r0 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x8, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) statx(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0xe04, &(0x7f0000000280)) 37.213469314s ago: executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getnexthop={0x18, 0x6a, 0x1, 0x0, 0x0, {0x2, 0x2}}, 0x18}}, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100), 0xfc, 0x54c, &(0x7f0000001600)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec+9Nzz0593t6Tk5CAhhaE9mPQsSrEfFtEnG47dho5Acn1s5bfXh9NtuSaDQ++yuJJN/XOj/Jfx/MM69ExG9fR5wsbCy3tryyUCqX08U8P1mvXJmsLa+culQpzafz6eXpmZkz78xMv//eu32r65vn//nh07sfnfnm+Or3v9w/cjuJs3EoP9Zejx240Z6ZiIn8ORmLs0+cONWHwgZJstsXwLaM5HE+FlkfcDhG8qgH/v++iogGMKQS8Q9DqjUOaM3t+zQPfmE8+HBtArSx/qNrr43Evubc6MBq8tjMKJvvjveh/KyMX/+8czvbon+vQwBs6cbNiDg9Orqx/0vy/m/7TvdwzpNl6P/g+bmbjX/e6jT+KayPf6LD+Odgh9jdjq3jv3C/D8V0lY3/Pug4/l1ftBofyXMvNcd8Y8nFS+U069tejogTMbY3y2+2nnNm9V6j27H28V+2ZeW3xoL5ddwf3fv4Y+ZK9dJO6tzuwc2I1zqOf5P19k86tH/2fJzvsYxj6Z3Xux3buv7PVuPniDc6tv+jFa1k8/XJyeb9MNm6Kzb6+9ax37uVv9v1z9r/wOb1H0/a12trT1/GT/v+Tbsd2+79vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr/Kz+J45v3v91uv/3R8QXPdb/1tFbXU8dhPafe6r2f/rEvY+//LFb+b21/9vN1Il8Ty/9X68XuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G5XHgAAAAAAAAAAAAAAAAAAAAbEwS6f/8/8MbLbVwc8c77yG4bXlvHfj296AgaS//8wvMQ/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/AMAAAAAAAAAAAAAAAAAAAAAAAAAAEBfnT93Ltsaqw+vz2b5uavLSwvVq6fm0tpCsbI0W5ytLl4pzler8+W0OFutbPX3ytXqlanpWLo2WU9r9cna8sqFSnXpcv3CpUppPr2Qjj2XWgEAAAAAAAAAAAAAAAAAAMCLpba8slAql9NFCYltJUYH4zIk+pzY7Z4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB75LwAA///MUDi3") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x4008840) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2ca) splice(r1, 0x0, r3, 0x0, 0x84ffe0, 0x0) 34.595067692s ago: executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000005cc0)=ANY=[@ANYBLOB='resuid=', @ANYRESHEX=0xee01, @ANYBLOB="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"], 0x0, 0x551a, &(0x7f0000000280)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='mountinfo\x00') read$FUSE(r0, &(0x7f0000008580)={0x2020}, 0x2020) 33.613750789s ago: executing program 1: r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000d00)={0x344, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{}, {}, {}, {}, {}, {}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x344}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) 33.33138804s ago: executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34383b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 33.124133382s ago: executing program 2: socket(0x40000000002, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) r0 = getpid() bpf$MAP_GET_NEXT_KEY(0x10, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000001540)) stat(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r4, &(0x7f0000000040)=ANY=[], 0xff2e) ioctl$TCXONC(r4, 0x540a, 0x2) 33.066669435s ago: executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)=0xfbe9}}) 32.808110896s ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000140), &(0x7f0000000240)=@udp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x20) 32.571811853s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000811298000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 32.259732662s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000001340)={[{@dioread_nolock}, {@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9c7c}}, {@max_dir_size_kb}, {}, {@usrjquota}, {@test_dummy_encryption}, {@nogrpid}, {@test_dummy_encryption}]}, 0xfe, 0x43a, &(0x7f00000001c0)="$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") syz_emit_vhci(&(0x7f0000001b40)=ANY=[@ANYBLOB="043c07aaaaaaaaaa100d"], 0xa) 32.19896308s ago: executing program 1: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4}]}}]}, 0x40}}, 0x0) 31.770745365s ago: executing program 0: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 31.200163103s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) 30.429234844s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) 30.252315209s ago: executing program 0: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000300)={@cgroup, 0x0, 0x1a, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0}, 0x40) 30.203902244s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@RTM_DELMDB={0x38, 0x55, 0x32f, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, 0x38}}, 0x0) 30.012321232s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x2500, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000002000270300000000010000008100000000000000000000001400030069703667c697995c703000000000000014000c0074"], 0x44}}, 0x0) 12.849441487s ago: executing program 3: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000480)={[{@check_strict}, {@map_off}, {@sbsector}, {@session={'session', 0x3d, 0x21}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@cruft}, {@block={'block', 0x3d, 0x400}}]}, 0x41, 0x537, &(0x7f0000000ac0)="$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") mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1144, 0x0) 11.744602597s ago: executing program 4: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000005cc0)=ANY=[@ANYBLOB='resuid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6261636b67726f756e645f67633d6f66662c6e6f646973636172642c6772706a71756f74613d3a2d282c7573726a71756f74613d5c412c6a71666d743d76667376312c6163746976655f6c6f67733d322c6c617a7974696d652c70726a6a71756f74613d657272ef6c41f5684a66f69ff0521d487f4d4a451b26f6738b0000000000040200000000000000a82600e4755425043ea8a14139747f76daf6e57064e68cce2af17364f643aa67601d7f66fa9a2e40a3ffcb9003d98897cfb24dc7090a9d69d78ad6d15eb16b92617b8b61a1726cd4f0cddadaac1d9a6b68bd49e5921e30c32b541a48252c0f96b81735b888cbc9f088647db893eb337609c67ea046d01e2f085972a356bd7b2fa0660fb1425c338f22e314b6260ebb5f0a2c777ebbb5841eb15a0cd93b8e8b9c20897c71639577c2cd30d5b05c007e596744d0eec1d2fef1a26a45303e165a1543fd880a51e0ccf6235844c2514f1aa7a1970ed72b39c22c6e6f646973636172642c696e6c696e655f64656e7472792c6261636b67726f756e645f67633d73796e632c696e6c696e655f78617474722c000000000000000000000000000000766e1c5faee6a77505be9fae8178e99894c9b573132b9a97b4154cda48c8723b4570b906f3076b5f4c4edfd820cfc6d3e041a4ee80618d9fd2da812c9945538c54d8929fd0246a5f69590fd477c29dfd3fd9b3deedf6a5af95af5694470e3609076666fc0a56a42bad4d08e9ca46e9e4af8f5fdfd63197dceee2cd400710fbe5d2745e74d8c3cb612db4892efea9c375e5abb8cd0c9788f475e66a06ccde84d5e572ff26125ba2a23a6be4089c64948c5136ff61dc002b86519d10eac4e815be4004baeb05dc70b7000000000000000000000000000000bc8fca1a59434bdb97693a9be3cd8bf8a710e1d701b006ddcd64230e52ac0ebb206a2a8c827061ebc8583c0fcf18e2e49379924ea83df7a175542bee4c3a825ae4df26f5a05dd44fcd9c546682bfab68c721dc64b301d16b7e59c06f842c123259c0daa4fc693b6d58d1386ae0beef66a1aadc58e20535"], 0x0, 0x551a, &(0x7f0000000280)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='mountinfo\x00') read$FUSE(r0, &(0x7f0000008580)={0x2020}, 0x2020) 7.160844037s ago: executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) 2.160940198s ago: executing program 1: syz_emit_ethernet(0x56, &(0x7f0000005180)={@local, @random="b0c942034375", @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0xc2}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x400000, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 186.094047ms ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000600), 0x0, 0x5e7, &(0x7f0000000c00)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0x37f, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {}, [], {0x2}, [], {0x2}, {0x4}}, 0x24, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x0, 0x0, {0x1b}}, 0x14}}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000040)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x143742, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ftruncate(r4, 0x20077fc) r5 = dup(r3) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, 0x0, 0xffffffffffffffb7, 0x20000088, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x6, 0x4) open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe) write$P9_RLERRORu(r5, &(0x7f0000000080)={0xe, 0x7, 0x0, {{0x1, '\x00'}}}, 0xe) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, 0x0) 0s ago: executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560208005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b"], 0xfdef) kernel console output (not intermixed with test programs): 2][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 638.271461][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 638.286466][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 638.294253][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 638.390456][T11793] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 638.442416][ T946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.474839][ T946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.527349][ T946] bond0 (unregistering): Released all slaves [ 638.536127][T11805] loop3: detected capacity change from 0 to 2048 [ 638.606361][T11789] netdevsim0 speed is unknown, defaulting to 1000 [ 638.643000][T11805] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 638.643715][T11789] netdevsim0 speed is unknown, defaulting to 1000 [ 638.915128][T11789] netdevsim0 speed is unknown, defaulting to 1000 [ 638.981782][T11789] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 639.074714][T11789] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 639.168409][T11795] loop1: detected capacity change from 0 to 32768 [ 639.262488][T11789] netdevsim0 speed is unknown, defaulting to 1000 [ 639.328628][T11789] netdevsim0 speed is unknown, defaulting to 1000 [ 639.364177][T11789] netdevsim0 speed is unknown, defaulting to 1000 [ 639.372415][T11789] netdevsim0 speed is unknown, defaulting to 1000 [ 639.394559][T11789] netdevsim0 speed is unknown, defaulting to 1000 [ 639.403115][T11789] netdevsim0 speed is unknown, defaulting to 1000 [ 639.423352][T11789] netdevsim0 speed is unknown, defaulting to 1000 [ 639.446848][T11798] chnl_net:caif_netlink_parms(): no params data found [ 639.531409][ T946] hsr_slave_0: left promiscuous mode [ 639.547374][ T946] hsr_slave_1: left promiscuous mode [ 639.570779][ T946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.586357][ T946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.608975][ T946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.620284][ T946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.663142][ T946] veth1_macvtap: left promiscuous mode [ 639.668854][ T946] veth0_macvtap: left promiscuous mode [ 639.675052][ T946] veth1_vlan: left promiscuous mode [ 639.680517][ T946] veth0_vlan: left promiscuous mode [ 639.941840][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 639.941863][ T29] audit: type=1326 audit(1717544520.501:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11822 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7367cee9 code=0x7ffc0000 [ 640.019359][ T29] audit: type=1326 audit(1717544520.531:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11822 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7367cee9 code=0x7ffc0000 [ 640.054853][ T29] audit: type=1326 audit(1717544520.541:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11822 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a7367cee9 code=0x7ffc0000 [ 640.085696][ T29] audit: type=1326 audit(1717544520.541:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11822 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7367cee9 code=0x7ffc0000 [ 640.125015][ T29] audit: type=1326 audit(1717544520.551:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11822 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a7367cee9 code=0x7ffc0000 [ 640.159713][T11827] loop3: detected capacity change from 0 to 2048 [ 640.244753][ T29] audit: type=1326 audit(1717544520.551:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11822 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7367cee9 code=0x7ffc0000 [ 640.273064][T11827] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 640.326992][ T29] audit: type=1326 audit(1717544520.551:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11822 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7a7367a667 code=0x7ffc0000 [ 640.364372][T11830] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 640.364861][T11827] syz-executor.3: attempt to access beyond end of device [ 640.364861][T11827] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 640.390814][ T4490] Bluetooth: hci5: command tx timeout [ 640.415910][T11827] syz-executor.3: attempt to access beyond end of device [ 640.415910][T11827] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 640.448581][ T29] audit: type=1326 audit(1717544520.551:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11822 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7a73640359 code=0x7ffc0000 [ 640.479839][T11827] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 640.490264][ T29] audit: type=1326 audit(1717544520.551:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11822 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7a7367a667 code=0x7ffc0000 [ 640.513534][T11827] NILFS (loop3): error -5 reading inode: ino=12 [ 640.527439][T11832] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 640.533092][ T29] audit: type=1326 audit(1717544520.551:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11822 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7a73640359 code=0x7ffc0000 [ 640.560805][ T6047] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 640.750317][ T6047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.762920][ T6047] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.774639][ T6047] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 640.790367][ T6047] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 640.803684][ T6047] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.822283][ T6047] usb 3-1: config 0 descriptor?? [ 641.264525][ T6047] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 641.273582][ T6047] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 641.281481][ T6047] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 641.282108][ T946] team0 (unregistering): Port device team_slave_1 removed [ 641.289336][ T6047] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 641.306889][T11838] xt_socket: unknown flags 0x50 [ 641.336520][ T6047] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 641.374609][ T6047] prodikeys 0003:041E:2801.0005: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 641.412725][ T4490] Bluetooth: hci3: command 0x0406 tx timeout [ 641.477746][ T946] team0 (unregistering): Port device team_slave_0 removed [ 641.482338][ T6047] usb 3-1: USB disconnect, device