last executing test programs: 49.347717065s ago: executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000140)={@cgroup=r0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 36.834597439s ago: executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000140)={@cgroup=r0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 36.357509738s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x331}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x9c) 36.244769241s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x71}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 36.061045357s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000001400200000000000000000000900ffffe000000108000a0000000000060002000100000014001f"], 0x5c}}, 0x0) 35.938815916s ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000180), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) 34.55066282s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="04004600340051803000008011000100a7fd4531296b6353d1f3e088470000000500020000000000040008800400050005000905000055940a0034000202020202020000080026009409"], 0x68}}, 0x0) 34.239108335s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 34.056812267s ago: executing program 0: syz_emit_ethernet(0x46, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x12) socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000680)='timers\x00') r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x98, 0x90, 0x130, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4000000", @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r7], 0xd4}}, 0x0) 33.882646762s ago: executing program 3: syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000400), 0x1, 0x4a6, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000002b80)={0x428, 0x3f3, 0x1, 0x70bd2a, 0x25dfdbfd, {0x10, 0x1, 0x4, [0x2a19a8a5, 0xe1, 0x6, 0x5, 0x8, 0x10001, 0x5, 0x23c, 0x6, 0x4, 0x41a, 0x82, 0x1, 0x7, 0x40, 0x1, 0x4, 0x4, 0x10000, 0xd34, 0x7, 0x3ff, 0x2, 0x0, 0xe586, 0xffff, 0xfffffffd, 0x6, 0x7, 0x5, 0x5caa, 0xfed, 0x7, 0xb0, 0x6, 0x1, 0xfffffffb, 0x1, 0x101, 0x40, 0x6, 0xfffff494, 0x9, 0x0, 0x4, 0x200, 0x80000001, 0x0, 0x518, 0x7, 0x42636fef, 0x1, 0x97, 0x6, 0xf3f, 0x8000, 0x5, 0x6, 0x36a873e5, 0x5, 0xfff, 0x6, 0xfffffffd], [0x8, 0x5d, 0x401, 0x3, 0x800, 0x7, 0xeed7, 0xc2, 0x2a, 0x1, 0x7, 0x6, 0x4, 0x6e7, 0x3a, 0x5, 0x101, 0x2, 0x3, 0x40, 0x0, 0x6, 0x10d20000, 0xffff, 0x40, 0x2, 0x8, 0x152e0000, 0x3, 0x1ae1, 0x7, 0x4, 0x1, 0x1f, 0x1, 0x800, 0x7, 0x0, 0x80000001, 0x5, 0x40, 0x1ff, 0x3ff, 0x401, 0x80000000, 0x9, 0x1f, 0x0, 0x3, 0x5, 0x1000, 0xe58, 0x8, 0x400, 0x20, 0xffffffff, 0x4, 0x3f, 0x2, 0x0, 0x5, 0x20, 0x7fffffff, 0x8], [0x9, 0x8, 0x7, 0x9, 0x1, 0x7f4e96f9, 0x9, 0x7, 0x7, 0xab5, 0x800, 0x0, 0x10001, 0x6, 0x800000, 0x100, 0x7f, 0xfff, 0x9, 0x4, 0x4, 0x68d56afb, 0x7fff, 0xc663, 0x4, 0x19, 0x4, 0x81, 0x7ff, 0x7f, 0x1f8, 0x0, 0x0, 0xa3b, 0x7, 0xee, 0x5, 0x2, 0x5, 0xfffffffc, 0xffff0000, 0x2, 0x2, 0x6, 0x7, 0x1ff, 0x8138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x5a86, 0x10001, 0x4], [0x5, 0x3, 0x5, 0x7ff, 0x3, 0x81, 0x2, 0x9, 0x1, 0x3ff, 0x7, 0xffff, 0x400, 0x1, 0x0, 0xfffffb8a, 0x8, 0x4, 0xbdce, 0x5, 0x7f, 0xffff8000, 0x40, 0x7, 0x3, 0x4, 0x6, 0x7, 0xffffffff, 0x0, 0x3, 0x0, 0x5, 0x3, 0x0, 0xf, 0x141f348f, 0x4, 0x6, 0x2cba, 0x0, 0x7fff, 0xffff, 0x5, 0x0, 0x0, 0x8, 0x7fffffff, 0x80000001, 0x81, 0x81, 0x9, 0xfff, 0x0, 0x4, 0x7, 0x1, 0x5a70955d, 0xffffffff, 0x2, 0x1, 0x2, 0x4, 0x7], 0x8, ['*\x00', '\x00', '(:^\'\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x804}, 0x8014) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r6, 0x1, 0x0, 0x0, {0x2}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) readv(r9, &(0x7f0000000200)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x28, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000002c0)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@bridge_getneigh={0x6c, 0x1e, 0xd01, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r13}, @IFLA_PORT_SELF={0x2c, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "60e93753f33581199f58eb4397592f8e"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4420cff70ec2bf7f923a66443245f233"}]}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "fe72f330d4f63a6317ba6a00a2966a94"}]}]}, 0x6c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x4, 0x401, 0x4a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x20, 0x1, 0x6, 0x446a}}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003180), r9) sendmsg$NL80211_CMD_RELOAD_REGDB(r10, &(0x7f0000003240)={&(0x7f0000003140), 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x14, r15, 0xa, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) getpeername$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000002fc0)={0x158, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4}, 0x91) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de7d87737919f3bf4e1581cbe1995db14caae2"}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x2) read$FUSE(r0, &(0x7f0000000b40)={0x2020}, 0x2020) 33.289630512s ago: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2010400, &(0x7f0000000400), 0x1, 0x4b9, &(0x7f0000000480)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc}}]}, 0x3c}}, 0x0) 33.043362624s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x13, 0x0, &(0x7f0000000040)) 32.928478806s ago: executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f00000004c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x4, 0x0, 0x3ff}) 32.861252524s ago: executing program 3: r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x69f71239e3306a7a}}, {{@in6=@empty}, 0x0, @in6=@private1}}, 0xe8) 32.771103696s ago: executing program 4: socket$inet6(0xa, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) inotify_init1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 32.725305375s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socketpair(0xf, 0x3, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1551], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r7}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, 0x0, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r10}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}}, 0x0) 32.678605611s ago: executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 31.266709099s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 31.262121757s ago: executing program 4: syz_emit_ethernet(0x46, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x12) socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000680)='timers\x00') r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x98, 0x90, 0x130, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4000000", @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r7], 0xd4}}, 0x0) 31.116008928s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x10) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000ffff030000005800018044000400200001000a00000000007fffffff000000a0ffffff0000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x58, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "400dd062441eb8abbbb672868d6e8b0fd784ee4a35"}}]}]}, 0x58}}, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae9c, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000740)=""/4096) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x10) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8}, 0x50) syz_usb_connect(0x0, 0x10b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b24b4a10e60407007501000005010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0) 30.434768003s ago: executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000140)={@cgroup=r0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 30.364042064s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x3, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 30.322379642s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socketpair(0xf, 0x3, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1551], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r7}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, 0x0, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r10}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}}, 0x0) 30.304880354s ago: executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047459, 0xfffffffffffffffe) 30.158703384s ago: executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000100), 0x0) 30.041310717s ago: executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000a80)={'ip6gre0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000380)={0x1, 0x8000000000000001}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', r4, 0x2f, 0x9, 0x1f, 0x0, 0x30, @remote, @mcast1, 0x40, 0x20, 0x2, 0x9}}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000580)={'vxcan0\x00', 0x0}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46bb9f104a3816b12950faa20fab5827bc62a8d4cc12c4c8954308a933d63aa66cdb3646a37626de7361b5338c197dd3e6844dafcb4338dce0b79ee41da150eca12fbd36b4873ce8e4747b63e8830ee6c32f254d37792053e2b77cc86279ea843600"/297, 0x3accf8d5) vmsplice(r7, &(0x7f0000001a40)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=@delqdisc={0xe0, 0x25, 0x10, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0x5}, {0x2, 0x7}, {0xa, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xa2d0}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x54, 0x7, 0x7f, 0x2, 0x9, 0x9a, 0x6}}, {0x10, 0x2, [0xff, 0x81, 0x2, 0xffff, 0x2, 0xb564]}}, {{0x1c, 0x1, {0xff, 0x0, 0x2, 0x9, 0x0, 0x9, 0xcc3, 0x3}}, {0xa, 0x2, [0x5, 0x13, 0xd9a]}}, {{0x1c, 0x1, {0x4, 0x4, 0x0, 0x40, 0x0, 0x4, 0x3, 0x2}}, {0x8, 0x2, [0x6, 0x1]}}, {{0x1c, 0x1, {0x6, 0x3f, 0x5, 0x1, 0x0, 0xfb, 0x40, 0x7}}, {0x12, 0x2, [0x5, 0x9, 0x33, 0x401, 0x7666, 0xd618, 0x5]}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000001c0)={&(0x7f0000000280)={0x1d, r9}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "183590b6974ed9c8"}}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', r9, 0x4, 0x4, 0x8, 0x4, 0x7, @loopback, @ipv4={'\x00', '\xff\xff', @empty}, 0x80, 0x20, 0x909, 0x5}}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x1f, 0x2, 0x30, @remote, @mcast1, 0x40, 0x1, 0x2, 0x9}}) 2.647924537s ago: executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222}, 0x90) 1.071914554s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000000010108000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000001c0018800800014000000000080002"], 0x54}}, 0x0) 301.268322ms ago: executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x141042, 0x0) write$sequencer(r0, &(0x7f0000000f00)=[@t={0x81, 0x8}], 0x8) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/103, 0x8}], 0x1, 0x0, 0x0) 0s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000a6000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x9a7, &(0x7f0000007640), &(0x7f00000076c0), &(0x7f0000007700)) setresuid(0x0, 0xee00, 0xee01) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) kernel console output (not intermixed with test programs): v: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.310070][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.340704][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.352036][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.363412][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.374062][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.385437][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.396880][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.407778][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.417922][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.430102][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.447132][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.472602][ T5109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.489792][ T5109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.502965][ T5109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.512433][ T5109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.545582][ T5117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.571399][ T5117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.597908][ T5117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.608672][ T5117] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.668828][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.690340][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.776752][ T5204] loop0: detected capacity change from 0 to 1024 [ 66.873735][ T949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.896953][ T949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.912519][ T5210] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.917080][ T29] audit: type=1800 audit(1717551117.071:2): pid=5204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file7" dev="sda1" ino=1956 res=0 errno=0 [ 66.961905][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.964213][ T5204] tun0: tun_chr_ioctl cmd 35108 [ 67.000681][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.102660][ T5210] loop3: detected capacity change from 0 to 256 [ 67.126824][ T5204] loop0: detected capacity change from 0 to 1024 [ 67.158022][ T949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.158233][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.172411][ T949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.187194][ T5204] EXT4-fs (loop0): invalid inodes per group: 34330 [ 67.187194][ T5204] [ 67.224739][ T5210] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 67.267756][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.355970][ T5210] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.515499][ T5220] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 67.533203][ T5219] loop1: detected capacity change from 0 to 64 [ 67.560081][ T5220] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 67.581668][ T5219] ======================================================= [ 67.581668][ T5219] WARNING: The mand mount option has been deprecated and [ 67.581668][ T5219] and is ignored by this kernel. Remove the mand [ 67.581668][ T5219] option from the mount to silence this warning. [ 67.581668][ T5219] ======================================================= [ 67.716148][ T5226] net_ratelimit: 2 callbacks suppressed [ 67.716167][ T5226] sock: sock_set_timeout: `syz-executor.2' (pid 5226) tries to set negative timeout [ 67.821515][ T53] Bluetooth: hci1: command tx timeout [ 67.901068][ T53] Bluetooth: hci4: command tx timeout [ 67.907593][ T5113] Bluetooth: hci3: command tx timeout [ 67.908169][ T4489] Bluetooth: hci2: command tx timeout [ 67.953809][ T5231] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.982559][ T4489] Bluetooth: hci0: command tx timeout [ 68.183252][ T5241] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.375373][ T5247] loop3: detected capacity change from 0 to 256 [ 68.418452][ T5247] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 68.572150][ T5250] loop1: detected capacity change from 0 to 1024 [ 68.705181][ T29] audit: type=1800 audit(1717551118.861:3): pid=5250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file7" dev="sda1" ino=1962 res=0 errno=0 [ 68.749339][ T5250] tun0: tun_chr_ioctl cmd 35108 [ 68.828022][ T5250] loop1: detected capacity change from 0 to 1024 [ 68.928156][ T5250] EXT4-fs (loop1): invalid inodes per group: 34330 [ 68.928156][ T5250] [ 69.113550][ T5264] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 69.527405][ T5281] loop1: detected capacity change from 0 to 1024 [ 69.730140][ T5281] hfsplus: bad catalog entry type [ 69.865000][ T2889] hfsplus: b-tree write err: -5, ino 4 [ 69.922707][ T5297] loop4: detected capacity change from 0 to 1024 [ 70.164088][ T2923] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.318640][ T2923] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.564883][ T2923] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.771989][ T2923] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.976983][ T5113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.986856][ T5113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.998878][ T5113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.013400][ T2923] bridge_slave_1: left allmulticast mode [ 71.019310][ T2923] bridge_slave_1: left promiscuous mode [ 71.036854][ T5113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.059572][ T5113] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.059622][ T5108] syz-executor.1 (5108) used greatest stack depth: 18320 bytes left [ 71.079050][ T5113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.118379][ T2923] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.218055][ T2923] bridge_slave_0: left allmulticast mode [ 71.236558][ T2923] bridge_slave_0: left promiscuous mode [ 71.266395][ T2923] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.730310][ T5331] kvm: pic: non byte write [ 71.745283][ T4489] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.758868][ T4489] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.770202][ T4489] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.778916][ T4489] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.787218][ T4489] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.794908][ T4489] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.828617][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.839425][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.920166][ T2923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.932522][ T2923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.944697][ T2923] bond0 (unregistering): Released all slaves [ 71.973194][ T5324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.985922][ T5324] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 71.998342][ T5324] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 72.332035][ T5342] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 72.787804][ T2923] hsr_slave_0: left promiscuous mode [ 72.810450][ T2923] hsr_slave_1: left promiscuous mode [ 72.819717][ T2923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.834491][ T2923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.861668][ T2923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.870573][ T2923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.882818][ T5367] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 72.891302][ T5367] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.892585][ T5365] sock: sock_set_timeout: `syz-executor.3' (pid 5365) tries to set negative timeout [ 72.930165][ T2923] veth1_macvtap: left promiscuous mode [ 72.938467][ T2923] veth0_macvtap: left promiscuous mode [ 72.953422][ T2923] veth1_vlan: left promiscuous mode [ 72.965906][ T2923] veth0_vlan: left promiscuous mode [ 73.179671][ T4489] Bluetooth: hci0: command tx timeout [ 73.229099][ T5377] loop3: detected capacity change from 0 to 2048 [ 73.241526][ T5377] EXT4-fs (loop3): bad geometry: first data block 0 is beyond end of filesystem (0) [ 73.390151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 74.719206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.882026][ T4489] Bluetooth: hci1: command tx timeout [ 75.269662][ T5113] Bluetooth: hci0: command tx timeout [ 75.447878][ T2923] team0 (unregistering): Port device team_slave_1 removed [ 75.485722][ T2923] team0 (unregistering): Port device team_slave_0 removed [ 76.017032][ T5320] chnl_net:caif_netlink_parms(): no params data found [ 76.221524][ T5333] chnl_net:caif_netlink_parms(): no params data found [ 76.505000][ T29] audit: type=1800 audit(1717551126.661:4): pid=5414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1954 res=0 errno=0 [ 76.636367][ T5320] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.676084][ T5320] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.709708][ T5320] bridge_slave_0: entered allmulticast mode [ 76.717386][ T5320] bridge_slave_0: entered promiscuous mode [ 76.733367][ T5320] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.749644][ T5320] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.757095][ T5320] bridge_slave_1: entered allmulticast mode [ 76.764943][ T5320] bridge_slave_1: entered promiscuous mode [ 76.914525][ T5320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.945530][ T5113] Bluetooth: hci1: command tx timeout [ 76.953596][ T45] cfg80211: failed to load regulatory.db [ 77.019335][ T5398] loop0: detected capacity change from 0 to 32768 [ 77.130256][ T5398] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 77.232961][ T5320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.292542][ T5396] loop3: detected capacity change from 0 to 32768 [ 77.334205][ T5333] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.342701][ T5113] Bluetooth: hci0: command tx timeout [ 77.386719][ T5333] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.425568][ T5333] bridge_slave_0: entered allmulticast mode [ 77.451148][ T5333] bridge_slave_0: entered promiscuous mode [ 77.454073][ T5398] XFS (loop0): Ending clean mount [ 77.468126][ T5333] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.496216][ T5333] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.511003][ T5333] bridge_slave_1: entered allmulticast mode [ 77.529243][ T5398] XFS (loop0): Quotacheck needed: Please wait. [ 77.539766][ T5333] bridge_slave_1: entered promiscuous mode [ 77.642890][ T5398] XFS (loop0): Quotacheck: Done. [ 77.684394][ T2923] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.836908][ T5112] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 77.882782][ T5444] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 77.892187][ T5320] team0: Port device team_slave_0 added [ 77.922780][ T5444] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 77.942039][ T2923] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.024312][ T5333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.133821][ T5320] team0: Port device team_slave_1 added [ 78.184397][ T5333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.347609][ T2923] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.377440][ T5450] loop0: detected capacity change from 0 to 2048 [ 78.398651][ T5450] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0) [ 78.425025][ T5320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.443783][ T5320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.475385][ T5301] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 78.502809][ T5452] loop4: detected capacity change from 0 to 8192 [ 78.511017][ T5320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.536763][ T5333] team0: Port device team_slave_0 added [ 78.570623][ T5333] team0: Port device team_slave_1 added [ 78.605691][ T2923] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.631043][ T5320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.638053][ T5320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.665485][ T5320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.782193][ T5333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.800127][ T5333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.832036][ T5333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.855431][ T5320] hsr_slave_0: entered promiscuous mode [ 78.896778][ T5320] hsr_slave_1: entered promiscuous mode [ 78.938185][ T5320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.960957][ T5320] Cannot create hsr debugfs directory [ 79.020927][ T5113] Bluetooth: hci1: command tx timeout [ 79.124405][ T5333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.145852][ T5333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.197513][ T5333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.219907][ T5467] mmap: syz-executor.3 (5467) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.420374][ T5113] Bluetooth: hci0: command tx timeout [ 79.634464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.109555][ T5113] Bluetooth: hci1: command tx timeout [ 81.197006][ T5333] hsr_slave_0: entered promiscuous mode [ 81.285336][ T5333] hsr_slave_1: entered promiscuous mode [ 81.326500][ T5333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.334986][ T5482] tmpfs: Bad value for 'size' [ 81.362970][ T5333] Cannot create hsr debugfs directory [ 81.410975][ T5484] Bluetooth: MGMT ver 1.23 [ 81.673551][ T2923] bridge_slave_1: left allmulticast mode [ 81.679284][ T2923] bridge_slave_1: left promiscuous mode [ 81.719693][ T2923] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.725202][ T29] audit: type=1326 audit(1717551131.881:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa33e7cee9 code=0x7ffc0000 [ 81.760430][ T2923] bridge_slave_0: left allmulticast mode [ 81.766115][ T2923] bridge_slave_0: left promiscuous mode [ 81.791085][ T2923] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.797767][ T29] audit: type=1326 audit(1717551131.911:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa33e7cee9 code=0x7ffc0000 [ 81.884685][ T29] audit: type=1326 audit(1717551131.911:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa33e7cee9 code=0x7ffc0000 [ 81.961919][ T29] audit: type=1326 audit(1717551131.921:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7faa33e7cee9 code=0x7ffc0000 [ 82.056705][ T29] audit: type=1326 audit(1717551131.921:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa33e7cee9 code=0x7ffc0000 [ 82.130156][ T29] audit: type=1326 audit(1717551131.921:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa33e7cee9 code=0x7ffc0000 [ 82.776871][ T5492] loop4: detected capacity change from 0 to 32768 [ 82.784268][ T2923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.826726][ T2923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.851943][ T2923] bond0 (unregistering): Released all slaves [ 83.417801][ T5518] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.480806][ T5159] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.699507][ T5159] usb 1-1: Using ep0 maxpacket: 32 [ 83.728737][ T5159] usb 1-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=13.87 [ 83.748819][ T5159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.790656][ T5159] usb 1-1: Product: syz [ 83.807212][ T5159] usb 1-1: Manufacturer: syz [ 83.817297][ T5159] usb 1-1: SerialNumber: syz [ 83.852988][ T5159] usb 1-1: config 0 descriptor?? [ 83.884688][ T2923] hsr_slave_0: left promiscuous mode [ 83.893757][ T5159] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 83.903206][ T2923] hsr_slave_1: left promiscuous mode [ 83.921221][ T2923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.933858][ T2923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.945138][ T2923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.954234][ T2923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.979827][ T2923] veth1_macvtap: left promiscuous mode [ 83.985567][ T2923] veth0_macvtap: left promiscuous mode [ 83.991757][ T2923] veth1_vlan: left promiscuous mode [ 83.997293][ T2923] veth0_vlan: left promiscuous mode [ 84.097407][ T4530] bcm5974 1-1:0.0: could not read from device [ 84.152733][ T5159] usb 1-1: USB disconnect, device number 2 [ 84.156905][ T4530] bcm5974 1-1:0.0: could not read from device [ 84.315516][ T5099] udevd[5099]: Error opening device "/dev/input/event4": No such file or directory [ 84.376568][ T5099] udevd[5099]: Unable to EVIOCGABS device "/dev/input/event4" [ 84.413078][ T5099] udevd[5099]: Unable to EVIOCGABS device "/dev/input/event4" [ 84.424289][ T5099] udevd[5099]: Unable to EVIOCGABS device "/dev/input/event4" [ 84.448981][ T5099] udevd[5099]: Unable to EVIOCGABS device "/dev/input/event4" [ 84.756637][ T2923] team0 (unregistering): Port device team_slave_1 removed [ 84.827954][ T2923] team0 (unregistering): Port device team_slave_0 removed [ 85.297132][ T5548] loop0: detected capacity change from 0 to 32768 [ 85.552800][ T5554] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.625263][ T5320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.713615][ T5320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.793700][ T5552] loop4: detected capacity change from 0 to 4096 [ 85.879680][ T5320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.950181][ T5320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.950522][ T5552] ntfs3: loop4: $Secure::$SDH is corrupted. [ 86.005652][ T5552] ntfs3: loop4: Failed to initialize $Secure (-22). [ 86.409750][ T5320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.556969][ T5320] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.597408][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.604624][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.612865][ T5588] loop4: detected capacity change from 0 to 1024 [ 86.642519][ T5588] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.660322][ T5333] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.695402][ T5588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.695415][ T5333] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.751153][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.758284][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.787626][ T5333] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.813667][ T5333] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.922702][ T5117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.174943][ T5333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.275115][ T5333] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.323981][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.331283][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.363628][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.370860][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.404430][ T5320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.654044][ T5320] veth0_vlan: entered promiscuous mode [ 87.688089][ T5320] veth1_vlan: entered promiscuous mode [ 87.702283][ T5593] loop0: detected capacity change from 0 to 32768 [ 87.804079][ T5320] veth0_macvtap: entered promiscuous mode [ 87.838840][ T5320] veth1_macvtap: entered promiscuous mode [ 87.840041][ T5620] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 87.921804][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.944315][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.980408][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.010886][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.046051][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.069983][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.096906][ T5320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.172908][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.195927][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.206427][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.232589][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.249934][ T5634] loop4: detected capacity change from 0 to 128 [ 88.251203][ T5320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.267127][ T5320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.279086][ T5320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.295091][ T5631] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.327181][ T5320] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.345389][ T5634] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 88.351542][ T5320] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.362347][ T5320] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.377105][ T5320] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.433755][ T5333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.452053][ T5634] syz-executor.4: attempt to access beyond end of device [ 88.452053][ T5634] loop4: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 88.508810][ T5634] Buffer I/O error on dev loop4, logical block 2066843070, lost async page write [ 88.550160][ T5634] syz-executor.4: attempt to access beyond end of device [ 88.550160][ T5634] loop4: rw=2049, sector=8767744, nr_sectors = 1 limit=128 [ 88.611291][ T5634] Buffer I/O error on dev loop4, logical block 8767744, lost async page write [ 88.627952][ T5634] syz-executor.4: attempt to access beyond end of device [ 88.627952][ T5634] loop4: rw=2049, sector=13269809, nr_sectors = 1 limit=128 [ 88.686329][ T5333] veth0_vlan: entered promiscuous mode [ 88.717502][ T5634] Buffer I/O error on dev loop4, logical block 13269809, lost async page write [ 88.741367][ T5333] veth1_vlan: entered promiscuous mode [ 88.754724][ T2923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.768078][ T5634] syz-executor.4: attempt to access beyond end of device [ 88.768078][ T5634] loop4: rw=2049, sector=1157, nr_sectors = 1 limit=128 [ 88.801629][ T2923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.897769][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.929610][ T5634] Buffer I/O error on dev loop4, logical block 1157, lost async page write [ 88.938306][ T5634] syz-executor.4: attempt to access beyond end of device [ 88.938306][ T5634] loop4: rw=2049, sector=3211264, nr_sectors = 1 limit=128 [ 88.958116][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.969878][ T5634] Buffer I/O error on dev loop4, logical block 3211264, lost async page write [ 88.978888][ T5634] syz-executor.4: attempt to access beyond end of device [ 88.978888][ T5634] loop4: rw=2049, sector=8768635, nr_sectors = 1 limit=128 [ 88.979430][ T5333] veth0_macvtap: entered promiscuous mode [ 88.997370][ T5634] Buffer I/O error on dev loop4, logical block 8768635, lost async page write [ 89.014944][ T5634] syz-executor.4: attempt to access beyond end of device [ 89.014944][ T5634] loop4: rw=2049, sector=13466417, nr_sectors = 1 limit=128 [ 89.077783][ T5333] veth1_macvtap: entered promiscuous mode [ 89.099589][ T5634] Buffer I/O error on dev loop4, logical block 13466417, lost async page write [ 89.171393][ T5634] syz-executor.4: attempt to access beyond end of device [ 89.171393][ T5634] loop4: rw=2049, sector=209285, nr_sectors = 1 limit=128 [ 89.185451][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.185479][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.185497][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.185510][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.185522][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.185535][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.185549][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.185562][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.192000][ T5333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.256401][ T5634] Buffer I/O error on dev loop4, logical block 209285, lost async page write [ 89.390283][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 89.406048][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.437694][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.448961][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.505788][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.530615][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.544522][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.554863][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.566041][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.601647][ T5117] sysv_free_block: trying to free block not in datazone [ 89.603405][ T5333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.621310][ T5117] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 89.657395][ T5333] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.669230][ T5333] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.700060][ T5333] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.709042][ T5333] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.726537][ T5659] syzkaller1: entered promiscuous mode [ 89.749823][ T5659] syzkaller1: entered allmulticast mode [ 89.939173][ T5682] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 89.967801][ T5681] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.261939][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.295594][ T5697] loop4: detected capacity change from 0 to 128 [ 90.306683][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.340879][ T5697] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 90.354907][ T5694] loop0: detected capacity change from 0 to 4096 [ 90.405754][ T2889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.418494][ T5697] syz-executor.4: attempt to access beyond end of device [ 90.418494][ T5697] loop4: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 90.435282][ T5694] NILFS (loop0): invalid segment: Checksum error in segment payload [ 90.450767][ T5694] NILFS (loop0): trying rollback from an earlier position [ 90.452400][ T2889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.464472][ T5697] Buffer I/O error on dev loop4, logical block 2066843070, lost async page write [ 90.465733][ T5700] loop2: detected capacity change from 0 to 2048 [ 90.492125][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.494530][ T5697] syz-executor.4: attempt to access beyond end of device [ 90.494530][ T5697] loop4: rw=2049, sector=8767744, nr_sectors = 1 limit=128 [ 90.547044][ T5700] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 90.561390][ T5700] EXT4-fs (loop2): group descriptors corrupted! [ 90.568100][ T5697] Buffer I/O error on dev loop4, logical block 8767744, lost async page write [ 90.591569][ T5694] NILFS (loop0): recovery complete [ 90.653814][ T5704] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.742557][ T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 90.759015][ T5117] sysv_free_block: trying to free block not in datazone [ 90.788258][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.791463][ T5117] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 90.834899][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.871771][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 90.912969][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 90.936656][ T8] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 90.960605][ T8] usb 4-1: Manufacturer: syz [ 90.985580][ T8] usb 4-1: config 0 descriptor?? [ 91.222144][ T5719] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 91.430540][ T5728] syzkaller1: entered promiscuous mode [ 91.442015][ T5728] syzkaller1: entered allmulticast mode [ 91.482571][ T8] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 91.531361][ T8] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 91.599604][ T8] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 91.662061][ T5736] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 91.800788][ T5740] loop2: detected capacity change from 0 to 16 [ 91.828085][ T5740] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 92.034929][ T5744] loop0: detected capacity change from 0 to 128 [ 92.038241][ T5744] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 92.104286][ T5112] sysv_free_block: trying to free block not in datazone [ 92.130616][ T5112] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 92.201674][ T5758] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 92.201674][ T5758] The task syz-executor.1 (5758) triggered the difference, watch for misbehavior. [ 92.378977][ T5161] kernel write not supported for file /nvram (pid: 5161 comm: kworker/0:6) [ 92.735805][ T5774] loop0: detected capacity change from 0 to 4096 [ 92.841400][ T5774] NILFS (loop0): invalid segment: Checksum error in segment payload [ 92.884871][ T5774] NILFS (loop0): trying rollback from an earlier position [ 92.996398][ T5774] NILFS (loop0): recovery complete [ 93.011982][ T5789] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.203535][ T5774] overlayfs: upper fs does not support tmpfile. [ 93.222326][ T5774] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 93.243107][ T5774] overlayfs: failed to set xattr on upper [ 93.285517][ T5791] loop2: detected capacity change from 0 to 4096 [ 93.297586][ T5774] overlayfs: ...falling back to redirect_dir=nofollow. [ 93.335061][ T5774] overlayfs: ...falling back to index=off. [ 93.348886][ T5774] overlayfs: ...falling back to uuid=null. [ 93.414280][ T5791] ntfs3: loop2: $Secure::$SDH is corrupted. [ 93.437886][ T5791] ntfs3: loop2: Failed to initialize $Secure (-22). [ 93.687266][ T5161] usb 4-1: USB disconnect, device number 2 [ 93.758870][ T782] kernel write not supported for file /nvram (pid: 782 comm: kworker/1:2) [ 94.036129][ T5818] syz-executor.2 (pid 5818) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 94.098344][ T5818] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 94.541411][ T5113] Bluetooth: hci0: command tx timeout [ 94.583140][ T4832] kernel write not supported for file /nvram (pid: 4832 comm: kworker/1:3) [ 94.699157][ T5829] loop2: detected capacity change from 0 to 8192 [ 94.825199][ T5855] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.896472][ T5849] loop0: detected capacity change from 0 to 4096 [ 94.978556][ T5849] NILFS (loop0): invalid segment: Checksum error in segment payload [ 95.006532][ T5849] NILFS (loop0): trying rollback from an earlier position [ 95.056113][ T5854] loop3: detected capacity change from 0 to 4096 [ 95.082802][ T5862] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 95.085284][ T5849] NILFS (loop0): recovery complete [ 95.106097][ T5854] ntfs3: Unknown parameter 'foryÀÖ•ocharset' [ 95.179163][ T5866] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.348713][ T5873] loop4: detected capacity change from 0 to 256 [ 95.379318][ T5849] overlayfs: upper fs does not support tmpfile. [ 95.413664][ T5873] FAT-fs (loop4): Directory bread(block 64) failed [ 95.416429][ T5849] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 95.440637][ T5873] FAT-fs (loop4): Directory bread(block 65) failed [ 95.461567][ T5849] overlayfs: failed to set xattr on upper [ 95.472011][ T5873] FAT-fs (loop4): Directory bread(block 66) failed [ 95.489813][ T5873] FAT-fs (loop4): Directory bread(block 67) failed [ 95.498940][ T5873] FAT-fs (loop4): Directory bread(block 68) failed [ 95.510795][ T5873] FAT-fs (loop4): Directory bread(block 69) failed [ 95.539613][ T5849] overlayfs: ...falling back to redirect_dir=nofollow. [ 95.554177][ T5873] FAT-fs (loop4): Directory bread(block 70) failed [ 95.571865][ T5873] FAT-fs (loop4): Directory bread(block 71) failed [ 95.582145][ T5849] overlayfs: ...falling back to index=off. [ 95.599991][ T5873] FAT-fs (loop4): Directory bread(block 72) failed [ 95.607872][ T5873] FAT-fs (loop4): Directory bread(block 73) failed [ 95.617883][ T5849] overlayfs: ...falling back to uuid=null. [ 95.816367][ T5888] loop3: detected capacity change from 0 to 512 [ 95.904220][ T5888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.002894][ T5888] ext4 filesystem being mounted at /root/syzkaller-testdir35750451/syzkaller.rfwQN7/50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.477197][ T5882] loop1: detected capacity change from 0 to 32768 [ 96.619749][ T5113] Bluetooth: hci0: command tx timeout [ 96.675460][ T5882] jfs: Unrecognized mount option "01777777777777777777777ÿ00000000000000000000000ñ¼ÊíXc¥vÌ:ýQºòœÞ"¨C’ôæo÷ï"ªš÷'ήŠŽÉ_Á·0ƒÞ-è% Ë+ çtý³6P×ÚÎ'ÁkÂ;/|·%…T‰9i(Š©%ZŠ’@øG~‚ºͱý\¢ñ«œâÌÄÒÚøÚÇ%S:UVTúõà’OvO7MfO­Jj²NÀè"çùBnŽ]áþXZ [ 96.675460][ T5882] èoÐ*‹“e–4Ôb¹ûL±¡ú–*‹" or missing value [ 96.680882][ T5116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.852181][ T5919] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 96.941661][ T5113] Bluetooth: hci3: hardware error 0x00 [ 97.070912][ T5924] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 97.328187][ T5928] loop1: detected capacity change from 0 to 2048 [ 97.451057][ T5941] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.0'. [ 97.456836][ T5939] loop2: detected capacity change from 0 to 256 [ 97.484846][ T5941] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 97.514052][ T5939] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 98.499878][ T53] Bluetooth: hci2: hardware error 0x00 [ 98.576429][ T5967] process 'syz-executor.4' launched './file0' with NULL argv: empty string added [ 98.918796][ T5984] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 98.985282][ T5981] loop0: detected capacity change from 0 to 2048 [ 99.028818][ T5981] udf: Bad value for 'anchor' [ 99.111909][ T5113] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 99.402273][ T5997] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 99.433847][ T5997] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 99.453926][ T29] audit: type=1800 audit(1717551149.611:11): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 99.588938][ T6000] loop1: detected capacity change from 0 to 512 [ 99.607608][ T6000] EXT4-fs: Ignoring removed nobh option [ 99.616733][ T6000] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 99.639114][ T6000] EXT4-fs (loop1): can't mount with both data=journal and dax [ 99.871131][ T5987] loop3: detected capacity change from 0 to 32768 [ 99.893706][ T5987] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (5987) [ 99.911718][ T6007] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1029 (only 8 groups) [ 99.961364][ T5987] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.975075][ T5987] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 99.987370][ T5987] BTRFS info (device loop3): using free-space-tree [ 100.371588][ T5116] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 100.450787][ T6034] loop1: detected capacity change from 0 to 2048 [ 100.474387][ T6034] udf: Bad value for 'anchor' [ 100.547750][ T53] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 100.561908][ T5301] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 101.098347][ T6049] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1029 (only 8 groups) [ 101.186245][ T6053] loop1: detected capacity change from 0 to 4096 [ 101.225066][ T6053] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 101.338381][ T6053] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 101.473678][ T51] Bluetooth: hci5: Frame reassembly failed (-84) [ 101.513972][ T51] Bluetooth: hci5: Frame reassembly failed (-84) [ 101.761072][ T6038] loop0: detected capacity change from 0 to 32768 [ 101.883565][ T6038] jfs: Unrecognized mount option "01777777777777777777777ÿ00000000000000000000000ñ¼ÊíXc¥vÌ:ýQºòœÞ"¨C’ôæo÷ï"ªš÷'ήŠŽÉ_Á·0ƒÞ-è% Ë+ çtý³6P×ÚÎ'ÁkÂ;/|·%…T‰9i(Š©%ZŠ’@øG~‚ºͱý\¢ñ«œâÌÄÒÚøÚÇ%S:UVTúõà’OvO7MfO­Jj²NÀè"çùBnŽ]áþXZ [ 101.883565][ T6038] èoÐ*‹“e–4Ôb¹ûL±¡ú–*‹" or missing value [ 102.195966][ T6059] loop3: detected capacity change from 0 to 32768 [ 102.478891][ T29] audit: type=1326 audit(1717551152.631:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d6a7cee9 code=0x7ffc0000 [ 102.545477][ T29] audit: type=1326 audit(1717551152.631:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d6a7cee9 code=0x7ffc0000 [ 102.597927][ T6081] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 102.652073][ T29] audit: type=1326 audit(1717551152.631:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d6a7cee9 code=0x7ffc0000 [ 102.732231][ T29] audit: type=1326 audit(1717551152.631:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d6a7cee9 code=0x7ffc0000 [ 102.816003][ T29] audit: type=1326 audit(1717551152.631:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d6a7cee9 code=0x7ffc0000 [ 102.845533][ T6085] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.857080][ T6085] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.867225][ T29] audit: type=1326 audit(1717551152.631:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d6a7cee9 code=0x7ffc0000 [ 102.917199][ T29] audit: type=1326 audit(1717551152.691:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d6a7cee9 code=0x7ffc0000 [ 102.945904][ T29] audit: type=1326 audit(1717551152.701:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2d6a7a667 code=0x7ffc0000 [ 102.976186][ T29] audit: type=1326 audit(1717551152.701:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6078 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc2d6a40359 code=0x7ffc0000 [ 103.152900][ T6096] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 394496 (only 8 groups) [ 103.223478][ T6099] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.234185][ T6099] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.499617][ T5113] Bluetooth: hci5: command 0x1003 tx timeout [ 103.499644][ T53] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 103.863592][ T6101] loop1: detected capacity change from 0 to 32768 [ 103.946380][ T6125] loop0: detected capacity change from 0 to 64 [ 104.052173][ T6127] loop2: detected capacity change from 0 to 2048 [ 104.127341][ T6127] loop2: p2 < > [ 104.191014][ T5161] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.372782][ T5113] Bluetooth: hci5: sending frame failed (-49) [ 104.381511][ T53] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 104.401147][ T5161] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 104.427355][ T5161] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.445878][ T5161] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.475386][ T5161] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 104.533215][ T5161] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 104.562273][ T5161] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 104.599472][ T5161] usb 4-1: Manufacturer: syz [ 104.607283][ T5161] usb 4-1: config 0 descriptor?? [ 104.649873][ T6159] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.803908][ T6163] loop0: detected capacity change from 0 to 2048 [ 104.814179][ T6165] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.850438][ T6163] loop0: p2 < > [ 105.006488][ T6171] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 105.027755][ T6171] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 105.049055][ T5161] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 105.066584][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.078630][ T5161] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 105.102442][ T6171] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 105.118387][ T5161] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 105.512542][ T6193] loop1: detected capacity change from 0 to 1024 [ 105.524701][ T6193] EXT4-fs: Ignoring removed oldalloc option [ 105.532263][ T6193] EXT4-fs: Ignoring removed orlov option [ 105.538125][ T6193] EXT4-fs: Ignoring removed orlov option [ 105.579741][ T6193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.647589][ T5333] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.705011][ T6155] loop2: detected capacity change from 0 to 32768 [ 105.903548][ T6209] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 105.924932][ T6209] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 105.942774][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.970657][ T6209] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 106.341867][ T6222] mmap: syz-executor.4 (6222): VmData 37396480 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 106.461155][ T6227] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 106.496378][ T6199] loop0: detected capacity change from 0 to 32768 [ 106.582157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 106.633238][ T6233] wg2: entered promiscuous mode [ 106.649158][ T6233] wg2: entered allmulticast mode [ 106.689567][ T6199] overlayfs: upper fs needs to support d_type. [ 106.731999][ T6199] overlayfs: upper fs does not support tmpfile. [ 106.766460][ T6199] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 107.250263][ T5161] usb 4-1: USB disconnect, device number 3 [ 107.293197][ T6250] loop2: detected capacity change from 0 to 512 [ 107.322008][ T6250] EXT4-fs (loop2): blocks per group (8192) and clusters per group (2304) inconsistent [ 107.627614][ T6270] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure [ 107.629229][ T6263] loop4: detected capacity change from 0 to 1024 [ 107.694940][ T6274] loop3: detected capacity change from 0 to 1024 [ 107.703103][ T6274] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.744233][ T6274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.817460][ T6281] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 107.858759][ T6270] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 107.874778][ T6281] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 107.919306][ T5116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.945018][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.956420][ T6279] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (490519854976 ns) > initial count (268435456 ns). Using initial count to start timer. [ 107.964306][ T6281] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 108.277014][ T6297] batman_adv: batadv0: Adding interface: ipvlan2 [ 108.286611][ T6297] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.289766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.319156][ T6297] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 108.365742][ T6301] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.528681][ T6309] loop3: detected capacity change from 0 to 512 [ 108.548977][ T6309] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 15 [ 108.605127][ T6309] ext4_test_bit(bit=14, block=5) = 0 [ 108.640441][ T6309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.717965][ T6315] loop4: detected capacity change from 0 to 1024 [ 108.761380][ T6315] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.789127][ T6309] EXT4-fs error (device loop3): ext4_free_inode:355: comm syz-executor.3: bit already cleared for inode 14 [ 108.833129][ T6315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.967193][ T5116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.047111][ T6315] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 109.115690][ T5117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.289518][ T782] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.464802][ T6308] loop1: detected capacity change from 0 to 32768 [ 109.487760][ T6334] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 1 [ 109.506713][ T782] usb 1-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.8d [ 109.808115][ T6308] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 110.190400][ T782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.205482][ T782] usb 1-1: config 0 descriptor?? [ 110.213778][ T782] usb 1-1: NDI device with a latency value of 1 [ 110.414900][ T782] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 110.432773][ T782] ftdi_sio ttyUSB0: unknown device type: 0xdc8d [ 110.450437][ T782] usb 1-1: USB disconnect, device number 3 [ 110.466501][ T782] ftdi_sio 1-1:0.0: device disconnected [ 110.492018][ T6357] loop2: detected capacity change from 0 to 1024 [ 110.503881][ T6308] XFS (loop1): Ending clean mount [ 110.526491][ T6308] XFS (loop1): Quotacheck needed: Please wait. [ 110.602015][ T6308] XFS (loop1): Quotacheck: Done. [ 110.649312][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 110.649329][ T29] audit: type=1800 audit(1717551160.801:126): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1066 res=0 errno=0 [ 110.705979][ T29] audit: type=1800 audit(1717551160.851:127): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1066 res=0 errno=0 [ 110.860908][ T6375] loop2: detected capacity change from 0 to 64 [ 110.918510][ T6375] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 110.956452][ T6375] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 110.996400][ T6375] CIFS: Unable to determine destination address [ 111.037837][ T5333] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 111.047804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.365495][ T6385] loop4: detected capacity change from 0 to 8 [ 111.387120][ T6393] loop3: detected capacity change from 0 to 1024 [ 111.403400][ T29] audit: type=1804 audit(1717551161.561:128): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir438101657/syzkaller.d19B00/88/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 111.408564][ T6394] loop2: detected capacity change from 0 to 1024 [ 111.484709][ T6385] SQUASHFS error: lzo decompression failed, data probably corrupt [ 111.512044][ T29] audit: type=1804 audit(1717551161.601:129): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir438101657/syzkaller.d19B00/88/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 111.539607][ T6394] hfsplus: unable to parse mount options [ 111.547668][ T6385] SQUASHFS error: Failed to read block 0x28d: -5 [ 111.555713][ T6385] SQUASHFS error: Unable to read metadata cache entry [28b] [ 111.563638][ T6385] SQUASHFS error: Unable to read inode 0x11f [ 111.715562][ T6401] SET target dimension over the limit! [ 112.078785][ T6413] loop3: detected capacity change from 0 to 128 [ 112.154209][ T6419] bio_check_eod: 14 callbacks suppressed [ 112.154229][ T6419] syz-executor.1: attempt to access beyond end of device [ 112.154229][ T6419] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 112.194235][ T29] audit: type=1326 audit(1717551162.341:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0e27cee9 code=0x7ffc0000 [ 112.234812][ T6419] exFAT-fs (nbd1): unable to read boot sector [ 112.258356][ T6419] exFAT-fs (nbd1): failed to read boot sector [ 112.278020][ T6419] exFAT-fs (nbd1): failed to recognize exfat type [ 112.284858][ T29] audit: type=1326 audit(1717551162.341:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0e27cee9 code=0x7ffc0000 [ 112.307127][ T6423] loop4: detected capacity change from 0 to 1024 [ 112.455305][ T6426] loop0: detected capacity change from 0 to 1024 [ 112.485601][ T6429] loop1: detected capacity change from 0 to 512 [ 112.497580][ T6426] hfsplus: unable to parse mount options [ 112.517205][ T6429] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz-executor.1: bad orphan inode 15 [ 112.550610][ T6429] ext4_test_bit(bit=14, block=5) = 0 [ 112.567259][ T6429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.586312][ T6438] loop4: detected capacity change from 0 to 256 [ 112.643012][ T6429] EXT4-fs error (device loop1): ext4_free_inode:355: comm syz-executor.1: bit already cleared for inode 14 [ 112.694955][ T6438] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 112.699603][ T5333] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.765687][ T6440] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 1 [ 113.877809][ T6462] loop3: detected capacity change from 0 to 512 [ 113.927368][ T6469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.945155][ T6462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.960066][ T6462] ext4 filesystem being mounted at /root/syzkaller-testdir35750451/syzkaller.rfwQN7/94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.312024][ T5116] EXT4-fs error (device loop3): ext4_empty_dir:3089: inode #12: comm syz-executor.3: Directory hole found for htree leaf block [ 114.368062][ T5116] EXT4-fs error (device loop3): ext4_empty_dir:3089: inode #12: comm syz-executor.3: Directory hole found for htree leaf block [ 114.425577][ T5116] EXT4-fs error (device loop3): ext4_empty_dir:3089: inode #12: comm syz-executor.3: Directory hole found for htree leaf block [ 114.453056][ T6484] loop4: detected capacity change from 0 to 1024 [ 114.462526][ T5116] EXT4-fs error (device loop3): ext4_empty_dir:3089: inode #12: comm syz-executor.3: Directory hole found for htree leaf block [ 114.477957][ T6484] hfsplus: unable to parse mount options [ 114.484847][ T5116] EXT4-fs error (device loop3): ext4_empty_dir:3089: inode #12: comm syz-executor.3: Directory hole found for htree leaf block [ 114.579416][ T5116] EXT4-fs error (device loop3): ext4_empty_dir:3089: inode #12: comm syz-executor.3: Directory hole found for htree leaf block [ 114.794183][ T5116] EXT4-fs error (device loop3): ext4_empty_dir:3089: inode #12: comm syz-executor.3: Directory hole found for htree leaf block [ 115.276331][ T5116] EXT4-fs error (device loop3): ext4_empty_dir:3089: inode #12: comm syz-executor.3: Directory hole found for htree leaf block [ 115.364342][ T5116] EXT4-fs error (device loop3): ext4_empty_dir:3089: inode #12: comm syz-executor.3: Directory hole found for htree leaf block [ 115.423751][ T5116] EXT4-fs error (device loop3): ext4_empty_dir:3089: inode #12: comm syz-executor.3: Directory hole found for htree leaf block [ 115.514457][ T6504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.632282][ T6508] loop0: detected capacity change from 0 to 512 [ 115.754482][ T6508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.791715][ T6508] ext4 filesystem being mounted at /root/syzkaller-testdir438101657/syzkaller.d19B00/96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.933869][ T5112] EXT4-fs error (device loop0): ext4_empty_dir:3089: inode #12: comm syz-executor.0: Directory hole found for htree leaf block [ 115.949526][ T5112] EXT4-fs error (device loop0): ext4_empty_dir:3089: inode #12: comm syz-executor.0: Directory hole found for htree leaf block [ 115.977279][ T5112] EXT4-fs error (device loop0): ext4_empty_dir:3089: inode #12: comm syz-executor.0: Directory hole found for htree leaf block [ 115.999623][ T5112] EXT4-fs error (device loop0): ext4_empty_dir:3089: inode #12: comm syz-executor.0: Directory hole found for htree leaf block [ 116.022688][ T5112] EXT4-fs error (device loop0): ext4_empty_dir:3089: inode #12: comm syz-executor.0: Directory hole found for htree leaf block [ 116.045397][ T5112] EXT4-fs error (device loop0): ext4_empty_dir:3089: inode #12: comm syz-executor.0: Directory hole found for htree leaf block [ 116.060025][ T5112] EXT4-fs error (device loop0): ext4_empty_dir:3089: inode #12: comm syz-executor.0: Directory hole found for htree leaf block [ 116.093836][ T5112] EXT4-fs error (device loop0): ext4_empty_dir:3089: inode #12: comm syz-executor.0: Directory hole found for htree leaf block [ 116.122558][ T5112] EXT4-fs error (device loop0): ext4_empty_dir:3089: inode #12: comm syz-executor.0: Directory hole found for htree leaf block [ 116.129927][ T5116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.136877][ T5112] EXT4-fs error (device loop0): ext4_empty_dir:3089: inode #12: comm syz-executor.0: Directory hole found for htree leaf block [ 116.203259][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.371050][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.474118][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.525568][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.546061][ T5112] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.664165][ T51] bridge_slave_1: left allmulticast mode [ 116.670179][ T51] bridge_slave_1: left promiscuous mode [ 116.675933][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.685839][ T51] bridge_slave_0: left allmulticast mode [ 116.693345][ T51] bridge_slave_0: left promiscuous mode [ 116.699040][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.985892][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.996816][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.007720][ T51] bond0 (unregistering): Released all slaves [ 117.296574][ T51] hsr_slave_0: left promiscuous mode [ 117.304442][ T51] hsr_slave_1: left promiscuous mode [ 117.310410][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.319859][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.327631][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.335300][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.344820][ T51] batman_adv: batadv0: Removing interface: ipvlan2 [ 117.370788][ T51] veth1_macvtap: left promiscuous mode [ 117.376373][ T51] veth0_macvtap: left promiscuous mode [ 117.382091][ T51] veth1_vlan: left promiscuous mode [ 117.387372][ T51] veth0_vlan: left promiscuous mode [ 117.766092][ T51] team0 (unregistering): Port device team_slave_1 removed [ 117.802965][ T51] team0 (unregistering): Port device team_slave_0 removed [ 118.535237][ T2889] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.628723][ T2889] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.673145][ T2889] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.749735][ T2889] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.835353][ T2889] bridge_slave_1: left allmulticast mode [ 118.841397][ T2889] bridge_slave_1: left promiscuous mode [ 118.847090][ T2889] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.859268][ T2889] bridge_slave_0: left allmulticast mode [ 118.865421][ T2889] bridge_slave_0: left promiscuous mode [ 118.871282][ T2889] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.172780][ T2889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.185658][ T2889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.196252][ T2889] bond0 (unregistering): Released all slaves [ 119.417053][ T2889] hsr_slave_0: left promiscuous mode [ 119.429712][ T2889] hsr_slave_1: left promiscuous mode [ 119.435765][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.446061][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.454304][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.461846][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.486224][ T2889] veth1_macvtap: left promiscuous mode [ 119.491830][ T2889] veth0_macvtap: left promiscuous mode [ 119.497404][ T2889] veth1_vlan: left promiscuous mode [ 119.502971][ T2889] veth0_vlan: left promiscuous mode [ 119.858943][ T2889] team0 (unregistering): Port device team_slave_1 removed [ 119.894648][ T2889] team0 (unregistering): Port device team_slave_0 removed [ 121.176224][ T6536] loop2: detected capacity change from 0 to 512 [ 121.191540][ T6536] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.198242][ T6536] EXT4-fs: Ignoring removed i_version option [ 121.219173][ T5113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 121.235262][ T6536] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.244363][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 121.254402][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 121.266631][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 121.285332][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 121.294134][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 121.296534][ T6536] EXT4-fs (loop2): too many log groups per flexible block group [ 121.302610][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 121.313660][ T6536] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 121.319243][ T5113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 121.332588][ T5113] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 121.339898][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 121.343160][ T6536] EXT4-fs (loop2): mount failed [ 121.347630][ T5113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 121.359021][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 121.558703][ T6528] loop1: detected capacity change from 0 to 32768 [ 121.566543][ T6528] btrfs: Deprecated parameter 'usebackuproot' [ 121.572979][ T6528] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 121.587040][ T6528] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6528) [ 121.611653][ T6545] loop2: detected capacity change from 0 to 1024 [ 121.620542][ T6545] hfsplus: unable to parse mount options [ 121.628390][ T6528] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.638713][ T6528] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 121.757808][ T6528] BTRFS info (device loop1): rebuilding free space tree [ 121.810429][ T6528] BTRFS info (device loop1): disabling free space tree [ 121.818004][ T6528] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 121.830196][ T6537] chnl_net:caif_netlink_parms(): no params data found [ 121.833221][ T6528] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.962212][ T6539] chnl_net:caif_netlink_parms(): no params data found [ 121.996255][ T6537] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.007642][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.018039][ T6537] bridge_slave_0: entered allmulticast mode [ 122.025877][ T6537] bridge_slave_0: entered promiscuous mode [ 122.042621][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888024364000: rx timeout, send abort [ 122.054769][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888024364000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 122.093565][ T6537] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.105936][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.113584][ T6537] bridge_slave_1: entered allmulticast mode [ 122.121087][ T6537] bridge_slave_1: entered promiscuous mode [ 122.194291][ T5161] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 122.203918][ T5333] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.223220][ T6575] loop4: detected capacity change from 0 to 1024 [ 122.228536][ T6537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.279084][ T6537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.391640][ T5161] usb 3-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.8d [ 122.397654][ T6539] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.401518][ T5161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.415298][ T6539] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.428987][ T6539] bridge_slave_0: entered allmulticast mode [ 122.447274][ T5161] usb 3-1: config 0 descriptor?? [ 122.456952][ T5161] usb 3-1: NDI device with a latency value of 1 [ 122.462632][ T6539] bridge_slave_0: entered promiscuous mode [ 122.477103][ T6575] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (490519854976 ns) > initial count (268435456 ns). Using initial count to start timer. [ 122.516547][ T6537] team0: Port device team_slave_0 added [ 122.536111][ T6539] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.547839][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.558515][ T6539] bridge_slave_1: entered allmulticast mode [ 122.575989][ T6539] bridge_slave_1: entered promiscuous mode [ 122.602825][ T6537] team0: Port device team_slave_1 added [ 122.666278][ T5161] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 122.697626][ T6582] 9pnet: p9_errstr2errno: server reported unknown error á~ [ 122.698476][ T5161] ftdi_sio ttyUSB0: unknown device type: 0xdc8d [ 122.722067][ T5161] usb 3-1: USB disconnect, device number 2 [ 122.723438][ T6539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.736564][ T5161] ftdi_sio 3-1:0.0: device disconnected [ 122.773352][ T6539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.809155][ T6584] loop4: detected capacity change from 0 to 256 [ 122.831337][ T6537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.835483][ T6584] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 122.849291][ T6537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.895113][ T6537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.928147][ T6537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.940824][ T6537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.974361][ T6537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.039836][ T6539] team0: Port device team_slave_0 added [ 123.183531][ T6539] team0: Port device team_slave_1 added [ 123.420984][ T53] Bluetooth: hci2: command tx timeout [ 123.427780][ T5113] Bluetooth: hci3: command tx timeout [ 123.551635][ T6537] hsr_slave_0: entered promiscuous mode [ 123.913799][ T6537] hsr_slave_1: entered promiscuous mode [ 124.010274][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.017267][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.056304][ T6539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.178133][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.201306][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.213342][ T6580] loop1: detected capacity change from 0 to 32768 [ 124.241877][ T6539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.276185][ T6580] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 124.289769][ T6580] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 124.396903][ T6580] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 124.483888][ T6539] hsr_slave_0: entered promiscuous mode [ 124.492629][ T6539] hsr_slave_1: entered promiscuous mode [ 124.509944][ T6539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.530703][ T6539] Cannot create hsr debugfs directory [ 124.544030][ T6580] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 125.172933][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.326271][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.445759][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.500931][ T53] Bluetooth: hci2: command tx timeout [ 125.506443][ T5113] Bluetooth: hci3: command tx timeout [ 125.581036][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.730421][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 125.740063][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 125.748009][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 125.758376][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 