last executing test programs: 8.219065503s ago: executing program 1 (id=830): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x84}]}}}}}}}, 0x0) 6.822739801s ago: executing program 1 (id=834): r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000040)) 6.630914095s ago: executing program 2 (id=835): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{}, "5ef40e7ab852acb6", "582f7cccfda6a677c372678ca6f023d0bca3a88ac5a438b0e48fdb55bdc85053", "52c227d6", "c6425ec4f2e476d5"}, 0x38) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/27, 0x1b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x7f, 0xc4e}, 0x8) recvmmsg(r1, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/255, 0xff}], 0x1}}], 0x1, 0x0, 0x0) 6.388075652s ago: executing program 0 (id=837): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, 0x0, 0x54) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}], 0x28}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0xbc, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HE_OBSS_PD={0x58, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "a6e4c31e742c0d09"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "790a5e1d1c8326ab"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "d1b84a85f4f15392"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x1}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "ae9d79de15caedcf"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "fdda1e51aa050593"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x6}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x81}]}, 0xbc}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)={0x1c, 0x34, 0x15, 0x0, 0x0, "", [@typed={0x4}, @typed={0x8, 0x119, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, 0x1c}], 0x1}, 0x0) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) 5.97365735s ago: executing program 3 (id=838): socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) socket(0x10, 0x80002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) syz_usb_connect(0x0, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002555224082057d00993f000000010902230001000000000904"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 5.713662342s ago: executing program 1 (id=839): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000b40)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000a50000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/26, 0x1a, 0x0, 0x0}, &(0x7f00000005c0)=0x40) 5.71012269s ago: executing program 0 (id=840): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000480)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000003840)={0x8, {"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", 0x1000}}, 0x1059) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000080)) 5.492061782s ago: executing program 2 (id=842): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000034001680300001802c000c"], 0x68}}, 0x0) 5.091150297s ago: executing program 1 (id=843): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff0100000724", @ANYRES16], 0x0) 5.033831977s ago: executing program 0 (id=844): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x10012, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) 4.935687292s ago: executing program 2 (id=845): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4d082}, 0x20044040) socket$tipc(0x1e, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x4, 0x21, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001280), 0xb4a, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f00000000c0), 0x20000000}, 0x20) 4.433228345s ago: executing program 0 (id=847): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06464b8, &(0x7f0000000300)={0x0, 0x7ff, 0x1641, 0x30315559, 0x0, [], [], [], [0x7ffffffc]}) 4.269215621s ago: executing program 2 (id=848): syz_open_procfs(0x0, &(0x7f0000000040)='net/nfsfs\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2}}}, 0x24}}, 0x0) 4.017634557s ago: executing program 0 (id=849): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000000100)=0x18) 3.958607197s ago: executing program 3 (id=850): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xffff, @fixed, 0x0, 0x2}, 0xe) 3.862626246s ago: executing program 4 (id=851): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) 3.696583989s ago: executing program 2 (id=852): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x304}, "5ef40e7ab852acb6", "582f7cccfda6a677c372678ca6f023d0bca3a88ac5a438b0e48fdb55bdc85053", "52c227d6", "c6425ec4f2e476d5"}, 0x38) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x7f, 0xc4e}, 0x8) recvmmsg(r1, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/255, 0xff}], 0x1}}], 0x1, 0x0, 0x0) 3.41917777s ago: executing program 0 (id=853): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000002480)={{r1}, 0x0, 0x0, @unused, @subvolid=0x3}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000001c0)={"c26157ff7151c9aad7af23155a178c05"}) 3.338338864s ago: executing program 4 (id=854): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000480)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000003840)={0x8, {"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", 0x1000}}, 0x1059) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000080)) 3.338173771s ago: executing program 3 (id=855): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000034001680300001802c000c"], 0x68}}, 0x0) 3.149159159s ago: executing program 1 (id=856): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") unlink(&(0x7f0000000180)='./file1\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./file1\x00') mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.964080711s ago: executing program 3 (id=857): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x10012, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) 2.683946647s ago: executing program 4 (id=858): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x4) 2.653006138s ago: executing program 2 (id=859): syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f00000001c0), 0xfa, 0x1119, &(0x7f0000003600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000500)=ANY=[], 0x118) 2.367172836s ago: executing program 3 (id=860): socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) socket(0x10, 0x80002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) syz_usb_connect(0x0, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002555224082057d00993f000000010902230001000000000904"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 1.929172764s ago: executing program 1 (id=861): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x2050a0c) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x2000000b) read(r2, 0x0, 0x0) close(r1) 1.258681868s ago: executing program 4 (id=862): syz_open_procfs(0x0, &(0x7f0000000040)='net/nfsfs\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2}}}, 0x24}}, 0x0) 691.390019ms ago: executing program 4 (id=863): getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000000100)=0x18) 398.911912ms ago: executing program 4 (id=864): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10144d4, &(0x7f00000001c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@lastblock}, {@fileset={'fileset', 0x3d, 0x7d}}, {@gid_forget}, {@gid_forget}, {@gid_forget}, {@shortad}]}, 0xfe, 0xc30, &(0x7f0000000840)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=865): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x11, 0x60000007, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0xf000000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="7402000013000b0a00000000000000c48d000000e42cf63266f8f12a11ed28d9e3", @ANYRES32=0x0, @ANYBLOB="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"], 0x274}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) kernel console output (not intermixed with test programs): FAT (entry 0x00000100) [ 448.555298][ T7213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 448.672840][ T7079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.729164][ T7213] syz.2.452: attempt to access beyond end of device [ 448.729164][ T7213] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 448.808013][ T29] audit: type=1800 audit(1722587891.374:54): pid=7213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.452" name="file2" dev="loop2" ino=1048633 res=0 errno=0 [ 448.861267][ T7213] program syz.2.452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 449.242834][ T7079] veth0_vlan: entered promiscuous mode [ 449.426027][ T7079] veth1_vlan: entered promiscuous mode [ 449.987305][ T7079] veth0_macvtap: entered promiscuous mode [ 450.108874][ T7079] veth1_macvtap: entered promiscuous mode [ 450.283705][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.294549][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.306029][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.316870][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.326981][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.337794][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.347923][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.358642][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.374032][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.713892][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.724857][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.735148][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.745917][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.754708][ T7240] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 450.756076][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.778581][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.793407][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.805591][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.822109][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.864970][ T7079] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.874100][ T7079] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.883277][ T7079] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.892509][ T7079] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.026254][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 451.225969][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 451.260445][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.271496][ T8] usb 5-1: config 0 has no interfaces? [ 451.341331][ T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 451.350950][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.359791][ T8] usb 5-1: Product: syz [ 451.364208][ T8] usb 5-1: Manufacturer: syz [ 451.369190][ T8] usb 5-1: SerialNumber: syz [ 451.430064][ T8] usb 5-1: config 0 descriptor?? [ 451.693534][ T7239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.703649][ T7239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.768005][ T5183] Bluetooth: hci2: unknown advertising packet type: 0x14 [ 451.768123][ T5183] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 451.768227][ T5183] Bluetooth: hci2: unknown advertising packet type: 0x08 [ 451.768330][ T5183] Bluetooth: hci2: Malformed LE Event: 0x02 [ 451.792013][ T4613] usb 5-1: USB disconnect, device number 7 [ 451.816282][ T7247] netlink: 40 bytes leftover after parsing attributes in process `syz.2.461'. [ 452.945075][ T7263] loop2: detected capacity change from 0 to 128 [ 453.069858][ T7263] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 453.078550][ T7263] FAT-fs (loop2): Filesystem has been set read-only [ 453.085623][ T7263] syz.2.464: attempt to access beyond end of device [ 453.085623][ T7263] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 453.099719][ T7263] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 453.110787][ T7263] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 453.312152][ T7270] program syz.2.464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.356940][ T7263] syz.2.464: attempt to access beyond end of device [ 453.356940][ T7263] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 453.427267][ T29] audit: type=1800 audit(1722587895.994:55): pid=7263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.464" name="file2" dev="loop2" ino=1048635 res=0 errno=0 [ 454.512561][ T7272] loop1: detected capacity change from 0 to 4096 [ 454.710247][ T7272] NILFS (loop1): invalid segment: Checksum error in segment payload [ 454.718742][ T7272] NILFS (loop1): trying rollback from an earlier position [ 454.845126][ T7272] NILFS (loop1): recovery complete [ 454.903373][ T7284] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 455.002229][ T7283] loop2: detected capacity change from 0 to 512 [ 455.147508][ T7283] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.470: invalid block [ 455.247155][ T7283] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.470: invalid indirect mapped block 4294967295 (level 1) [ 455.289147][ T7283] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.470: invalid indirect mapped block 4294967295 (level 1) [ 455.385089][ T7283] EXT4-fs (loop2): 2 truncates cleaned up [ 455.392734][ T7283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.661457][ T7283] EXT4-fs error (device loop2): ext4_check_all_de:655: inode #12: block 7: comm syz.2.470: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=124 fake=0 [ 456.048065][ T6835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.437776][ T7299] netlink: 40 bytes leftover after parsing attributes in process `syz.1.473'. [ 457.098044][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 457.241823][ T7311] loop2: detected capacity change from 0 to 128 [ 457.324661][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 457.339724][ T7311] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 457.349703][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.349835][ T8] usb 5-1: config 0 has no interfaces? [ 457.361634][ T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 457.368279][ T7311] FAT-fs (loop2): Filesystem has been set read-only [ 457.377335][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.377477][ T8] usb 5-1: Product: syz [ 457.384120][ T7311] syz.2.477: attempt to access beyond end of device [ 457.384120][ T7311] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 457.392297][ T8] usb 5-1: Manufacturer: syz [ 457.396673][ T7311] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 457.410310][ T8] usb 5-1: SerialNumber: syz [ 457.428850][ T7311] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 457.476255][ T8] usb 5-1: config 0 descriptor?? [ 457.560028][ T7311] syz.2.477: attempt to access beyond end of device [ 457.560028][ T7311] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 457.636954][ T29] audit: type=1800 audit(1722587900.204:56): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.477" name="file2" dev="loop2" ino=1048637 