number 11 [ 641.848186][T11844] loop0: detected capacity change from 0 to 16384 [ 641.937566][T11839] loop5: detected capacity change from 0 to 32768 [ 642.459107][ T53] Bluetooth: hci5: command tx timeout [ 642.854345][T11798] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.861699][T11798] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.893776][T11798] bridge_slave_0: entered allmulticast mode [ 642.901175][T11798] bridge_slave_0: entered promiscuous mode [ 642.926338][T11798] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.943334][T11798] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.950742][T11798] bridge_slave_1: entered allmulticast mode [ 642.966443][T11798] bridge_slave_1: entered promiscuous mode [ 643.050730][T11798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.081131][T11798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.180685][T11798] team0: Port device team_slave_0 added [ 643.211419][T11798] team0: Port device team_slave_1 added [ 643.277020][T11798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.292640][T11798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.324320][T11798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.340301][T11798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.348017][T11798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.375890][T11798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.483901][T11798] hsr_slave_0: entered promiscuous mode [ 643.490819][T11798] hsr_slave_1: entered promiscuous mode [ 643.500625][T11798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 643.511126][T11798] Cannot create hsr debugfs directory [ 644.139407][T11876] Bluetooth: MGMT ver 1.22 [ 644.414602][T11798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 644.438718][T11798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 644.462403][T11798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 644.501212][T11798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 644.532970][ T53] Bluetooth: hci5: command tx timeout [ 644.750476][T11798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.848085][T11798] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.887760][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.895045][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.937977][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.945318][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.076001][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 645.076026][ T29] audit: type=1326 audit(1717544525.641:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2de7e7cee9 code=0x0 [ 645.294257][T11881] loop3: detected capacity change from 0 to 32768 [ 645.478638][T11798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.606410][T11798] veth0_vlan: entered promiscuous mode [ 645.627697][T11798] veth1_vlan: entered promiscuous mode [ 645.687960][T11798] veth0_macvtap: entered promiscuous mode [ 645.707737][T11798] veth1_macvtap: entered promiscuous mode [ 645.712530][T11908] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.5'. [ 645.725321][T11908] openvswitch: netlink: VXLAN extension 4 out of range max 1 [ 645.765968][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.782029][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.792279][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.803755][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.813940][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.825053][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.835526][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.847351][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.857921][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.887748][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.920889][T11798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.947659][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.986301][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.001181][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.020060][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.031604][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.049407][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.059779][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.098930][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.228635][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.241304][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.265910][T11798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.306339][T11798] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.330991][T11798] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.346516][T11798] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.359766][T11798] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.538058][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 646.614430][ T53] Bluetooth: hci5: command tx timeout [ 646.661569][ T5997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.670537][ T5997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.714422][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.723107][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.881243][T11926] openvswitch: netlink: Unknown nsh attribute 0 [ 647.260488][T11941] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 647.701343][T11951] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 647.756456][T11950] loop1: detected capacity change from 0 to 1024 [ 647.873728][T11942] loop3: detected capacity change from 0 to 32768 [ 648.110950][ T29] audit: type=1800 audit(1717544528.671:1418): pid=11958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 648.140841][ T53] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 648.170416][T11958] loop4: detected capacity change from 0 to 1024 [ 648.203823][T11958] hfsplus: invalid btree extent records (0 size) [ 648.210739][T11958] hfsplus: failed to load attributes file [ 648.371628][ T29] audit: type=1326 audit(1717544528.931:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11954 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c987cee9 code=0x7ffc0000 [ 648.396196][ T29] audit: type=1326 audit(1717544528.931:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11954 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5c987cee9 code=0x7ffc0000 [ 648.428349][ T29] audit: type=1326 audit(1717544528.951:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11954 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c987cee9 code=0x7ffc0000 [ 648.451792][ T29] audit: type=1326 audit(1717544528.951:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11954 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c987cee9 code=0x7ffc0000 [ 648.492960][ T29] audit: type=1326 audit(1717544528.951:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11954 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe5c987cee9 code=0x7ffc0000 [ 648.572241][ T29] audit: type=1326 audit(1717544528.951:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11954 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c987cee9 code=0x7ffc0000 [ 648.616698][ T29] audit: type=1326 audit(1717544528.951:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11954 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5c987cee9 code=0x7ffc0000 [ 648.648594][ T29] audit: type=1326 audit(1717544528.961:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11954 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fe5c987cee9 code=0x7ffc0000 [ 648.750781][T11968] loop2: detected capacity change from 0 to 128 [ 648.784967][T11968] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 648.821944][T11968] sysv_free_block: trying to free block not in datazone [ 648.863763][T11968] syz-executor.2: attempt to access beyond end of device [ 648.863763][T11968] loop2: rw=2049, sector=209285, nr_sectors = 1 limit=128 [ 649.039663][T10231] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 649.155691][T11978] loop0: detected capacity change from 0 to 256 [ 649.197919][T11980] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 649.262494][T11978] FAT-fs (loop0): Directory bread(block 64) failed [ 649.276421][T11978] FAT-fs (loop0): Directory bread(block 65) failed [ 649.301135][T11978] FAT-fs (loop0): Directory bread(block 66) failed [ 649.316835][T11978] FAT-fs (loop0): Directory bread(block 67) failed [ 649.330104][T11978] FAT-fs (loop0): Directory bread(block 68) failed [ 649.349909][T11978] FAT-fs (loop0): Directory bread(block 69) failed [ 649.371675][T11978] FAT-fs (loop0): Directory bread(block 70) failed [ 649.406905][T11978] FAT-fs (loop0): Directory bread(block 71) failed [ 649.428277][T11978] FAT-fs (loop0): Directory bread(block 72) failed [ 649.439555][T11978] FAT-fs (loop0): Directory bread(block 73) failed [ 650.399172][T11992] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.5'. [ 650.827199][T11997] loop3: detected capacity change from 0 to 64 [ 650.873133][T11997] MINIX-fs: bad superblock [ 651.061381][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 651.061402][ T29] audit: type=1326 audit(1717544531.621:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11999 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a7367cee9 code=0x0 [ 651.321599][T12004] loop0: detected capacity change from 0 to 736 [ 651.576105][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.651567][T12004] rock: directory entry would overflow storage [ 651.661236][T12006] loop1: detected capacity change from 0 to 8192 [ 651.682502][T12004] rock: sig=0x5850, size=36, remaining=14 [ 651.709868][T12006] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 651.850409][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.951212][T11996] loop4: detected capacity change from 0 to 32768 [ 651.966472][ T4490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 651.979954][ T4490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 651.993054][ T4490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 652.009475][ T4490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 652.024284][ T4490] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 652.033277][ T4490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 652.092417][T10693] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 652.102498][T10693] FAT-fs (loop1): Filesystem has been set read-only [ 652.148842][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.231199][T12014] loop0: detected capacity change from 0 to 512 [ 652.271354][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.356024][T12014] EXT4-fs: Ignoring removed nomblk_io_submit option [ 652.360233][T12011] netdevsim0 speed is unknown, defaulting to 1000 [ 652.384406][T12014] EXT4-fs: old and new quota format mixing [ 652.641323][T12014] loop0: detected capacity change from 0 to 4096 [ 652.674428][ T62] bridge_slave_1: left allmulticast mode [ 652.680135][ T62] bridge_slave_1: left promiscuous mode [ 652.686342][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.744140][ T62] bridge_slave_0: left allmulticast mode [ 652.747187][T12010] loop3: detected capacity change from 0 to 32768 [ 652.749866][ T62] bridge_slave_0: left promiscuous mode [ 652.775143][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.813398][T12022] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 652.854642][T12010] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (12010) [ 652.921903][T12010] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 652.960388][T12010] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 652.990331][T12010] BTRFS info (device loop3): using free-space-tree [ 653.307032][T12040] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.5'. [ 653.613346][ T8955] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 653.930809][T12050] fuse: Bad value for 'group_id' [ 653.941784][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.989941][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.030564][ T62] bond0 (unregistering): Released all slaves [ 654.136962][ T4490] Bluetooth: hci1: command tx timeout [ 654.660873][T12059] loop5: detected capacity change from 0 to 8192 [ 654.698112][T12063] loop3: detected capacity change from 0 to 256 [ 654.707146][T12011] chnl_net:caif_netlink_parms(): no params data found [ 654.772013][T12059] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 654.801737][ T62] hsr_slave_0: left promiscuous mode [ 654.831715][ T62] hsr_slave_1: left promiscuous mode [ 654.840511][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.855628][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.866263][T12065] loop1: detected capacity change from 0 to 64 [ 654.879873][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.893196][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.904991][T12063] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 654.946147][ T62] veth1_macvtap: left promiscuous mode [ 654.951786][ T62] veth0_macvtap: left promiscuous mode [ 654.957709][ T62] veth1_vlan: left promiscuous mode [ 654.986995][ T62] veth0_vlan: left promiscuous mode [ 655.238658][T10192] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 655.252345][T10192] FAT-fs (loop5): Filesystem has been set read-only [ 655.976227][T12072] loop4: detected capacity change from 0 to 512 [ 656.050160][T12072] EXT4-fs: Ignoring removed nomblk_io_submit option [ 656.090028][T12072] EXT4-fs: old and new quota format mixing [ 656.225474][ T4490] Bluetooth: hci1: command tx timeout [ 656.237137][T12072] loop4: detected capacity change from 0 to 4096 [ 656.340254][T12077] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 656.543012][ T6003] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 656.742683][ T6003] usb 6-1: Using ep0 maxpacket: 16 [ 656.756233][ T6003] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 656.789627][ T6003] usb 6-1: New USB device found, idVendor=1b80, idProduct=e397, bcdDevice=cc.99 [ 656.810494][ T6003] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.815499][T12084] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 656.834347][ T6003] usb 6-1: Product: syz [ 656.839626][ T6003] usb 6-1: Manufacturer: syz [ 656.865042][T12084] siw: device registration error -23 [ 656.874666][ T6003] usb 6-1: SerialNumber: syz [ 656.896439][ T6003] usb 6-1: config 0 descriptor?? [ 657.144383][ T6003] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 657.159345][ T6003] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 657.171941][ T6003] usb 6-1: USB disconnect, device number 9 [ 657.389398][ T62] team0 (unregistering): Port device team_slave_1 removed [ 657.645276][ T62] team0 (unregistering): Port device team_slave_0 removed [ 658.293086][ T4490] Bluetooth: hci1: command tx timeout [ 