125.767143][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 125.779527][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 125.799907][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805f734000: rx timeout, send abort [ 125.808368][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805f734000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 125.886992][ T6537] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 125.903085][ T51] bridge_slave_1: left allmulticast mode [ 125.916596][ T51] bridge_slave_1: left promiscuous mode [ 125.922713][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.936352][ T6615] loop2: detected capacity change from 0 to 256 [ 125.937496][ T51] bridge_slave_0: left allmulticast mode [ 125.948685][ T51] bridge_slave_0: left promiscuous mode [ 125.954817][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.963862][ T6615] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 127.153925][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.173092][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.185467][ T51] bond0 (unregistering): Released all slaves [ 127.197283][ T6537] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 127.243384][ T6537] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 127.291454][ T6537] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 127.580354][ T53] Bluetooth: hci3: command tx timeout [ 127.580365][ T5113] Bluetooth: hci2: command tx timeout [ 127.603504][ T29] audit: type=1326 audit(1717551177.751:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2d6a7a667 code=0x7ffc0000 [ 127.627642][ T29] audit: type=1326 audit(1717551177.751:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc2d6a40359 code=0x7ffc0000 [ 127.650649][ T29] audit: type=1326 audit(1717551177.751:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d6a7cee9 code=0x7ffc0000 [ 127.676070][ T29] audit: type=1326 audit(1717551177.761:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2d6a7a667 code=0x7ffc0000 [ 127.709698][ T29] audit: type=1326 audit(1717551177.761:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc2d6a40359 code=0x7ffc0000 [ 127.744866][ T51] hsr_slave_0: left promiscuous mode [ 127.753215][ T29] audit: type=1326 audit(1717551177.761:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2d6a7a667 code=0x7ffc0000 [ 127.781426][ T51] hsr_slave_1: left promiscuous mode [ 127.791916][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.804154][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.804447][ T29] audit: type=1326 audit(1717551177.761:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc2d6a40359 code=0x7ffc0000 [ 127.835589][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.839556][ T5113] Bluetooth: hci1: command tx timeout [ 127.856946][ T29] audit: type=1326 audit(1717551177.761:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2d6a7a667 code=0x7ffc0000 [ 127.886744][ T29] audit: type=1326 audit(1717551177.761:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc2d6a40359 code=0x7ffc0000 [ 127.889462][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.925568][ T29] audit: type=1326 audit(1717551177.761:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc2d6a7a667 code=0x7ffc0000 [ 127.930496][ T6646] loop4: detected capacity change from 0 to 512 [ 127.967898][ T51] veth1_macvtap: left promiscuous mode [ 127.974401][ T51] veth0_macvtap: left promiscuous mode [ 127.980810][ T51] veth1_vlan: left promiscuous mode [ 127.999774][ T51] veth0_vlan: left promiscuous mode [ 128.004721][ T6646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.016021][ T6653] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 128.021892][ T6646] ext4 filesystem being mounted at /root/syzkaller-testdir219369078/syzkaller.fV8P0g/135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.097750][ T5117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.630905][ T6676] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 128.717044][ T51] team0 (unregistering): Port device team_slave_1 removed [ 128.767440][ T51] team0 (unregistering): Port device team_slave_0 removed [ 128.796548][ T6680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.195634][ T6539] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 129.207973][ T6539] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 129.226111][ T6539] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.244962][ T6686] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 129.286746][ T6689] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 129.324789][ T6539] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 129.660788][ T5113] Bluetooth: hci3: command tx timeout [ 129.660816][ T53] Bluetooth: hci2: command tx timeout [ 129.677302][ T6610] chnl_net:caif_netlink_parms(): no params data found [ 129.899655][ T53] Bluetooth: hci1: command tx timeout [ 129.933948][ T6610] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.950638][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.962783][ T6610] bridge_slave_0: entered allmulticast mode [ 129.983218][ T6610] bridge_slave_0: entered promiscuous mode [ 130.008498][ T6610] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.021906][ T6610] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.037206][ T6610] bridge_slave_1: entered allmulticast mode [ 130.045057][ T6610] bridge_slave_1: entered promiscuous mode [ 130.150468][ T6537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.181452][ T6610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.213927][ T6610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.346942][ T6610] team0: Port device team_slave_0 added [ 130.365645][ T6610] team0: Port device team_slave_1 added [ 130.384256][ T6537] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.422916][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.430119][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.504286][ T6610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.524940][ T6610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.588379][ T6610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.603194][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.610503][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.632560][ T6610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.639864][ T6610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.683989][ T6610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.724435][ T6539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.816867][ T6610] hsr_slave_0: entered promiscuous mode [ 130.830230][ T6610] hsr_slave_1: entered promiscuous mode [ 130.842551][ T6610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.859591][ T6610] Cannot create hsr debugfs directory [ 130.926947][ T6539] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.988546][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.995740][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.084070][ T6721] loop2: detected capacity change from 0 to 32768 [ 131.093419][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.100612][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.117294][ T6721] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 131.157560][ T6721] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 131.199912][ T6721] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 131.475743][ T6721] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 131.609061][ T6537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.793766][ T6539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.924544][ T6537] veth0_vlan: entered promiscuous mode [ 131.980258][ T53] Bluetooth: hci1: command tx timeout [ 132.004145][ T6537] veth1_vlan: entered promiscuous mode [ 132.056353][ T6539] veth0_vlan: entered promiscuous mode [ 132.180044][ T2889] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.248674][ T6610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 132.283313][ T6610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 132.316261][ T6610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 132.392799][ T2889] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.423507][ T6610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 132.446074][ T6539] veth1_vlan: entered promiscuous mode [ 132.517673][ T2889] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.555614][ T6537] veth0_macvtap: entered promiscuous mode [ 132.573382][ T6756] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 132.602755][ T6537] veth1_macvtap: entered promiscuous mode [ 132.609749][ T6756] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 132.618181][ T6756] netlink: 128512 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.647446][ T2889] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.698746][ T5113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.708745][ T6537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.720428][ T6537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.722071][ T5113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.731860][ T6537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.748580][ T6537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.761277][ T6537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.762263][ T5113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.783601][ T5113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.799773][ T5113] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 132.808923][ T5113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.815402][ T6537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.831264][ T6537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.847063][ T6537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.857782][ T6537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.884382][ T6537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.923026][ T6539] veth0_macvtap: entered promiscuous mode [ 132.972778][ T6539] veth1_macvtap: entered promiscuous mode [ 132.995678][ T6537] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.009296][ T6537] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.019247][ T6537] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.029615][ T6537] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.116808][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.127456][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.137463][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.149767][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.159787][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.171506][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.183176][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.243816][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.255915][ T6773] loop4: detected capacity change from 0 to 8 [ 133.260397][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.274208][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.274972][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.282513][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.299897][ T6773] squashfs image failed sanity check [ 133.300181][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.315219][ T6539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.326908][ T6539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.338190][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.398201][ T6610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.415473][ T2889] bridge_slave_1: left allmulticast mode [ 133.431870][ T2889] bridge_slave_1: left promiscuous mode [ 133.437663][ T2889] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.446990][ T2889] bridge_slave_0: left allmulticast mode [ 133.454710][ T2889] bridge_slave_0: left promiscuous mode [ 133.460608][ T2889] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.916371][ T2889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.927853][ T2889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.938343][ T2889] bond0 (unregistering): Released all slaves [ 133.954232][ T6539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.963491][ T6539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.972350][ T6539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.983514][ T6539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.065126][ T53] Bluetooth: hci1: command tx timeout [ 134.176567][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.198786][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.229207][ T6610] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.259572][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.268688][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.352650][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.359835][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.405302][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.412533][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.455748][ T2889] hsr_slave_0: left promiscuous mode [ 134.464537][ T2889] hsr_slave_1: left promiscuous mode [ 134.473198][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.481182][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.489310][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.498787][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.530535][ T2889] veth1_macvtap: left promiscuous mode [ 134.536203][ T2889] veth0_macvtap: left promiscuous mode [ 134.542383][ T2889] veth1_vlan: left promiscuous mode [ 134.547804][ T2889] veth0_vlan: left promiscuous mode [ 134.579235][ T6794] loop4: detected capacity change from 0 to 512 [ 134.596762][ T6794] EXT4-fs: Ignoring removed orlov option [ 134.606279][ T6794] EXT4-fs (loop4): unable to read superblock [ 134.940254][ T5113] Bluetooth: hci0: command tx timeout [ 135.138417][ T2889] team0 (unregistering): Port device team_slave_1 removed [ 135.177224][ T2889] team0 (unregistering): Port device team_slave_0 removed [ 135.806199][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.823523][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.832266][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.867973][ T6610] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.905899][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.934889][ T6610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.081246][ T6816] loop4: detected capacity change from 0 to 256 [ 136.096645][ T6816] exfat: Bad value for 'uid' [ 136.815862][ T6758] chnl_net:caif_netlink_parms(): no params data found [ 137.031113][ T5113] Bluetooth: hci0: command tx timeout [ 