last executing test programs: 54.056879285s ago: executing program 3 (id=3201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x402300, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES64]) 52.80846123s ago: executing program 3 (id=3207): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) socket$packet(0x11, 0x3, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$packet(r2, &(0x7f0000000000)='1', 0x26, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) 52.385477988s ago: executing program 3 (id=3210): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f0000000540)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f00000000c0)='./bus/file0\x00', 0x0) 49.145679235s ago: executing program 3 (id=3217): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000021c0)=@delchain={0x148, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xac, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x84, 0x6, [@m_nat={0x54, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x148}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 47.573504147s ago: executing program 3 (id=3222): mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f00000001c0)='mqueue\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 32.439516969s ago: executing program 4 (id=3267): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) ptrace(0x10, r0) ptrace$cont(0x7, r0, 0x2, 0x3fe00000) 31.326966809s ago: executing program 4 (id=3271): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f0000000540)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) renameat2(r0, 0x0, r0, &(0x7f00000000c0)='./bus/file0\x00', 0x0) 27.773292738s ago: executing program 4 (id=3281): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) syz_emit_ethernet(0x474, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x43e, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xe, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d983b10420fa979"}, {0x0, 0x8, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c5"}, {0x0, 0x6f, "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"}]}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f40600", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 26.226218781s ago: executing program 4 (id=3282): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000021c0)=@delchain={0x158, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xbc, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x84, 0x6, [@m_nat={0x54, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_RESULT={0x8}]}]}}]}, 0x158}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 25.159017575s ago: executing program 4 (id=3285): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) tee(r1, r0, 0xd792, 0x2) 24.249396261s ago: executing program 4 (id=3287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x0, 0x8}]}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 12.053155661s ago: executing program 1 (id=3310): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000300)="e3b1ed39ac10d6da4ca5a755ba202149cfb4a5b960acabc0be0c70ff72bfb0e96439578147e0817949ba825461316a0e39c40cc4d3ac1c2eff7d5430c5426730fe5d12f970e22a61019b5097986ee426b7d56215e8f8123be26be053d654c3c5de4e7a870886e1de74b71eb5eb8500325841c9ecec1f1144e6d3693fc5ef2e3e0e", 0x81}], 0x1, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000480)={{}, {}, [], {0x4, 0x1}}, 0x24, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') 9.955136937s ago: executing program 1 (id=3314): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x0, 0x0, 0x1, 0x85}, @exit], &(0x7f0000000280)='GPL\x00'}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setscheduler(0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$kcm(0x11, 0x0, 0x300) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x10001}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x10502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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") r4 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) ftruncate(r4, 0x2007ffb) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) truncate(&(0x7f0000000080)='./file2\x00', 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x9, 0x0, 0x1, 0x8, 0x9, 0x5}, 0x20) mount$9p_fd(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x14400, 0x0) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0) 6.899178472s ago: executing program 0 (id=3320): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) 6.476997405s ago: executing program 2 (id=3321): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000001c0)=0x60, 0x2) 6.434570522s ago: executing program 0 (id=3322): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000300)="e3b1ed39ac10d6da4ca5a755ba202149cfb4a5b960acabc0be0c70ff72bfb0e96439578147e0817949ba825461316a0e39c40cc4d3ac1c2eff7d5430c5426730fe5d12f970e22a61019b5097986ee426b7d56215e8f8123be26be053d654c3c5de4e7a870886e1de74b71eb5eb8500325841c9ecec1f1144e6d3693fc5ef2e3e0e", 0x81}], 0x1, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000480)={{}, {}, [], {0x4, 0x1}}, 0x24, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') 6.184514396s ago: executing program 1 (id=3323): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200002, &(0x7f0000000000)={[{@noblock_validity}, {@barrier}, {@jqfmt_vfsv0}, {@orlov}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0x0, 0x468, &(0x7f0000000ac0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) 5.978259358s ago: executing program 2 (id=3324): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000021c0)=@delchain={0x2e0, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x244, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x84, 0x6, [@m_nat={0x54, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_ACT={0x18c, 0x6, [@m_mpls={0x64, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}]}, {0x2d, 0x6, "79f577e01ae240bd65a8d89d2537f5496c0a88fb52bc502a7af545da7e1c52ef4dae165fc3df9c739d"}, {0xc}, {0xc}}}, @m_connmark={0x48, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x15, 0x6, "25e3c0c965c7f29e5a6b228b0c122d0a76"}, {0xc}, {0xc}}}, @m_simple={0xa8, 0x0, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, ']\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_DATA={0x12, 0x3, 'lb_hash_stats\x00'}, @TCA_DEF_DATA={0x7, 0x3, ']$\x00'}, @TCA_DEF_DATA={0x17, 0x3, 'mcast_rejoin_count\x00'}]}, {0x35, 0x6, "5f803a8ed8cb953f03abc7c9ec28765aef4191fd6d47d5d97293ea014347cd89864bf3dc120d9c3c2a235d4cbd40919501"}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_RESULT={0x8}]}]}}]}, 0x2e0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.878814808s ago: executing program 0 (id=3325): syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) 4.716829407s ago: executing program 2 (id=3326): r0 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.677676848s ago: executing program 3 (id=3259): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000021c0)=@delchain={0x14c, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xb0, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x84, 0x6, [@m_nat={0x54, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_ACT={0x4}]}}]}, 0x14c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.610237769s ago: executing program 1 (id=3327): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0) 4.221705089s ago: executing program 2 (id=3328): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000280)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa, 0x38}}, 0x18}, 0x1, 0x0, 0x0, 0x20044801}, 0x0) 4.154572496s ago: executing program 0 (id=3329): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 4.083907449s ago: executing program 1 (id=3330): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) 3.738052614s ago: executing program 2 (id=3331): syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) 3.484454545s ago: executing program 0 (id=3332): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, 0x0) 3.134285978s ago: executing program 1 (id=3333): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000300)="e3b1ed39ac10d6da4ca5a755ba202149cfb4a5b960acabc0be0c70ff72bfb0e96439578147e0817949ba825461316a0e39c40cc4d3ac1c2eff7d5430c5426730fe5d12f970e22a61019b5097986ee426b7d56215e8f8123be26be053d654c3c5de4e7a870886e1de74b71eb5eb8500325841c9ecec1f1144e6d3693fc5ef2e3e0e", 0x81}], 0x1, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000480)={{}, {}, [], {0x4, 0x1}}, 0x24, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') 2.985421428s ago: executing program 0 (id=3334): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r5 = accept(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r5, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0x9) sendto$inet(r5, 0x0, 0x0, 0x1, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)="d13248c0dfca9d6df03bccba888dd563f25335a296dfbeef4f45aaada5ae8e6ce466ce687092c2e7e2837cbf1b0d2d1f7f9dc992dc8d4b63c38e2baeb1", 0x3d, 0x20000014, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000005b40)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x1, 0x5b35, &(0x7f000000b6c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x0) inotify_init1(0x0) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f0800000000000920000000000002"], 0x80}}, 0x0) 0s ago: executing program 2 (id=3335): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000380)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {@in=@remote, 0x0, 0x32}, @in=@loopback, {0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha3-384\x00'}}}]}, 0x13c}}, 0x0) kernel console output (not intermixed with test programs): nfig 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1159.064067][ T5247] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1159.075594][ T5247] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1159.089247][ T5247] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1159.099134][ T5247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.173404][T14464] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1162.446962][T12675] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1162.455904][T12675] Bluetooth: hci0: Injecting HCI hardware error event [ 1162.466387][T12675] Bluetooth: hci0: hardware error 0x00 [ 1162.768078][T14486] netlink: 'syz.4.2727': attribute type 1 has an invalid length. [ 1162.943317][ T5247] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1162.954051][ T5247] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input16 [ 1163.206181][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1163.219433][ T5247] usb 4-1: USB disconnect, device number 7 [ 1163.278335][T14489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1164.039591][T14495] loop2: detected capacity change from 0 to 8192 [ 1164.064125][ T5194] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 1164.104236][T14495] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1164.186218][ T29] audit: type=1800 audit(1723175552.189:103): pid=14495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2731" name="bus" dev="loop2" ino=1048757 res=0 errno=0 [ 1164.549963][T12675] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1164.571387][T14507] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2734'. [ 1164.736848][T14495] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1164.746109][T14495] FAT-fs (loop2): Filesystem has been set read-only [ 1164.767856][T14495] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1164.778854][T14495] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1166.555597][ T29] audit: type=1800 audit(1723175554.559:104): pid=14504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2731" name="bus" dev="loop2" ino=1048757 res=0 errno=0 [ 1166.643598][ T5194] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1166.674687][ T5194] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1166.685282][ T5194] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1166.733752][ T5194] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1166.754822][ T5194] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1166.766194][ T5194] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1167.267323][T14534] netlink: 'syz.4.2743': attribute type 1 has an invalid length. [ 1167.463110][T14504] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1167.568047][T14537] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1168.542679][T14529] chnl_net:caif_netlink_parms(): no params data found [ 1168.761061][T14551] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2746'. [ 1168.862111][ T5194] Bluetooth: hci1: command tx timeout [ 1170.206549][T14568] netlink: 'syz.4.2754': attribute type 1 has an invalid length. [ 1170.451423][T14529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.459366][T14529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.467482][T14529] bridge_slave_0: entered allmulticast mode [ 1170.477004][T14529] bridge_slave_0: entered promiscuous mode [ 1170.606999][T14570] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1170.625014][T14529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.633250][T14529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.641181][T14529] bridge_slave_1: entered allmulticast mode [ 1170.650661][T14529] bridge_slave_1: entered promiscuous mode [ 1170.922242][T12675] Bluetooth: hci1: command tx timeout [ 1170.952739][T14529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1171.144721][T14529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1171.582364][T14574] loop2: detected capacity change from 0 to 8192 [ 1171.628158][T14574] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1171.639500][T14529] team0: Port device team_slave_0 added [ 1171.701375][ T29] audit: type=1800 audit(1723175559.719:105): pid=14574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2755" name="bus" dev="loop2" ino=1048759 res=0 errno=0 [ 1171.735097][T14529] team0: Port device team_slave_1 added [ 1172.147840][T14574] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1172.158982][T14574] FAT-fs (loop2): Filesystem has been set read-only [ 1172.174247][T14574] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1172.185485][T14574] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1172.199047][T14529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1172.206569][T14529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1172.238694][T14529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1172.382316][T14529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1172.389663][T14529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1172.416391][T14529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1172.924058][T12675] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1172.933319][T12675] Bluetooth: hci6: Injecting HCI hardware error event [ 1172.954869][ T5194] Bluetooth: hci6: hardware error 0x00 [ 1173.001903][T12675] Bluetooth: hci1: command tx timeout [ 1173.002202][ T3380] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.205712][T14529] hsr_slave_0: entered promiscuous mode [ 1173.265344][T14529] hsr_slave_1: entered promiscuous mode [ 1173.313253][T14529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1173.321066][T14529] Cannot create hsr debugfs directory [ 1173.398634][ T3380] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.689954][ T3380] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.878610][ T29] audit: type=1800 audit(1723175561.879:106): pid=14579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2755" name="bus" dev="loop2" ino=1048759 res=0 errno=0 [ 1174.001279][ T3380] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.547753][ T3380] bridge_slave_1: left allmulticast mode [ 1174.548455][T14579] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1174.554571][ T3380] bridge_slave_1: left promiscuous mode [ 1174.555442][ T3380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.637045][ T3380] bridge_slave_0: left allmulticast mode [ 1174.643483][ T3380] bridge_slave_0: left promiscuous mode [ 1174.650056][ T3380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.908025][T10804] kernel write not supported for file /sysvipc/msg (pid: 10804 comm: kworker/1:2) [ 1175.100681][ T5194] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1175.108027][ T5194] Bluetooth: hci1: command tx timeout [ 1175.284503][ T3380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1175.331191][ T3380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1175.377290][ T3380] bond0 (unregistering): Released all slaves [ 1177.156731][ T3380] hsr_slave_0: left promiscuous mode [ 1177.216951][ T3380] hsr_slave_1: left promiscuous mode [ 1177.274364][ T3380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1177.282443][ T3380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1177.385166][ T3380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1177.393075][ T3380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.515270][ T3380] veth1_macvtap: left promiscuous mode [ 1177.521229][ T3380] veth0_macvtap: left promiscuous mode [ 1177.527369][ T3380] veth1_vlan: left promiscuous mode [ 1177.533044][ T3380] veth0_vlan: left promiscuous mode [ 1178.330734][T14624] loop3: detected capacity change from 0 to 512 [ 1178.727168][ T3380] team0 (unregistering): Port device team_slave_1 removed [ 1178.754439][ T3380] team0 (unregistering): Port device team_slave_0 removed [ 1180.347937][T14529] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1180.413396][T14529] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1180.564991][T14529] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1180.665460][T14529] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1181.641037][T14642] loop3: detected capacity change from 0 to 8192 [ 1181.693724][T14642] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1181.998129][ T29] audit: type=1800 audit(1723175569.779:107): pid=14642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2777" name="bus" dev="loop3" ino=1048761 res=0 errno=0 [ 1182.133523][T14642] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1182.142828][T14642] FAT-fs (loop3): Filesystem has been set read-only [ 1182.242885][T14642] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1182.264961][T14642] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1182.436200][T14529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.626155][T14529] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.741144][T11811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.748969][T11811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.834929][T11811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.842806][T11811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1184.284495][T14645] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1184.830380][T14529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1185.276110][T14529] veth0_vlan: entered promiscuous mode [ 1185.395604][T14529] veth1_vlan: entered promiscuous mode [ 1185.728649][T14529] veth0_macvtap: entered promiscuous mode [ 1185.810488][T14529] veth1_macvtap: entered promiscuous mode [ 1185.862996][T14676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2789'. [ 1186.040799][ T5194] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1186.061288][ T5194] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1186.075983][ T5194] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1186.093879][T14680] sctp: [Deprecated]: syz.3.2790 (pid 14680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1186.093879][T14680] Use struct sctp_sack_info instead [ 1186.135091][T14529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1186.145904][T14529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.161038][T14529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1186.173322][T14529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.183575][T14529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1186.196165][T14529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.206340][T14529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1186.217101][T14529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.225102][ T5194] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1186.232005][T14529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1186.287543][ T5194] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1186.302662][ T5194] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1186.344021][T14529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.360112][T14529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.371928][T14529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.382751][T14529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.393869][T14529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.404793][T14529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.415114][T14529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.426250][T14529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.441159][T14529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1186.527747][T14529] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.538877][T14529] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.548235][T14529] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.557384][T14529] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.926230][T14687] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2792'. [ 1187.499515][T14695] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1187.982420][T14695] loop4: detected capacity change from 0 to 8192 [ 1188.056885][T14695] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1188.087500][T14677] chnl_net:caif_netlink_parms(): no params data found [ 1188.250954][T14695] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1188.260173][T14695] FAT-fs (loop4): Filesystem has been set read-only [ 1188.444543][ T5194] Bluetooth: hci3: command tx timeout [ 1189.135763][T14706] loop3: detected capacity change from 0 to 512 [ 1189.291949][T14706] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1189.334476][T14706] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 1189.345565][T14706] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 1189.844951][T14677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.854199][T14677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.862370][T14677] bridge_slave_0: entered allmulticast mode [ 1189.871672][T14677] bridge_slave_0: entered promiscuous mode [ 1189.994716][T14677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.002651][T14677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.010572][T14677] bridge_slave_1: entered allmulticast mode [ 1190.020206][T14677] bridge_slave_1: entered promiscuous mode [ 1190.271981][T14721] loop2: detected capacity change from 0 to 512 [ 1190.290955][T14721] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 1190.456747][T14677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.523423][ T5194] Bluetooth: hci3: command tx timeout [ 1190.574610][T14677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1190.624765][T14727] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2803'. [ 1190.803830][T14677] team0: Port device team_slave_0 added [ 1190.873634][T14677] team0: Port device team_slave_1 added [ 1191.099695][T14721] EXT4-fs (loop2): failed to open journal device unknown-block(4,137) -6 [ 1191.167547][T14677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.180224][T14677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.208063][T14677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.312159][T14677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.319339][T14677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.346449][T14677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1191.478866][T14733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2805'. [ 1191.814096][T14738] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1191.831002][T14677] hsr_slave_0: entered promiscuous mode [ 1191.875785][T14677] hsr_slave_1: entered promiscuous mode [ 1191.972643][T14677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1191.980555][T14677] Cannot create hsr debugfs directory [ 1192.314673][T14738] loop3: detected capacity change from 0 to 8192 [ 1192.373687][T14738] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1192.428940][T14738] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1192.437940][T14738] FAT-fs (loop3): Filesystem has been set read-only [ 1192.537127][ T5247] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1192.610849][ T5194] Bluetooth: hci3: command tx timeout [ 1192.767072][ T5247] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.778810][ T5247] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1192.915383][ T5247] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1192.925329][ T5247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.933762][ T5247] usb 5-1: Product: syz [ 1192.938162][ T5247] usb 5-1: Manufacturer: syz [ 1192.943175][ T5247] usb 5-1: SerialNumber: syz [ 1193.047330][ T5247] usb 5-1: config 0 descriptor?? [ 1193.189653][T14677] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.372803][T14741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.382200][T14741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.443910][T14749] loop2: detected capacity change from 0 to 512 [ 1193.474944][T14677] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.485130][T14741] loop0: detected capacity change from 0 to 7 [ 1193.539483][T14749] EXT4-fs (loop2): blocks per group (71) and clusters per group (32768) inconsistent [ 1193.599913][T14741] Dev loop0: unable to read RDB block 7 [ 1193.606030][T14741] loop0: unable to read partition table [ 1193.675659][T14741] loop0: partition table beyond EOD, truncated [ 1193.682686][T14741] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 1193.682686][T14741] ) failed (rc=-5) [ 1193.738676][T14677] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.873776][ T4849] usb 5-1: USB disconnect, device number 23 [ 1194.028431][T14677] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.687141][ T5194] Bluetooth: hci3: command tx timeout [ 1194.709744][T14677] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1194.774523][T14766] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2813'. [ 1194.843301][T14677] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1194.942314][T14677] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1195.065806][T14677] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1196.127887][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1196.136410][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1196.456982][ T3309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1196.465247][ T3309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1196.566424][T14785] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1196.977530][T14677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1197.066264][T14785] loop2: detected capacity change from 0 to 8192 [ 1197.160018][T14677] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.190360][ T5270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.198214][ T5270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.215031][T14785] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1197.276611][ T5270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.284414][ T5270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1197.325647][T14785] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1197.334871][T14785] FAT-fs (loop2): Filesystem has been set read-only [ 1197.512508][ T11] bridge_slave_1: left allmulticast mode [ 1197.525542][ T11] bridge_slave_1: left promiscuous mode [ 1197.532337][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.570829][ T11] bridge_slave_0: left allmulticast mode [ 1197.576962][ T11] bridge_slave_0: left promiscuous mode [ 1197.584265][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.866794][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.025287][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1199.083582][T14797] loop4: detected capacity change from 0 to 2048 [ 1199.093447][T14797] udf: Unknown parameter '0x000000000000000300000000000000000000' [ 1199.149848][ T11] bond0 (unregistering): Released all slaves [ 1199.180556][ T11] bond1 (unregistering): Released all slaves [ 1199.201945][ T11] bond2 (unregistering): Released all slaves [ 1199.223265][ T11] bond3 (unregistering): Released all slaves [ 1199.253090][T12675] Bluetooth: hci2: command 0x0406 tx timeout [ 1200.618801][T14804] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.2824'. [ 1203.745609][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1204.367656][ T11] hsr_slave_0: left promiscuous mode [ 1204.426535][ T11] hsr_slave_1: left promiscuous mode [ 1204.459529][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1204.468253][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.500903][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1204.509214][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.567669][ T11] veth1_macvtap: left promiscuous mode [ 1204.576315][ T11] veth0_macvtap: left promiscuous mode [ 1204.588222][ T11] veth1_vlan: left promiscuous mode [ 1204.594040][ T11] veth0_vlan: left promiscuous mode [ 1204.885497][T14826] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1205.388899][T14826] loop3: detected capacity change from 0 to 8192 [ 1205.439217][T14826] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1205.509373][ T29] audit: type=1800 audit(1723175593.539:108): pid=14826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2831" name="bus" dev="loop3" ino=1048772 res=0 errno=0 [ 