658.858192][T12105] loop4: detected capacity change from 0 to 8192 [ 658.944217][T12105] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 659.020793][T12092] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 659.046689][T12092] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 659.062866][T12092] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 659.089059][T12092] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 659.168046][T11033] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 659.197569][T11033] FAT-fs (loop4): Filesystem has been set read-only [ 659.217206][T12103] tipc: Enabling not permitted [ 659.226857][T12103] tipc: Enabling of bearer rejected, failed to enable media [ 659.334742][T12011] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.343645][T12011] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.351055][T12011] bridge_slave_0: entered allmulticast mode [ 659.359506][T12011] bridge_slave_0: entered promiscuous mode [ 659.370426][T12011] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.390386][T12011] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.397853][T12011] bridge_slave_1: entered allmulticast mode [ 659.424746][T12011] bridge_slave_1: entered promiscuous mode [ 659.499345][T12011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.514012][T12011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.562970][T12011] team0: Port device team_slave_0 added [ 659.585753][T12011] team0: Port device team_slave_1 added [ 659.655436][T12011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.662515][T12011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.693556][T12011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.706970][T12011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.716092][T12011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.742276][T12011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.868006][T12011] hsr_slave_0: entered promiscuous mode [ 659.880422][T12011] hsr_slave_1: entered promiscuous mode [ 659.888848][T12011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 659.903178][T12011] Cannot create hsr debugfs directory [ 660.334693][T12124] loop1: detected capacity change from 0 to 1024 [ 660.372765][ T4490] Bluetooth: hci1: command tx timeout [ 660.406490][T12126] loop5: detected capacity change from 0 to 512 [ 660.426935][T12124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 660.480797][T12126] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.5: corrupted in-inode xattr: invalid ea_ino [ 660.570623][T12126] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 660.593553][T12126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.786227][T10192] EXT4-fs error (device loop5): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor.5: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 660.835150][T12011] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 660.853823][T10192] EXT4-fs error (device loop5): ext4_lookup:1858: inode #2: comm syz-executor.5: deleted inode referenced: 15 [ 660.877225][T12011] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 660.894036][T10192] EXT4-fs error (device loop5): ext4_lookup:1858: inode #2: comm syz-executor.5: deleted inode referenced: 15 [ 660.918382][T12011] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 660.960208][T12011] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 661.194704][T12141] xt_CT: You must specify a L4 protocol and not use inversions on it [ 661.232157][T10192] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.450830][ T946] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.567852][T12131] loop4: detected capacity change from 0 to 40427 [ 661.608253][T12131] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 661.620017][T12131] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 661.685227][T12131] F2FS-fs (loop4): Found nat_bits in checkpoint [ 661.715740][ T946] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.838821][T12152] tipc: Enabling not permitted [ 661.845578][T12152] tipc: Enabling of bearer rejected, failed to enable media [ 661.927574][ T946] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.092402][T12011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.107009][T12131] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 662.415508][T12131] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 662.938870][ T29] audit: type=1800 audit(1717544543.501:1432): pid=12160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=21 res=0 errno=0 [ 663.153427][ T946] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.224683][ T6047] netdevsim0 speed is unknown, defaulting to 1000 [ 663.239893][T12011] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.271534][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.278768][ T6047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.318394][T11033] syz-executor.4: attempt to access beyond end of device [ 663.318394][T11033] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 663.336706][T12164] IPVS: length: 245 != 8 [ 663.354430][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.361600][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.388785][T11033] syz-executor.4: attempt to access beyond end of device [ 663.388785][T11033] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 663.698831][ T946] bridge_slave_1: left allmulticast mode [ 663.713558][ T946] bridge_slave_1: left promiscuous mode [ 663.719458][ T946] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.747654][ T946] bridge_slave_0: left allmulticast mode [ 663.767373][ T2484] kworker/u8:11: attempt to access beyond end of device [ 663.767373][ T2484] loop4: rw=2049, sector=40960, nr_sectors = 104 limit=40427 [ 663.768220][ T946] bridge_slave_0: left promiscuous mode [ 663.807124][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 663.823323][ T2484] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 663.825077][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 663.830378][ T2484] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 663.848653][ T946] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.854253][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 663.862972][ T2484] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 663.874788][ T2484] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 663.889887][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 663.890268][ T2484] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 663.906715][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 663.914236][ T2484] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 663.922719][ T2484] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 663.925667][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 663.932164][ T2484] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 663.945077][ T2484] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 663.957187][ T2484] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 663.964370][ T2484] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 663.971600][ T2484] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 663.999169][ T2484] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 664.349887][T12180] xt_socket: unknown flags 0x50 [ 664.843420][ T946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.870627][ T946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.873487][T12178] loop3: detected capacity change from 0 to 32768 [ 664.890286][ T946] bond0 (unregistering): Released all slaves [ 664.902187][T12178] XFS: attr2 mount option is deprecated. [ 664.933703][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 664.979671][T12186] loop0: detected capacity change from 0 to 1024 [ 665.058270][T12178] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 665.091784][T12186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.255447][T12186] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 665.350558][T12186] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 665.367459][T12178] XFS (loop3): Ending clean mount [ 665.379026][T12178] XFS (loop3): Quotacheck needed: Please wait. [ 665.408500][T12186] EXT4-fs (loop0): This should not happen!! Data will be lost [ 665.408500][T12186] [ 665.460038][T12186] EXT4-fs (loop0): Total free blocks count 0 [ 665.505339][T12186] EXT4-fs (loop0): Free/Dirty block details [ 665.548233][T12011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.555488][T12186] EXT4-fs (loop0): free_blocks=68451041280 [ 665.588318][T12178] XFS (loop3): Quotacheck: Done. [ 665.589272][T12186] EXT4-fs (loop0): dirty_blocks=48 [ 665.601395][ T946] hsr_slave_0: left promiscuous mode [ 665.636436][T12186] EXT4-fs (loop0): Block reservation details [ 665.644722][ T946] hsr_slave_1: left promiscuous mode [ 665.657914][T12186] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 665.675553][ T946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.690908][ T946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.712991][ T946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.724440][ T946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.735654][ T8955] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 665.813941][ T946] veth1_macvtap: left promiscuous mode [ 665.819743][ T946] veth0_macvtap: left promiscuous mode [ 665.828035][ T946] veth1_vlan: left promiscuous mode [ 665.834922][ T946] veth0_vlan: left promiscuous mode [ 665.947988][ T62] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 665.975618][ T53] Bluetooth: hci3: command tx timeout [ 667.018952][ T4490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 667.041373][ T4490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 667.071594][ T4490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 667.081130][ T4490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 667.100859][ T4490] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 667.108641][ T4490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 667.174484][T12214] loop0: detected capacity change from 0 to 8192 [ 667.214905][T12214] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 667.342123][ T946] team0 (unregistering): Port device team_slave_1 removed [ 667.440315][ T946] team0 (unregistering): Port device team_slave_0 removed [ 667.492486][T11798] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 667.520416][T11798] FAT-fs (loop0): Filesystem has been set read-only [ 668.052671][ T4490] Bluetooth: hci3: command tx timeout [ 668.635663][T12011] veth0_vlan: entered promiscuous mode [ 668.789215][T12011] veth1_vlan: entered promiscuous mode [ 668.820361][T12233] IPVS: length: 245 != 8 [ 668.977822][T12171] chnl_net:caif_netlink_parms(): no params data found [ 669.109081][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.173001][ T4490] Bluetooth: hci0: command tx timeout [ 669.180580][T12011] veth0_macvtap: entered promiscuous mode [ 669.318359][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.402119][T12011] veth1_macvtap: entered promiscuous mode [ 669.514485][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.610744][T12171] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.642977][T12171] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.650310][T12171] bridge_slave_0: entered allmulticast mode [ 669.666565][T12171] bridge_slave_0: entered promiscuous mode [ 669.727064][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.766038][T12171] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.780946][T12171] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.790242][T12171] bridge_slave_1: entered allmulticast mode [ 669.805525][T12171] bridge_slave_1: entered promiscuous mode [ 669.865017][T12215] chnl_net:caif_netlink_parms(): no params data found [ 669.887036][T12240] loop1: detected capacity change from 0 to 32768 [ 669.936017][T12171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.939754][T12240] XFS: attr2 mount option is deprecated. [ 669.991079][T12240] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 670.029238][T12171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.142840][ T4490] Bluetooth: hci3: command tx timeout [ 670.221406][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.231220][T12240] XFS (loop1): Ending clean mount [ 670.233714][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.247810][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.248716][T12240] XFS (loop1): Quotacheck needed: Please wait. [ 670.261038][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.278628][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.289218][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.300425][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.311364][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.355060][T12011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.376021][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.396996][T12240] XFS (loop1): Quotacheck: Done. [ 670.403437][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.432208][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.462655][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.502625][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.521224][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.531758][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.554062][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.556399][T12251] loop3: detected capacity change from 0 to 40427 [ 670.571575][T10693] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 670.575535][T12011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.613365][T12251] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 670.620030][T12251] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 670.660248][T12171] team0: Port device team_slave_0 added [ 670.689196][T12171] team0: Port device team_slave_1 added [ 670.743024][T12251] F2FS-fs (loop3): Found nat_bits in checkpoint [ 670.880810][T12251] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 670.888085][T12251] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 670.998777][T12011] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.039831][T12011] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.061286][ T29] audit: type=1800 audit(1717544551.621:1433): pid=12251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="overlay" ino=25 res=0 errno=0 [ 671.072631][T12011] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.128055][T12011] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.152511][T12171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.161265][T12171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.197167][T12171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.216347][ T51] bridge_slave_1: left