res=0 errno=0 [ 457.732355][ T7311] program syz.2.477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.807222][ T3112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.815555][ T3112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.843466][ T7305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.853495][ T7305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.899741][ T3112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.908955][ T3112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.920627][ T5183] Bluetooth: hci2: unknown advertising packet type: 0x14 [ 457.920772][ T5183] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 457.928411][ T5183] Bluetooth: hci2: unknown advertising packet type: 0x08 [ 457.935912][ T5183] Bluetooth: hci2: Malformed LE Event: 0x02 [ 457.960918][ T4613] usb 5-1: USB disconnect, device number 8 [ 459.472224][ T7328] loop3: detected capacity change from 0 to 512 [ 459.627458][ T7328] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.483: invalid block [ 459.666464][ T7328] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.483: invalid indirect mapped block 4294967295 (level 1) [ 459.752748][ T7328] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.483: invalid indirect mapped block 4294967295 (level 1) [ 459.755556][ T7334] netlink: 40 bytes leftover after parsing attributes in process `syz.1.485'. [ 459.815544][ T7328] EXT4-fs (loop3): 2 truncates cleaned up [ 459.823144][ T7328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.956528][ T7328] EXT4-fs error (device loop3): ext4_check_all_de:655: inode #12: block 7: comm syz.3.483: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=124 fake=0 [ 460.185752][ T7326] loop4: detected capacity change from 0 to 4096 [ 460.265004][ T7326] NILFS (loop4): invalid segment: Checksum error in segment payload [ 460.273315][ T7326] NILFS (loop4): trying rollback from an earlier position [ 460.356004][ T7079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.382265][ T7326] NILFS (loop4): recovery complete [ 460.435987][ T7342] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 460.961557][ T7345] loop3: detected capacity change from 0 to 128 [ 461.122853][ T7345] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 461.131203][ T7345] FAT-fs (loop3): Filesystem has been set read-only [ 461.138337][ T7345] syz.3.488: attempt to access beyond end of device [ 461.138337][ T7345] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 461.152393][ T7345] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 461.163479][ T7345] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 461.326625][ T7345] syz.3.488: attempt to access beyond end of device [ 461.326625][ T7345] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 461.327840][ T7349] program syz.3.488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.418852][ T29] audit: type=1800 audit(1722587903.974:57): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.488" name="file2" dev="loop3" ino=1048642 res=0 errno=0 [ 462.104826][ T4613] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 462.344871][ T4613] usb 3-1: Using ep0 maxpacket: 8 [ 462.377321][ T4613] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.389629][ T4613] usb 3-1: config 0 has no interfaces? [ 462.471452][ T4613] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 462.481426][ T4613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.491598][ T4613] usb 3-1: Product: syz [ 462.496461][ T4613] usb 3-1: Manufacturer: syz [ 462.501285][ T4613] usb 3-1: SerialNumber: syz [ 462.537642][ T4613] usb 3-1: config 0 descriptor?? [ 462.792504][ T7354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.804987][ T7354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.910999][ T5183] Bluetooth: hci3: unknown advertising packet type: 0x14 [ 462.911139][ T5183] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 462.917518][ T7364] netlink: 40 bytes leftover after parsing attributes in process `syz.3.497'. [ 462.919285][ T5183] Bluetooth: hci3: unknown advertising packet type: 0x08 [ 462.935287][ T5183] Bluetooth: hci3: Malformed LE Event: 0x02 [ 462.941953][ T5241] usb 3-1: USB disconnect, device number 19 [ 463.678180][ T5197] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 463.693578][ T5197] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 463.717261][ T5197] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 463.756058][ T5197] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 463.796866][ T5197] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 463.825331][ T5197] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 464.791004][ T7385] loop3: detected capacity change from 0 to 128 [ 464.890241][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.897132][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.957361][ T7385] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 464.965440][ T7369] loop4: detected capacity change from 0 to 4096 [ 464.972074][ T7385] FAT-fs (loop3): Filesystem has been set read-only [ 464.979180][ T7385] syz.3.504: attempt to access beyond end of device [ 464.979180][ T7385] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 464.993316][ T7385] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 465.001569][ T7385] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 465.052218][ T7369] NILFS (loop4): invalid segment: Checksum error in segment payload [ 465.062162][ T7369] NILFS (loop4): trying rollback from an earlier position [ 465.186082][ T7369] NILFS (loop4): recovery complete [ 465.222907][ T7385] syz.3.504: attempt to access beyond end of device [ 465.222907][ T7385] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 465.247915][ T7389] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 465.293650][ T29] audit: type=1800 audit(1722587907.864:58): pid=7385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.504" name="file2" dev="loop3" ino=1048644 res=0 errno=0 [ 465.314752][ T7371] chnl_net:caif_netlink_parms(): no params data found [ 465.352487][ T7385] program syz.3.504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.905184][ T5183] Bluetooth: hci5: command tx timeout [ 466.731898][ T2989] team0: Port device netdevsim3 removed [ 466.744705][ T2989] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.949695][ T2989] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.072972][ T2989] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.248364][ T2989] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.322464][ T7371] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.330549][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.338534][ T7371] bridge_slave_0: entered allmulticast mode [ 467.350251][ T7371] bridge_slave_0: entered promiscuous mode [ 467.442637][ T7371] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.450899][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.459231][ T7371] bridge_slave_1: entered allmulticast mode [ 467.468451][ T7371] bridge_slave_1: entered promiscuous mode [ 467.567200][ T7408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.511'. [ 467.894692][ T4613] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 467.941300][ T7371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.984644][ T5183] Bluetooth: hci5: command tx timeout [ 468.096391][ T4613] usb 4-1: Using ep0 maxpacket: 8 [ 468.142309][ T4613] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.152872][ T4613] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 468.208617][ T7371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.218883][ T2989] bridge_slave_1: left allmulticast mode [ 468.226694][ T2989] bridge_slave_1: left promiscuous mode [ 468.233327][ T2989] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.237788][ T4613] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 468.249974][ T4613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.258416][ T4613] usb 4-1: Product: syz [ 468.262827][ T4613] usb 4-1: Manufacturer: syz [ 468.267772][ T4613] usb 4-1: SerialNumber: syz [ 468.315919][ T2989] bridge_slave_0: left allmulticast mode [ 468.321973][ T2989] bridge_slave_0: left promiscuous mode [ 468.331026][ T2989] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.643437][ T7410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.653791][ T7410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.808417][ T5183] Bluetooth: hci4: unknown advertising packet type: 0x14 [ 468.808564][ T5183] Bluetooth: hci4: unknown advertising packet type: 0x20 [ 468.816491][ T5183] Bluetooth: hci4: unknown advertising packet type: 0x08 [ 468.823801][ T5183] Bluetooth: hci4: Malformed LE Event: 0x02 [ 468.945333][ T4613] usb 4-1: USB disconnect, device number 10 [ 469.098026][ T2989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.172585][ T2989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.190690][ T7416] loop1: detected capacity change from 0 to 4096 [ 469.215938][ T2989] bond0 (unregistering): Released all slaves [ 469.241027][ T7416] NILFS (loop1): invalid segment: Checksum error in segment payload [ 469.250682][ T7416] NILFS (loop1): trying rollback from an earlier position [ 469.338700][ T7416] NILFS (loop1): recovery complete [ 469.370209][ T7422] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 469.670722][ T7371] team0: Port device team_slave_0 added [ 469.915886][ T7371] team0: Port device team_slave_1 added [ 470.006366][ T7426] loop4: detected capacity change from 0 to 128 [ 470.068743][ T5183] Bluetooth: hci5: command tx timeout [ 470.169859][ T7428] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 470.180050][ T7428] FAT-fs (loop4): Filesystem has been set read-only [ 470.188889][ T7428] syz.4.517: attempt to access beyond end of device [ 470.188889][ T7428] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 470.203505][ T7428] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 470.211734][ T7428] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 470.342524][ T7428] syz.4.517: attempt to access beyond end of device [ 470.342524][ T7428] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 470.386128][ T7426] program syz.4.517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.445180][ T29] audit: type=1800 audit(1722587912.984:59): pid=7428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.517" name="file2" dev="loop4" ino=1048646 res=0 errno=0 [ 470.574914][ T2989] hsr_slave_0: left promiscuous mode [ 470.606399][ T2989] hsr_slave_1: left promiscuous mode [ 470.632814][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.640808][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.674552][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.683406][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.730172][ T2989] veth1_macvtap: left promiscuous mode [ 470.736712][ T2989] veth0_macvtap: left promiscuous mode [ 470.742785][ T2989] veth1_vlan: left promiscuous mode [ 470.748495][ T2989] veth0_vlan: left promiscuous mode [ 471.877915][ T2989] team0 (unregistering): Port device team_slave_1 removed [ 471.971803][ T2989] team0 (unregistering): Port device team_slave_0 removed [ 472.175695][ T5183] Bluetooth: hci5: command tx timeout [ 472.416432][ T7371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.424944][ T7371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.451509][ T7371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.599234][ T7371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.607871][ T7371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.635693][ T7371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.077685][ T7453] netlink: 40 bytes leftover after parsing attributes in process `syz.1.524'. [ 473.186421][ T7371] hsr_slave_0: entered promiscuous mode [ 473.243492][ T7371] hsr_slave_1: entered promiscuous mode [ 473.284717][ T7371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 473.292641][ T7371] Cannot create hsr debugfs directory [ 473.484707][ T4613] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 473.710800][ T4613] usb 5-1: Using ep0 maxpacket: 8 [ 473.777389][ T4613] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.788685][ T4613] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 473.845786][ T4613] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 473.857515][ T4613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.865984][ T4613] usb 5-1: Product: syz [ 473.870387][ T4613] usb 5-1: Manufacturer: syz [ 473.875419][ T4613] usb 5-1: SerialNumber: syz [ 474.257299][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.269367][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.407643][ T5183] Bluetooth: hci2: unknown advertising packet type: 0x14 [ 474.407792][ T5183] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 474.415362][ T5183] Bluetooth: hci2: unknown advertising packet type: 0x08 [ 474.422630][ T5183] Bluetooth: hci2: Malformed LE Event: 0x02 [ 474.554614][ T4613] usb 5-1: USB disconnect, device number 9 [ 475.329207][ T7371] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 475.423059][ T7466] loop1: detected capacity change from 0 to 128 [ 475.465875][ T7371] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 475.537491][ T7371] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 475.588853][ T7466] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 475.598595][ T7466] FAT-fs (loop1): Filesystem has been set read-only [ 475.605619][ T7466] syz.1.529: attempt to access beyond end of device [ 475.605619][ T7466] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 475.620081][ T7466] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 475.628308][ T7466] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 475.659200][ T7466] syz.1.529: attempt to access beyond end of device [ 475.659200][ T7466] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 475.699046][ T29] audit: type=1800 audit(1722587918.304:60): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.529" name="file2" dev="loop1" ino=1048648 res=0 errno=0 [ 475.731690][ T7371] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 475.751353][ T5197] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 475.775075][ T5197] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 475.790324][ T5197] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 475.826714][ T5197] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 475.862965][ T5197] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 475.877717][ T5197] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 476.088302][ T7466] syz.1.529: attempt to access beyond end of device [ 476.088302][ T7466] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 476.174682][ T7466] syz.1.529: attempt to access beyond end of device [ 476.174682][ T7466] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 476.259547][ T7473] loop4: detected capacity change from 0 to 512 [ 476.318972][ T7466] program syz.1.529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 476.778213][ T7473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.791662][ T7473] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.425466][ T6751] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.984484][ T5197] Bluetooth: hci1: command tx timeout [ 478.225195][ T7371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.264011][ T7467] chnl_net:caif_netlink_parms(): no params data found [ 478.393687][ T7494] netlink: 40 bytes leftover after parsing attributes in process `syz.4.535'. [ 478.579107][ T7371] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.691377][ T4613] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.699186][ T4613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.799280][ T4613] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.807080][ T4613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.380378][ T2989] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.651229][ T2989] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.879516][ T2989] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.081043][ T5197] Bluetooth: hci1: command tx timeout [ 480.199941][ T2989] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.354984][ T7467] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.363025][ T7467] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.371083][ T7467] bridge_slave_0: entered allmulticast mode [ 480.380326][ T7467] bridge_slave_0: entered promiscuous mode [ 480.507830][ T7467] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.518330][ T7467] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.526298][ T7467] bridge_slave_1: entered allmulticast mode [ 480.535501][ T7467] bridge_slave_1: entered promiscuous mode [ 480.746753][ T2989] bridge_slave_1: left allmulticast mode [ 480.752665][ T2989] bridge_slave_1: left promiscuous mode [ 480.759489][ T2989] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.924948][ T2989] bridge_slave_0: left allmulticast mode [ 480.930861][ T2989] bridge_slave_0: left promiscuous mode [ 480.940103][ T2989] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.051739][ T7520] loop1: detected capacity change from 0 to 128 [ 481.257740][ T7524] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 481.268399][ T7524] FAT-fs (loop1): Filesystem has been set read-only [ 481.275402][ T7524] syz.1.542: attempt to access beyond end of device [ 481.275402][ T7524] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 481.289457][ T7524] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 481.297977][ T7524] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 481.449227][ T7524] syz.1.542: attempt to access beyond end of device [ 481.449227][ T7524] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 481.514798][ T29] audit: type=1800 audit(1722587924.084:61): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.542" name="file2" dev="loop1" ino=1048650 res=0 errno=0 [ 481.626696][ T7520] program syz.1.542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.855827][ T2989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.938357][ T2989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.027811][ T2989] bond0 (unregistering): Released all slaves [ 482.145273][ T5197] Bluetooth: hci1: command tx timeout [ 482.621452][ T7467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.834784][ T7467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.274815][ T7467] team0: Port device team_slave_0 added [ 483.296080][ T7539] netlink: 40 bytes leftover after parsing attributes in process `syz.1.546'. [ 483.375567][ T2989] hsr_slave_0: left promiscuous mode [ 483.396014][ T2989] hsr_slave_1: left promiscuous mode [ 483.417423][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.425674][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.438180][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.446049][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.489465][ T2989] veth1_macvtap: left promiscuous mode [ 483.495641][ T2989] veth0_macvtap: left promiscuous mode [ 483.501547][ T2989] veth1_vlan: left promiscuous mode [ 483.507307][ T2989] veth0_vlan: left promiscuous mode [ 484.225803][ T5197] Bluetooth: hci1: command tx timeout [ 484.264993][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 484.461793][ T2989] team0 (unregistering): Port device team_slave_1 removed [ 484.548484][ T2989] team0 (unregistering): Port device team_slave_0 removed [ 484.580116][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.591564][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.601788][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 484.611701][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.815514][ T10] usb 5-1: config 0 descriptor?? [ 484.934427][ T10] usbhid 5-1:0.0: can't add hid device: -22 [ 484.941074][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 485.046687][ T7467] team0: Port device team_slave_1 added [ 485.472077][ T7467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.479327][ T7467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.506071][ T7467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.543789][ T7371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.732237][ T7467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.739908][ T7467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.766363][ T7467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.396570][ T7467] hsr_slave_0: entered promiscuous mode [ 486.476063][ T7467] hsr_slave_1: entered promiscuous mode [ 486.661065][ T7371] veth0_vlan: entered promiscuous mode [ 486.912919][ T7371] veth1_vlan: entered promiscuous mode [ 487.554662][ T25] usb 5-1: USB disconnect, device number 10 [ 487.827266][ T7371] veth0_macvtap: entered promiscuous mode [ 488.069488][ T7371] veth1_macvtap: entered promiscuous mode [ 488.124725][ T7467] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 488.191280][ T7467] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 488.302403][ T7467] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 488.380164][ T7467] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 488.547689][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.558529][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.568765][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.579856][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.590134][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.602124][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.617766][ T7371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.838138][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.849063][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.859895][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.870677][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.881072][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.891982][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.907837][ T7371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.950856][ T7371] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.960755][ T7371] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.970218][ T7371] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.979325][ T7371] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.546389][ T7592] netlink: 40 bytes leftover after parsing attributes in process `syz.4.559'. [ 489.750345][ T7467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.019091][ T7467] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.135926][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.143617][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.281279][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.289080][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.573399][ T7467] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 490.585101][ T7467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 492.431189][ T7629] netlink: 40 bytes leftover after parsing attributes in process `syz.4.569'. [ 492.620910][ T7467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.154789][ T7467] veth0_vlan: entered promiscuous mode [ 493.279895][ T7467] veth1_vlan: entered promiscuous mode [ 493.781644][ T7467] veth0_macvtap: entered promiscuous mode [ 493.846097][ T7467] veth1_macvtap: entered promiscuous mode [ 494.039105][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.050169][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.060403][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.071237][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.081406][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.092139][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.102252][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.113137][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.129058][ T7467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.398976][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.409832][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.420193][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.430998][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.442580][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.453361][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.463563][ T7467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.477208][ T7467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.493337][ T7467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.768951][ T7467] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.778355][ T7467] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.787686][ T7467] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.796853][ T7467] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.150568][ T7663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.577'. [ 496.372291][ T3112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.380773][ T3112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.463226][ T7674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.579'. [ 496.560121][ T3112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.568629][ T3112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.706337][ T7700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.586'. [ 498.875215][ T7704] netlink: 40 bytes leftover after parsing attributes in process `syz.4.588'. [ 499.431596][ T7712] loop1: detected capacity change from 0 to 1024 [ 499.972715][ T7712] EXT4-fs: Ignoring removed orlov option [ 500.014651][ T7712] EXT4-fs (loop1): Test dummy encryption mode enabled [ 500.023710][ T7712] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 500.161454][ T7712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.389536][ T7714] loop4: detected capacity change from 0 to 4096 [ 500.520823][ T7714] NILFS (loop4): invalid segment: Checksum error in segment payload [ 500.529483][ T7714] NILFS (loop4): trying rollback from an earlier position [ 500.622628][ T3033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.633226][ T3033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.726464][ T7712] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 500.740741][ T7729] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 500.775181][ T7714] NILFS (loop4): recovery complete [ 500.884988][ T7741] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 500.898741][ T7740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.906988][ T7740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.330306][ T6873] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.709185][ T7756] loop3: detected capacity change from 0 to 1024 [ 502.769336][ T7756] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 502.769336][ T7756] [ 502.780428][ T7756] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 503.054787][ T7758] netlink: 40 bytes leftover after parsing attributes in process `syz.4.601'. [ 503.059699][ T7746] loop2: detected capacity change from 0 to 4096 [ 503.159839][ T7746] NILFS (loop2): invalid segment: Checksum error in segment payload [ 503.168423][ T7746] NILFS (loop2): trying rollback from an earlier position [ 503.285105][ T7746] NILFS (loop2): recovery complete [ 503.362319][ T7761] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 503.574601][ T29] audit: type=1804 audit(1722587946.154:62): pid=7746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.527" name="/newroot/0/file1/bus" dev="loop2" ino=13 res=1 errno=0 [ 504.598006][ T7772] loop3: detected capacity change from 0 to 256 [ 504.897570][ T7772] FAT-fs (loop3): Directory bread(block 64) failed [ 504.904798][ T7772] FAT-fs (loop3): Directory bread(block 65) failed [ 504.911854][ T7772] FAT-fs (loop3): Directory bread(block 66) failed [ 504.918855][ T7772] FAT-fs (loop3): Directory bread(block 67) failed [ 504.925940][ T7772] FAT-fs (loop3): Directory bread(block 68) failed [ 504.932694][ T7772] FAT-fs (loop3): Directory bread(block 69) failed [ 504.939999][ T7772] FAT-fs (loop3): Directory bread(block 70) failed [ 504.947009][ T7772] FAT-fs (loop3): Directory bread(block 71) failed [ 504.953915][ T7772] FAT-fs (loop3): Directory bread(block 72) failed [ 504.960955][ T7772] FAT-fs (loop3): Directory bread(block 73) failed [ 505.392070][ T7772] syz.3.607: attempt to access beyond end of device [ 505.392070][ T7772] loop3: rw=2049, sector=1224, nr_sectors = 72 limit=256 [ 505.412229][ T7770] loop2: detected capacity change from 0 to 4096 [ 505.499649][ T7770] NILFS (loop2): invalid segment: Checksum error in segment payload [ 505.509038][ T7770] NILFS (loop2): trying rollback from an earlier position [ 505.664498][ T7770] NILFS (loop2): recovery complete [ 505.689338][ T7783] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 506.359699][ T7787] program syz.0.614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.430476][ T7791] loop4: detected capacity change from 0 to 256 [ 506.502246][ T7789] netlink: 40 bytes leftover after parsing attributes in process `syz.3.613'. [ 507.398239][ T7799] loop4: detected capacity change from 0 to 1024 [ 507.537133][ T7799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.126845][ T6751] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.348860][ T7795] loop2: detected capacity change from 0 to 4096 [ 508.540245][ T7795] NILFS (loop2): invalid segment: Checksum error in segment payload [ 508.548739][ T7795] NILFS (loop2): trying rollback from an earlier position [ 508.637206][ T7795] NILFS (loop2): recovery complete [ 508.665722][ T7818] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 508.879249][ T29] audit: type=1804 audit(1722587951.424:63): pid=7795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.616" name="/newroot/2/file1/bus" dev="loop2" ino=13 res=1 errno=0 [ 509.202555][ T7820] loop3: detected capacity change from 0 to 128 [ 509.376463][ T7820] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 509.384876][ T7820] FAT-fs (loop3): Filesystem has been set read-only [ 509.393727][ T7820] syz.3.627: attempt to access beyond end of device [ 509.393727][ T7820] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 509.408306][ T7820] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 509.416497][ T7820] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 509.423397][ T7822] loop4: detected capacity change from 0 to 512 [ 509.536039][ T7823] program syz.3.627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 509.549562][ T7820] syz.3.627: attempt to access beyond end of device [ 509.549562][ T7820] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 509.612612][ T29] audit: type=1800 audit(1722587952.184:64): pid=7820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.627" name="file2" dev="loop3" ino=1048662 res=0 errno=0 [ 509.711355][ T7822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.724703][ T7822] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.144123][ T6751] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.183077][ T7827] netlink: 40 bytes leftover after parsing attributes in process `syz.2.629'. [ 511.264876][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 511.527718][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 511.562306][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.572951][ T10] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 511.666504][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 511.676116][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.684723][ T10] usb 1-1: Product: syz [ 511.689127][ T10] usb 1-1: Manufacturer: syz [ 511.694065][ T10] usb 1-1: SerialNumber: syz [ 512.004776][ T5197] Bluetooth: hci5: unknown advertising packet type: 0x14 [ 512.004924][ T5197] Bluetooth: hci5: unknown advertising packet type: 0x20 [ 512.012330][ T5197] Bluetooth: hci5: unknown advertising packet type: 0x08 [ 512.020310][ T5197] Bluetooth: hci5: Malformed LE Event: 0x02 [ 512.037893][ T10] usb 1-1: USB disconnect, device number 19 [ 512.688380][ T7850] loop3: detected capacity change from 0 to 128 [ 512.778213][ T7850] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 512.786698][ T7850] FAT-fs (loop3): Filesystem has been set read-only [ 512.793532][ T7850] syz.3.640: attempt to access beyond end of device [ 512.793532][ T7850] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 512.807866][ T7850] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 512.816122][ T7850] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 512.899128][ T7850] syz.3.640: attempt to access beyond end of device [ 512.899128][ T7850] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 512.906785][ T7848] loop1: detected capacity change from 0 to 4096 [ 512.940567][ T7848] NILFS (loop1): invalid segment: Checksum error in segment payload [ 512.949260][ T7848] NILFS (loop1): trying rollback from an earlier position [ 513.003720][ T29] audit: type=1800 audit(1722587955.544:65): pid=7850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.640" name="file2" dev="loop3" ino=1048664 res=0 errno=0 [ 513.049117][ T7848] NILFS (loop1): recovery complete [ 513.074878][ T7854] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 513.095397][ T7850] program syz.3.640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 513.226960][ T29] audit: type=1804 audit(1722587955.814:66): pid=7848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.639" name="/newroot/50/file1/bus" dev="loop1" ino=13 res=1 errno=0 [ 513.400159][ T7857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.642'. [ 514.253800][ T7866] warning: `syz.1.646' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 514.530918][ T7859] loop2: detected capacity change from 0 to 4096 [ 514.603403][ T7859] NILFS (loop2): invalid segment: Checksum error in segment payload [ 514.612405][ T7859] NILFS (loop2): trying rollback from an earlier position [ 514.812480][ T7859] NILFS (loop2): recovery complete [ 514.842831][ T7876] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 515.746710][ T7887] loop3: detected capacity change from 0 to 128 [ 515.816100][ T7887] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 515.824502][ T7887] FAT-fs (loop3): Filesystem has been set read-only [ 515.831329][ T7887] syz.3.654: attempt to access beyond end of device [ 515.831329][ T7887] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 515.844745][ T25] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 515.846114][ T7887] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 515.861069][ T7887] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 515.902915][ T7887] syz.3.654: attempt to access beyond end of device [ 515.902915][ T7887] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 515.923846][ T29] audit: type=1800 audit(1722587958.544:67): pid=7887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.654" name="file2" dev="loop3" ino=1048666 res=0 errno=0 [ 515.988033][ T7891] program syz.3.654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 516.065803][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 516.100908][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.111711][ T25] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 516.140245][ T25] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 516.151263][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.159791][ T25] usb 1-1: Product: syz [ 516.164172][ T25] usb 1-1: Manufacturer: syz [ 516.169461][ T25] usb 1-1: SerialNumber: syz [ 516.435194][ T5183] Bluetooth: hci5: unknown advertising packet type: 0x14 [ 516.435384][ T5183] Bluetooth: hci5: unknown advertising packet type: 0x20 [ 516.443082][ T5183] Bluetooth: hci5: unknown advertising packet type: 0x08 [ 516.450798][ T5183] Bluetooth: hci5: Malformed LE Event: 0x02 [ 516.526041][ T25] usb 1-1: USB disconnect, device number 20 [ 516.694880][ T7893] netlink: 40 bytes leftover after parsing attributes in process `syz.2.655'. [ 517.365429][ T7895] loop3: detected capacity change from 0 to 4096 [ 517.494806][ T7895] NILFS (loop3): invalid segment: Checksum error in segment payload [ 517.503197][ T7895] NILFS (loop3): trying rollback from an earlier position [ 517.609525][ T7895] NILFS (loop3): recovery complete [ 517.635785][ T7900] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 517.764526][ T25] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 517.987284][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 518.082347][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=7300, bcdDevice=db.79 [ 518.093553][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.102027][ T25] usb 1-1: Product: syz [ 518.106599][ T25] usb 1-1: Manufacturer: syz [ 518.111418][ T25] usb 1-1: SerialNumber: syz [ 518.164788][ T5183] Bluetooth: hci2: command 0x0406 tx timeout [ 518.171532][ T25] usb 1-1: config 0 descriptor?? [ 518.231432][ T25] pvrusb2: Hardware description: WinTV HVR-1900 Model 73xxx [ 518.466027][ T25] usb 1-1: USB disconnect, device number 21 [ 518.482281][ T2014] usb 1-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 518.491976][ T2014] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 519.944714][ T10] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 520.196748][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 520.204787][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 520.215230][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 520.225460][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 520.237186][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 520.281714][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 520.289611][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 520.300173][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 520.310383][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 520.321903][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 520.362302][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 520.370216][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 520.380637][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 520.390827][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 520.402351][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 520.457317][ T10] usb 3-1: string descriptor 0 read error: -22 [ 520.464168][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 520.473716][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.568765][ T10] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 520.869479][ T10] usb 3-1: USB disconnect, device number 20 [ 521.676852][ T7925] loop1: detected capacity change from 0 to 128 [ 521.844134][ T7925] program syz.1.666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 522.151378][ T5183] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 522.173150][ T5183] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 522.192185][ T5183] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 522.205026][ T5183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 522.226491][ T5183] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 522.236412][ T5183] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 522.925468][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 523.100415][ T7934] loop1: detected capacity change from 0 to 2048 [ 523.154616][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 523.176562][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.188603][ T10] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 523.230184][ T7934] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 523.265572][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 523.275105][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.283367][ T10] usb 3-1: Product: syz [ 523.287897][ T10] usb 3-1: Manufacturer: syz [ 523.292716][ T10] usb 3-1: SerialNumber: syz [ 523.322149][ T7934] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 523.616550][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.628148][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.733309][ T5183] Bluetooth: hci1: unknown advertising packet type: 0x14 [ 523.733501][ T5183] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 523.741521][ T5183] Bluetooth: hci1: unknown advertising packet type: 0x08 [ 523.750026][ T5183] Bluetooth: hci1: Malformed LE Event: 0x02 [ 523.824179][ T10] usb 3-1: USB disconnect, device number 21 [ 524.251986][ T7928] chnl_net:caif_netlink_parms(): no params data found [ 524.306211][ T5183] Bluetooth: hci3: command tx timeout [ 525.292785][ T2989] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.430604][ T2989] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.672017][ T2989] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.081346][ T2989] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.151710][ T7928] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.153581][ T7962] loop2: detected capacity change from 0 to 128 [ 526.159560][ T7928] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.173348][ T7928] bridge_slave_0: entered allmulticast mode [ 526.184540][ T7928] bridge_slave_0: entered promiscuous mode [ 526.201113][ T7962] program syz.2.678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 526.248310][ T7928] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.256316][ T7928] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.264143][ T7928] bridge_slave_1: entered allmulticast mode [ 526.346827][ T7928] bridge_slave_1: entered promiscuous mode [ 526.348648][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.359697][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.385711][ T5183] Bluetooth: hci3: command tx timeout [ 526.455671][ T8] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 526.707023][ T8] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 526.715033][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 526.725517][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 526.735742][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 526.747246][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 526.773094][ T2989] bridge_slave_1: left allmulticast mode [ 526.779158][ T2989] bridge_slave_1: left promiscuous mode [ 526.785870][ T2989] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.837652][ T8] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 526.846165][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 526.856636][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 526.866811][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 526.878467][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 526.900888][ T2989] bridge_slave_0: left allmulticast mode [ 526.908032][ T2989] bridge_slave_0: left promiscuous mode [ 526.914849][ T2989] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.944798][ T8] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 526.952495][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 526.963647][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 526.973913][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 526.985451][ T8] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 527.063279][ T8] usb 2-1: string descriptor 0 read error: -22 [ 527.070331][ T8] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 527.079823][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.196115][ T8] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 527.450518][ T8] usb 2-1: USB disconnect, device number 37 [ 527.707844][ T2989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.728697][ T2989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.760225][ T2989] bond0 (unregistering): Released all slaves [ 527.846219][ T7928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.973116][ T7928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.435758][ T7928] team0: Port device team_slave_0 added [ 528.469842][ T5183] Bluetooth: hci3: command tx timeout [ 528.480243][ T7928] team0: Port device team_slave_1 added [ 529.006712][ T2989] hsr_slave_0: left promiscuous mode [ 529.054938][ T2989] hsr_slave_1: left promiscuous mode [ 529.081671][ T7970] loop2: detected capacity change from 0 to 2048 [ 529.088879][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.097869][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.171598][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.179628][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.244851][ T7970] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 529.283223][ T2989] veth1_macvtap: left promiscuous mode [ 529.283725][ T7970] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 529.289490][ T2989] veth0_macvtap: left promiscuous mode [ 529.289791][ T2989] veth1_vlan: left promiscuous mode [ 529.310177][ T2989] veth0_vlan: left promiscuous mode [ 529.588252][ T5197] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 529.597947][ T5197] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 529.607431][ T5197] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 529.758736][ T5197] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 529.776484][ T5197] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 529.787383][ T5197] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 530.560417][ T5183] Bluetooth: hci3: command tx timeout [ 530.585284][ T2989] team0 (unregistering): Port device team_slave_1 removed [ 530.662372][ T2989] team0 (unregistering): Port device team_slave_0 removed [ 531.057455][ T7928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.064979][ T7928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.091376][ T7928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.450438][ T7928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.458008][ T7928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.484594][ T7928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.907454][ T5183] Bluetooth: hci2: command tx timeout [ 532.102027][ T7928] hsr_slave_0: entered promiscuous mode [ 532.144070][ T7989] loop1: detected capacity change from 0 to 4096 [ 532.198919][ T7928] hsr_slave_1: entered promiscuous mode [ 532.254416][ T7928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.262218][ T7928] Cannot create hsr debugfs directory [ 532.340067][ T7989] NILFS (loop1): invalid segment: Checksum error in segment payload [ 532.348571][ T7989] NILFS (loop1): trying rollback from an earlier position [ 532.468783][ T7989] NILFS (loop1): recovery complete [ 532.534543][ T7998] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 533.141434][ T7975] chnl_net:caif_netlink_parms(): no params data found [ 533.582723][ T8004] loop2: detected capacity change from 0 to 128 [ 533.862339][ T8004] program syz.2.688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 533.988189][ T5183] Bluetooth: hci2: command tx timeout [ 534.061109][ T4535] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.310128][ T5249] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 534.325102][ T4535] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.595747][ T4535] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.613547][ T5249] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.624363][ T5249] usb 2-1: config 0 has no interfaces? [ 534.630126][ T5249] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99 [ 534.639566][ T5249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.696711][ T5249] usb 2-1: config 0 descriptor?? [ 534.990233][ T4535] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.054661][ T8007] vlan2: entered promiscuous mode [ 535.059952][ T8007] bond0: entered promiscuous mode [ 535.065599][ T8007] bond_slave_0: entered promiscuous mode [ 535.072470][ T8007] bond_slave_1: entered promiscuous mode [ 535.079663][ T8007] vlan2: entered allmulticast mode [ 535.085157][ T8007] bond0: entered allmulticast mode [ 535.091229][ T8007] bond_slave_0: entered allmulticast mode [ 535.097189][ T8007] bond_slave_1: entered allmulticast mode [ 535.284682][ T1039] usb 2-1: USB disconnect, device number 38 [ 535.315400][ T8] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 535.597331][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 535.605719][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 535.616289][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 535.626541][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 535.638193][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 535.689564][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 535.697500][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 535.708662][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 535.718929][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 535.730517][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 535.788837][ T7928] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 535.821627][ T7928] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 535.845694][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 535.853388][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 535.864038][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 535.874472][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 535.886116][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 535.917183][ T4535] bridge_slave_1: left allmulticast mode [ 535.923086][ T4535] bridge_slave_1: left promiscuous mode [ 535.929987][ T4535] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.966735][ T4535] bridge_slave_0: left allmulticast mode [ 535.972787][ T4535] bridge_slave_0: left promiscuous mode [ 535.980711][ T4535] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.998103][ T8] usb 3-1: string descriptor 0 read error: -22 [ 536.005992][ T8] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 536.015947][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.070936][ T5183] Bluetooth: hci2: command tx timeout [ 536.079652][ T8] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 536.415641][ T8] usb 3-1: USB disconnect, device number 22 [ 536.693494][ T4535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.784757][ T4535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.821573][ T4535] bond0 (unregistering): Released all slaves [ 536.978175][ T7928] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 537.085432][ T7975] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.093172][ T7975] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.103363][ T7975] bridge_slave_0: entered allmulticast mode [ 537.112715][ T7975] bridge_slave_0: entered promiscuous mode [ 537.127480][ T7928] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 537.227819][ T5188] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 537.237403][ T5188] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 537.248762][ T5188] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 537.260525][ T5188] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 537.366881][ T5188] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 537.399540][ T5188] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 537.409813][ T7975] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.418126][ T7975] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.426100][ T7975] bridge_slave_1: entered allmulticast mode [ 537.435593][ T7975] bridge_slave_1: entered promiscuous mode [ 537.988989][ T7975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.089308][ T4535] hsr_slave_0: left promiscuous mode [ 538.139278][ T4535] hsr_slave_1: left promiscuous mode [ 538.150500][ T5188] Bluetooth: hci2: command tx timeout [ 538.190926][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.199822][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.257791][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.268224][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.326596][ T4535] veth1_macvtap: left promiscuous mode [ 538.332470][ T4535] veth0_macvtap: left promiscuous mode [ 538.338865][ T4535] veth1_vlan: left promiscuous mode [ 538.344549][ T4535] veth0_vlan: left promiscuous mode [ 538.640973][ T5188] Bluetooth: hci0: command 0x0406 tx timeout [ 539.108722][ T4535] team0 (unregistering): Port device team_slave_1 removed [ 539.193555][ T4535] team0 (unregistering): Port device team_slave_0 removed [ 539.524450][ T5183] Bluetooth: hci4: command tx timeout [ 539.641935][ T7975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.159454][ T8051] loop1: detected capacity change from 0 to 1764 [ 540.206596][ T8051] iso9660: Unknown parameter 'oession' [ 540.403305][ T8053] loop2: detected capacity change from 0 to 128 [ 540.447199][ T8053] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 540.455484][ T8053] FAT-fs (loop2): Filesystem has been set read-only [ 540.462207][ T8053] syz.2.698: attempt to access beyond end of device [ 540.462207][ T8053] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 540.476779][ T8053] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 540.484906][ T8053] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 540.558582][ T7975] team0: Port device team_slave_0 added [ 540.651987][ T7975] team0: Port device team_slave_1 added [ 540.723870][ T8054] program syz.2.698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 540.776333][ T8053] syz.2.698: attempt to access beyond end of device [ 540.776333][ T8053] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 540.863949][ T29] audit: type=1800 audit(1722587983.424:68): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.698" name="file2" dev="loop2" ino=1048670 res=0 errno=0 [ 541.061777][ T7975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.070635][ T7975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.097805][ T7975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.267283][ T7975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.274952][ T7975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.301463][ T7975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.497104][ T4535] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.564619][ T2619] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 541.585113][ T5183] Bluetooth: hci4: command tx timeout [ 541.791887][ T2619] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.803246][ T2619] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99 [ 541.812755][ T2619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.856713][ T4535] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.880585][ T2619] usb 2-1: config 0 descriptor?? [ 541.907318][ T2619] usb 2-1: interface 1 not found [ 541.969749][ T7975] hsr_slave_0: entered promiscuous mode [ 541.980026][ T8] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 542.032461][ T7975] hsr_slave_1: entered promiscuous mode [ 542.065176][ T7975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.073102][ T7975] Cannot create hsr debugfs directory [ 542.146682][ T4535] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.251591][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 542.259532][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 542.271493][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 542.282377][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 542.293993][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 542.327168][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 542.335058][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 542.345932][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 542.356217][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 542.367832][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 542.442249][ T8029] chnl_net:caif_netlink_parms(): no params data found [ 542.449566][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 542.449726][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 542.449875][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 542.450024][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 542.450197][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 542.535871][ T8058] vlan3: entered promiscuous mode [ 542.541114][ T8058] dummy0: entered promiscuous mode [ 542.547414][ T8058] vlan3: entered allmulticast mode [ 542.552718][ T8058] dummy0: entered allmulticast mode [ 542.580529][ T8058] dummy0: left allmulticast mode [ 542.582590][ T8] usb 3-1: string descriptor 0 read error: -22 [ 542.586537][ T8058] dummy0: left promiscuous mode [ 542.599578][ T8] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 542.609123][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.700211][ T8] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 542.727934][ T7928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.811147][ T4535] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.981997][ T5249] usb 2-1: USB disconnect, device number 39 [ 543.026219][ T5241] usb 3-1: USB disconnect, device number 23 [ 543.147689][ T7928] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.373983][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.381902][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.547074][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.554897][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.664803][ T5183] Bluetooth: hci4: command tx timeout [ 543.902715][ T4535] bridge_slave_1: left allmulticast mode [ 543.908787][ T4535] bridge_slave_1: left promiscuous mode [ 543.915566][ T4535] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.983774][ T4535] bridge_slave_0: left allmulticast mode [ 543.991155][ T4535] bridge_slave_0: left promiscuous mode [ 543.998887][ T4535] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.603081][ T4535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.662152][ T4535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.722831][ T4535] bond0 (unregistering): Released all slaves [ 545.745114][ T5183] Bluetooth: hci4: command tx timeout [ 545.873937][ T8029] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.882197][ T8029] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.890232][ T8029] bridge_slave_0: entered allmulticast mode [ 545.933386][ T8029] bridge_slave_0: entered promiscuous mode [ 546.026435][ T8029] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.034471][ T8029] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.042328][ T8029] bridge_slave_1: entered allmulticast mode [ 546.055613][ T8029] bridge_slave_1: entered promiscuous mode [ 546.114655][ T4535] hsr_slave_0: left promiscuous mode [ 546.123502][ T4535] hsr_slave_1: left promiscuous mode [ 546.145340][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 546.158415][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.166397][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.177007][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.185017][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.203741][ T4535] veth1_macvtap: left promiscuous mode [ 546.209816][ T4535] veth0_macvtap: left promiscuous mode [ 546.216211][ T4535] veth1_vlan: left promiscuous mode [ 546.221742][ T4535] veth0_vlan: left promiscuous mode [ 546.640614][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.653019][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.663358][ T10] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 546.673005][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.690162][ T10] usb 2-1: config 0 descriptor?? [ 547.007432][ T8097] loop2: detected capacity change from 0 to 1764 [ 547.023655][ T8097] iso9660: Unknown parameter 'oession' [ 547.164162][ T4535] team0 (unregistering): Port device team_slave_1 removed [ 547.196903][ T4535] team0 (unregistering): Port device team_slave_0 removed [ 547.908621][ T8029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.104087][ T8029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.268206][ T7975] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 548.452085][ T8029] team0: Port device team_slave_0 added [ 548.459721][ T8102] loop2: detected capacity change from 0 to 128 [ 548.487118][ T7975] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 548.556091][ T8029] team0: Port device team_slave_1 added [ 548.575060][ T8102] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 548.583432][ T8102] FAT-fs (loop2): Filesystem has been set read-only [ 548.590414][ T8102] syz.2.707: attempt to access beyond end of device [ 548.590414][ T8102] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 548.604655][ T8102] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 548.613506][ T8102] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 548.655368][ T7975] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 548.668545][ T8102] syz.2.707: attempt to access beyond end of device [ 548.668545][ T8102] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 548.690981][ T29] audit: type=1800 audit(1722587991.314:69): pid=8102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.707" name="file2" dev="loop2" ino=1048671 res=0 errno=0 [ 548.756144][ T8102] program syz.2.707 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 548.865476][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 548.872275][ T7975] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 548.872566][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 548.915836][ T10] usb 2-1: USB disconnect, device number 40 [ 549.079518][ T8029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.087867][ T8029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.115545][ T8029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.242740][ T7928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.256793][ T8029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.263952][ T8029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.292495][ T8029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.875151][ T8029] hsr_slave_0: entered promiscuous mode [ 549.885304][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 549.896943][ T8029] hsr_slave_1: entered promiscuous mode [ 549.913473][ T8029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 549.921401][ T8029] Cannot create hsr debugfs directory [ 550.150009][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.161068][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99 [ 550.170657][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.212060][ T10] usb 3-1: config 0 descriptor?? [ 550.244067][ T10] usb 3-1: interface 1 not found [ 550.262188][ T1039] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 550.484654][ T1039] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 550.492539][ T1039] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 550.503032][ T1039] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 550.513266][ T1039] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 550.524940][ T1039] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 550.635874][ T8108] vlan2: entered promiscuous mode [ 550.641390][ T8108] dummy0: entered promiscuous mode [ 550.648516][ T8108] vlan2: entered allmulticast mode [ 550.653996][ T8108] dummy0: entered allmulticast mode [ 550.685795][ T8108] dummy0: left allmulticast mode [ 550.685863][ T1039] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 550.690896][ T8108] dummy0: left promiscuous mode [ 550.698561][ T1039] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 550.698709][ T1039] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 550.725002][ T1039] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 550.736573][ T1039] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 550.875666][ T1039] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 550.883384][ T1039] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 550.893907][ T1039] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 550.904381][ T1039] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 550.915947][ T1039] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 550.929234][ T5239] usb 3-1: USB disconnect, device number 24 [ 550.994531][ T1039] usb 2-1: string descriptor 0 read error: -22 [ 550.996095][ T7975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.001280][ T1039] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 551.017355][ T1039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.182705][ T1039] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 551.317309][ T7975] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.441731][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.449310][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.493939][ T1039] usb 2-1: USB disconnect, device number 41 [ 551.605921][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.613707][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.100832][ T7928] veth0_vlan: entered promiscuous mode [ 552.168061][ T8029] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 552.295654][ T7928] veth1_vlan: entered promiscuous mode [ 552.333754][ T8029] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 552.460643][ T8029] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 552.632746][ T8029] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 552.867610][ T7928] veth0_macvtap: entered promiscuous mode [ 552.962891][ T7928] veth1_macvtap: entered promiscuous mode [ 553.183274][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.197067][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.207822][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.219309][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.234526][ T7928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.464477][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.475278][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.485629][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.496411][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.511489][ T7928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.747968][ T7928] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.757129][ T7928] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.766376][ T7928] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.775584][ T7928] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.888726][ T8029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.138447][ T8029] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.235494][ T7975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.266631][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.274482][ T5249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.390655][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.398434][ T5249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.980891][ T8145] loop1: detected capacity change from 0 to 1764 [ 555.032211][ T8145] iso9660: Unknown parameter 'oession' [ 555.038061][ T7975] veth0_vlan: entered promiscuous mode [ 555.138736][ T7975] veth1_vlan: entered promiscuous mode [ 555.485080][ T7975] veth0_macvtap: entered promiscuous mode [ 555.582354][ T7975] veth1_macvtap: entered promiscuous mode [ 555.882022][ T7975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.892944][ T7975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.903562][ T7975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.914425][ T7975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.924687][ T7975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.935423][ T7975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.950749][ T7975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.216710][ T7975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.227872][ T7975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.238101][ T7975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.248887][ T7975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.259101][ T7975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.269936][ T7975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.287905][ T7975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.636707][ T7975] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.645984][ T7975] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.655189][ T7975] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.664389][ T7975] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.942486][ T8029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.178720][ T5241] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 557.411254][ T8029] veth0_vlan: entered promiscuous mode [ 557.442692][ T5241] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.453375][ T5241] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99 [ 557.463633][ T5241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.490337][ T8029] veth1_vlan: entered promiscuous mode [ 557.608302][ T5241] usb 3-1: config 0 descriptor?? [ 557.702977][ T5241] usb 3-1: interface 1 not found [ 557.948831][ T8029] veth0_macvtap: entered promiscuous mode [ 557.996241][ T8029] veth1_macvtap: entered promiscuous mode [ 558.028811][ T8167] vlan2: entered promiscuous mode [ 558.034610][ T8167] dummy0: entered promiscuous mode [ 558.040943][ T8167] vlan2: entered allmulticast mode [ 558.046494][ T8167] dummy0: entered allmulticast mode [ 558.062313][ T10] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 558.099726][ T8167] dummy0: left allmulticast mode [ 558.106156][ T8167] dummy0: left promiscuous mode [ 558.304090][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 558.313888][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 558.325352][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 558.335671][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 558.347242][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 558.366847][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.377583][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.388705][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.399574][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.409757][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.420476][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.430569][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.441799][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.457384][ T8029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.533817][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 558.543084][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 558.554868][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 558.565117][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 558.576754][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 558.610199][ T44] usb 3-1: USB disconnect, device number 25 [ 558.698814][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 558.708493][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 558.719240][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 558.729593][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 558.741273][ T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 558.803248][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.815761][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.826675][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.837521][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.849792][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.862003][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.875846][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.886669][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.901512][ T8029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.938851][ T10] usb 2-1: string descriptor 0 read error: -22 [ 558.951919][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 558.964987][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.077427][ T10] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 559.230341][ T8029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.241521][ T8029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.252356][ T8029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.261673][ T8029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.394154][ T10] usb 2-1: USB disconnect, device number 42 [ 561.946038][ T3130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.955472][ T3130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.116359][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.125085][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.297480][ T8227] loop2: detected capacity change from 0 to 1764 [ 562.369187][ T8227] iso9660: Unknown parameter 'oession' [ 562.487310][ T8234] loop1: detected capacity change from 0 to 1024 [ 562.648176][ T8234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.303916][ T6873] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.239319][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.247845][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.420902][ T8263] loop4: detected capacity change from 0 to 512 [ 564.502241][ T4535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.510460][ T4535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.588275][ T8263] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 564.777682][ T8263] EXT4-fs (loop4): 1 truncate cleaned up [ 564.788995][ T8263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.953002][ T8263] overlayfs: failed to resolve './file1': -2 [ 565.470661][ T7928] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /2/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 565.567895][ T7928] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 565.646428][ T7928] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /2/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 565.678812][ T44] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 565.710155][ T7928] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 565.807039][ T7928] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /2/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 565.884508][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 