1205.940370][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1206.027994][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1206.724416][T14826] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1206.738920][T14826] FAT-fs (loop3): Filesystem has been set read-only [ 1206.776754][T14826] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1206.794709][T14826] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1207.367822][T14677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1207.872178][T14846] loop4: detected capacity change from 0 to 2048 [ 1207.920883][T14677] veth0_vlan: entered promiscuous mode [ 1207.932529][T14846] udf: Unknown parameter '0x000000000000000300000000000000000000' [ 1208.024459][T14677] veth1_vlan: entered promiscuous mode [ 1208.321018][T13651] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1208.344627][ T4849] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1208.385563][T14677] veth0_macvtap: entered promiscuous mode [ 1208.429564][T14677] veth1_macvtap: entered promiscuous mode [ 1208.582266][ T4849] usb 3-1: Using ep0 maxpacket: 32 [ 1208.600519][ T4849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.611980][ T4849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.622325][ T4849] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1208.631757][ T4849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.649598][T14677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1208.661130][T14677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.671380][T14677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1208.686288][T14677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.697548][T14677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1208.709982][T14677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.720295][T14677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1208.731068][T14677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.746394][T14677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1208.777313][ T4849] usb 3-1: config 0 descriptor?? [ 1208.900086][T14859] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.2837'. [ 1208.963665][T14677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1208.974666][T14677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.993030][T14677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1209.007563][T14677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.018045][T14677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1209.029005][T14677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.039818][T14677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1209.070666][T14677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.097322][T14677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1209.367905][T14677] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.380695][T14677] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.390157][T14677] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.407346][T14677] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.469327][ T4849] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 1209.477072][ T4849] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 1209.485209][ T4849] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 1209.492963][ T4849] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 1209.505879][ T4849] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 1209.636326][ T4849] mcp2221 0003:04D8:00DD.000A: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1209.797783][ T4849] usb 3-1: USB disconnect, device number 14 [ 1209.896716][T14869] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1210.384017][T14869] loop1: detected capacity change from 0 to 8192 [ 1210.435503][T14869] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1210.600849][ T29] audit: type=1800 audit(1723175598.519:109): pid=14869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2846" name="bus" dev="loop1" ino=1048774 res=0 errno=0 [ 1211.182115][T14882] loop3: detected capacity change from 0 to 512 [ 1211.266592][T14882] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1211.292167][T14869] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1211.301324][T14869] FAT-fs (loop1): Filesystem has been set read-only [ 1211.325529][T14869] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1211.347202][T14869] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1211.470009][T14882] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 1211.523046][T14889] loop2: detected capacity change from 0 to 2048 [ 1211.533386][T14889] udf: Unknown parameter '0x000000000000000300000000000000000000' [ 1211.566345][T14882] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 1211.576458][T14882] System zones: 0-2, 18-18, 34-34 [ 1211.583232][T14892] loop4: detected capacity change from 0 to 512 [ 1211.630278][T14882] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2848: bad orphan inode 15 [ 1211.639146][T14892] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1211.681088][T14882] ext4_test_bit(bit=14, block=18) = 1 [ 1211.686981][T14882] is_bad_inode(inode)=0 [ 1211.691317][T14882] NEXT_ORPHAN(inode)=2264924160 [ 1211.696620][T14882] max_ino=32 [ 1211.700004][T14882] i_nlink=0 [ 1211.703646][T14882] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1211.737141][T14892] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 1211.783832][T14882] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2848: bg 0: block 80: padding at end of block bitmap is not set [ 1211.802322][T14892] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 1211.810946][T14892] System zones: 0-2, 18-18, 34-34 [ 1211.873696][T14882] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 1211.886665][T14892] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2850: bad orphan inode 15 [ 1211.917444][T14892] ext4_test_bit(bit=14, block=18) = 1 [ 1211.918654][T14882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1211.923198][T14892] is_bad_inode(inode)=0 [ 1211.923251][T14892] NEXT_ORPHAN(inode)=2264924160 [ 1211.945115][T14892] max_ino=32 [ 1211.948494][T14892] i_nlink=0 [ 1211.952131][T14892] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1211.975935][T14892] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2850: bg 0: block 80: padding at end of block bitmap is not set [ 1212.001816][T14892] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 1212.068968][T14892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1212.163765][T14529] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1212.432134][T13651] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1215.210806][T12977] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1215.317030][T14928] loop1: detected capacity change from 0 to 512 [ 1215.381076][T14927] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1215.417182][T14928] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1215.593621][T14928] EXT4-fs (loop1): 1 truncate cleaned up [ 1215.601321][T14928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1215.875252][T14927] loop3: detected capacity change from 0 to 8192 [ 1215.916546][T14927] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1215.961807][ T29] audit: type=1800 audit(1723175603.979:110): pid=14928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2859" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1215.982962][ T29] audit: type=1800 audit(1723175603.999:111): pid=14927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2860" name="bus" dev="loop3" ino=1048776 res=0 errno=0 [ 1216.234634][T14934] loop4: detected capacity change from 0 to 2048 [ 1216.275316][T14934] udf: Unknown parameter '0x000000000000000300000000000000000000' [ 1216.298612][T14927] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1216.308025][T14927] FAT-fs (loop3): Filesystem has been set read-only [ 1216.320892][T14927] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1216.341445][T14927] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1216.438726][T14529] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1217.416320][T13651] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1218.678148][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.686552][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.979380][ T3203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.988369][ T3203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.463687][T14977] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1219.947089][T14977] loop2: detected capacity change from 0 to 8192 [ 1220.006836][T14977] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1220.063639][ T29] audit: type=1800 audit(1723175608.089:112): pid=14977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2874" name="bus" dev="loop2" ino=1048781 res=0 errno=0 [ 1220.571292][T14985] loop4: detected capacity change from 0 to 2048 [ 1220.616018][T14985] udf: Unknown parameter '0x000000000000000300000000000000000000' [ 1220.654691][T14995] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2879'. [ 1220.841936][ T29] audit: type=1800 audit(1723175608.819:113): pid=14988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2874" name="bus" dev="loop2" ino=1048781 res=0 errno=0 [ 1221.251822][T15002] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.2882'. [ 1221.500053][T15004] loop4: detected capacity change from 0 to 512 [ 1221.520746][T15004] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1221.552292][T15004] EXT4-fs (loop4): invalid journal inode [ 1221.558340][T15004] EXT4-fs (loop4): can't get journal size [ 1221.647730][T15004] EXT4-fs (loop4): 1 truncate cleaned up [ 1221.655679][T15004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1226.031430][T15030] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2891'. [ 1227.030702][T15040] loop1: detected capacity change from 0 to 2048 [ 1227.074034][T15040] udf: Unknown parameter '0x000000000000000300000000000000000000' [ 1227.263676][T15047] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1227.788635][T15047] loop2: detected capacity change from 0 to 8192 [ 1227.814325][T15047] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1227.913189][ T29] audit: type=1800 audit(1723175615.899:114): pid=15047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2897" name="bus" dev="loop2" ino=1048782 res=0 errno=0 [ 1228.353851][ T5247] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1228.744310][ T29] audit: type=1800 audit(1723175616.699:115): pid=15053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2897" name="bus" dev="loop2" ino=1048782 res=0 errno=0 [ 1229.308355][T15064] loop3: detected capacity change from 0 to 164 [ 1229.452270][T15064] isofs_fill_super: get root inode failed [ 1229.736056][ T29] audit: type=1326 audit(1723175617.549:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15057 comm="syz.3.2901" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6044d779f9 code=0x0 [ 1229.923317][T15068] pim6reg1: entered promiscuous mode [ 1229.929048][T15068] pim6reg1: entered allmulticast mode [ 1230.890939][ T5247] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1230.904097][ T5247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.913642][ T5247] usb 2-1: Product: syz [ 1230.918050][ T5247] usb 2-1: Manufacturer: syz [ 1230.924340][ T5247] usb 2-1: SerialNumber: syz [ 1231.121027][ T5247] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1231.127697][ T5247] r8152-cfgselector 2-1: config 0 descriptor?? [ 1231.179478][ T5247] r8152-cfgselector 2-1: can't set config #0, error -71 [ 1231.210008][ T5247] r8152-cfgselector 2-1: USB disconnect, device number 16 [ 1231.554830][T15079] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2904'. [ 1232.369839][T15086] loop3: detected capacity change from 0 to 2048 [ 1232.392660][T12675] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1232.413614][T12675] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1232.427633][T12675] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1232.455121][T12675] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1232.466125][T15086] udf: Unknown parameter '0x000000000000000300000000000000000000' [ 1232.479325][T12675] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1232.492971][T12675] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1232.595581][T15095] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1233.119144][T15095] loop1: detected capacity change from 0 to 8192 [ 1233.139270][T15095] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1233.297232][ T29] audit: type=1800 audit(1723175621.229:117): pid=15095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2914" name="bus" dev="loop1" ino=1048783 res=0 errno=0 [ 1234.536273][ T29] audit: type=1800 audit(1723175622.509:118): pid=15101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2914" name="bus" dev="loop1" ino=1048783 res=0 errno=0 [ 1234.646120][T12675] Bluetooth: hci0: command tx timeout [ 1234.848662][T15092] chnl_net:caif_netlink_parms(): no params data found [ 1236.704103][T12675] Bluetooth: hci0: command tx timeout [ 1237.600489][T15092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.609589][T15092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.626628][T15092] bridge_slave_0: entered allmulticast mode [ 1237.636050][T15092] bridge_slave_0: entered promiscuous mode [ 1237.744687][T15092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.752539][T15092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.770955][T15092] bridge_slave_1: entered allmulticast mode [ 1237.780401][T15092] bridge_slave_1: entered promiscuous mode [ 1238.147665][T15092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1238.263623][T15092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1238.604157][T15092] team0: Port device team_slave_0 added [ 1238.632683][T15092] team0: Port device team_slave_1 added [ 1238.800807][T12675] Bluetooth: hci0: command tx timeout [ 1239.198433][T15092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1239.206499][T15092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1239.232887][T15092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1239.457362][T15092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.466590][T15092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1239.494667][T15092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.856602][T15143] loop2: detected capacity change from 0 to 2048 [ 1239.926193][T15143] udf: Unknown parameter '0x000000000000000300000000000000000000' [ 1240.178953][T15092] hsr_slave_0: entered promiscuous mode [ 1240.210179][T15092] hsr_slave_1: entered promiscuous mode [ 1240.293258][T15092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1240.301131][T15092] Cannot create hsr debugfs directory [ 1240.844045][T12675] Bluetooth: hci0: command tx timeout [ 