allmulticast mode [ 671.222060][ T51] bridge_slave_1: left promiscuous mode [ 671.228304][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.238130][ T51] bridge_slave_0: left allmulticast mode [ 671.244677][ T51] bridge_slave_0: left promiscuous mode [ 671.250408][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.252829][ T4490] Bluetooth: hci0: command tx timeout [ 671.268203][ T8955] syz-executor.3: attempt to access beyond end of device [ 671.268203][ T8955] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 671.285879][ T8955] syz-executor.3: attempt to access beyond end of device [ 671.285879][ T8955] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 671.365645][T12272] Bluetooth: MGMT ver 1.22 [ 671.500900][ T2484] kworker/u8:11: attempt to access beyond end of device [ 671.500900][ T2484] loop3: rw=2049, sector=40960, nr_sectors = 104 limit=40427 [ 671.524032][ T2484] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 671.532173][ T2484] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 671.558193][ T2484] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 671.587418][ T2484] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 671.597133][ T2484] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 671.605975][ T2484] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 671.613371][ T2484] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 671.620318][ T2484] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 671.627400][ T2484] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 671.634458][ T2484] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 671.641672][ T2484] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 671.663402][ T2484] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 671.674405][ T2484] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 671.839702][T12276] Cannot find del_set index 2 as target [ 672.094091][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.107997][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.120609][ T51] bond0 (unregistering): Released all slaves [ 672.135181][T12215] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.142500][T12215] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.150120][T12215] bridge_slave_0: entered allmulticast mode [ 672.158015][T12215] bridge_slave_0: entered promiscuous mode [ 672.171841][T12171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.209309][T12171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.246373][ T4490] Bluetooth: hci3: command tx timeout [ 672.250104][T12171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.370683][T12215] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.379407][T12215] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.389552][T12215] bridge_slave_1: entered allmulticast mode [ 672.399728][T12215] bridge_slave_1: entered promiscuous mode [ 672.597236][T12215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.613145][T12215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.649897][T12171] hsr_slave_0: entered promiscuous mode [ 672.664295][T12171] hsr_slave_1: entered promiscuous mode [ 672.680201][T12171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 672.697985][T12171] Cannot create hsr debugfs directory [ 672.989495][T12215] team0: Port device team_slave_0 added [ 673.115997][T12215] team0: Port device team_slave_1 added [ 673.160669][ T51] hsr_slave_0: left promiscuous mode [ 673.173470][ T51] hsr_slave_1: left promiscuous mode [ 673.180048][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.189287][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.197896][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.207222][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.238323][ T51] veth1_macvtap: left promiscuous mode [ 673.243996][ T51] veth0_macvtap: left promiscuous mode [ 673.250096][ T51] veth1_vlan: left promiscuous mode [ 673.258373][ T51] veth0_vlan: left promiscuous mode [ 673.337467][ T4490] Bluetooth: hci0: command tx timeout [ 674.867204][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 674.894533][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 674.906137][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 674.926732][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 674.934893][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 674.944512][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 675.284534][ T51] team0 (unregistering): Port device team_slave_1 removed [ 675.358083][ T51] team0 (unregistering): Port device team_slave_0 removed [ 675.412724][ T53] Bluetooth: hci0: command tx timeout [ 676.137946][T12285] vlan2: entered promiscuous mode [ 676.143315][T12285] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 676.150804][T12285] vlan2: entered allmulticast mode [ 676.156030][T12285] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 676.167079][T12285] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 676.176014][T12285] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 676.229876][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 676.245275][T12294] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 676.357470][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.370723][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.375159][T12215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.394055][T12215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.420577][T12215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.501280][T12215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.508571][T12215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.536496][T12215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.776761][T12215] hsr_slave_0: entered promiscuous mode [ 676.784742][T12215] hsr_slave_1: entered promiscuous mode [ 676.792194][T12215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 676.802309][T12215] Cannot create hsr debugfs directory [ 676.851350][ T6000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.874231][ T6000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.022956][ T53] Bluetooth: hci2: command tx timeout [ 677.290973][ T51] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.408991][T12309] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 677.478328][ T51] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.509043][T12291] chnl_net:caif_netlink_parms(): no params data found [ 677.571928][T12313] netlink: zone id is out of range [ 677.588893][T12313] netlink: zone id is out of range [ 677.590214][T12314] loop2: detected capacity change from 0 to 1024 [ 677.627128][T12313] netlink: zone id is out of range [ 677.632339][T12313] netlink: zone id is out of range [ 677.652324][T12313] netlink: zone id is out of range [ 677.702088][T12313] netlink: set zone limit has 4 unknown bytes [ 677.704125][ T51] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.725373][T12314] hfsplus: bad catalog entry type [ 677.789714][T12171] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 677.853746][T12171] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 677.899841][ T2838] hfsplus: b-tree write err: -5, ino 4 [ 677.960442][ T51] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.028720][T12171] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 678.045231][T12171] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 678.168483][T12291] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.176777][T12291] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.185363][T12291] bridge_slave_0: entered allmulticast mode [ 678.192779][T12291] bridge_slave_0: entered promiscuous mode [ 678.253497][T12291] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.260715][T12291] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.288154][T12291] bridge_slave_1: entered allmulticast mode [ 678.300468][T12291] bridge_slave_1: entered promiscuous mode [ 678.467366][T12291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.481639][T12291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.615055][T12291] team0: Port device team_slave_0 added [ 678.634608][ T51] bridge_slave_1: left allmulticast mode [ 678.640969][ T51] bridge_slave_1: left promiscuous mode [ 678.647267][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.668756][ T51] bridge_slave_0: left allmulticast mode [ 678.677892][ T51] bridge_slave_0: left promiscuous mode [ 678.685004][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.760876][T12333] loop1: detected capacity change from 0 to 164 [ 679.093345][ T53] Bluetooth: hci2: command tx timeout [ 679.377261][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.390776][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.402057][ T51] bond0 (unregistering): Released all slaves [ 679.431434][T12291] team0: Port device team_slave_1 added [ 679.547211][T12341] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 679.618571][ T51] tipc: Left network mode [ 679.707550][T12291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.716008][T12291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.743733][T12291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.774722][T12291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.782397][T12291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.809048][T12291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.893600][ T5997] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 679.964662][ T5997] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 680.054106][ T5997] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 680.072066][T12291] hsr_slave_0: entered promiscuous mode [ 680.087851][T12348] loop0: detected capacity change from 0 to 1024 [ 680.104980][T12291] hsr_slave_1: entered promiscuous mode [ 680.113324][T12350] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 680.128712][T12291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 680.138364][T12291] Cannot create hsr debugfs directory [ 680.183025][T12348] hfsplus: bad catalog entry type [ 680.281143][ T8934] hfsplus: b-tree write err: -5, ino 4 [ 680.319957][T12215] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 680.343868][ T5978] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 680.397057][T12215] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 680.423361][ T5978] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 680.441049][ T51] hsr_slave_0: left promiscuous mode [ 680.449722][ T51] hsr_slave_1: left promiscuous mode [ 680.462168][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.469862][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.478982][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.487518][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.516336][ T51] veth0_macvtap: left promiscuous mode [ 680.522136][ T51] veth1_vlan: left promiscuous mode [ 680.528214][ T51] veth0_vlan: left promiscuous mode [ 680.694640][T12357] dccp_invalid_packet: P.Data Offset(0) too small [ 681.025740][ T6047] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 681.186226][ T53] Bluetooth: hci2: command tx timeout [ 681.196249][T12363] Cannot find del_set index 2 as target [ 681.871152][ T51] team0 (unregistering): Port device team_slave_1 removed [ 682.004409][ T51] team0 (unregistering): Port device team_slave_0 removed [ 683.062635][T12215] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 683.079447][ T1145] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 683.173187][ T1145] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 683.184638][T12379] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 683.252756][ T53] Bluetooth: hci2: command tx timeout [ 683.307697][T12215] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 683.363132][ T5978] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 683.365708][T12375] loop2: detected capacity change from 0 to 32768 [ 683.413694][ T6047] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 683.446293][T12375] btrfs: Deprecated parameter 'usebackuproot' [ 683.491723][T12375] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 683.520927][T12375] btrfs: Deprecated parameter 'usebackuproot' [ 683.543334][T12375] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 683.556015][T12375] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (12375) [ 683.626186][T12375] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 683.661683][T12375] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 683.683330][T12375] BTRFS info (device loop2): disk space caching is enabled [ 683.740172][T12171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.846391][T12375] BTRFS info (device loop2 state M): disabling free space tree [ 683.883784][T12375] BTRFS info (device loop2 state M): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 683.909520][T12171] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.916336][T12375] BTRFS info (device loop2 state M): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 684.019377][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.026727][ T5812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.078256][T12375] BTRFS info (device loop2 state M): use compression, level 0 [ 684.091497][T12400] loop1: detected capacity change from 0 to 1024 [ 684.167279][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.174508][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.183479][T12400] hfsplus: bad catalog entry type [ 684.276307][T12011] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 684.284330][T12215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.298471][ T8934] hfsplus: b-tree write err: -5, ino 4 [ 684.580730][T12215] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.744178][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.751450][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.809334][T12291] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 684.923131][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.930354][ T5812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.951875][T12291] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 684.976076][T12291] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 684.998356][T12291] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 685.130463][T12412] loop1: detected capacity change from 0 to 1024 [ 685.139384][T12408] loop2: detected capacity change from 0 to 4096 [ 685.174971][T12412] EXT4-fs: Ignoring removed nomblk_io_submit option [ 685.198023][T12412] EXT4-fs: Ignoring removed nomblk_io_submit option [ 685.215965][T12412] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 685.221490][T12408] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 685.269791][T12412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.351670][T12408] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 