565.896315][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.908011][ T44] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 565.943148][ T44] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 565.953030][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.961441][ T44] usb 4-1: Product: syz [ 565.966032][ T44] usb 4-1: Manufacturer: syz [ 565.970861][ T44] usb 4-1: SerialNumber: syz [ 565.979433][ T7928] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 566.074788][ T7928] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /2/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 566.187075][ T7928] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 566.296851][ T7928] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /2/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 566.327056][ T8276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.337137][ T8276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.386987][ T7928] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 566.449481][ T5183] Bluetooth: hci2: unknown advertising packet type: 0x14 [ 566.449795][ T5183] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 566.457276][ T5183] Bluetooth: hci2: unknown advertising packet type: 0x08 [ 566.466454][ T5183] Bluetooth: hci2: Malformed LE Event: 0x02 [ 566.489783][ T44] usb 4-1: USB disconnect, device number 11 [ 566.753474][ T8289] loop1: detected capacity change from 0 to 1764 [ 566.797593][ T4535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.806086][ T4535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.887201][ T8289] iso9660: Unknown parameter 'oession' [ 567.076985][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.085150][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.998278][ T8316] loop1: detected capacity change from 0 to 512 [ 569.098064][ T8316] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 569.221317][ T8316] EXT4-fs (loop1): 1 truncate cleaned up [ 569.230367][ T8316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.437491][ T8316] overlay: ./file1 is not a directory [ 569.543092][ T8316] overlay: ./file1 is not a directory [ 569.966769][ T6873] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.220810][ T7928] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.233556][ T8326] loop2: detected capacity change from 0 to 1764 [ 570.300578][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.326924][ T8326] iso9660: Unknown parameter 'oession' [ 570.490318][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.671689][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.850072][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.301666][ T11] bridge_slave_1: left allmulticast mode [ 571.307888][ T11] bridge_slave_1: left promiscuous mode [ 571.314742][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.368342][ T11] bridge_slave_0: left allmulticast mode [ 571.374429][ T11] bridge_slave_0: left promiscuous mode [ 571.380982][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.888436][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.970158][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.035871][ T11] bond0 (unregistering): Released all slaves [ 572.564865][ T4613] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 572.765686][ T5188] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 572.785220][ T5188] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 572.800317][ T5188] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 572.816235][ T4613] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.826864][ T4613] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99 [ 572.836437][ T4613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.855793][ T4613] usb 2-1: config 0 descriptor?? [ 572.885779][ T4613] usb 2-1: interface 1 not found [ 572.911331][ T5188] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 572.936363][ T5188] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 572.946234][ T5188] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 573.074420][ T11] hsr_slave_0: left promiscuous mode [ 573.149846][ T11] hsr_slave_1: left promiscuous mode [ 573.187331][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.195690][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.290454][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.299459][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.312909][ T8352] loop2: detected capacity change from 0 to 512 [ 573.382132][ T8352] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 573.388625][ T11] veth1_macvtap: left promiscuous mode [ 573.398118][ T11] veth0_macvtap: left promiscuous mode [ 573.404027][ T11] veth1_vlan: left promiscuous mode [ 573.409772][ T11] veth0_vlan: left promiscuous mode [ 573.786522][ T8352] EXT4-fs (loop2): 1 truncate cleaned up [ 573.794136][ T8352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.928322][ T8352] overlay: ./file1 is not a directory [ 573.981209][ T8352] overlay: ./file1 is not a directory [ 574.482001][ T7467] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.572584][ T8370] netlink: 40 bytes leftover after parsing attributes in process `syz.3.758'. [ 574.630519][ T11] team0 (unregistering): Port device team_slave_1 removed [ 574.736225][ T11] team0 (unregistering): Port device team_slave_0 removed [ 575.031280][ T5188] Bluetooth: hci3: command tx timeout [ 575.169997][ T8338] vlan3: entered promiscuous mode [ 575.175560][ T8338] dummy0: entered promiscuous mode [ 575.176558][ T8338] vlan3: entered allmulticast mode [ 575.176650][ T8338] dummy0: entered allmulticast mode [ 575.469450][ T4613] usb 2-1: USB disconnect, device number 43 [ 576.154074][ T8385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.763'. [ 577.109193][ T5188] Bluetooth: hci3: command tx timeout [ 577.255601][ T8404] binder: 8402:8404 ioctl c018620c 20000040 returned -1 [ 577.320878][ T8343] chnl_net:caif_netlink_parms(): no params data found [ 577.398543][ T8407] loop2: detected capacity change from 0 to 512 [ 577.467846][ T8407] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 577.534097][ T8407] EXT4-fs (loop2): 1 truncate cleaned up [ 577.581129][ T8407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.718845][ T8407] overlay: ./file1 is not a directory [ 577.775539][ T8407] overlay: ./file1 is not a directory [ 578.073888][ T7467] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.456085][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 578.627513][ T8425] netlink: 40 bytes leftover after parsing attributes in process `syz.2.773'. [ 578.645916][ T8428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.775'. [ 578.758334][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.768980][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99 [ 578.779085][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.856585][ T10] usb 2-1: config 0 descriptor?? [ 578.893351][ T10] usb 2-1: interface 1 not found [ 578.960572][ T8343] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.968526][ T8343] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.976492][ T8343] bridge_slave_0: entered allmulticast mode [ 578.985771][ T8343] bridge_slave_0: entered promiscuous mode [ 579.133085][ T8343] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.140997][ T8343] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.149020][ T8343] bridge_slave_1: entered allmulticast mode [ 579.158313][ T8343] bridge_slave_1: entered promiscuous mode [ 579.185669][ T5188] Bluetooth: hci3: command tx timeout [ 579.245260][ T10] usb 2-1: USB disconnect, device number 44 [ 579.521700][ T8343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.596797][ T8343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.756907][ T8343] team0: Port device team_slave_0 added [ 579.804765][ T8343] team0: Port device team_slave_1 added [ 580.111702][ T8343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.119038][ T8343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.148254][ T8343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.253074][ T8343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.261115][ T8343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.287591][ T8343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.481241][ T8449] mmap: syz.3.781 (8449) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 580.508808][ T8343] hsr_slave_0: entered promiscuous mode [ 580.519851][ T8450] overlayfs: failed to resolve './file0': -2 [ 580.592730][ T8343] hsr_slave_1: entered promiscuous mode [ 580.635282][ T8343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 580.643098][ T8343] Cannot create hsr debugfs directory [ 581.285412][ T5188] Bluetooth: hci3: command tx timeout [ 581.400319][ T8463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.786'. [ 581.893098][ T8466] netlink: 40 bytes leftover after parsing attributes in process `syz.1.787'. [ 582.461694][ T8343] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 582.537995][ T8343] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 582.616927][ T8343] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 582.697009][ T2014] pvrusb2: request_firmware fatal error with code=-110 [ 582.701672][ T8343] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 582.704008][ T2014] pvrusb2: Failure uploading firmware1 [ 582.704056][ T2014] pvrusb2: Device initialization was not successful. [ 582.727167][ T2014] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 582.737578][ T2014] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 582.754795][ T25] pvrusb2: Device being rendered inoperable [ 583.285064][ T8] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 583.536739][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.547450][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99 [ 583.556964][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.589744][ T8486] overlayfs: failed to resolve './file0': -2 [ 583.600535][ T8] usb 2-1: config 0 descriptor?? [ 583.660162][ T8] usb 2-1: interface 1 not found [ 583.975625][ T8] usb 2-1: USB disconnect, device number 45 [ 584.225013][ T8343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.353093][ T8343] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.461398][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.469245][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.593392][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.601216][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.030048][ T8496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.797'. [ 585.743139][ T8508] netlink: 40 bytes leftover after parsing attributes in process `syz.3.800'. [ 586.388700][ T5183] Bluetooth: hci4: command 0x0406 tx timeout [ 586.741470][ T8343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.185485][ T8529] overlayfs: failed to resolve './file0': -2 [ 587.315109][ T25] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 587.560877][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 587.584013][ T25] usb 2-1: no configurations [ 587.590075][ T25] usb 2-1: can't read configurations, error -22 [ 587.793299][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 587.794787][ T25] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 587.799977][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 588.041268][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 588.052109][ T25] usb 2-1: no configurations [ 588.058094][ T25] usb 2-1: can't read configurations, error -22 [ 588.120388][ T25] usb usb2-port1: attempt power cycle [ 588.456214][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 588.565661][ T25] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 588.626298][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.809'. [ 588.634451][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 588.654119][ T25] usb 2-1: no configurations [ 588.659692][ T25] usb 2-1: can't read configurations, error -22 [ 588.761010][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.772797][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99 [ 588.782954][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.846981][ T10] usb 4-1: config 0 descriptor?? [ 588.868374][ T25] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 588.901116][ T10] usb 4-1: interface 1 not found [ 588.937061][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 588.958433][ T25] usb 2-1: no configurations [ 588.963381][ T25] usb 2-1: can't read configurations, error -22 [ 589.045479][ T25] usb usb2-port1: unable to enumerate USB device [ 589.075131][ T8343] veth0_vlan: entered promiscuous mode [ 589.187095][ T8540] vlan2: entered promiscuous mode [ 589.192397][ T8540] dummy0: entered promiscuous mode [ 589.198819][ T8540] vlan2: entered allmulticast mode [ 589.204167][ T8540] dummy0: entered allmulticast mode [ 589.257950][ T8343] veth1_vlan: entered promiscuous mode [ 589.333642][ T4613] usb 4-1: USB disconnect, device number 12 [ 589.585112][ T8343] veth0_macvtap: entered promiscuous mode [ 589.650429][ T8343] veth1_macvtap: entered promiscuous mode [ 589.801658][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.813205][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.823510][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.834593][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.844779][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.855608][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.865866][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.879359][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.895869][ T8343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.969387][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.984959][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.995879][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.006673][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.017234][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.028075][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.038305][ T8343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.049314][ T8343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.065260][ T8343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.503725][ T8343] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.513055][ T8343] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.522354][ T8343] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.531500][ T8343] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.672337][ T8566] netlink: 40 bytes leftover after parsing attributes in process `syz.2.812'. [ 590.842682][ T8573] loop3: detected capacity change from 0 to 512 [ 590.905475][ T8573] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 