1241.262561][T15159] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1241.354573][T15092] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.599641][T15092] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.772594][T15159] loop1: detected capacity change from 0 to 8192 [ 1241.848246][T15159] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1241.852875][T15092] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.970335][ T29] audit: type=1800 audit(1723175629.939:119): pid=15159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2931" name="bus" dev="loop1" ino=1048784 res=0 errno=0 [ 1242.199851][T15092] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.803819][T15159] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1242.813200][T15159] FAT-fs (loop1): Filesystem has been set read-only [ 1242.825748][T15159] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1242.836480][T15159] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1242.937251][T15092] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1242.953016][ T29] audit: type=1800 audit(1723175630.959:120): pid=15160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2931" name="bus" dev="loop1" ino=1048784 res=0 errno=0 [ 1243.053468][T15092] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1243.244653][T15092] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1243.253654][T15017] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1243.345315][T15092] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1243.769765][T15160] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1244.533195][ T5194] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1244.569205][ T5194] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1244.583779][ T5194] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1244.618059][ T5194] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1244.672959][ T5194] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1244.692165][ T5194] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1245.102259][T15092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.535817][T15092] 8021q: adding VLAN 0 to HW filter on device team0 [ 1245.783986][ T4849] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.791875][ T4849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1245.881397][T15185] trusted_key: syz.1.2936 sent an empty control message without MSG_MORE. [ 1245.913608][ T4849] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.921277][ T4849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1246.425830][T15174] chnl_net:caif_netlink_parms(): no params data found [ 1246.647071][T15092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1246.849872][ T5194] Bluetooth: hci5: command tx timeout [ 1246.913620][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.158327][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.407787][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.631209][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.009321][T15200] loop1: detected capacity change from 0 to 2048 [ 1248.056870][ T58] bridge_slave_1: left allmulticast mode [ 1248.063139][ T58] bridge_slave_1: left promiscuous mode [ 1248.069784][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.109493][T15200] udf: Unknown parameter '0x000000000000000300000000000000000000' [ 1248.162610][ T58] bridge_slave_0: left allmulticast mode [ 1248.168525][ T58] bridge_slave_0: left promiscuous mode [ 1248.178026][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.930663][ T5194] Bluetooth: hci5: command tx timeout [ 1249.014561][T15213] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1249.115433][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.310875][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.428658][ T58] bond0 (unregistering): Released all slaves [ 1249.514128][T15213] loop2: detected capacity change from 0 to 8192 [ 1249.563369][T15213] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1249.610482][ T29] audit: type=1800 audit(1723175637.659:121): pid=15213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2944" name="bus" dev="loop2" ino=1048786 res=0 errno=0 [ 1250.135477][T15174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.145791][T15174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.163773][T15174] bridge_slave_0: entered allmulticast mode [ 1250.173206][T15174] bridge_slave_0: entered promiscuous mode [ 1250.608210][T15174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.618317][T15174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.626588][T15174] bridge_slave_1: entered allmulticast mode [ 1250.635099][T15174] bridge_slave_1: entered promiscuous mode [ 1250.798725][T15213] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1250.808058][T15213] FAT-fs (loop2): Filesystem has been set read-only [ 1250.824396][T15213] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1250.837334][T15213] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1251.007092][ T5194] Bluetooth: hci5: command tx timeout [ 1251.104882][ T58] hsr_slave_0: left promiscuous mode [ 1251.118168][ T58] hsr_slave_1: left promiscuous mode [ 1251.157424][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1251.169185][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.223847][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1251.231862][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1251.324670][ T58] veth1_macvtap: left promiscuous mode [ 1251.330532][ T58] veth0_macvtap: left promiscuous mode [ 1251.336721][ T58] veth1_vlan: left promiscuous mode [ 1251.342406][ T58] veth0_vlan: left promiscuous mode [ 1251.979907][ T29] audit: type=1800 audit(1723175639.979:122): pid=15219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2944" name="bus" dev="loop2" ino=1048786 res=0 errno=0 [ 1252.441318][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1252.543799][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1252.901790][T15219] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1252.963511][T15174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1253.003504][T15092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1253.085902][ T5194] Bluetooth: hci5: command tx timeout [ 1253.116268][T15174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1253.272506][T15174] team0: Port device team_slave_0 added [ 1253.320195][T15174] team0: Port device team_slave_1 added [ 1253.676750][T15174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1253.684360][T15174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1253.710844][T15174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1253.786722][T15174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1253.795103][T15174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1253.821562][T15174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1254.270520][T15174] hsr_slave_0: entered promiscuous mode [ 1254.305187][T15174] hsr_slave_1: entered promiscuous mode [ 1254.325724][T15174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1254.333884][T15174] Cannot create hsr debugfs directory [ 1254.648666][T15246] loop3: detected capacity change from 0 to 2048 [ 1254.729875][T15246] udf: Unknown parameter '0x000000000000000300000000000000000000' [ 1255.406496][T15092] veth0_vlan: entered promiscuous mode [ 1255.566239][T15092] veth1_vlan: entered promiscuous mode [ 1255.610084][T15174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1255.657886][T15174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1255.729840][T15174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1255.800058][T15174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1255.924449][T15248] loop2: detected capacity change from 0 to 8192 [ 1256.219654][T15092] veth0_macvtap: entered promiscuous mode [ 1256.353878][T15092] veth1_macvtap: entered promiscuous mode [ 1256.586009][T15259] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1256.595957][T15259] FAT-fs (loop2): Filesystem has been set read-only [ 1256.749270][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.760321][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.770576][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.781415][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.791691][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.802430][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.818626][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.831070][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.846443][T15092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1256.955965][T15257] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1257.507613][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.519502][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.535956][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.548665][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.558872][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.569645][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.579846][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.590605][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.605868][T15092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1257.887813][T15174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.102282][T15174] 8021q: adding VLAN 0 to HW filter on device team0 [ 1258.161676][T15092] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.170911][T15092] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.180295][T15092] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.189497][T15092] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.380692][ T5269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.388647][ T5269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1258.405293][ T5269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.413141][ T5269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.465379][T15275] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1259.985751][T15275] loop3: detected capacity change from 0 to 8192 [ 1260.089658][T15275] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1260.150005][ T29] audit: type=1800 audit(1723175648.169:123): pid=15275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2959" name="bus" dev="loop3" ino=1048790 res=0 errno=0 [ 1260.708348][T15275] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1260.718989][T15275] FAT-fs (loop3): Filesystem has been set read-only [ 1260.736863][T15275] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1260.747503][T15275] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1260.855679][T15174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1261.535272][T15174] veth0_vlan: entered promiscuous mode [ 1261.738526][T15174] veth1_vlan: entered promiscuous mode [ 1261.975711][T15299] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1261.997839][T15299] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1262.067126][T15299] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1262.093514][T15299] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1262.111372][T15299] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1262.128240][T15299] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1262.176436][T15174] veth0_macvtap: entered promiscuous mode [ 1262.347843][ T29] audit: type=1800 audit(1723175650.369:124): pid=15280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2959" name="bus" dev="loop3" ino=1048790 res=0 errno=0 [ 1262.349091][T15174] veth1_macvtap: entered promiscuous mode [ 1262.749033][T15174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1262.763231][T15174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.774602][T15174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1262.785403][T15174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.795626][T15174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1262.806429][T15174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.816618][T15174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1262.827725][T15174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.837872][T15174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1262.855615][T15174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.873003][T15174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1262.885786][T15280] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1263.195537][T15174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.206768][T15174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.217062][T15174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.227963][T15174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.238282][T15174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.249138][T15174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.265784][T15174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.278463][T15174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.288810][T15174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.299613][T15174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.315263][T15174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1263.556694][T15174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.578925][T15174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.595209][T15174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.604551][T15174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.624921][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1264.288467][ T5194] Bluetooth: hci3: command tx timeout [ 1264.389491][T15298] chnl_net:caif_netlink_parms(): no params data found [ 1265.780255][T15298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.788453][T15298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.796418][T15298] bridge_slave_0: entered allmulticast mode [ 1265.804792][T15298] bridge_slave_0: entered promiscuous mode [ 1265.878620][ T3819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.887250][ T3819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.986187][T15298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.994033][T15298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.002283][T15298] bridge_slave_1: entered allmulticast mode [ 1266.012070][T15298] bridge_slave_1: entered promiscuous mode [ 1266.103645][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.112043][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.152412][T15320] loop3: detected capacity change from 0 to 8192 [ 1266.355679][T15298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1266.368946][ T5194] Bluetooth: hci3: command tx timeout [ 1266.401313][T15320] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1266.410929][T15320] FAT-fs (loop3): Filesystem has been set read-only [ 1266.498251][T15298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1266.520310][T15342] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1266.783809][T15298] team0: Port device team_slave_0 added [ 1266.853499][T15298] team0: Port device team_slave_1 added [ 1267.112081][T15298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1267.119267][T15298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1267.145731][T15298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1267.303014][T15298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1267.310201][T15298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1267.336610][T15298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1267.819035][T15355] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1267.995856][T15298] hsr_slave_0: entered promiscuous mode [ 1268.102032][T15298] hsr_slave_1: entered promiscuous mode [ 1268.165560][T15298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1268.183646][T15298] Cannot create hsr debugfs directory [ 1268.310275][T15355] loop2: detected capacity change from 0 to 8192 [ 1268.404594][T15355] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1268.474853][ T5194] Bluetooth: hci3: command tx timeout [ 1268.628270][ T29] audit: type=1800 audit(1723175656.479:125): pid=15355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2972" name="bus" dev="loop2" ino=1048797 res=0 errno=0 [ 1269.434893][T15355] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1269.444468][T15355] FAT-fs (loop2): Filesystem has been set read-only [ 1269.465907][T15355] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1269.477986][T15355] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1269.575192][ T29] audit: type=1800 audit(1723175657.549:126): pid=15365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2972" name="bus" dev="loop2" ino=1048797 res=0 errno=0 [ 1269.678600][T15298] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.886735][T15298] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.187992][T15298] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.395001][T15298] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.521799][ T5194] Bluetooth: hci3: command tx timeout [ 1270.926342][T15365] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1270.954751][T15298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1271.032296][ T5194] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1271.046485][ T5194] Bluetooth: hci0: Injecting HCI hardware error event [ 1271.056247][ T5194] Bluetooth: hci0: hardware error 0x00 [ 1271.104135][T15298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1271.176725][T15298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1271.270464][T15298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1271.615346][T13752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.624205][T13752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.806758][T15299] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 1271.872609][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.880677][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.720152][T15298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1272.899011][T15298] 8021q: adding VLAN 0 to HW filter on device team0 [ 1272.908512][T15401] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1272.908512][T15401] The task syz.0.2933 (15401) triggered the difference, watch for misbehavior. [ 1272.978970][ T5245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.986847][ T5245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.100088][ T5245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.107915][ T5245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.133140][ T5194] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1273.567293][T15410] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1273.972873][ T5194] Bluetooth: hci2: command 0x0406 tx timeout [ 1274.105786][T15410] loop4: detected capacity change from 0 to 8192 [ 1274.201050][T15410] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1274.326673][ T29] audit: type=1800 audit(1723175662.299:127): pid=15410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2987" name="bus" dev="loop4" ino=1048802 res=0 errno=0 [ 1274.682922][T15410] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1274.692200][T15410] FAT-fs (loop4): Filesystem has been set read-only [ 1274.910499][T15410] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1274.934563][T15410] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1275.879841][T15298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1275.889689][T15394] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1275.898667][T15394] Bluetooth: hci2: Injecting HCI hardware error event [ 1275.906435][T15394] Bluetooth: hci2: hardware error 0x00 [ 1276.511111][T15298] veth0_vlan: entered promiscuous mode [ 1276.577855][ T29] audit: type=1800 audit(1723175664.539:128): pid=15416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2987" name="bus" dev="loop4" ino=1048802 res=0 errno=0 [ 1276.642665][T15298] veth1_vlan: entered promiscuous mode [ 1277.173933][T15298] veth0_macvtap: entered promiscuous mode [ 1277.241034][T15416] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1277.271411][T15298] veth1_macvtap: entered promiscuous mode [ 1277.476821][T15298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1277.487803][T15298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.505310][T15298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1277.523929][T15298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.534367][T15298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1277.545140][T15298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.555359][T15298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1277.566227][T15298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.576446][T15298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1277.587281][T15298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.603440][T15298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1277.615954][T15298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.638011][T15298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1277.774614][T15298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.785409][T15298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.795625][T15298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.814962][T15298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.826978][T15298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.837863][T15298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.849319][T15298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.860153][T15298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.870374][T15298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.881134][T15298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.891403][T15298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.908266][T15298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.926064][T15298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1277.973914][T15394] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1278.084283][T15298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.093608][T15298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.102941][T15298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.120524][T15298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.245490][ T5245] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1278.460508][ T5245] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.471086][ T5245] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1278.548088][ T5245] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1278.557954][ T5245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1278.566387][ T5245] usb 4-1: SerialNumber: syz [ 1278.903722][ T5245] usb 4-1: 0:2 : does not exist [ 1279.447316][ T5245] usb 4-1: USB disconnect, device number 8 [ 1279.723318][T15394] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1279.732427][T15394] Bluetooth: hci5: Injecting HCI hardware error event [ 1279.740574][ T5194] Bluetooth: hci5: hardware error 0x00 [ 1280.384086][T15473] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1280.895880][T15473] loop0: detected capacity change from 0 to 8192 [ 1280.927500][T15473] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1281.018677][ T29] audit: type=1800 audit(1723175669.029:129): pid=15473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3008" name="bus" dev="loop0" ino=1048804 res=0 errno=0 [ 1281.146148][T15480] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00106019, b_size=4096, device sda1 blocksize: 4096 [ 1281.160692][T15480] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 1281.170420][T15480] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 1281.802389][T15473] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1281.811764][T15473] FAT-fs (loop0): Filesystem has been set read-only [ 1281.815671][ T5194] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1281.822438][T15473] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1281.837538][T15473] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1283.423735][ T29] audit: type=1800 audit(1723175671.349:130): pid=15481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3008" name="bus" dev="loop0" ino=1048804 res=0 errno=0 [ 1284.065691][T15490] loop4: detected capacity change from 0 to 8192 [ 1284.168203][T15481] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1284.470753][T15490] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1284.479656][T15490] FAT-fs (loop4): Filesystem has been set read-only [ 1284.583823][T15490] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1286.016745][T15528] netlink: 'syz.0.3023': attribute type 4 has an invalid length. [ 1286.274727][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.283291][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1286.561921][T13752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.570065][T13752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.207813][T15545] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2961'. [ 1287.224134][T15545] bridge_slave_1: left allmulticast mode [ 1287.232149][T15545] bridge_slave_1: left promiscuous mode [ 1287.238999][T15545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.373571][T15545] bridge_slave_0: left allmulticast mode [ 1287.379369][T15545] bridge_slave_0: left promiscuous mode [ 1287.386690][T15545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.022204][ T5269] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1288.372650][ T5269] usb 4-1: Using ep0 maxpacket: 8 [ 1288.432707][ T5269] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1288.441077][ T5269] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1288.459368][ T5269] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1288.472105][ T5269] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1288.482466][ T5269] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1288.496014][ T5269] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1288.505376][ T5269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.665463][T15565] fuse: Bad value for 'rootmode' [ 1288.892800][ T5269] usb 4-1: usb_control_msg returned -32 [ 1288.898835][ T5269] usbtmc 4-1:16.0: can't read capabilities [ 1289.804372][ T5269] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1290.060007][ T5269] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1290.070433][ T5269] usb 1-1: config 17 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1290.081948][ T5269] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1290.096885][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.213259][ T5269] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1290.473039][ T29] audit: type=1326 audit(1723175678.509:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15569 comm="syz.0.3038" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a7f7779f9 code=0x0 [ 1290.478033][ T8] usb 4-1: USB disconnect, device number 9 [ 1291.243588][T15394] Bluetooth: hci1: command 0x0406 tx timeout [ 1291.904667][T15595] x_tables: duplicate underflow at hook 2 [ 1291.940744][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3047'. [ 1292.361257][T15600] loop4: detected capacity change from 0 to 512 [ 1292.396121][T15600] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1292.420023][T15600] EXT4-fs (loop4): invalid journal inode [ 1292.426199][T15600] EXT4-fs (loop4): can't get journal size [ 1292.498184][T15600] EXT4-fs (loop4): 1 truncate cleaned up [ 1292.505555][T15600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1292.596252][ T5270] usb 1-1: USB disconnect, device number 20 [ 1292.809156][T15092] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1293.123979][T15611] loop3: detected capacity change from 0 to 512 [ 1293.135710][T15612] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3051'. [ 1293.143615][T15611] EXT4-fs: Ignoring removed orlov option [ 1293.192105][T15611] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1293.242082][T15611] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.3054: invalid indirect mapped block 2683928664 (level 1) [ 1293.242389][T15607] loop1: detected capacity change from 0 to 2048 [ 1293.295856][T15611] EXT4-fs (loop3): 1 truncate cleaned up [ 1293.303559][T15611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1293.346828][T15607] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1293.454406][T15607] UDF-fs: incorrect filename length (10) [ 1293.606742][T13651] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1294.328400][T15627] loop4: detected capacity change from 0 to 1024 [ 1294.401191][T15627] EXT4-fs: Ignoring removed bh option [ 1294.436603][T15627] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1294.477390][T15627] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1294.560268][T15627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1294.757303][T15092] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.114283][T15639] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3063'. [ 1295.848739][T15649] loop4: detected capacity change from 0 to 512 [ 1295.860848][T15649] EXT4-fs: Ignoring removed orlov option [ 1295.886195][T15649] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1295.913060][T15649] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3067: invalid indirect mapped block 2683928664 (level 1) [ 1295.982921][T15649] EXT4-fs (loop4): 1 truncate cleaned up [ 1295.990739][T15649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1296.011942][ T5270] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1296.196373][T15092] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1296.256208][ T5270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1296.268796][ T5270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1296.280646][ T5270] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1296.294092][ T5270] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1296.303600][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.383960][ T5270] usb 2-1: config 0 descriptor?? [ 1296.392913][T15647] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1296.869951][ T5270] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 1296.975992][ T5270] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 1297.044538][ T5270] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1297.261401][ T5247] usb 2-1: USB disconnect, device number 17 [ 1298.919788][T15689] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1298.928582][T15689] gretap1: entered promiscuous mode [ 1298.934269][T15689] gretap1: entered allmulticast mode [ 1299.553661][T15394] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1299.572476][T15394] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1299.584126][T15394] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1299.633062][T15394] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1299.647009][T15394] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1299.656735][T15394] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1300.266195][T15704] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3090'. [ 1300.287890][T15681] loop3: detected capacity change from 0 to 8192 [ 1300.877880][T15681] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1300.887061][T15681] FAT-fs (loop3): Filesystem has been set read-only [ 1300.963818][T15681] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1301.071217][T15695] chnl_net:caif_netlink_parms(): no params data found [ 1301.726942][ T5194] Bluetooth: hci7: command tx timeout [ 1302.188569][T15729] veth0_vlan: entered allmulticast mode [ 1302.339757][T15731] veth0_vlan: left promiscuous mode [ 1302.350943][T15731] veth0_vlan: entered promiscuous mode [ 1303.309377][T15695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.317555][T15695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.325744][T15695] bridge_slave_0: entered allmulticast mode [ 1303.335224][T15695] bridge_slave_0: entered promiscuous mode [ 1303.463248][T15695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.470989][T15695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.479376][T15695] bridge_slave_1: entered allmulticast mode [ 1303.489650][T15695] bridge_slave_1: entered promiscuous mode [ 1303.802241][ T5194] Bluetooth: hci7: command tx timeout [ 1303.855939][T15695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1304.009417][T15695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1304.369951][T15695] team0: Port device team_slave_0 added [ 1304.437646][T15695] team0: Port device team_slave_1 added [ 1304.757357][T15695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1304.764770][T15695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1304.791190][T15695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1304.956311][T15695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1304.963814][T15695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1304.990366][T15695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.882258][ T5194] Bluetooth: hci7: command tx timeout [ 1305.900061][T15695] hsr_slave_0: entered promiscuous mode [ 1305.943438][T15753] loop3: detected capacity change from 0 to 8192 [ 1305.987795][T15695] hsr_slave_1: entered promiscuous mode [ 1306.018415][T15695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1306.026625][T15695] Cannot create hsr debugfs directory [ 1306.353064][T15753] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1306.362152][T15753] FAT-fs (loop3): Filesystem has been set read-only [ 1306.503701][T15767] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1307.120059][T15695] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.428680][T15695] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.638356][T15695] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.870692][T15695] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.964063][ T5194] Bluetooth: hci7: command tx timeout [ 1308.339772][T15695] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1308.449911][T15695] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1308.533225][T15695] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1308.589135][T15695] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1309.590962][T15807] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1309.962158][T15695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1310.123205][T15807] loop3: detected capacity change from 0 to 8192 [ 1310.175104][T15807] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1310.277833][ T29] audit: type=1800 audit(1723175698.259:132): pid=15807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3128" name="bus" dev="loop3" ino=1048815 res=0 errno=0 [ 1310.393749][T15695] 8021q: adding VLAN 0 to HW filter on device team0 [ 1310.539925][T11811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.547972][T11811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1310.716145][T11811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.723972][T11811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1310.799763][T15807] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1310.813222][T15807] FAT-fs (loop3): Filesystem has been set read-only [ 1310.834600][T15807] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1310.846507][T15807] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1310.938903][T15820] netlink: 452 bytes leftover after parsing attributes in process `syz.1.3132'. [ 1311.603393][ T44] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1311.885748][ T44] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1311.903853][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.947805][ T44] usb 2-1: config 0 descriptor?? [ 1312.577604][ T29] audit: type=1800 audit(1723175700.569:133): pid=15813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3128" name="bus" dev="loop3" ino=1048815 res=0 errno=0 [ 1313.300601][T15813] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1313.369030][T15695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.773759][ T44] usb 2-1: Cannot set MAC address [ 1313.779560][ T44] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1313.884251][ T44] usb 2-1: USB disconnect, device number 18 [ 1314.096803][T15695] veth0_vlan: entered promiscuous mode [ 1314.196950][T15695] veth1_vlan: entered promiscuous mode [ 1314.480307][T15695] veth0_macvtap: entered promiscuous mode [ 1314.537321][T15695] veth1_macvtap: entered promiscuous mode [ 1314.657073][T15845] loop3: detected capacity change from 0 to 128 [ 1314.874933][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.885769][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.896017][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.906790][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.917036][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.929151][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.939437][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.950224][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.960655][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.978415][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.990695][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.001722][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.011946][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.042214][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.062690][T15695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1315.145287][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.156642][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.166905][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.185642][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.198083][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.210046][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.220255][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.231072][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.241239][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.254009][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.264316][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.282531][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.294807][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.305598][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.321362][T15695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1315.527808][T15695] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.539633][T15695] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.548959][T15695] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.558111][T15695] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.283365][T15864] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1316.642316][T15864] loop4: detected capacity change from 0 to 8192 [ 1316.672193][T15864] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1316.835783][ T29] audit: type=1800 audit(1723175704.759:134): pid=15864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3147" name="bus" dev="loop4" ino=1048817 res=0 errno=0 [ 1317.719862][T15864] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1317.729358][T15864] FAT-fs (loop4): Filesystem has been set read-only [ 1317.765544][T15864] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1317.776166][T15864] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1317.953329][ T29] audit: type=1800 audit(1723175705.929:135): pid=15869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3147" name="bus" dev="loop4" ino=1048817 res=0 errno=0 [ 1318.048115][T15874] loop0: detected capacity change from 0 to 2048 [ 1318.784275][T15869] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1319.234240][T15884] loop1: detected capacity change from 0 to 2048 [ 1319.361048][T15884] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1319.525797][T15884] UDF-fs: warning (device loop1): udf_rmdir: empty directory has nlink != 2 (0) [ 1319.708958][T15893] loop3: detected capacity change from 0 to 128 [ 1321.663655][T15920] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1322.013346][T15920] loop3: detected capacity change from 0 to 8192 [ 1322.094082][T15920] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1322.277373][ T29] audit: type=1800 audit(1723175710.179:136): pid=15920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3162" name="bus" dev="loop3" ino=1048820 res=0 errno=0 [ 1322.965859][T15920] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1322.982448][T15920] FAT-fs (loop3): Filesystem has been set read-only [ 1322.996116][T15920] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1323.007083][T15920] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1323.122941][T15911] loop1: detected capacity change from 0 to 4096 [ 1324.128552][ T3819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.136803][ T3819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.342903][ T3380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.351161][ T3380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.561280][ T29] audit: type=1800 audit(1723175712.589:137): pid=15921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3162" name="bus" dev="loop3" ino=1048820 res=0 errno=0 [ 1324.738928][T15937] input: syz0 as /devices/virtual/input/input19 [ 1325.076240][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1325.436838][T15942] loop2: detected capacity change from 0 to 128 [ 1325.485084][T15921] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1326.063374][T15929] loop4: detected capacity change from 0 to 8192 [ 1327.416334][T15969] loop4: detected capacity change from 0 to 512 [ 1327.513259][T15969] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1327.607508][T15976] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1327.624912][T15969] EXT4-fs error (device loop4): __ext4_iget:4985: inode #11: block 1: comm syz.4.3176: invalid block [ 1327.752571][T15969] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3176: couldn't read orphan inode 11 (err -117) [ 1327.854133][T15969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1328.117194][T15976] loop0: detected capacity change from 0 to 8192 [ 1328.163792][T15976] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1328.344399][ T29] audit: type=1800 audit(1723175716.259:138): pid=15976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3180" name="bus" dev="loop0" ino=1048826 res=0 errno=0 [ 1329.091027][T15988] loop2: detected capacity change from 0 to 128 [ 1329.368982][T15969] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 1329.990361][T15969] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.3176: Directory hole found for htree leaf block 0 [ 1330.651018][T15982] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.3176: Directory hole found for htree leaf block 0 [ 1330.797840][ T29] audit: type=1800 audit(1723175718.619:139): pid=15984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3180" name="bus" dev="loop0" ino=1048826 res=0 errno=0 [ 1331.551717][T15092] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1331.812597][T16002] netlink: 'syz.2.3187': attribute type 30 has an invalid length. [ 1333.644114][T15997] loop1: detected capacity change from 0 to 8192 [ 1333.797377][T16022] loop3: detected capacity change from 0 to 128 [ 1336.305496][T16051] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1336.647961][T16055] loop1: detected capacity change from 0 to 128 [ 1336.832941][T16051] loop4: detected capacity change from 0 to 8192 [ 1336.889917][T16051] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1337.061944][ T29] audit: type=1800 audit(1723175724.969:140): pid=16051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3209" name="bus" dev="loop4" ino=1048831 res=0 errno=0 [ 1337.734802][T16051] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1337.744339][T16051] FAT-fs (loop4): Filesystem has been set read-only [ 1337.755476][T16051] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1337.786915][T16051] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1337.844536][T16049] loop0: detected capacity change from 0 to 4096 [ 1337.865241][T16049] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 1338.173593][T16049] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 1338.700714][T16053] loop3: detected capacity change from 0 to 8192 [ 1338.705692][T16066] loop2: detected capacity change from 0 to 1024 [ 1339.291723][ T29] audit: type=1800 audit(1723175727.259:141): pid=16056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3209" name="bus" dev="loop4" ino=1048831 res=0 errno=0 [ 1340.947999][T16056] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1341.406991][T16092] loop0: detected capacity change from 0 to 128 [ 1342.390015][T16094] loop2: detected capacity change from 0 to 4096 [ 1342.456829][T16094] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 1342.772924][T16094] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 1343.532457][ T29] audit: type=1326 audit(1723175731.549:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16110 comm="syz.2.