685.381620][T12171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.427288][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.443187][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.488580][T12291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.540641][T10693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.608201][T12291] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.669347][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.676617][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.747470][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.754709][ T6047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.924449][T12291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 685.982150][ T65] ntfs3: loop2: ino=5, ntfs3_write_inode failed, -22. [ 686.028364][T12215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.530622][T12171] veth0_vlan: entered promiscuous mode [ 686.565875][T12171] veth1_vlan: entered promiscuous mode [ 686.588033][T12291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.618340][T12417] loop0: detected capacity change from 0 to 32768 [ 686.663500][T12417] XFS: attr2 mount option is deprecated. [ 686.750787][T12171] veth0_macvtap: entered promiscuous mode [ 686.759541][T12417] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 686.913741][T12171] veth1_macvtap: entered promiscuous mode [ 686.975010][T12417] XFS (loop0): Ending clean mount [ 687.001139][T12417] XFS (loop0): Quotacheck needed: Please wait. [ 687.039845][T12171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.069001][T12171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.094600][T12417] XFS (loop0): Quotacheck: Done. [ 687.103148][T12171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.138288][T12171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.159242][T12171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.190873][T12171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.207684][T12171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.215300][T11798] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 687.222848][T12291] veth0_vlan: entered promiscuous mode [ 687.278120][T12171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.294508][T12171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.304636][T12171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.318597][T12171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.334789][T12171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.346617][T12171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.375229][T12171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.384911][T12291] veth1_vlan: entered promiscuous mode [ 687.416711][T12171] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.440261][T12171] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.451615][T12171] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.462427][T12171] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.493390][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 687.593522][T12215] veth0_vlan: entered promiscuous mode [ 687.684638][T12215] veth1_vlan: entered promiscuous mode [ 687.759109][ T946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.773505][T12291] veth0_macvtap: entered promiscuous mode [ 687.785836][ T946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.841757][T12291] veth1_macvtap: entered promiscuous mode [ 687.909348][ T6047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.922944][ T6047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.942084][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.988111][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.998374][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.009165][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.019925][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.030587][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.040996][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.055655][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.072168][T12291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.136729][T12215] veth0_macvtap: entered promiscuous mode [ 688.180502][T12215] veth1_macvtap: entered promiscuous mode [ 688.208782][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.242289][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.255634][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.274977][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.290686][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.302741][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.313123][T12291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.327734][T12291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.340416][T12291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.377184][T12291] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.400274][T12291] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.413303][T12291] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.422339][T12291] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.460260][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.473584][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.484545][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.495155][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.505145][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.515889][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.545992][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.572595][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.592615][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.608202][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.635412][T12215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.661323][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.677710][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.709362][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.720043][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.729960][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.741136][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.751119][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.761693][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.774268][T12215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.787161][T12215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.799807][T12215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.864917][T12215] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.900790][T12215] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.916222][T12215] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.933181][T12215] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.159986][ T8934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.189486][ T8934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.248355][ T6003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.280193][ T6003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.327178][ T8934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.343673][ T8934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.457864][ T5812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.473993][ T5812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.499803][T12485] loop1: detected capacity change from 0 to 1024 [ 689.594926][T12485] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 691.106964][T12498] x_tables: unsorted entry at hook 2 [ 692.231124][ T29] audit: type=1804 audit(1717544572.791:1434): pid=12484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3699182867/syzkaller.0JRFre/50/file0" dev="sda1" ino=1934 res=1 errno=0 [ 692.320980][T12522] loop5: detected capacity change from 0 to 4096 [ 692.371515][T12522] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 692.388939][T12522] ntfs3: loop5: Failed to load $MFT (-2). [ 692.432149][T12528] loop2: detected capacity change from 0 to 1024 [ 692.473455][T12528] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 692.492289][T12522] overlayfs: failed to resolve 'default_permissions': -2 [ 692.512068][T12522] loop5: detected capacity change from 0 to 64 [ 692.746751][T12534] loop0: detected capacity change from 0 to 1024 [ 692.971122][T12539] lo speed is unknown, defaulting to 1000 [ 693.000198][T12539] lo speed is unknown, defaulting to 1000 [ 693.017008][T12539] lo speed is unknown, defaulting to 1000 [ 693.385129][ T6003] lo speed is unknown, defaulting to 1000 [ 693.394211][T12539] infiniband syz1: set active [ 693.402917][T12539] infiniband syz1: added lo [ 693.500646][T12553] loop5: detected capacity change from 0 to 512 [ 693.507897][T12539] RDS/IB: syz1: added [ 693.546667][T12539] smc: adding ib device syz1 with port count 1 [ 693.565887][T12553] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.5: corrupted in-inode xattr: invalid ea_ino [ 693.573806][T12539] smc: ib device syz1 port 1 has pnetid [ 693.606123][ T6003] lo speed is unknown, defaulting to 1000 [ 693.635081][T12539] lo speed is unknown, defaulting to 1000 [ 693.638657][T12553] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 693.644573][T12559] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 693.667765][T12553] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.814724][T12553] EXT4-fs warning (device loop5): __ext4fs_dirhash:270: inode #18: comm syz-executor.5: Siphash requires key [ 693.869912][T12553] EXT4-fs warning (device loop5): dx_probe:844: inode #18: comm syz-executor.5: Hash code is SIPHASH, but hash not in dirent [ 693.908114][T12553] EXT4-fs warning (device loop5): dx_probe:965: inode #18: comm syz-executor.5: Corrupt directory, running e2fsck is recommended [ 694.138912][T12171] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.153377][T12551] loop3: detected capacity change from 0 to 32768 [ 694.197663][T12551] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (12551) [ 694.212522][T12539] lo speed is unknown, defaulting to 1000 [ 694.269516][T12551] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 694.289354][T12551] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 694.313125][T12551] BTRFS info (device loop3): using free-space-tree [ 694.665081][T12539] lo speed is unknown, defaulting to 1000 [ 695.538149][T12291] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 695.766654][T12539] lo speed is unknown, defaulting to 1000 [ 696.432485][T12600] x_tables: unsorted entry at hook 2 [ 696.851102][T12539] lo speed is unknown, defaulting to 1000 [ 697.736082][T12539] lo speed is unknown, defaulting to 1000 [ 698.421646][T12630] loop3: detected capacity change from 0 to 256 [ 698.484865][T12630] FAT-fs (loop3): Directory bread(block 64) failed [ 698.491817][T12630] FAT-fs (loop3): Directory bread(block 65) failed [ 698.502257][T12630] FAT-fs (loop3): Directory bread(block 66) failed [ 698.509018][T12630] FAT-fs (loop3): Directory bread(block 67) failed [ 698.519219][T12630] FAT-fs (loop3): Directory bread(block 68) failed [ 698.529474][T12630] FAT-fs (loop3): Directory bread(block 69) failed [ 698.537987][T12630] FAT-fs (loop3): Directory bread(block 70) failed [ 698.559436][T12630] FAT-fs (loop3): Directory bread(block 71) failed [ 698.578060][T12630] FAT-fs (loop3): Directory bread(block 72) failed [ 698.590545][T12630] FAT-fs (loop3): Directory bread(block 73) failed [ 698.833705][T12642] serio: Serial port pts0 [ 699.427273][T12661] loop5: detected capacity change from 0 to 256 [ 699.577985][ T29] audit: type=1804 audit(1717544580.141:1435): pid=12661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2397879661/syzkaller.2ZvJko/13/file1/bus" dev="loop5" ino=1048852 res=1 errno=0 [ 699.658808][ T29] audit: type=1804 audit(1717544580.141:1436): pid=12661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2397879661/syzkaller.2ZvJko/13/file1/bus" dev="loop5" ino=1048852 res=1 errno=0 [ 699.700957][T12668] loop1: detected capacity change from 0 to 2048 [ 699.819367][T12668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 700.109384][T12655] loop2: detected capacity change from 0 to 32768 [ 700.163414][T12655] btrfs: Deprecated parameter 'usebackuproot' [ 700.169613][T12655] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 700.199744][T12655] btrfs: Deprecated parameter 'usebackuproot' [ 700.227815][T12655] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 700.244741][T12655] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (12655) [ 700.291207][T12655] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 700.309253][T12655] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 700.320036][T12655] BTRFS info (device loop2): disk space caching is enabled [ 700.496155][T12655] BTRFS info (device loop2 state M): disabling free space tree [ 700.523668][T12655] BTRFS info (device loop2 state M): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 700.537860][T12655] BTRFS info (device loop2 state M): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 700.594306][T12655] BTRFS info (device loop2 state M): use compression, level 0 [ 700.766432][T12011] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 701.586962][T12690] loop3: detected capacity change from 0 to 40427 [ 701.644732][T12690] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 701.661918][T12690] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 701.697161][T12690] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 701.721504][T12690] F2FS-fs (loop3): Found nat_bits in checkpoint [ 701.909791][T12690] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 701.927339][T12690] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 702.009309][T12727] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 702.020335][T12690] syz-executor.3: attempt to access beyond end of device [ 702.020335][T12690] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 702.029227][T12727] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 702.069274][T12690] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 702.758337][T10693] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.546369][ T29] audit: type=1800 audit(1717544584.111:1437): pid=12753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1958 res=0 errno=0 [ 703.837096][T12743] loop1: detected capacity change from 0 to 32768 [ 703.894805][T12743] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (12743) [ 703.914750][T12743] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 703.929387][T12743] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 703.938962][T12743] BTRFS info (device loop1): using free-space-tree [ 704.000918][T12743] BTRFS info (device loop1): checking UUID tree [ 704.281423][T10693] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 