137.147667][ T6758] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.169183][ T6758] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.193807][ T6758] bridge_slave_0: entered allmulticast mode [ 137.211197][ T6758] bridge_slave_0: entered promiscuous mode [ 137.232324][ T6758] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.242190][ T6758] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.257712][ T6758] bridge_slave_1: entered allmulticast mode [ 137.266764][ T6758] bridge_slave_1: entered promiscuous mode [ 137.335357][ T6847] loop3: detected capacity change from 0 to 512 [ 137.354474][ T6610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.378756][ T6758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.406079][ T6758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.495680][ T6847] EXT4-fs error (device loop3): __ext4_iget:4906: inode #15: block 1803188595: comm syz-executor.3: invalid block [ 137.520956][ T6758] team0: Port device team_slave_0 added [ 137.535466][ T6847] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 137.563272][ T6758] team0: Port device team_slave_1 added [ 137.590421][ T6847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.633931][ T6847] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 234881024 (level 0) [ 137.745287][ T6854] loop4: detected capacity change from 0 to 256 [ 137.760104][ T6854] exfat: Bad value for 'uid' [ 138.112189][ T6758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.202684][ T6758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.363587][ T6758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.417211][ T6758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.467087][ T6537] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.479482][ T6758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.538743][ T6758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.727016][ T6758] hsr_slave_0: entered promiscuous mode [ 138.745218][ T6758] hsr_slave_1: entered promiscuous mode [ 138.759652][ T6758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.795203][ T6758] Cannot create hsr debugfs directory [ 138.849756][ T6610] veth0_vlan: entered promiscuous mode [ 139.056470][ T6610] veth1_vlan: entered promiscuous mode [ 139.100590][ T5113] Bluetooth: hci0: command tx timeout [ 139.160903][ T6879] loop0: detected capacity change from 0 to 2048 [ 139.172421][ T6879] EXT4-fs (loop0): cluster size (2048) smaller than block size (4096) [ 139.186551][ T6877] Bluetooth: MGMT ver 1.23 [ 139.195643][ T6877] Bluetooth: hci3: too big key_count value 28672 [ 139.276069][ T6610] veth0_macvtap: entered promiscuous mode [ 139.649690][ T6610] veth1_macvtap: entered promiscuous mode [ 139.770518][ T6885] loop3: detected capacity change from 0 to 256 [ 139.783682][ T6885] exfat: Bad value for 'uid' [ 140.528811][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.541869][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.559527][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.579479][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.595666][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.613842][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.636877][ T6610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.692084][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.708155][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.721335][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.732297][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.742513][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.784403][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.797853][ T6610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.814637][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 140.837316][ T6610] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.853200][ T6610] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.863423][ T6610] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.877487][ T6610] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.134688][ T6902] loop0: detected capacity change from 0 to 1764 [ 141.178318][ T6758] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 141.186257][ T5113] Bluetooth: hci0: command tx timeout [ 141.213091][ T6902] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 141.240183][ T6758] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 141.247601][ T2889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.263112][ T2889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.333163][ T6758] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 141.364823][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.375883][ T6758] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 141.406600][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.037112][ T6889] loop3: detected capacity change from 0 to 32768 [ 142.092634][ T6889] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6889) [ 142.200544][ T6889] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.233664][ T6889] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 142.255318][ T6758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.266735][ T6889] BTRFS info (device loop3): using free-space-tree [ 142.307911][ T6758] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.332094][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.339296][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.364632][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.371838][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.477885][ T6889] BTRFS info (device loop3): rebuilding free space tree [ 142.517000][ T6758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.560336][ T6924] loop0: detected capacity change from 0 to 1024 [ 142.699229][ T6903] loop4: detected capacity change from 0 to 32768 [ 142.741561][ T2889] hfsplus: b-tree write err: -5, ino 4 [ 142.768477][ T6903] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.882307][ T6537] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.951215][ T6903] XFS (loop4): Ending clean mount [ 142.967695][ T6903] XFS (loop4): Quotacheck needed: Please wait. [ 143.091351][ T6758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.098635][ T6903] XFS (loop4): Quotacheck: Done. [ 143.195739][ T6926] loop1: detected capacity change from 0 to 32768 [ 143.281469][ T6758] veth0_vlan: entered promiscuous mode [ 143.287982][ T6926] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 143.311958][ T5117] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.348220][ T6758] veth1_vlan: entered promiscuous mode [ 143.355284][ T6949] loop0: detected capacity change from 0 to 2048 [ 143.372085][ T6949] EXT4-fs (loop0): cluster size (2048) smaller than block size (4096) [ 143.408198][ T6926] XFS (loop1): Ending clean mount [ 143.461182][ T6926] XFS (loop1): Quotacheck needed: Please wait. [ 143.502412][ T6758] veth0_macvtap: entered promiscuous mode [ 143.518661][ T6758] veth1_macvtap: entered promiscuous mode [ 143.611932][ T6926] XFS (loop1): Quotacheck: Done. [ 143.652092][ T6758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.676801][ T6758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.687056][ T6758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.697884][ T6758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.707896][ T6758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.718451][ T6758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.729081][ T6758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.741281][ T6758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.755705][ T6758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.763118][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 143.763133][ T29] audit: type=1800 audit(1717551193.921:180): pid=6926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1066 res=0 errno=0 [ 143.838487][ T6758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.870740][ T6758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.875099][ T29] audit: type=1800 audit(1717551193.921:181): pid=6926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1066 res=0 errno=0 [ 143.889563][ T6758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.948636][ T6758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.966666][ T6758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.986591][ T6758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.005075][ T6758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.044286][ T6758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.071314][ T6758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.097861][ T6758] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.134368][ T6610] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 144.154194][ T6758] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.163048][ T6758] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.172673][ T6758] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.605484][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.631992][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.715094][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.748719][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.047479][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.555198][ T6972] loop4: detected capacity change from 0 to 32768 [ 145.594950][ T6972] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6972) [ 145.667900][ T6972] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.679183][ T6972] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 145.697917][ T6972] BTRFS info (device loop4): using free-space-tree [ 145.737477][ T6984] loop1: detected capacity change from 0 to 32768 [ 145.765074][ T6984] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6984) [ 145.835131][ T6984] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.880955][ T6984] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 145.903839][ T6972] BTRFS info (device loop4): rebuilding free space tree [ 145.920446][ T6984] BTRFS info (device loop1): using free-space-tree [ 146.050870][ T5117] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.112657][ T6992] loop3: detected capacity change from 0 to 32768 [ 146.152330][ T6992] BTRFS: device /dev/loop3 (7:3) using temp-fsid 58a60525-d294-4494-b255-1b93ff040c71 [ 146.198502][ T6992] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6992) [ 146.261624][ T6992] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.299204][ T6992] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 146.335323][ T6992] BTRFS info (device loop3): using free-space-tree [ 146.349821][ T6610] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.763728][ T6537] BTRFS info (device loop3): last unmount of filesystem 58a60525-d294-4494-b255-1b93ff040c71 [ 146.832373][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.847778][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.857094][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.893849][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.910683][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.918846][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.434477][ T7071] chnl_net:caif_netlink_parms(): no params data found [ 147.681091][ T7071] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.688343][ T7071] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.705164][ T7071] bridge_slave_0: entered allmulticast mode [ 147.718113][ T7071] bridge_slave_0: entered promiscuous mode [ 147.736987][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.754184][ T7071] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.770425][ T7071] bridge_slave_1: entered allmulticast mode [ 147.781009][ T7071] bridge_slave_1: entered promiscuous mode [ 147.880816][ T7100] loop3: detected capacity change from 0 to 512 [ 147.901393][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.925243][ T7100] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 148.147942][ T7104] ufs: You didn't specify the type of your ufs filesystem [ 148.147942][ T7104] [ 148.147942][ T7104] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 148.147942][ T7104] [ 148.147942][ T7104] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 148.151746][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.208453][ T7104] ufs: ufstype=old is supported read-only [ 148.222864][ T7071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.227356][ T7104] syz-executor.4: attempt to access beyond end of device [ 148.227356][ T7104] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 148.310520][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.392432][ T7071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.416167][ T7110] loop0: detected capacity change from 0 to 512 [ 148.445254][ T7110] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: bad e_name length [ 148.463291][ T7110] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 148.486790][ T7110] EXT4-fs (loop0): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.520453][ T7107] tipc: Started in network mode [ 148.542833][ T7107] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 148.590395][ T7107] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 148.604872][ T7107] tipc: Enabled bearer , priority 10 [ 148.767997][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.863031][ T7071] team0: Port device team_slave_0 added [ 148.946953][ T7106] loop1: detected capacity change from 0 to 32768 [ 148.971198][ T7106] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7106) [ 148.991133][ T7071] team0: Port device team_slave_1 added [ 149.020238][ T53] Bluetooth: hci0: command tx timeout [ 149.041726][ T6539] EXT4-fs (loop0): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 149.133362][ T7071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.157606][ T7071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.184223][ T7106] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.184333][ T7106] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 149.184405][ T7106] BTRFS info (device loop1): using free-space-tree [ 149.214001][ T7071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.228231][ T7071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.235253][ T7071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.265385][ T7071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.203764][ T9] tipc: Node number set to 1 [ 150.440941][ T6610] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.099535][ T53] Bluetooth: hci0: command tx timeout [ 151.167562][ T7171] Bluetooth: MGMT ver 1.23 [ 151.210176][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 151.604501][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 151.621384][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 151.638863][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 151.683138][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 152.556217][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 152.568608][ T9] usb 4-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 152.602489][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 152.669474][ T9] usb 4-1: SerialNumber: syz [ 152.709005][ T9] usb-storage 4-1:1.0: USB Mass Storage device detected [ 152.733350][ T9] usb-storage 4-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 152.755722][ T9] scsi host1: usb-storage 4-1:1.0 [ 153.179537][ T5113] Bluetooth: hci0: command tx timeout [ 153.259565][ T53] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 155.260918][ T53] Bluetooth: hci0: command 0x0419 tx timeout [ 157.342378][ T53] Bluetooth: hci0: command 0x0419 tx timeout [ 175.082879][ T7190] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 175.289665][ T7190] usb 4-1: device descriptor read/64, error -32 [ 175.629466][ T7190] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 175.779696][ T7190] usb 4-1: device descriptor read/64, error -32 [ 176.050722][ T7190] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 176.089774][ T7190] usb 4-1: device descriptor read/8, error -32 [ 176.366207][ T7190] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 176.399874][ T7190] usb 4-1: device descriptor read/8, error -32 [ 176.533912][ T7190] raw-gadget.0 gadget.3: failed to queue suspend event [ 176.550621][ T45] usb 4-1: USB disconnect, device number 4 [ 176.653384][ T45] raw-gadget.0 gadget.3: failed to queue reset event [ 176.749578][ T45] raw-gadget.0 gadget.3: failed to queue resume event [ 176.820658][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 176.828355][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 176.843578][ T45] raw-gadget.0 gadget.3: failed to queue reset event [ 176.931794][ T45] raw-gadget.0 gadget.3: failed to queue resume event [ 177.011775][ T45] usb 4-1: device descriptor read/64, error -32 [ 177.132956][ T45] raw-gadget.0 gadget.3: failed to queue suspend event [ 177.143056][ T45] raw-gadget.0 gadget.3: failed to queue reset event [ 177.236455][ T45] raw-gadget.0 gadget.3: failed to queue resume event [ 177.309524][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 177.317220][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 177.333165][ T45] raw-gadget.0 gadget.3: failed to queue reset event [ 177.421693][ T45] raw-gadget.0 gadget.3: failed to queue resume event [ 177.503230][ T45] usb 4-1: device descriptor read/64, error -32 [ 177.640341][ T45] raw-gadget.0 gadget.3: failed to queue suspend event [ 177.647420][ T45] usb usb4-port1: attempt power cycle [ 177.653198][ T45] raw-gadget.0 gadget.3: failed to queue disconnect event [ 177.699671][ T45] raw-gadget.0 gadget.3: failed to queue reset event [ 177.790452][ T45] raw-gadget.0 gadget.3: failed to queue resume event [ 177.804392][ T45] raw-gadget.0 gadget.3: failed to queue reset event [ 178.030940][ T45] raw-gadget.0 gadget.3: failed to queue resume event [ 178.119621][ T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 178.160984][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 178.168157][ T45] usb 4-1: device descriptor read/8, error -32 [ 178.289616][ T45] raw-gadget.0 gadget.3: failed to queue suspend event [ 178.303889][ T45] raw-gadget.0 gadget.3: failed to queue reset event [ 178.392731][ T45] raw-gadget.0 gadget.3: failed to queue resume event [ 178.469486][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 178.509663][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 178.516831][ T45] usb 4-1: device descriptor read/8, error -32 [ 178.639565][ T45] raw-gadget.0 gadget.3: failed to queue suspend event [ 178.646666][ T45] usb usb4-port1: unable to enumerate USB device [ 179.279158][ T5113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.295948][ T5113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 179.304813][ T5113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 179.314525][ T5113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 179.322609][ T5113] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 179.329987][ T5113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 180.949903][ T5113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 180.961586][ T5113] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 180.977307][ T5113] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 180.986762][ T5113] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 181.000200][ T5113] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 181.009029][ T5113] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 181.419480][ T53] Bluetooth: hci5: command tx timeout [ 181.680580][ T5113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 181.703211][ T5113] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 181.712492][ T5113] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 181.739609][ T5113] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 181.747458][ T5113] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 181.756199][ T5113] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 182.028345][ T5113] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 182.041689][ T5113] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 182.051863][ T5113] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 182.061133][ T5113] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 182.069563][ T5113] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 182.076961][ T5113] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 183.102413][ T5113] Bluetooth: hci6: command tx timeout [ 183.499414][ T5113] Bluetooth: hci5: command tx timeout [ 183.829863][ T5113] Bluetooth: hci7: command tx timeout [ 184.139533][ T5113] Bluetooth: hci8: command tx timeout [ 185.179586][ T5113] Bluetooth: hci6: command tx timeout [ 185.579434][ T5113] Bluetooth: hci5: command tx timeout [ 185.899701][ T5113] Bluetooth: hci7: command tx timeout [ 186.219850][ T5113] Bluetooth: hci8: command tx timeout [ 186.539428][ T5113] Bluetooth: hci4: command 0x0406 tx timeout [ 187.259790][ T53] Bluetooth: hci6: command tx timeout [ 187.659667][ T53] Bluetooth: hci5: command tx timeout [ 187.995953][ T53] Bluetooth: hci7: command tx timeout [ 188.309430][ T53] Bluetooth: hci8: command tx timeout [ 189.339656][ T53] Bluetooth: hci6: command tx timeout [ 190.069448][ T53] Bluetooth: hci7: command tx timeout [ 190.379469][ T53] Bluetooth: hci8: command tx timeout [ 194.704440][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.710858][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.449670][ T5113] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 211.461598][ T5113] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 211.477314][ T5113] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 211.487466][ T5113] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 211.500366][ T5113] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 211.508161][ T5113] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 213.589516][ T53] Bluetooth: hci9: command tx timeout [ 215.659611][ T53] Bluetooth: hci9: command tx timeout [ 217.739545][ T5113] Bluetooth: hci9: command tx timeout [ 219.819622][ T53] Bluetooth: hci9: command tx timeout [ 244.521757][ T5113] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 244.532738][ T5113] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 244.541896][ T5113] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 244.558604][ T5113] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 244.566592][ T5113] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 244.575365][ T5113] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 245.871480][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 245.881432][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 245.890715][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 245.899587][ T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 245.908886][ T53] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 245.927967][ T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 246.619481][ T53] Bluetooth: hci10: command tx timeout [ 246.720267][ T5113] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 246.731213][ T5113] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 246.739812][ T5113] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 246.748010][ T5113] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 246.756463][ T5113] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 246.769426][ T5113] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 247.056474][ T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 247.067251][ T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 247.076340][ T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 247.085442][ T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 247.093343][ T53] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 247.100945][ T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 247.988128][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 247.988146][ T5121] Bluetooth: hci2: command 0x0406 tx timeout [ 247.989433][ T5121] Bluetooth: hci1: command 0x0406 tx timeout [ 247.994656][ T5113] Bluetooth: hci11: command tx timeout [ 248.701668][ T4489] Bluetooth: hci10: command tx timeout [ 248.861739][ T4489] Bluetooth: hci12: command tx timeout [ 249.189551][ T4489] Bluetooth: hci13: command tx timeout [ 250.059385][ T4489] Bluetooth: hci11: command tx timeout [ 250.779703][ T4489] Bluetooth: hci10: command tx timeout [ 250.939558][ T4489] Bluetooth: hci12: command tx timeout [ 251.263370][ T4489] Bluetooth: hci13: command tx timeout [ 252.140671][ T4489] Bluetooth: hci11: command tx timeout [ 252.859387][ T4489] Bluetooth: hci10: command tx timeout [ 253.019384][ T4489] Bluetooth: hci12: command tx timeout [ 253.339525][ T4489] Bluetooth: hci13: command tx timeout [ 254.219497][ T4489] Bluetooth: hci11: command tx timeout [ 255.099913][ T4489] Bluetooth: hci12: command tx timeout [ 255.426082][ T4489] Bluetooth: hci13: command tx timeout [ 256.149529][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.155866][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.585183][ T4489] Bluetooth: hci0: command 0x0419 tx timeout [ 276.756767][ T4489] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 276.768344][ T4489] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 276.779728][ T4489] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 276.787866][ T4489] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 276.796850][ T4489] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 276.804537][ T4489] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 278.859517][ T5119] Bluetooth: hci14: command tx timeout [ 280.939558][ T5119] Bluetooth: hci14: command tx timeout [ 283.019513][ T5119] Bluetooth: hci14: command tx timeout [ 285.099416][ T4489] Bluetooth: hci14: command tx timeout [ 302.221616][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 302.240596][ T30] Tainted: G W 6.10.0-rc2-next-20240604-syzkaller #0 [ 302.261232][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/05 01:35:52 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 302.274642][ T30] task:kworker/u8:1 state:D stack:20824 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 302.329647][ T30] Workqueue: netns cleanup_net [ 302.334523][ T30] Call Trace: [ 302.337816][ T30] [ 302.355007][ T30] __schedule+0x17e8/0x4a20 [ 302.362935][ T30] ? __pfx___schedule+0x10/0x10 [ 302.367833][ T30] ? __pfx_lock_release+0x10/0x10 [ 302.376289][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 302.382692][ T30] ? kthread_data+0x52/0xd0 [ 302.387313][ T30] ? schedule+0x90/0x320 [ 302.400894][ T30] ? wq_worker_sleeping+0x66/0x240 [ 302.406131][ T30] ? schedule+0x90/0x320 [ 302.415412][ T30] schedule+0x14b/0x320 [ 302.420998][ T30] schedule_preempt_disabled+0x13/0x30 [ 302.426482][ T30] __mutex_lock+0x6a4/0xd70 [ 302.436612][ T30] ? __mutex_lock+0x527/0xd70 [ 302.441614][ T30] ? nsim_create+0x408/0x890 [ 302.446239][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 302.467421][ T30] ? kmemdup_noprof+0x45/0x60 [ 302.475580][ T30] ? nsim_udp_tunnels_info_create+0x592/0x7c0 [ 302.485404][ T30] nsim_create+0x408/0x890 [ 302.490032][ T30] ? debugfs_create_symlink+0x191/0x1f0 [ 302.495597][ T30] __nsim_dev_port_add+0x6c0/0xae0 [ 302.507437][ T30] ? queue_delayed_work_on+0x1eb/0x390 [ 302.512986][ T30] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 302.518633][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 302.529289][ T30] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 302.535140][ T30] ? nsim_dev_hwstats_init+0x3c2/0x3d0 [ 302.548916][ T30] nsim_dev_reload_up+0x69b/0x8e0 [ 302.554044][ T30] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 302.570512][ T30] devlink_reload+0x478/0x870 [ 302.575248][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 302.586816][ T30] devlink_pernet_pre_exit+0x1f3/0x440 [ 302.592390][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 302.598393][ T30] ? class_remove_file_ns+0x121/0x160 [ 302.609333][ T30] cleanup_net+0x615/0xcc0 [ 302.613798][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 302.618761][ T30] ? process_scheduled_works+0x945/0x1830 [ 302.630735][ T30] process_scheduled_works+0xa2c/0x1830 [ 302.636361][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 302.646897][ T30] ? assign_work+0x364/0x3d0 [ 302.653980][ T30] worker_thread+0x86d/0xd50 [ 302.658605][ T30] ? __kthread_parkme+0x169/0x1d0 [ 302.674804][ T30] ? __pfx_worker_thread+0x10/0x10 [ 302.684269][ T30] kthread+0x2f0/0x390 [ 302.688381][ T30] ? __pfx_worker_thread+0x10/0x10 [ 302.697190][ T30] ? __pfx_kthread+0x10/0x10 [ 302.702033][ T30] ret_from_fork+0x4b/0x80 [ 302.706470][ T30] ? __pfx_kthread+0x10/0x10 [ 302.717867][ T30] ret_from_fork_asm+0x1a/0x30 [ 302.722738][ T30] [ 302.725921][ T30] INFO: task kworker/1:4:5160 blocked for more than 143 seconds. [ 302.734190][ T30] Tainted: G W 6.10.0-rc2-next-20240604-syzkaller #0 [ 302.751444][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 302.764270][ T30] task:kworker/1:4 state:D stack:23320 pid:5160 tgid:5160 ppid:2 flags:0x00004000 [ 302.784298][ T30] Workqueue: events