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedc3779f9 code=0x7ffc0000 [ 1343.562493][ T29] audit: type=1326 audit(1723175731.549:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16110 comm="syz.2.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedc3779f9 code=0x7ffc0000 [ 1343.590949][ T29] audit: type=1326 audit(1723175731.549:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16110 comm="syz.2.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fbedc3779f9 code=0x7ffc0000 [ 1343.616226][ T29] audit: type=1326 audit(1723175731.549:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16110 comm="syz.2.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedc3779f9 code=0x7ffc0000 [ 1343.840408][T16103] loop1: detected capacity change from 0 to 8192 [ 1344.282704][T16121] loop0: detected capacity change from 0 to 128 [ 1344.329244][T16120] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1344.389866][T16123] netlink: 452 bytes leftover after parsing attributes in process `syz.2.3237'. [ 1344.858788][T16120] loop4: detected capacity change from 0 to 8192 [ 1344.914158][T16120] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1345.020162][ T29] audit: type=1800 audit(1723175732.999:146): pid=16120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3235" name="bus" dev="loop4" ino=1048837 res=0 errno=0 [ 1345.617992][T16120] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1345.629560][T16120] FAT-fs (loop4): Filesystem has been set read-only [ 1345.640475][T16120] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1345.657093][T16120] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1346.237592][ T5270] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1346.498190][ T5270] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1346.518575][ T5270] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1346.532578][ T5270] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1346.544385][ T5270] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1346.553890][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.623632][T16143] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1347.259382][ T29] audit: type=1800 audit(1723175735.239:147): pid=16128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3235" name="bus" dev="loop4" ino=1048837 res=0 errno=0 [ 1347.495809][T16128] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1347.516225][ T5270] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1347.526967][ T5270] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input20 [ 1349.237994][T11811] usb 2-1: USB disconnect, device number 19 [ 1349.238027][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1349.299767][T16164] loop0: detected capacity change from 0 to 2048 [ 1350.629397][T16161] loop4: detected capacity change from 0 to 8192 [ 1351.035394][T16185] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1351.378739][T16185] loop0: detected capacity change from 0 to 8192 [ 1351.465113][T16185] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1351.483008][ T29] audit: type=1800 audit(1723175739.549:148): pid=16185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3258" name="bus" dev="loop0" ino=1048840 res=0 errno=0 [ 1352.358664][T16185] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1352.367991][T16185] FAT-fs (loop0): Filesystem has been set read-only [ 1352.405454][T16185] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1352.419999][T16185] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1352.814252][ T5270] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1353.022407][ T5270] usb 2-1: Using ep0 maxpacket: 32 [ 1353.059120][T15394] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1353.078400][T15394] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1353.097675][ T5270] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1353.107254][ T5270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.115776][T15394] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1353.115885][ T5270] usb 2-1: Product: syz [ 1353.127435][ T5270] usb 2-1: Manufacturer: syz [ 1353.132370][ T5270] usb 2-1: SerialNumber: syz [ 1353.174252][ T5247] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1353.183661][ T5270] usb 2-1: config 0 descriptor?? [ 1353.184573][T15394] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1353.213742][T15394] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1353.218340][ T5270] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1353.231127][T15394] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1353.617472][ T5247] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1353.629898][ T5247] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1353.641577][ T5247] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1353.653266][ T5247] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1353.662709][ T5247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.702583][T16194] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1354.023287][ T29] audit: type=1800 audit(1723175741.999:149): pid=16186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3258" name="bus" dev="loop0" ino=1048840 res=0 errno=0 [ 1354.570922][T16195] chnl_net:caif_netlink_parms(): no params data found [ 1354.615232][ T5270] gspca_ov534_9: reg_w failed -71 [ 1354.777301][ T5247] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 1354.787955][ T5247] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input21 [ 1355.023200][ T5270] gspca_ov534_9: Unknown sensor 0000 [ 1355.023572][ T5270] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1355.135668][ T5270] usb 2-1: USB disconnect, device number 20 [ 1355.334124][ T5194] Bluetooth: hci8: command tx timeout [ 1355.391703][T16208] loop4: detected capacity change from 0 to 2048 [ 1355.693766][T16186] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1356.364842][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1356.373591][T11811] usb 3-1: USB disconnect, device number 15 [ 1356.858633][T16195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.866577][T16195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.875031][T16195] bridge_slave_0: entered allmulticast mode [ 1356.884540][T16195] bridge_slave_0: entered promiscuous mode [ 1357.023002][T16195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.030660][T16195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.038698][T16195] bridge_slave_1: entered allmulticast mode [ 1357.047291][T16195] bridge_slave_1: entered promiscuous mode [ 1357.404088][T16195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1357.417659][ T5194] Bluetooth: hci8: command tx timeout [ 1357.507427][T16195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.692460][T16195] team0: Port device team_slave_0 added [ 1357.742741][T16195] team0: Port device team_slave_1 added [ 1358.108760][T16195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1358.116238][T16195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1358.142792][T16195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1358.232193][T16195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1358.239395][T16195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1358.266171][T16195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1358.729685][T16242] loop0: detected capacity change from 0 to 2048 [ 1358.780038][T16195] hsr_slave_0: entered promiscuous mode [ 1358.821114][T16195] hsr_slave_1: entered promiscuous mode [ 1358.863549][T16195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1358.871364][T16195] Cannot create hsr debugfs directory [ 1359.124193][T16247] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1359.493419][ T5194] Bluetooth: hci8: command tx timeout [ 1359.645673][T16247] loop1: detected capacity change from 0 to 8192 [ 1359.740463][T16247] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1359.848428][ T29] audit: type=1800 audit(1723175747.819:150): pid=16247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3277" name="bus" dev="loop1" ino=1048842 res=0 errno=0 [ 1359.914977][ T5247] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1360.245335][ T5247] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1360.257559][ T5247] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1360.260981][T16231] loop4: detected capacity change from 0 to 8192 [ 1360.269344][ T5247] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1360.269597][ T5247] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1360.296956][ T5247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.386404][T16249] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1360.522794][T16247] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1360.532399][T16247] FAT-fs (loop1): Filesystem has been set read-only [ 1360.578334][T16247] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1360.589155][T16247] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1360.830016][T16195] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.070162][T16195] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.219235][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3280'. [ 1361.572184][ T5194] Bluetooth: hci8: command tx timeout [ 1362.005788][ T29] audit: type=1800 audit(1723175749.909:151): pid=16252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3277" name="bus" dev="loop1" ino=1048842 res=0 errno=0 [ 1363.035961][T16252] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1363.282566][ T5247] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 1363.299845][ T5247] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input22 [ 1363.677998][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1363.686678][ T5247] usb 3-1: USB disconnect, device number 16 [ 1363.746574][T16195] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.938301][T16195] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.526434][T16195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1364.583825][T16195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1364.652611][T16195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1365.117759][T16195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1366.369348][T16195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1366.749480][T16195] 8021q: adding VLAN 0 to HW filter on device team0 [ 1366.934184][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.942021][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1367.045038][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.052845][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1367.132330][ T5247] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1367.432546][ T5247] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1367.444630][ T5247] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1367.456696][ T5247] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1367.468567][ T5247] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1367.478043][ T5247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.591253][T16301] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1368.405630][T16293] loop0: detected capacity change from 0 to 8192 [ 1368.545449][ T5247] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1368.557899][ T5247] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input23 [ 1368.684846][T16310] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1369.226004][T16310] loop2: detected capacity change from 0 to 8192 [ 1369.291114][T16310] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1369.924978][ T29] audit: type=1800 audit(1723175757.449:152): pid=16310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3295" name="bus" dev="loop2" ino=1048844 res=0 errno=0 [ 1370.743311][T15734] usb 2-1: USB disconnect, device number 21 [ 1370.743549][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1371.156697][T16195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1371.245354][T16310] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1371.254698][T16310] FAT-fs (loop2): Filesystem has been set read-only [ 1371.264749][T16310] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1371.279197][T16310] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1371.792382][T16195] veth0_vlan: entered promiscuous mode [ 1371.874193][T16195] veth1_vlan: entered promiscuous mode [ 1372.329059][T16329] evm: overlay not supported [ 1372.349156][T16195] veth0_macvtap: entered promiscuous mode [ 1372.456306][T16195] veth1_macvtap: entered promiscuous mode [ 1372.466720][ T29] audit: type=1800 audit(1723175760.439:153): pid=16314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3295" name="bus" dev="loop2" ino=1048844 res=0 errno=0 [ 1372.701090][T16195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1372.712119][T16195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.731968][T16195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1372.745370][T16195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.756743][T16195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1372.768849][T16195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.779858][T16195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1372.791711][T16195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.802711][T16195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1372.816888][T16195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.842640][T16195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1372.854570][T16195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.865617][T16195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1372.877292][T16195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.888473][T16195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1372.902091][T16195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.918144][T16195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1373.126681][T16195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.148668][T16195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.162389][T16195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.173413][T16195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.183627][T16195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.194397][T16195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.204649][T16195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.215473][T16195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.225724][T16195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.245933][T16195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.259127][T16195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.270168][T16195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.280315][T16195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.291102][T16195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.301156][T16195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1373.311922][T16195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1373.329375][T16195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1373.727443][T16195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.736666][T16195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.755705][T16195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.767695][T16195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.039660][T16339] loop0: detected capacity change from 0 to 128 [ 1374.612349][T16314] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1375.616509][T16342] loop1: detected capacity change from 0 to 4096 [ 1375.853548][T16353] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1376.042024][T15394] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1376.061653][T15394] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1376.073522][T15394] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1376.160525][T15394] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1376.184087][T15394] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1376.232796][T15394] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1376.268355][ T29] audit: type=1804 audit(1723175764.289:154): pid=16342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3303" name="/newroot/66/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 1376.291900][ T29] audit: type=1804 audit(1723175764.289:155): pid=16357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3303" name="/newroot/66/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 1376.321346][ T29] audit: type=1804 audit(1723175764.299:156): pid=16358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3303" name="/newroot/66/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 1377.604961][T16355] chnl_net:caif_netlink_parms(): no params data found [ 1377.980906][T16384] loop0: detected capacity change from 0 to 128 [ 1378.364538][T15394] Bluetooth: hci9: command tx timeout [ 1378.926825][T16390] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1379.122420][T16380] loop2: detected capacity change from 0 to 4096 [ 1379.205417][T16380] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1379.439517][T16390] loop1: detected capacity change from 0 to 8192 [ 1379.453629][T16390] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1379.548425][ T29] audit: type=1800 audit(1723175767.539:157): pid=16390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3314" name="bus" dev="loop1" ino=1048848 res=0 errno=0 [ 1379.761937][T16390] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1379.771117][T16390] FAT-fs (loop1): Filesystem has been set read-only [ 1379.785423][T16390] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1379.833784][T16390] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 1379.945354][T16355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.953271][T16355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.961353][T16355] bridge_slave_0: entered allmulticast mode [ 1379.975577][T16355] bridge_slave_0: entered promiscuous mode [ 1380.159239][T16380] ntfs3: loop2: failed to convert "c46c" to ascii [ 1380.185005][T16355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.192890][T16355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.212595][T16355] bridge_slave_1: entered allmulticast mode [ 1380.222507][T16355] bridge_slave_1: entered promiscuous mode [ 1380.445735][T15394] Bluetooth: hci9: command tx timeout [ 1380.825565][T16355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1380.987308][ T3819] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.084861][T16355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1381.228688][ T3819] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.507883][ T3819] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.891799][T16355] team0: Port device team_slave_0 added [ 1381.962491][ T3819] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.982617][T16396] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1382.079499][T16355] team0: Port device team_slave_1 added [ 1382.109147][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1382.118176][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1382.518821][ T3309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1382.528318][ T3309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1382.564139][T15394] Bluetooth: hci9: command tx timeout [ 1382.611220][ T3819] bridge_slave_1: left allmulticast mode [ 1382.617328][ T3819] bridge_slave_1: left promiscuous mode [ 1382.624079][ T3819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.645887][ T3819] bridge_slave_0: left allmulticast mode [ 1382.652891][ T3819] bridge_slave_0: left promiscuous mode [ 1382.671426][ T3819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.217111][ T3819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1383.237307][T16424] loop1: detected capacity change from 0 to 128 [ 1383.305062][ T3819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1383.336162][ T3819] bond0 (unregistering): Released all slaves [ 1383.391416][T16355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1383.398909][T16355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1383.425767][T16355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1383.557700][T16355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1383.565571][T16355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1383.598285][T16355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1384.213434][T16355] hsr_slave_0: entered promiscuous mode [ 1384.253815][T16355] hsr_slave_1: entered promiscuous mode [ 1384.312375][T16355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1384.320374][T16355] Cannot create hsr debugfs directory [ 1384.610519][T15394] Bluetooth: hci9: command tx timeout [ 1384.645674][ T3819] hsr_slave_0: left promiscuous mode [ 1384.662189][ T3819] hsr_slave_1: left promiscuous mode [ 1384.684022][ T3819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1384.692179][ T3819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1384.739566][ T3819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1384.747631][ T3819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1384.796017][ T3819] veth1_macvtap: left promiscuous mode [ 1384.803056][ T3819] veth0_macvtap: left promiscuous mode [ 1384.818091][ T3819] veth1_vlan: left promiscuous mode [ 1384.823955][ T3819] veth0_vlan: left promiscuous mode [ 1386.327432][ T3819] team0 (unregistering): Port device team_slave_1 removed [ 1386.576659][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1387.845483][T16451] loop0: detected capacity change from 0 to 32768 [ 1387.929160][ T3819] team0 (unregistering): Port device team_slave_0 removed [ 1388.605060][ T5194] Bluetooth: hci3: command 0x0406 tx timeout [ 1388.694418][T16451] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 1388.714033][T16451] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 1388.724245][T16451] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 1388.724245][T16451] running recovery passes: check_allocations [ 1388.894229][T16451] ===================================================== [ 1388.911142][T16451] BUG: KMSAN: uninit-value in bch2_alloc_v4_invalid+0x9b9/0x1760 [ 1388.921972][T16451] bch2_alloc_v4_invalid+0x9b9/0x1760 [ 1388.927584][T16451] bch2_bkey_val_invalid+0x2b2/0x410 [ 1388.933410][T16451] bch2_btree_node_read_done+0x5c25/0x7a80 [ 1388.939424][T16451] btree_node_read_work+0x973/0x1960 [ 1388.945093][T16451] bch2_btree_node_read+0x2e6b/0x36e0 [ 1388.950601][T16451] bch2_btree_root_read+0xa6c/0x13d0 [ 1388.956106][T16451] read_btree_roots+0x4e6/0xfb0 [ 1388.961072][T16451] bch2_fs_recovery+0x4224/0x5a20 [ 1388.967461][T16451] bch2_fs_start+0x7b2/0xbd0 [ 1388.972733][T16451] bch2_fs_get_tree+0x13e8/0x22d0 [ 1388.977882][T16451] vfs_get_tree+0xa7/0x570 [ 1388.982798][T16451] do_new_mount+0x71f/0x15e0 [ 1388.987489][T16451] path_mount+0x742/0x1f10 [ 1388.992246][T16451] __se_sys_mount+0x722/0x810 [ 1388.997009][T16451] __x64_sys_mount+0xe4/0x150 [ 1389.002936][T16451] x64_sys_call+0x255a/0x3ba0 [ 1389.007808][T16451] do_syscall_64+0xcd/0x1e0 [ 1389.018824][T16451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.026593][T16451] [ 1389.028963][T16451] Uninit was created at: [ 1389.033556][T16451] ___kmalloc_large_node+0x22c/0x370 [ 1389.039043][T16451] __kmalloc_large_node_noprof+0x3f/0x1e0 [ 1389.044960][T16451] __kmalloc_node_noprof+0x9d6/0xf50 [ 1389.050345][T16451] __kvmalloc_node_noprof+0xc0/0x2d0 [ 1389.055797][T16451] bch2_btree_node_read_done+0x5214/0x7a80 [ 1389.061855][T16451] btree_node_read_work+0x973/0x1960 [ 1389.067254][T16451] bch2_btree_node_read+0x2e6b/0x36e0 [ 1389.072831][T16451] bch2_btree_root_read+0xa6c/0x13d0 [ 1389.078228][T16451] read_btree_roots+0x4e6/0xfb0 [ 1389.083398][T16451] bch2_fs_recovery+0x4224/0x5a20 [ 1389.088536][T16451] bch2_fs_start+0x7b2/0xbd0 [ 1389.093711][T16451] bch2_fs_get_tree+0x13e8/0x22d0 [ 1389.098847][T16451] vfs_get_tree+0xa7/0x570 [ 1389.103477][T16451] do_new_mount+0x71f/0x15e0 [ 1389.115964][T16451] path_mount+0x742/0x1f10 [ 1389.120503][T16451] __se_sys_mount+0x722/0x810 [ 1389.127001][T16451] __x64_sys_mount+0xe4/0x150 [ 1389.131879][T16451] x64_sys_call+0x255a/0x3ba0 [ 1389.136660][T16451] do_syscall_64+0xcd/0x1e0 [ 1389.141255][T16451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.147353][T16451] [ 1389.149738][T16451] CPU: 1 UID: 0 PID: 16451 Comm: syz.0.3334 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 1389.160747][T16451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1389.171020][T16451] ===================================================== [ 1389.178081][T16451] Disabling lock debugging due to kernel taint [ 1389.184417][T16451] Kernel panic - not syncing: kmsan.panic set ... [ 1389.190939][T16451] CPU: 1 UID: 0 PID: 16451 Comm: syz.0.3334 Tainted: G B 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 1389.203298][T16451] Tainted: [B]=BAD_PAGE [ 1389.207523][T16451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1389.217716][T16451] Call Trace: [ 1389.221078][T16451] [ 1389.224082][T16451] dump_stack_lvl+0x216/0x2d0 [ 1389.228934][T16451] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1389.234873][T16451] dump_stack+0x1e/0x30 [ 1389.239119][T16451] panic+0x4e2/0xcd0 [ 1389.243146][T16451] ? kmsan_get_metadata+0x61/0x1c0 [ 1389.248423][T16451] kmsan_report+0x2c7/0x2d0 [ 1389.253048][T16451] ? __msan_warning+0x95/0x120 [ 1389.257915][T16451] ? bch2_alloc_v4_invalid+0x9b9/0x1760 [ 1389.263584][T16451] ? bch2_bkey_val_invalid+0x2b2/0x410 [ 1389.269175][T16451] ? bch2_btree_node_read_done+0x5c25/0x7a80 [ 1389.275297][T16451] ? btree_node_read_work+0x973/0x1960 [ 1389.280890][T16451] ? bch2_btree_node_read+0x2e6b/0x36e0 [ 1389.286570][T16451] ? bch2_btree_root_read+0xa6c/0x13d0 [ 1389.292163][T16451] ? read_btree_roots+0x4e6/0xfb0 [ 1389.297310][T16451] ? bch2_fs_recovery+0x4224/0x5a20 [ 1389.302651][T16451] ? bch2_fs_start+0x7b2/0xbd0 [ 1389.307522][T16451] ? bch2_fs_get_tree+0x13e8/0x22d0 [ 1389.312841][T16451] ? vfs_get_tree+0xa7/0x570 [ 1389.317614][T16451] ? do_new_mount+0x71f/0x15e0 [ 1389.322530][T16451] ? path_mount+0x742/0x1f10 [ 1389.327212][T16451] ? __se_sys_mount+0x722/0x810 [ 1389.332164][T16451] ? __x64_sys_mount+0xe4/0x150 [ 1389.337119][T16451] ? x64_sys_call+0x255a/0x3ba0 [ 1389.342152][T16451] ? do_syscall_64+0xcd/0x1e0 [ 1389.347015][T16451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.353209][T16451] ? kmsan_get_metadata+0x13e/0x1c0 [ 1389.358566][T16451] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1389.364520][T16451] ? __free_pages_ok+0x5b0/0xc30 [ 1389.369593][T16451] ? kmsan_get_metadata+0x13e/0x1c0 [ 1389.374913][T16451] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1389.380849][T16451] __msan_warning+0x95/0x120 [ 1389.385646][T16451] bch2_alloc_v4_invalid+0x9b9/0x1760 [ 1389.391151][T16451] ? kmsan_get_metadata+0x60/0x1c0 [ 1389.396424][T16451] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1389.402475][T16451] ? __pfx_bch2_alloc_v4_invalid+0x10/0x10 [ 1389.408438][T16451] bch2_bkey_val_invalid+0x2b2/0x410 [ 1389.413919][T16451] bch2_btree_node_read_done+0x5c25/0x7a80 [ 1389.420082][T16451] btree_node_read_work+0x973/0x1960 [ 1389.425578][T16451] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1389.431580][T16451] bch2_btree_node_read+0x2e6b/0x36e0 [ 1389.437097][T16451] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1389.443045][T16451] ? __bch2_btree_node_hash_insert+0x13cb/0x16c0 [ 1389.449494][T16451] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1389.455439][T16451] ? kmsan_get_metadata+0x13e/0x1c0 [ 1389.460759][T16451] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1389.467235][T16451] bch2_btree_root_read+0xa6c/0x13d0 [ 1389.472702][T16451] read_btree_roots+0x4e6/0xfb0 [ 1389.478350][T16451] bch2_fs_recovery+0x4224/0x5a20 [ 1389.483603][T16451] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1389.490069][T16451] ? __closure_wake_up+0x16a/0x180 [ 1389.495346][T16451] bch2_fs_start+0x7b2/0xbd0 [ 1389.500108][T16451] bch2_fs_get_tree+0x13e8/0x22d0 [ 1389.505310][T16451] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 1389.510795][T16451] vfs_get_tree+0xa7/0x570 [ 1389.515345][T16451] ? mount_capable+0x97/0x120 [ 1389.520201][T16451] do_new_mount+0x71f/0x15e0 [ 1389.524953][T16451] ? kmsan_get_metadata+0x13e/0x1c0 [ 1389.530284][T16451] path_mount+0x742/0x1f10 [ 1389.534812][T16451] ? user_path_at+0x32f/0x390 [ 1389.539583][T16451] __se_sys_mount+0x722/0x810 [ 1389.544406][T16451] __x64_sys_mount+0xe4/0x150 [ 1389.549191][T16451] x64_sys_call+0x255a/0x3ba0 [ 1389.553999][T16451] do_syscall_64+0xcd/0x1e0 [ 1389.558610][T16451] ? clear_bhb_loop+0x25/0x80 [ 1389.563390][T16451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.569432][T16451] RIP: 0033:0x7f8a7f7790fa [ 1389.573932][T16451] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1389.593754][T16451] RSP: 002b:00007f8a8053ee68 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1389.602373][T16451] RAX: ffffffffffffffda RBX: 00007f8a8053eef0 RCX: 00007f8a7f7790fa [ 1389.610437][T16451] RDX: 0000000020005b00 RSI: 0000000020005b40 RDI: 00007f8a8053eeb0 [ 1389.618618][T16451] RBP: 0000000020005b00 R08: 00007f8a8053eef0 R09: 0000000000000000 [ 1389.626727][T16451] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020005b40 [ 1389.634796][T16451] R13: 00007f8a8053eeb0 R14: 0000000000005b35 R15: 0000000020000140 [ 1389.642872][T16451] [ 1389.646294][T16451] Kernel Offset: disabled [ 1389.650704][T16451] Rebooting in 86400 seconds..