last executing test programs: 12.011829871s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) open(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x4b71) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x44, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0x10}}, [{0x8}, {0x8, 0xb, 0x8}, {0x8}, {0x8, 0xb, 0xff}]}, 0x44}}, 0x0) 11.009824838s ago: executing program 0: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x451f, 0x4) bind$inet(r0, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 7.062698844s ago: executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) 6.641276441s ago: executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0x0, r1}, 0x10) 5.555002405s ago: executing program 1: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1, 0x6e5, &(0x7f0000000280)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) getdents(0xffffffffffffffff, &(0x7f0000000100)=""/155, 0x9b) 5.3482166s ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="c99b57381801238c09d0ff0f1d0dbd301e5a", 0x12) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f5"], 0xfdef) 5.199746378s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000240)='./file0\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, r2) 4.633594473s ago: executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)='D', 0x1}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0, 0xffffffffffffffa6}}], 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) 4.569976671s ago: executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.492799031s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r2}]]}}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.137341111s ago: executing program 0: semget$private(0x0, 0x0, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000001d80)=""/220) socket$inet_icmp_raw(0x2, 0x3, 0x1) 4.06348465s ago: executing program 2: r0 = msgget(0x2, 0x0) shmctl$SHM_LOCK(r0, 0xb) 3.942108792s ago: executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0x0, r1}, 0x10) 3.787024141s ago: executing program 1: openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) 3.707863038s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) 3.584089302s ago: executing program 2: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1, 0x6e5, &(0x7f0000000280)="$eJzs3TtsG+cdAPD/USRFqoAjJ36kRYAQMdAWFWpLFpRWXeoWRaEhKIJ06EzYciyYlgNJKWSjqJU+9g6ZOqWDNqNDke4G2rlBgMKrxgAFsmTSpuKOR+okUiQl6xXn9xOO9919z/sf747kQbgAvrEWpqL8LJJYmHpnPV3e2oyNsc3Z8Ty7FRHViChFlNuzSJYjy72VT/HtdGVePolK/34+Xpp/7/lXW1+0l8r5lNUrFeqPotq7aiOfohERY/m81wFji0/3d7+nvdsHtjeqpLuFacCudQIXf32hVuGF7fTY6OY9/W96mD4dVP0wxy1wTiXt62aPyYiJiKhFtK/6+dmhdLqjO34bZz0AAAAAOKz64au8sh3bsR4XTmI4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8LLKn/+f5FOpk25E0nn+fzVfF3n6HBr+IMTPx9vzZyc/GAAAAAAAAAA4cW9ux3asx4XO8k6S3fN/q3CP/1vxYazGYqzE9ViPZqzFWqzETERMFhqqrjfX1lZmsppRvzSg5s34rE/NmweP8dZxbzQAAAAAAAAAnG+1Ifn3K73r/hALu/f/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgPEgixtqzbLrUSU9GqRwRtYiopuU2Ij7rpL8mkn4rn53+OAAAAOCF1PYuJrUR6rzyJLZjPS50lneS7Dv/lez7ci0+jOVYi6VYi1Ysxp38O3T6rb+0tTnb2tqcfZBOve3+7MtDDT1rMdq/PfTv+fWsRD3uxlK25nrcjiR2MqW8lde3NmfT+YP+4/ooHVPy09yA0YwV0nfSl6ufZum/7P0VoXyoTTyi0oE5k1lupRuR6XxsaY2LnQj0j8TQvVMe2NNMlLq//Fwa3FP/mH80uPeJfaX6/nJzJvZH4maUunvoyuBIRHzvn09/c6+1fP/e3dWp87NJfT0ZWmJ/JGYLkbj6EkViuOksEpe7ywvxy/h1TMWX4+/GSizFb6MZa7HY6OQ38/dz+jo5OFKfTxSX3h02kvSYbHTPX/3G1Ig9Y4pG/CJLNeOtbJ9eiKVI4mFELMbb2d/NmOmeDXb38OURjvrSCGfagmvfz2bdMEX94LJ/H63J45LG9WIhrsVz7mSWV1yzG6VX+0apc60b/XpUUP5Onkhb+OPA68Np2x+JmUIkXjvo/dIO6d920tfV1vL9lXvND0bsLynM/3yurhLpHn41avnGXcxek+yYms7yXuteYffGq5rfcWkr9eRd7tZrH6m/iodxZ8+R+qOYi7mYz0pfyUpXeq5Yad7Vbkt7z+FpXvpJq9y9sVP8vPUwWu3PQwCcG5V+Kyd+MFGt/6/+n/on9T/V79Xfqf18/Mfjb1Sj8u/KT8rTY98tvZH8Iz6J3+9+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI5u9dHj+81Wa3Glf6LUPysZXKvZ2uk8SGxAmT2JJH9UzgiFk9VHj3eGNjg4MZ4P74jVjzPReVrj8MKNExxGsrF/f9WG74vOU55G6CLpCXha+chj7vS8u6ZyDnbl/kRjSJkkRm6w84YtZB3+3Vvvt7/GIvoOY8iJY+w4zj7AWbqx9uCDG6uPHv9w6UHz/cX3F5crc3Pz0/Nzb8/euLvUWpxuvxYqnMrDb4HTUPw40VWNiDeH1x3woFYAAAAAAAAAAADgBJ3G/0Kc9TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX28LU1F+FknMTF+fTpe3Nmdb6dRJ75YsR0QpIpLfRST/irgVT57fSjMmC80lB/Xz8dL8e8+/2vpit61yp3wpYuPAeqPZyKdoRMRYPj+u9m4Pb6+6mxzvk510I5MG7Fo+hzP3/wAAAP//0RHs2Q==") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) getdents(0xffffffffffffffff, &(0x7f0000000100)=""/155, 0x9b) 3.363985242s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000240)='./file0\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, r2) 3.212156344s ago: executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x280, 0x250, 0x4c, 0x232, 0x250, 0x5, 0x380, 0x2e8, 0x2e8, 0x380, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) 2.965906178s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="c99b57381801238c09d0ff0f1d0dbd301e5a", 0x12) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f5"], 0xfdef) 2.864017866s ago: executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$rtc(0xffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0xee01) unshare(0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") inotify_init() open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty, @in=@multicast2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8}, @XFRMA_SET_MARK={0x8}, @XFRMA_SET_MARK_MASK={0x8}]}, 0x150}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000), 0x4) r2 = socket(0x8000000010, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknod(0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000) write(r2, &(0x7f00000002c0)="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", 0xfc) 2.854533933s ago: executing program 0: syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x5526, &(0x7f000000b240)="$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") r0 = open(&(0x7f0000000780)='./bus\x00', 0x14727d, 0x0) unlink(&(0x7f0000000180)='./bus\x00') fdatasync(r0) 2.57119589s ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000100)=""/247, 0xf7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x40045304, &(0x7f00000002c0)) tkill(r0, 0x7) 2.471050887s ago: executing program 1: io_setup(0x202, &(0x7f0000000200)=0x0) io_destroy(r0) io_submit(r0, 0x0, 0x0) 2.088510505s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80, 0x5}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x9, &(0x7f0000000440)={0x0, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x0, 0xa}, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xde, &(0x7f0000000340)=""/222}, 0x25) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0) 1.781293588s ago: executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4}, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.746731947s ago: executing program 4: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_x_nat_t_port={0x1, 0x15}, @sadb_x_nat_t_type={0x1}, @sadb_x_nat_t_port={0x1, 0x16}]}, 0x68}, 0x1, 0x7}, 0x0) 1.396568859s ago: executing program 2: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) preadv(0xffffffffffffffff, &(0x7f0000000b80)=[{&(0x7f0000000580)=""/85, 0x55}], 0x1, 0x0, 0x0) 1.071799526s ago: executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) 558.62367ms ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x44}, 0x1, 0x8}, 0x0) 0s ago: executing program 4: clock_gettime(0x0, 0x0) syz_read_part_table(0x1055, &(0x7f0000001980)="$eJzsz8GNwjAUBNCfbFbR1rAt7Hk7SRcUETrhTAWUQwVc4cQgIwI0gBDSe4cvj8eW5eKt/mqoGmv47Z9319e56o5J0rdqf2t2y5GMy2rO9+PmUPV1D0lOOfxP1bXQRm1+quY6J2nPTttX/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPsUlAAD//67CF/8=") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. 2024/06/06 21:36:16 fuzzer started 2024/06/06 21:36:17 dialing manager at 10.128.0.169:30026 [ 162.434666][ T5043] cgroup: Unknown subsys name 'net' [ 162.682588][ T5043] cgroup: Unknown subsys name 'rlimit' 2024/06/06 21:37:05 starting 5 executor processes [ 208.722177][ T5052] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 210.823049][ T5073] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.832174][ T5073] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.842157][ T5074] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.850910][ T5073] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.860710][ T5075] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.862399][ T5073] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.882536][ T5075] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.902531][ T5073] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.915355][ T5073] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 210.924859][ T5075] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.939207][ T5075] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.954420][ T5075] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.038868][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.050323][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.059872][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.073878][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.085261][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 211.094523][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.220930][ T5075] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.261885][ T5075] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.318290][ T5075] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.337862][ T5075] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.362940][ T5075] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 211.395825][ T4428] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.428048][ T4428] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.436275][ T5073] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.526774][ T4428] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.583700][ T4428] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.608046][ T4428] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 211.621998][ T4428] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.097128][ T5077] chnl_net:caif_netlink_parms(): no params data found [ 212.713208][ T5070] chnl_net:caif_netlink_parms(): no params data found [ 213.034636][ T4428] Bluetooth: hci0: command tx timeout [ 213.045726][ T5069] chnl_net:caif_netlink_parms(): no params data found [ 213.116888][ T4428] Bluetooth: hci1: command tx timeout [ 213.191630][ T4428] Bluetooth: hci2: command tx timeout [ 213.280246][ T5081] chnl_net:caif_netlink_parms(): no params data found [ 213.348119][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.356046][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.364032][ T5077] bridge_slave_0: entered allmulticast mode [ 213.373306][ T5077] bridge_slave_0: entered promiscuous mode [ 213.416805][ T5084] chnl_net:caif_netlink_parms(): no params data found [ 213.438120][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.446301][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.454150][ T5077] bridge_slave_1: entered allmulticast mode [ 213.463248][ T5077] bridge_slave_1: entered promiscuous mode [ 213.602741][ T4428] Bluetooth: hci3: command tx timeout [ 213.714535][ T5077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.752064][ T4428] Bluetooth: hci4: command tx timeout [ 213.911771][ T5077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.996131][ T5070] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.008150][ T5070] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.017367][ T5070] bridge_slave_0: entered allmulticast mode [ 214.026618][ T5070] bridge_slave_0: entered promiscuous mode [ 214.151052][ T5070] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.158923][ T5070] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.166790][ T5070] bridge_slave_1: entered allmulticast mode [ 214.176068][ T5070] bridge_slave_1: entered promiscuous mode [ 214.237410][ T5077] team0: Port device team_slave_0 added [ 214.245622][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.253450][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.261206][ T5081] bridge_slave_0: entered allmulticast mode [ 214.270632][ T5081] bridge_slave_0: entered promiscuous mode [ 214.374091][ T5077] team0: Port device team_slave_1 added [ 