591.120489][ T8573] EXT4-fs (loop3): 1 truncate cleaned up [ 591.128323][ T8573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.379138][ T8573] overlay: ./file1 is not a directory [ 591.436680][ T8573] overlay: ./file1 is not a directory [ 591.751841][ T7975] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.343856][ T8592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.820'. [ 594.084621][ T25] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 594.321040][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.332003][ T25] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99 [ 594.341528][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.410024][ T25] usb 1-1: config 0 descriptor?? [ 594.451589][ T25] usb 1-1: interface 1 not found [ 594.759182][ T8609] vlan2: entered promiscuous mode [ 594.764862][ T8609] dummy0: entered promiscuous mode [ 594.770756][ T8609] vlan2: entered allmulticast mode [ 594.776240][ T8609] dummy0: entered allmulticast mode [ 594.895286][ T25] usb 1-1: USB disconnect, device number 22 [ 595.296257][ T8624] netlink: 40 bytes leftover after parsing attributes in process `syz.2.827'. [ 596.191368][ T8632] loop2: detected capacity change from 0 to 512 [ 596.263401][ T8632] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 596.441393][ T8632] EXT4-fs (loop2): 1 truncate cleaned up [ 596.449288][ T8632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.538849][ T8632] overlay: ./file1 is not a directory [ 596.578898][ T8632] overlay: ./file1 is not a directory [ 596.846512][ T8644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.831'. [ 596.887009][ T7467] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.465201][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.473282][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.557443][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.565772][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.119508][ T8659] netlink: 40 bytes leftover after parsing attributes in process `syz.0.837'. [ 598.890064][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 598.920738][ T8673] loop4: detected capacity change from 0 to 512 [ 598.922437][ T8672] netlink: 20 bytes leftover after parsing attributes in process `syz.2.842'. [ 599.002083][ T8673] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 599.125170][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.135855][ T25] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99 [ 599.136538][ T8673] EXT4-fs (loop4): 1 truncate cleaned up [ 599.145880][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.164068][ T8673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.179487][ T25] usb 4-1: config 0 descriptor?? [ 599.210878][ T25] usb 4-1: interface 1 not found [ 599.373829][ T8673] overlay: ./file1 is not a directory [ 599.432626][ T8673] overlay: ./file1 is not a directory [ 599.478322][ T8] usb 4-1: USB disconnect, device number 13 [ 599.665525][ T8343] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.707815][ T25] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 599.931258][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.942387][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 599.952962][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.042791][ T25] usb 2-1: config 0 descriptor?? [ 600.065483][ T5183] Bluetooth: hci1: command 0x0406 tx timeout [ 600.107148][ T25] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 600.119987][ T25] usb 2-1: No valid video chain found. [ 600.315312][ T25] usb 2-1: USB disconnect, device number 50 [ 601.412827][ T8704] loop1: detected capacity change from 0 to 512 [ 601.461025][ T8704] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 601.521900][ T8704] EXT4-fs (loop1): 1 truncate cleaned up [ 601.530054][ T8704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.827720][ T8704] overlayfs: failed to resolve './file1': -2 [ 602.257929][ T6873] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /102/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 602.306377][ T6873] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 602.377768][ T6873] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /102/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 602.425803][ T6873] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 602.460847][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 602.496359][ T6873] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /102/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 602.526960][ T6873] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 602.550869][ T6873] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /102/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 602.572567][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.599838][ T6873] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 602.619792][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.634881][ T6873] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /102/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 602.656676][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.665443][ T6873] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 602.685383][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.723378][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.734082][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99 [ 602.743572][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.811876][ T8] usb 4-1: config 0 descriptor?? [ 602.863687][ T8] usb 4-1: interface 1 not found [ 603.275746][ T8] usb 4-1: USB disconnect, device number 14 [ 603.589708][ T8710] loop2: detected capacity change from 0 to 8192 [ 603.629907][ T8710] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 603.643703][ T8710] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 603.654788][ T8710] REISERFS (device loop2): using ordered data mode [ 603.661522][ T8710] reiserfs: using flush barriers [ 603.670537][ T8710] REISERFS warning (device loop2): sh-458 journal_init_dev: cannot init journal device unknown-block(7,2): -16 [ 603.682842][ T8710] REISERFS warning (device loop2): sh-462 journal_init: unable to initialize journal device [ 603.715617][ T8710] REISERFS warning (device loop2): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 604.549212][ T8725] ===================================================== [ 604.556627][ T8725] BUG: KMSAN: uninit-value in batadv_get_vid+0x1d4/0x300 [ 604.563937][ T8725] batadv_get_vid+0x1d4/0x300 [ 604.569008][ T8725] batadv_interface_tx+0x329/0x1cf0 [ 604.574504][ T8725] dev_hard_start_xmit+0x247/0xa20 [ 604.579797][ T8725] __dev_queue_xmit+0x358c/0x5610 [ 604.585127][ T8725] __bpf_redirect+0x148c/0x1610 [ 604.590202][ T8725] bpf_clone_redirect+0x37e/0x500 [ 604.595531][ T8725] ___bpf_prog_run+0x13fe/0xe0f0 [ 604.600692][ T8725] __bpf_prog_run512+0xc5/0xf0 [ 604.605881][ T8725] bpf_test_run+0x546/0xd20 [ 604.610103][ T8721] loop4: detected capacity change from 0 to 2048 [ 604.610505][ T8725] bpf_prog_test_run_skb+0x182f/0x24d0 [ 604.622725][ T8725] bpf_prog_test_run+0x6b7/0xad0 [ 604.628090][ T8725] __sys_bpf+0x6aa/0xd90 [ 604.632542][ T8725] __ia32_sys_bpf+0xa0/0xe0 [ 604.637412][ T8725] ia32_sys_call+0x30fe/0x40d0 [ 604.642389][ T8725] __do_fast_syscall_32+0xb0/0x110 [ 604.647835][ T8725] do_fast_syscall_32+0x38/0x80 [ 604.652952][ T8725] do_SYSENTER_32+0x1f/0x30 [ 604.657762][ T8725] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 604.664400][ T8725] [ 604.666811][ T8725] Uninit was created at: [ 604.671346][ T8725] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 604.677583][ T8725] kmalloc_reserve+0x13d/0x4a0 [ 604.682523][ T8725] pskb_expand_head+0x222/0x19c0 [ 604.687821][ T8725] skb_ensure_writable+0x412/0x4a0 [ 604.693135][ T8725] bpf_clone_redirect+0x1c5/0x500 [ 604.698475][ T8725] ___bpf_prog_run+0x13fe/0xe0f0 [ 604.699619][ T8721] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 604.703631][ T8725] __bpf_prog_run512+0xc5/0xf0 [ 604.718997][ T8725] bpf_test_run+0x546/0xd20 [ 604.723675][ T8725] bpf_prog_test_run_skb+0x182f/0x24d0 [ 604.729458][ T8725] bpf_prog_test_run+0x6b7/0xad0 [ 604.734657][ T8725] __sys_bpf+0x6aa/0xd90 [ 604.739160][ T8725] __ia32_sys_bpf+0xa0/0xe0 [ 604.743858][ T8725] ia32_sys_call+0x30fe/0x40d0 [ 604.748986][ T8725] __do_fast_syscall_32+0xb0/0x110 [ 604.754405][ T8725] do_fast_syscall_32+0x38/0x80 [ 604.759435][ T8725] do_SYSENTER_32+0x1f/0x30 [ 604.764123][ T8725] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 604.770875][ T8725] [ 604.773309][ T8725] CPU: 1 UID: 0 PID: 8725 Comm: syz.3.865 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 604.784304][ T8725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 604.794678][ T8725] ===================================================== [ 604.800450][ T8721] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 604.801746][ T8725] Disabling lock debugging due to kernel taint [ 604.801793][ T8725] Kernel panic - not syncing: kmsan.panic set ... [ 604.801849][ T8725] CPU: 1 UID: 0 PID: 8725 Comm: syz.3.865 Tainted: G B 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 604.801991][ T8725] Tainted: [B]=BAD_PAGE [ 604.802024][ T8725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 604.802085][ T8725] Call Trace: [ 604.802121][ T8725] [ 604.802159][ T8725] dump_stack_lvl+0x216/0x2d0 [ 604.802269][ T8725] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 604.802418][ T8725] dump_stack+0x1e/0x30 [ 604.802506][ T8725] panic+0x4e2/0xcd0 [ 604.802651][ T8725] ? kmsan_get_metadata+0x71/0x1c0 [ 604.802800][ T8725] kmsan_report+0x2c7/0x2d0 [ 604.802931][ T8725] ? is_module_text_address+0x2aa/0x340 [ 604.803049][ T8725] ? __msan_warning+0x95/0x120 [ 604.803161][ T8725] ? batadv_get_vid+0x1d4/0x300 [ 604.803256][ T8725] ? batadv_interface_tx+0x329/0x1cf0 [ 604.803366][ T8725] ? dev_hard_start_xmit+0x247/0xa20 [ 604.803468][ T8725] ? __dev_queue_xmit+0x358c/0x5610 [ 604.803569][ T8725] ? __bpf_redirect+0x148c/0x1610 [ 604.803660][ T8725] ? bpf_clone_redirect+0x37e/0x500 [ 604.803753][ T8725] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 604.803889][ T8725] ? __bpf_prog_run512+0xc5/0xf0 [ 604.803984][ T8725] ? bpf_test_run+0x546/0xd20 [ 604.804082][ T8725] ? bpf_prog_test_run_skb+0x182f/0x24d0 [ 604.804187][ T8725] ? bpf_prog_test_run+0x6b7/0xad0 [ 604.804279][ T8725] ? __sys_bpf+0x6aa/0xd90 [ 604.804405][ T8725] ? __ia32_sys_bpf+0xa0/0xe0 [ 604.804527][ T8725] ? ia32_sys_call+0x30fe/0x40d0 [ 604.804666][ T8725] ? __do_fast_syscall_32+0xb0/0x110 [ 604.804770][ T8725] ? do_fast_syscall_32+0x38/0x80 [ 604.804868][ T8725] ? do_SYSENTER_32+0x1f/0x30 [ 604.804971][ T8725] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 604.805105][ T8725] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 604.805245][ T8725] ? do_SYSENTER_32+0x1f/0x30 [ 604.805347][ T8725] ? filter_irq_stacks+0x60/0x1a0 [ 604.805441][ T8725] ? kmsan_get_metadata+0x13e/0x1c0 [ 604.805573][ T8725] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 604.805713][ T8725] ? batadv_interface_tx+0xc6/0x1cf0 [ 604.805824][ T8725] ? filter_irq_stacks+0x60/0x1a0 [ 604.805923][ T8725] ? kmsan_get_metadata+0x13e/0x1c0 [ 604.806057][ T8725] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 604.806201][ T8725] __msan_warning+0x95/0x120 [ 604.806316][ T8725] batadv_get_vid+0x1d4/0x300 [ 604.806412][ T8725] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 604.806558][ T8725] batadv_interface_tx+0x329/0x1cf0 [ 604.806673][ T8725] ? netif_skb_features+0x115a/0x1350 [ 604.806787][ T8725] ? __pfx_batadv_interface_tx+0x10/0x10 [ 604.806901][ T8725] ? __pfx_batadv_interface_tx+0x10/0x10 [ 604.807018][ T8725] dev_hard_start_xmit+0x247/0xa20 [ 604.807140][ T8725] __dev_queue_xmit+0x358c/0x5610 [ 604.807255][ T8725] ? kmsan_get_metadata+0x13e/0x1c0 [ 604.807385][ T8725] ? __dev_queue_xmit+0x352/0x5610 [ 604.807489][ T8725] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 604.807635][ T8725] ? pskb_expand_head+0x15d7/0x19c0 [ 604.807776][ T8725] __bpf_redirect+0x148c/0x1610 [ 604.807873][ T8725] ? kmsan_get_metadata+0x13e/0x1c0 [ 604.808028][ T8725] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 604.808176][ T8725] bpf_clone_redirect+0x37e/0x500 [ 604.808289][ T8725] ___bpf_prog_run+0x13fe/0xe0f0 [ 604.808455][ T8725] __bpf_prog_run512+0xc5/0xf0 [ 604.808558][ T8725] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 604.808690][ T8725] ? kmsan_internal_poison_memory+0x7d/0x90 [ 604.808809][ T8725] ? kmsan_get_metadata+0x13e/0x1c0 [ 604.808940][ T8725] ? kmsan_internal_poison_memory+0x49/0x90 [ 604.809065][ T8725] ? kmsan_get_metadata+0x13e/0x1c0 [ 604.809197][ T8725] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 604.809326][ T8725] ? kmsan_get_metadata+0x13e/0x1c0 [ 604.809458][ T8725] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 604.809596][ T8725] ? kmsan_get_metadata+0x13e/0x1c0 [ 604.809728][ T8725] ? kmsan_get_metadata+0x13e/0x1c0 [ 604.809860][ T8725] ? kmsan_get_metadata+0x13e/0x1c0 [ 604.809996][ T8725] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 604.810148][ T8725] ? __pfx___bpf_prog_run512+0x10/0x10 [ 604.810248][ T8725] bpf_test_run+0x546/0xd20 [ 604.810347][ T8725] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 604.810476][ T8725] ? kmsan_get_metadata+0x13e/0x1c0 [ 604.810611][ T8725] ? bpf_test_run+0x3af/0xd20 [ 604.810728][ T8725] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 604.810873][ T8725] bpf_prog_test_run_skb+0x182f/0x24d0 [ 604.811019][ T8725] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 604.811131][ T8725] bpf_prog_test_run+0x6b7/0xad0 [ 604.811240][ T8725] __sys_bpf+0x6aa/0xd90 [ 604.811404][ T8725] __ia32_sys_bpf+0xa0/0xe0 [ 604.811536][ T8725] ia32_sys_call+0x30fe/0x40d0 [ 604.811677][ T8725] __do_fast_syscall_32+0xb0/0x110 [ 604.811785][ T8725] ? irqentry_exit+0x16/0x60 [ 604.811925][ T8725] do_fast_syscall_32+0x38/0x80 [ 604.812032][ T8725] do_SYSENTER_32+0x1f/0x30 [ 604.812128][ T8725] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 604.812256][ T8725] RIP: 0023:0xf739d579 [ 604.812331][ T8725] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 604.812428][ T8725] RSP: 002b:00000000f56b657c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 605.325726][ T8725] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000080 [ 605.333834][ T8725] RDX: 000000000000002c RSI: 0000000000000000 RDI: 0000000000000000 [ 605.341933][ T8725] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 605.350032][ T8725] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 605.358134][ T8725] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 605.366253][ T8725] [ 605.369608][ T8725] Kernel Offset: disabled [ 605.373986][ T8725] Rebooting in 86400 seconds..