704.746024][T12791] loop5: detected capacity change from 0 to 2048 [ 704.803731][T12791] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.820188][T12819] loop2: detected capacity change from 0 to 4096 [ 705.840982][T12819] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 705.870540][T12819] ntfs3: loop2: Failed to load $MFT (-2). [ 706.011306][T12824] loop4: detected capacity change from 0 to 1024 [ 706.038323][T12819] overlayfs: failed to resolve 'default_permissions': -2 [ 706.077329][T12823] loop3: detected capacity change from 0 to 4096 [ 706.085282][T12819] loop2: detected capacity change from 0 to 64 [ 706.207539][T12824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.317359][ T29] audit: type=1800 audit(1717544586.881:1438): pid=12824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1978 res=0 errno=0 [ 706.646757][T12823] overlayfs: upper fs does not support tmpfile. [ 706.729056][T12823] overlayfs: workdir/#36 already exists [ 706.970765][T12215] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.335779][T12838] loop1: detected capacity change from 0 to 4096 [ 707.410512][T12838] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 707.523993][T12171] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.568241][T12838] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 707.693894][ T6000] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 707.922696][ T6000] usb 4-1: Using ep0 maxpacket: 16 [ 707.958705][ T6000] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.989998][ T6000] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.032884][ T6000] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 708.071217][ T6000] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 708.093042][ T6000] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.107291][ T6000] usb 4-1: config 0 descriptor?? [ 708.365989][ T8934] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.558719][ T6000] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 708.620234][ T6000] HID 045e:07da: Invalid code 65791 type 1 [ 708.637601][ T8934] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.666212][ T6000] HID 045e:07da: Invalid code 768 type 1 [ 708.679888][ T29] audit: type=1326 audit(1717544589.241:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12854 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763567cee9 code=0x7ffc0000 [ 708.692888][ T6000] HID 045e:07da: Invalid code 769 type 1 [ 708.728595][ T6000] HID 045e:07da: Invalid code 770 type 1 [ 708.767420][ T6000] HID 045e:07da: Invalid code 771 type 1 [ 708.769781][ T29] audit: type=1326 audit(1717544589.241:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12854 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f763567cee9 code=0x7ffc0000 [ 708.806333][ T6000] HID 045e:07da: Invalid code 772 type 1 [ 708.812332][ T29] audit: type=1326 audit(1717544589.241:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12854 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763567cee9 code=0x7ffc0000 [ 708.845394][ T6000] HID 045e:07da: Invalid code 773 type 1 [ 708.869006][ T6000] HID 045e:07da: Invalid code 774 type 1 [ 708.902192][ T6000] HID 045e:07da: Invalid code 775 type 1 [ 708.926558][ T6000] HID 045e:07da: Invalid code 776 type 1 [ 708.962651][ T29] audit: type=1326 audit(1717544589.241:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12854 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f763567cee9 code=0x7ffc0000 [ 709.006677][ T29] audit: type=1326 audit(1717544589.241:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12854 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763567cee9 code=0x7ffc0000 [ 709.092032][ T6000] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0006/input/input12 [ 709.173462][ T29] audit: type=1326 audit(1717544589.241:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12854 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f763567cee9 code=0x7ffc0000 [ 709.281989][ T6000] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 709.288991][ T8934] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.313440][ T29] audit: type=1326 audit(1717544589.241:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12854 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763567cee9 code=0x7ffc0000 [ 709.367452][ T6000] usb 4-1: USB disconnect, device number 10 [ 709.408964][ T29] audit: type=1326 audit(1717544589.251:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12854 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763567cee9 code=0x7ffc0000 [ 709.531992][ T29] audit: type=1326 audit(1717544589.251:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12854 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f763567cee9 code=0x7ffc0000 [ 709.668600][ T8934] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.084913][ T8934] bridge_slave_1: left allmulticast mode [ 710.098550][ T8934] bridge_slave_1: left promiscuous mode [ 710.118651][ T8934] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.179474][ T8934] bridge_slave_0: left allmulticast mode [ 710.214812][ T8934] bridge_slave_0: left promiscuous mode [ 710.220748][ T8934] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.375101][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 710.391861][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 710.405733][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 710.419075][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 710.428734][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 710.448023][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 710.994582][T12891] loop2: detected capacity change from 0 to 512 [ 711.111601][T12891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 711.157376][T12891] ext4 filesystem being mounted at /root/syzkaller-testdir1015434438/syzkaller.v6XiO9/42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 711.235335][T12897] input: syz1 as /devices/virtual/input/input13 [ 711.283117][T12897] loop3: detected capacity change from 0 to 3 [ 711.379420][T12897] syz-executor.3: attempt to access beyond end of device [ 711.379420][T12897] loop3: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 711.443202][T12902] loop4: detected capacity change from 0 to 256 [ 711.454004][T12897] SQUASHFS error: Failed to read block 0x0: -5 [ 711.461988][T12897] unable to read squashfs_super_block [ 711.534217][T12902] FAT-fs (loop4): Directory bread(block 64) failed [ 711.546557][T12902] FAT-fs (loop4): Directory bread(block 65) failed [ 711.557084][T12902] FAT-fs (loop4): Directory bread(block 66) failed [ 711.568452][T12902] FAT-fs (loop4): Directory bread(block 67) failed [ 711.582309][T12902] FAT-fs (loop4): Directory bread(block 68) failed [ 711.624356][T12902] FAT-fs (loop4): Directory bread(block 69) failed [ 711.631097][T12902] FAT-fs (loop4): Directory bread(block 70) failed [ 711.672191][T12902] FAT-fs (loop4): Directory bread(block 71) failed [ 711.690288][T12902] FAT-fs (loop4): Directory bread(block 72) failed [ 711.698232][T12902] FAT-fs (loop4): Directory bread(block 73) failed [ 711.826215][T12011] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.941665][ T8934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.960516][ T8934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.993219][ T8934] bond0 (unregistering): Released all slaves [ 712.162716][T12874] lo speed is unknown, defaulting to 1000 [ 712.487707][T12913] openvswitch: netlink: Missing key (keys=40, expected=100) [ 712.532826][ T53] Bluetooth: hci4: command tx timeout [ 712.723259][T12917] loop3: detected capacity change from 0 to 256 [ 712.821160][T12917] FAT-fs (loop3): Directory bread(block 64) failed [ 712.851173][T12917] FAT-fs (loop3): Directory bread(block 65) failed [ 712.882839][T12917] FAT-fs (loop3): Directory bread(block 66) failed [ 712.916967][T12917] FAT-fs (loop3): Directory bread(block 67) failed [ 712.944173][T12917] FAT-fs (loop3): Directory bread(block 68) failed [ 712.965178][T12917] FAT-fs (loop3): Directory bread(block 69) failed [ 712.971863][T12917] FAT-fs (loop3): Directory bread(block 70) failed [ 712.998162][T12917] FAT-fs (loop3): Directory bread(block 71) failed [ 713.007677][T12917] FAT-fs (loop3): Directory bread(block 72) failed [ 713.030192][T12917] FAT-fs (loop3): Directory bread(block 73) failed [ 713.044225][ T8934] hsr_slave_0: left promiscuous mode [ 713.094553][ T8934] hsr_slave_1: left promiscuous mode [ 713.374905][ T8934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.390592][ T8934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.596108][ T8934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.816292][ T8934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.268447][ T8934] veth1_macvtap: left promiscuous mode [ 714.289057][ T8934] veth0_macvtap: left promiscuous mode [ 714.315285][ T8934] veth1_vlan: left promiscuous mode [ 714.349002][ T8934] veth0_vlan: left promiscuous mode [ 714.613766][ T53] Bluetooth: hci4: command tx timeout [ 714.881602][T12941] loop0: detected capacity change from 0 to 164 [ 715.162150][T12943] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 715.435941][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 715.435964][ T29] audit: type=1326 audit(1717544596.001:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12946 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763567cee9 code=0x7ffc0000 [ 715.498773][ T29] audit: type=1326 audit(1717544596.001:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12946 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763567cee9 code=0x7ffc0000 [ 715.551376][ T29] audit: type=1326 audit(1717544596.001:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12946 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f763567cee9 code=0x7ffc0000 [ 715.616380][ T29] audit: type=1326 audit(1717544596.001:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12946 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763567cee9 code=0x7ffc0000 [ 715.650430][ T29] audit: type=1326 audit(1717544596.001:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12946 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763567cee9 code=0x7ffc0000 [ 715.685808][ T29] audit: type=1326 audit(1717544596.001:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12946 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f763567cee9 code=0x7ffc0000 [ 715.713548][ T29] audit: type=1326 audit(1717544596.041:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12946 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763567cee9 code=0x7ffc0000 [ 715.736683][ C1] vkms_vblank_simulate: vblank timer overrun [ 715.744997][ T29] audit: type=1326 audit(1717544596.041:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12946 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f763567a667 code=0x7ffc0000 [ 715.772375][ T29] audit: type=1326 audit(1717544596.041:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12946 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7635640359 code=0x7ffc0000 [ 715.781707][ T8934] team0 (unregistering): Port device team_slave_1 removed [ 715.803643][ T29] audit: type=1326 audit(1717544596.041:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12946 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f763567a667 code=0x7ffc0000 [ 715.894403][ T8934] team0 (unregistering): Port device team_slave_0 removed [ 716.359851][T12954] loop3: detected capacity change from 0 to 1024 [ 716.701389][ T53] Bluetooth: hci4: command tx timeout [ 716.888880][T12951] loop0: detected capacity change from 0 to 32768 [ 716.935514][T12951] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (12951) [ 716.968680][T12951] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 716.984942][T12951] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 717.000296][T12951] BTRFS info (device loop0): disk space caching is enabled [ 717.205559][T12951] BTRFS info (device loop0): rebuilding free space tree [ 717.274891][T12951] BTRFS info (device loop0): disabling free space tree [ 717.284842][T12951] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 717.311748][T12951] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 717.345353][ T51] hfsplus: b-tree write err: -5, ino 4 [ 717.392902][T12874] chnl_net:caif_netlink_parms(): no params data found [ 717.466192][T12951] BTRFS error (device loop0): balance: invalid convert metadata profile raid10 [ 717.550019][T12981] loop4: detected capacity change from 0 to 256 [ 717.679833][T11798] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 717.689176][T12981] FAT-fs (loop4): Directory bread(block 64) failed [ 717.716430][T12874] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.729709][T12874] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.737403][T12981] FAT-fs (loop4): Directory bread(block 65) failed [ 717.747728][T12981] FAT-fs (loop4): Directory bread(block 66) failed [ 717.754798][T12981] FAT-fs (loop4): Directory bread(block 67) failed [ 717.772052][T12874] bridge_slave_0: entered allmulticast mode [ 717.796359][T12981] FAT-fs (loop4): Directory bread(block 68) failed [ 717.805339][T12874] bridge_slave_0: entered promiscuous mode [ 717.814267][T12981] FAT-fs (loop4): Directory bread(block 69) failed [ 717.840588][T12874] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.856296][T12981] FAT-fs (loop4): Directory bread(block 70) failed [ 717.863665][T12874] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.871651][T12874] bridge_slave_1: entered allmulticast mode [ 717.899913][T12874] bridge_slave_1: entered promiscuous mode [ 717.906200][T12981] FAT-fs (loop4): Directory bread(block 71) failed [ 717.919624][T12981] FAT-fs (loop4): Directory bread(block 72) failed [ 717.962860][T12981] FAT-fs (loop4): Directory bread(block 73) failed [ 718.050348][T12874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.095223][T12874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.314068][T12874] team0: Port device team_slave_0 added [ 718.362526][T12874] team0: Port device team_slave_1 added [ 718.412076][T12874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.419207][T12874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.450716][T12874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.468339][T12874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.484584][T12874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.512129][T12874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.621934][T12874] hsr_slave_0: entered promiscuous mode [ 718.629317][T12874] hsr_slave_1: entered promiscuous mode [ 718.782960][ T53] Bluetooth: hci4: command tx timeout [ 719.448384][T13013] loop3: detected capacity change from 0 to 512 [ 719.553085][T13013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.593122][T13013] ext4 filesystem being mounted at /root/syzkaller-testdir2899345861/syzkaller.FZKOOe/29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.851304][T13001] loop4: detected capacity change from 0 to 32768 [ 719.886125][T12291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.940312][T12874] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 719.972481][T12874] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 720.008563][T12874] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 720.031317][T12874] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 720.149274][T13025] lo speed is unknown, defaulting to 1000 [ 720.281747][T12874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.429956][T12874] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.547663][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.555012][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.584024][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.591291][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.258164][T12874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.461829][T12874] veth0_vlan: entered promiscuous mode [ 721.494260][T12874] veth1_vlan: entered promiscuous mode [ 721.565800][T13049] loop2: detected capacity change from 0 to 512 [ 721.620032][T12874] veth0_macvtap: entered promiscuous mode [ 721.667168][T13049] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 721.691009][T12874] veth1_macvtap: entered promiscuous mode [ 721.698467][T13049] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 1 (level 1) [ 721.727714][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.743588][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.753595][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.764212][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.776115][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.779388][T13049] EXT4-fs (loop2): 1 truncate cleaned up [ 721.786750][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.786774][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.786794][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.786818][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.814579][T13049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 721.826022][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.876302][T12874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.891743][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 721.891800][ T29] audit: type=1326 audit(1717544602.451:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13053 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748e87cee9 code=0x7ffc0000 [ 721.977900][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.000104][ T29] audit: type=1326 audit(1717544602.451:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13053 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748e87cee9 code=0x7ffc0000 [ 722.029189][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.039223][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.069643][ T29] audit: type=1326 audit(1717544602.491:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13053 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f748e87cee9 code=0x7ffc0000 [ 722.098157][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.120410][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.139710][ T29] audit: type=1326 audit(1717544602.491:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13053 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748e87cee9 code=0x7ffc0000 [ 722.167084][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.170994][T13056] loop3: detected capacity change from 0 to 64 [ 722.188727][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.220966][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.233841][ T29] audit: type=1326 audit(1717544602.491:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13053 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748e87cee9 code=0x7ffc0000 [ 722.263213][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.294250][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.308826][ T29] audit: type=1326 audit(1717544602.501:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13053 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f748e87cee9 code=0x7ffc0000 [ 722.325610][T12874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.361354][T12011] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.378778][ T29] audit: type=1326 audit(1717544602.501:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13053 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748e87cee9 code=0x7ffc0000 [ 722.424635][ T29] audit: type=1326 audit(1717544602.501:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13053 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f748e87a667 code=0x7ffc0000 [ 722.458602][T12874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.468310][T12874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.493302][T12874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.502054][T12874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.505037][ T29] audit: type=1326 audit(1717544602.501:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13053 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f748e840359 code=0x7ffc0000 [ 722.620837][ T29] audit: type=1326 audit(1717544602.511:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13053 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f748e87cee9 code=0x7ffc0000 [ 722.751167][ T5997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.783052][ T5997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.857373][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.876164][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.010163][T13065] loop2: detected capacity change from 0 to 256 [ 724.022529][T13066] loop0: detected capacity change from 0 to 32768 [ 724.151304][T13068] loop1: detected capacity change from 0 to 32768 [ 724.183125][T13083] loop4: detected capacity change from 0 to 1024 [ 724.275008][T13068] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=data_checksum=crc64,str_hash=crc64,nojournal_transaction_names,nocow [ 724.282138][T13091] loop3: detected capacity change from 0 to 512 [ 724.291063][T13068] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 724.334809][T13068] bcachefs (loop1): alloc_read... done [ 724.342076][T13068] bcachefs (loop1): stripes_read... done [ 724.348076][T13068] bcachefs (loop1): snapshots_read... done [ 724.357699][T13068] bcachefs (loop1): journal_replay... done [ 724.366091][T13068] bcachefs (loop1): resume_logged_ops... done [ 724.372358][T13068] bcachefs (loop1): going read-write [ 724.386883][T13091] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 724.397676][T13068] bcachefs (loop1): done starting filesystem [ 724.412838][T13091] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 1 (level 1) [ 724.428202][T13091] EXT4-fs (loop3): 1 truncate cleaned up [ 724.440699][T13091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.536881][ T51] hfsplus: b-tree write err: -5, ino 4 [ 724.550788][T12291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.958410][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 724.968727][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 724.993935][T12874] bcachefs (loop1): shutting down [ 725.009936][T12874] bcachefs (loop1): going read-only [ 725.042082][T12874] bcachefs (loop1): finished waiting for writes to stop [ 725.073777][T12874] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [ 725.089518][T12874] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11 [ 725.126922][T12874] bcachefs (loop1): shutdown complete, journal seq 12 [ 725.139121][T12874] bcachefs (loop1): marking filesystem clean [ 725.193856][T12874] bcachefs (loop1): shutdown complete [ 725.731130][T13123] loop2: detected capacity change from 0 to 256 [ 725.806144][T13123] exfat: Deprecated parameter 'utf8' [ 725.858893][T13123] exfat: Deprecated parameter 'namecase' [ 725.954508][T13123] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 726.222990][T13132] loop5: detected capacity change from 0 to 4096 [ 726.314277][T13132] ntfs3: Bad value for 'uid' [ 727.041800][T13135] loop4: detected capacity change from 0 to 512 [ 727.106180][ T5997] IPVS: starting estimator thread 0... [ 727.156862][T13135] EXT4-fs: Ignoring removed mblk_io_submit option [ 727.203613][T13135] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 727.214464][T13137] IPVS: using max 22 ests per chain, 52800 per kthread [ 727.244060][T13135] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 727.261048][T13135] System zones: 1-12 [ 727.288202][T13135] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: e_value size too large [ 727.323309][T13135] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 727.337652][T13142] loop0: detected capacity change from 0 to 1024 [ 727.355631][T13135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.550704][ T65] hfsplus: b-tree write err: -5, ino 4 [ 727.594625][T12215] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.713536][T13129] loop3: detected capacity change from 0 to 32768 [ 729.747713][T13175] loop0: detected capacity change from 0 to 4096 [ 729.801919][T13175] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 729.865597][T13175] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 730.247453][T13189] loop4: detected capacity change from 0 to 64 [ 730.353710][T13189] overlayfs: failed to resolve './file0:/': -2 [ 730.377966][T13192] trusted_key: encrypted_key: keyword 'ne)ê»!0¤Lt' not recognized [ 731.424241][T13200] loop0: detected capacity change from 0 to 512 [ 731.537351][T13200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.554426][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 731.575987][T13200] ext4 filesystem being mounted at /root/syzkaller-testdir3699182867/syzkaller.0JRFre/90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 731.867782][T13196] loop5: detected capacity change from 0 to 32768 [ 731.920578][T13196] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz-executor.5 (13196) [ 731.947691][T13196] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 731.958530][T13196] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 731.969505][T13196] BTRFS info (device loop5): disk space caching is enabled [ 731.985187][T11798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.075236][T13196] BTRFS info (device loop5): rebuilding free space tree [ 732.099653][T13196] BTRFS info (device loop5): disabling free space tree [ 732.100544][T13229] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 732.111992][T13196] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 732.134641][T13196] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 732.225914][T13196] BTRFS info (device loop5): balance: start [ 732.233640][T13196] BTRFS info (device loop5): balance: ended with status: 0 [ 732.259118][T13231] loop4: detected capacity change from 0 to 2048 [ 732.348681][T13235] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 732.464410][T13237] lo speed is unknown, defaulting to 1000 [ 732.484477][T12171] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 733.204063][T13248] loop3: detected capacity change from 0 to 64 [ 733.290713][T13248] overlayfs: failed to resolve './file0:/': -2 [ 733.505154][T13253] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 733.651651][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 733.755181][T13257] loop2: detected capacity change from 0 to 4096 [ 733.780668][T13260] loop0: detected capacity change from 0 to 512 [ 733.830971][T13263] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 733.871688][T13260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.878402][T13264] loop3: detected capacity change from 0 to 512 [ 733.889948][T13260] ext4 filesystem being mounted at /root/syzkaller-testdir3699182867/syzkaller.0JRFre/93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 733.919840][T13257] NILFS (loop2): inode bitmap is inconsistent for reserved inodes [ 733.933382][T13257] NILFS (loop2): repaired inode bitmap for reserved inodes [ 733.983260][T13264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 734.018503][T13264] ext4 filesystem being mounted at /root/syzkaller-testdir2899345861/syzkaller.FZKOOe/48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 734.206854][T11798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.347478][T12291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.781218][T13288] loop4: detected capacity change from 0 to 4096 [ 734.921423][T13288] ntfs3: Bad value for 'uid' [ 735.696162][ T5812] IPVS: starting estimator thread 0... [ 735.792858][T13291] IPVS: using max 19 ests per chain, 45600 per kthread [ 736.106850][T13278] loop2: detected capacity change from 0 to 32768 [ 736.137545][T13278] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (13278) [ 736.154819][T13278] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 736.165802][T13278] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 736.175387][T13278] BTRFS info (device loop2): disk space caching is enabled [ 736.247651][T13278] BTRFS info (device loop2): rebuilding free space tree [ 736.316867][T13278] BTRFS info (device loop2): disabling free space tree [ 736.324810][T13278] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 736.335855][T13278] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 736.418796][T13278] BTRFS info (device loop2): balance: start [ 736.425621][T13278] BTRFS info (device loop2): balance: ended with status: 0 [ 736.565578][T12011] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 736.764275][T13322] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 737.631673][T13340] gfs2: not a GFS2 filesystem [ 738.194256][T13360] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 738.520332][T13367] loop2: detected capacity change from 0 to 512 [ 738.589220][T13367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 738.608073][T13367] ext4 filesystem being mounted at /root/syzkaller-testdir1015434438/syzkaller.v6XiO9/75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 739.027289][T12011] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.876905][T13390] gfs2: not a GFS2 filesystem [ 741.218139][T13421] loop2: detected capacity change from 0 to 512 [ 741.366994][T13421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.380640][T13421] ext4 filesystem being mounted at /root/syzkaller-testdir1015434438/syzkaller.v6XiO9/79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 741.687128][T12011] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.715133][T13431] use of bytesused == 0 is deprecated and will be removed in the future, [ 741.731505][T13431] use the actual size instead. [ 741.772088][T13431] loop1: detected capacity change from 0 to 256 [ 743.637083][T13465] loop5: detected capacity change from 0 to 1024 [ 743.711269][T13465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 746.856497][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.863851][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.059974][T13490] loop2: detected capacity change from 0 to 40427 [ 747.113473][T13490] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 747.150257][T13490] F2FS-fs (loop2): Found nat_bits in checkpoint [ 747.291292][T13490] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 747.305712][T13497] loop0: detected capacity change from 0 to 32768 [ 748.495406][T13519] loop0: detected capacity change from 0 to 512 [ 748.529504][T13519] EXT4-fs (loop0): Test dummy encryption mode enabled [ 748.559417][T13519] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz-executor.0: casefold flag without casefold feature [ 748.590552][T13519] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 748.614117][T13519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 748.728994][T11798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.292948][ T4490] Bluetooth: hci5: command 0x0406 tx timeout [ 768.441759][ T4490] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 768.455689][ T4490] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 768.470676][ T4490] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 768.480728][ T4490] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 768.489551][ T4490] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 768.497076][ T4490] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 769.287568][ T4490] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 769.307343][ T4490] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 769.320309][ T4490] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 769.333993][ T4490] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 769.341825][ T4490] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 769.359211][ T4490] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 770.533019][ T4490] Bluetooth: hci6: command tx timeout [ 771.412875][ T53] Bluetooth: hci7: command tx timeout [ 772.612720][ T53] Bluetooth: hci6: command tx timeout [ 773.493111][ T53] Bluetooth: hci7: command tx timeout [ 773.967954][T12877] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 773.980128][T12877] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 773.989930][T12877] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 774.003827][T12877] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 774.011662][T12877] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 774.019431][T12877] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 774.543526][T12877] Bluetooth: hci1: command 0x0406 tx timeout [ 774.692806][ T4490] Bluetooth: hci6: command tx timeout [ 775.586750][ T4490] Bluetooth: hci7: command tx timeout [ 776.132835][ T4490] Bluetooth: hci8: command tx timeout [ 776.772912][ T4490] Bluetooth: hci6: command tx timeout [ 777.652862][ T4490] Bluetooth: hci7: command tx timeout [ 778.213000][ T4490] Bluetooth: hci8: command tx timeout [ 778.862196][T12877] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 778.874591][T12877] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 778.889496][T12877] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 778.897980][T12877] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 778.911288][T12877] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 778.921621][T12877] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 780.292842][T12877] Bluetooth: hci8: command tx timeout [ 781.014154][T12877] Bluetooth: hci9: command tx timeout [ 781.150731][ T4490] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 781.169823][ T4490] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 781.180979][ T4490] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 781.213072][ T4490] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 781.223615][ T4490] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 781.231183][ T4490] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 781.301934][ T4490] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 781.317196][ T4490] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 781.326915][ T4490] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 781.339552][ T4490] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 781.347685][ T4490] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 781.356670][ T4490] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 782.376362][ T4490] Bluetooth: hci8: command tx timeout [ 783.092708][ T4490] Bluetooth: hci9: command tx timeout [ 783.333877][ T4490] Bluetooth: hci10: command tx timeout [ 783.413093][ T4490] Bluetooth: hci11: command tx timeout [ 785.172711][ T4490] Bluetooth: hci9: command tx timeout [ 785.426279][ T4490] Bluetooth: hci10: command tx timeout [ 785.493191][ T4490] Bluetooth: hci11: command tx timeout [ 787.252860][ T4490] Bluetooth: hci9: command tx timeout [ 787.493157][ T4490] Bluetooth: hci10: command tx timeout [ 787.573305][ T4490] Bluetooth: hci11: command tx timeout [ 789.573111][T13556] Bluetooth: hci10: command tx timeout [ 789.663196][T13556] Bluetooth: hci11: command tx timeout [ 789.892909][T13556] Bluetooth: hci0: command 0x0406 tx timeout [ 789.892933][ T5866] Bluetooth: hci3: command 0x0406 tx timeout [ 800.132972][T12877] Bluetooth: hci2: command 0x0406 tx timeout [ 808.301162][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.310123][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 834.271445][T12877] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 834.293272][T12877] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 834.311656][T12877] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 834.323629][T12877] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 834.331513][T12877] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 834.343224][T12877] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 834.628086][T12877] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 834.640723][T12877] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 834.655077][T12877] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 834.666736][T12877] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 834.674736][T12877] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 834.685729][T12877] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 836.453071][T12877] Bluetooth: hci12: command tx timeout [ 836.773084][T12877] Bluetooth: hci13: command tx timeout [ 838.532926][T12877] Bluetooth: hci12: command tx timeout [ 838.862960][T12877] Bluetooth: hci13: command tx timeout [ 839.120959][ T4490] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 839.132349][ T4490] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 839.148342][ T4490] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 839.164323][ T4490] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 839.172470][ T4490] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 839.180323][ T4490] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 840.612901][ T4490] Bluetooth: hci12: command tx timeout [ 840.943184][ T4490] Bluetooth: hci13: command tx timeout [ 841.252896][ T4490] Bluetooth: hci14: command tx timeout [ 842.692910][ T4490] Bluetooth: hci12: command tx timeout [ 843.012860][ T4490] Bluetooth: hci13: command tx timeout [ 843.332784][ T4490] Bluetooth: hci14: command tx timeout [ 844.106738][T12877] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 844.120842][T12877] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 844.129120][T12877] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 844.139730][T12877] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 844.148851][T12877] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 844.159105][T12877] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 845.412755][T12877] Bluetooth: hci14: command tx timeout [ 846.138332][ T4490] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 846.150679][ T4490] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 846.161051][ T4490] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 846.183356][ T4490] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 846.212934][ T4490] Bluetooth: hci15: command tx timeout [ 846.220675][ T4490] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 846.234102][ T4490] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 846.336491][ T4490] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 846.347553][ T4490] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 846.355954][ T4490] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 846.365717][ T4490] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 846.383572][ T4490] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 846.392033][ T4490] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 847.492707][T12877] Bluetooth: hci14: command tx timeout [ 848.292856][T12877] Bluetooth: hci15: command tx timeout [ 848.302842][ T4490] Bluetooth: hci16: command tx timeout [ 848.462789][ T4490] Bluetooth: hci17: command tx timeout [ 850.372700][ T4490] Bluetooth: hci16: command tx timeout [ 850.372732][T12877] Bluetooth: hci15: command tx timeout [ 850.533492][T12877] Bluetooth: hci17: command tx timeout [ 852.452860][ T4490] Bluetooth: hci15: command tx timeout [ 852.458443][ T4490] Bluetooth: hci16: command tx timeout [ 852.612802][ T4490] Bluetooth: hci17: command tx timeout [ 854.532786][ T4490] Bluetooth: hci16: command tx timeout [ 854.692820][ T4490] Bluetooth: hci17: command tx timeout [ 869.761394][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.772645][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.812755][T12877] Bluetooth: hci4: command 0x0406 tx timeout [ 891.493074][ T30] INFO: task syz-executor.4:13379 blocked for more than 143 seconds. [ 891.501372][ T30] Not tainted 6.10.0-rc2-syzkaller-00022-g32f88d65f01b #0 [ 891.526031][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/04 23:46:12 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 891.539801][ T30] task:syz-executor.4 state:D stack:26112 pid:13379 tgid:13378 ppid:12215 flags:0x00004006 [ 891.573159][ T30] Call Trace: [ 891.576516][ T30] [ 891.579474][ T30] __schedule+0x17e8/0x4a20 [ 891.594405][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.600123][ T30] ? __pfx___schedule+0x10/0x10 [ 891.610829][ T30] ? __pfx_lock_release+0x10/0x10 [ 891.623368][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 891.629025][ T30] ? schedule+0x90/0x320 [ 891.648145][ T30] schedule+0x14b/0x320 [ 891.652403][ T30] schedule_preempt_disabled+0x13/0x30 [ 891.675905][ T30] __mutex_lock+0x6a4/0xd70 [ 891.680516][ T30] ? __mutex_lock+0x527/0xd70 [ 891.685772][ T30] ? ethnl_default_doit+0x562/0xd80 [ 891.691018][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 891.698860][ T30] ? rcu_is_watching+0x15/0xb0 [ 891.710515][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.716419][ T30] ? __kmalloc_noprof+0x217/0x400 [ 891.721492][ T30] ethnl_default_doit+0x562/0xd80 [ 891.740127][ T30] ? __pfx_ethnl_default_doit+0x10/0x10 [ 891.747077][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.760647][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.766483][ T30] genl_rcv_msg+0xb16/0xec0 [ 891.771040][ T30] ? mark_lock+0x9a/0x350 [ 891.781922][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 891.787109][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 891.792168][ T30] ? __pfx_ethnl_default_doit+0x10/0x10 [ 891.802595][ T30] ? __pfx___might_resched+0x10/0x10 [ 891.807949][ T30] netlink_rcv_skb+0x1e5/0x430 [ 891.822182][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 891.831762][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 891.842650][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 891.848180][ T30] genl_rcv+0x28/0x40 [ 891.852196][ T30] netlink_unicast+0x7ec/0x980 [ 891.865263][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 891.870619][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.881967][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.887800][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.900199][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.905924][ T30] ? __check_object_size+0x49c/0x900 [ 891.911253][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.917246][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.936851][ T30] netlink_sendmsg+0x8db/0xcb0 [ 891.941687][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 891.950109][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.960286][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 891.965411][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.971097][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 891.988663][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 891.994485][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 891.999808][ T30] __sock_sendmsg+0x223/0x270 [ 892.011277][ T30] ____sys_sendmsg+0x525/0x7d0 [ 892.016185][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 892.021857][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 892.034900][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 892.039539][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 892.054214][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 892.060629][ T30] ? do_syscall_64+0x100/0x230 [ 892.072663][ T30] ? do_syscall_64+0xb6/0x230 [ 892.077395][ T30] do_syscall_64+0xf3/0x230 [ 892.081932][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.094686][ T30] RIP: 0033:0x7f748e87cee9 [ 892.099171][ T30] RSP: 002b:00007f748f6d50c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 892.114648][ T30] RAX: ffffffffffffffda RBX: 00007f748e9b3f80 RCX: 00007f748e87cee9 [ 892.129591][ T30] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 892.149119][ T30] RBP: 00007f748e8da6fe R08: 0000000000000000 R09: 0000000000000000 [ 892.157306][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.169304][ T30] R13: 000000000000000b R14: 00007f748e9b3f80 R15: 00007ffc3a730f08 [ 892.182693][ T30] [ 892.185970][ T30] INFO: task syz-executor.5:13463 blocked for more than 144 seconds. [ 892.200285][ T30] Not tainted 6.10.0-rc2-syzkaller-00022-g32f88d65f01b #0 [ 892.208009][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 892.216979][ T30] task:syz-executor.5 state:D stack:26800 pid:13463 tgid:13462 ppid:12171 flags:0x00000006 [ 892.231938][ T30] Call Trace: [ 892.236649][ T30] [ 892.239612][ T30] __schedule+0x17e8/0x4a20 [ 892.252860][ T30] ? sr