214.424610][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.432782][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.440408][ T5081] bridge_slave_1: entered allmulticast mode [ 214.449933][ T5081] bridge_slave_1: entered promiscuous mode [ 214.549365][ T5070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.685081][ T5070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.795983][ T5069] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.803933][ T5069] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.811756][ T5069] bridge_slave_0: entered allmulticast mode [ 214.820695][ T5069] bridge_slave_0: entered promiscuous mode [ 214.840568][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.850599][ T5069] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.859389][ T5069] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.867276][ T5069] bridge_slave_1: entered allmulticast mode [ 214.876362][ T5069] bridge_slave_1: entered promiscuous mode [ 214.920719][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.928624][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.955196][ T5077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.012391][ T5084] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.020101][ T5084] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.030502][ T5084] bridge_slave_0: entered allmulticast mode [ 215.040996][ T5084] bridge_slave_0: entered promiscuous mode [ 215.062248][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.072288][ T5084] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.079976][ T5084] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.087948][ T5084] bridge_slave_1: entered allmulticast mode [ 215.097035][ T5084] bridge_slave_1: entered promiscuous mode [ 215.112579][ T4428] Bluetooth: hci0: command tx timeout [ 215.174151][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.181393][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.210486][ T5077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.217710][ T4428] Bluetooth: hci1: command tx timeout [ 215.233160][ T5070] team0: Port device team_slave_0 added [ 215.264907][ T5070] team0: Port device team_slave_1 added [ 215.271767][ T4428] Bluetooth: hci2: command tx timeout [ 215.349303][ T5069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.499426][ T5069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.514373][ T5070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.521612][ T5070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.548412][ T5070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.571204][ T5084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.586905][ T5081] team0: Port device team_slave_0 added [ 215.677596][ T4428] Bluetooth: hci3: command tx timeout [ 215.689112][ T5070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.696594][ T5070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.722851][ T5070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.759198][ T5084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.815057][ T5081] team0: Port device team_slave_1 added [ 215.833246][ T4428] Bluetooth: hci4: command tx timeout [ 215.866447][ T5077] hsr_slave_0: entered promiscuous mode [ 215.877407][ T5077] hsr_slave_1: entered promiscuous mode [ 215.987734][ T5069] team0: Port device team_slave_0 added [ 216.046128][ T5070] hsr_slave_0: entered promiscuous mode [ 216.056565][ T5070] hsr_slave_1: entered promiscuous mode [ 216.065326][ T5070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.073864][ T5070] Cannot create hsr debugfs directory [ 216.118631][ T5069] team0: Port device team_slave_1 added [ 216.128230][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.135656][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.161928][ T5081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.184804][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.192254][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.218838][ T5081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.238270][ T5084] team0: Port device team_slave_0 added [ 216.393045][ T5084] team0: Port device team_slave_1 added [ 216.558987][ T5069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.566330][ T5069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.592660][ T5069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.708011][ T5081] hsr_slave_0: entered promiscuous mode [ 216.718048][ T5081] hsr_slave_1: entered promiscuous mode [ 216.726609][ T5081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.737454][ T5081] Cannot create hsr debugfs directory [ 216.779675][ T5069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.787079][ T5069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.813906][ T5069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.835198][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.842421][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.868757][ T5084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.898913][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.907518][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.934964][ T5084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.201733][ T4428] Bluetooth: hci0: command tx timeout [ 217.267265][ T5084] hsr_slave_0: entered promiscuous mode [ 217.273987][ T4428] Bluetooth: hci1: command tx timeout [ 217.281901][ T5084] hsr_slave_1: entered promiscuous mode [ 217.289952][ T5084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.297832][ T5084] Cannot create hsr debugfs directory [ 217.352114][ T4428] Bluetooth: hci2: command tx timeout [ 217.535614][ T5069] hsr_slave_0: entered promiscuous mode [ 217.546049][ T5069] hsr_slave_1: entered promiscuous mode [ 217.554251][ T5069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.562111][ T5069] Cannot create hsr debugfs directory [ 217.767721][ T4428] Bluetooth: hci3: command tx timeout [ 217.926415][ T4428] Bluetooth: hci4: command tx timeout [ 218.216039][ T5070] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.301166][ T5070] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.325383][ T5070] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.356817][ T5070] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.603712][ T5077] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 218.708291][ T5077] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 218.819592][ T5081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 218.851785][ T5081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.870394][ T5077] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 218.909367][ T5077] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 218.945549][ T5081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.979026][ T5081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.034709][ T5084] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.145315][ T1218] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.152097][ T1218] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.154419][ T5084] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.226101][ T5084] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.256977][ T5084] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.271750][ T4428] Bluetooth: hci0: command tx timeout [ 219.360462][ T4428] Bluetooth: hci1: command tx timeout [ 219.429751][ T5069] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 219.439695][ T4428] Bluetooth: hci2: command tx timeout [ 219.468995][ T5069] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.567346][ T5069] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 219.594076][ T5069] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 219.832368][ T4428] Bluetooth: hci3: command tx timeout [ 219.996802][ T4428] Bluetooth: hci4: command tx timeout [ 220.047655][ T5070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.454861][ T5070] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.498788][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.544190][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.552046][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.649305][ T5084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.687631][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.695582][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.813607][ T5077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.861391][ T5081] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.965007][ T5084] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.040274][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.048175][ T5125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.106881][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.114751][ T5125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.139454][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.147197][ T5125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.306835][ T5077] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.370970][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.378704][ T5125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.420233][ T5069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.523316][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.531021][ T5119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.624436][ T5081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.728870][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.736699][ T5119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.860945][ T5069] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.052874][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.060534][ T5119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.158658][ T5077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.223674][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.231332][ T5119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.746394][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.886526][ T5070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.150856][ T5084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.301159][ T5077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.455094][ T5069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.486435][ T5081] veth0_vlan: entered promiscuous mode [ 224.612504][ T5081] veth1_vlan: entered promiscuous mode [ 224.965036][ T5084] veth0_vlan: entered promiscuous mode [ 225.089733][ T5077] veth0_vlan: entered promiscuous mode [ 225.102507][ T5069] veth0_vlan: entered promiscuous mode [ 225.131502][ T5084] veth1_vlan: entered promiscuous mode [ 225.195127][ T5081] veth0_macvtap: entered promiscuous mode [ 225.228090][ T5077] veth1_vlan: entered promiscuous mode [ 225.240639][ T5069] veth1_vlan: entered promiscuous mode [ 225.271157][ T5081] veth1_macvtap: entered promiscuous mode [ 225.477458][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.630109][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.714696][ T5081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.723903][ T5081] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.733098][ T5081] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.742325][ T5081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.789591][ T5084] veth0_macvtap: entered promiscuous mode [ 225.806289][ T5069] veth0_macvtap: entered promiscuous mode [ 225.819756][ T5077] veth0_macvtap: entered promiscuous mode [ 225.853815][ T5069] veth1_macvtap: entered promiscuous mode [ 225.989793][ T5084] veth1_macvtap: entered promiscuous mode [ 226.004695][ T5077] veth1_macvtap: entered promiscuous mode [ 226.037824][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.051277][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.067986][ T5069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.258898][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.270386][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.286094][ T5069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.324834][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.336107][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.348058][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.359055][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.374481][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.486739][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.497699][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.508711][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.519545][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.529685][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.540416][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.555993][ T5084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.615577][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.626988][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.640191][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.651884][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.667004][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.707934][ T5069] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.723905][ T5069] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.734309][ T5069] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.745054][ T5069] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.777727][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.788699][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.799813][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.813275][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.823529][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.834316][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.849684][ T5084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.899104][ T5077] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.909447][ T5077] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.918641][ T5077] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.927818][ T5077] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.072596][ T5084] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.083431][ T5084] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.094085][ T5084] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.104309][ T5084] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.316187][ T5070] veth0_vlan: entered promiscuous mode [ 227.478145][ T5070] veth1_vlan: entered promiscuous mode [ 227.856476][ T5070] veth0_macvtap: entered promiscuous mode [ 227.926627][ T5070] veth1_macvtap: entered promiscuous mode [ 228.195897][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.208300][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.219855][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.230949][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.243558][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.254765][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.264918][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.275696][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.291651][ T5070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.516705][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.527714][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.538041][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.548828][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.563268][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.575756][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.587379][ T5070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.599350][ T5070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.616032][ T5070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.912238][ T5070] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.921321][ T5070] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.930698][ T5070] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.940957][ T5070] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.943425][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.954702][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.186952][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.200902][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.288705][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.297945][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.490727][ T2811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.499022][ T2811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.871054][ T3123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.881359][ T3123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.024480][ T3185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.033266][ T3185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.138021][ T3185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.150266][ T3185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.237203][ T2811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.245605][ T2811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.814753][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.823466][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.254099][ T1553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.262627][ T1553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.338967][ T5290] loop0: detected capacity change from 0 to 2048 [ 239.564533][ T5290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.652006][ T5302] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 243.108049][ T5077] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.310064][ T29] audit: type=1804 audit(1717709861.551:2): pid=5343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir926196818/syzkaller.iMwLHJ/6/bus" dev="sda1" ino=1956 res=1 errno=0 [ 245.335579][ T29] audit: type=1800 audit(1717709861.551:3): pid=5343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 245.530232][ T5347] fuse: Bad value for 'fd' [ 245.575069][ T5343] loop2: detected capacity change from 0 to 1024 [ 247.195625][ T5352] loop0: detected capacity change from 0 to 8192 [ 247.499998][ T5352] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.886091][ T5362] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.886326][ T5362] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 247.886406][ T5362] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 248.783105][ T5367] loop1: detected capacity change from 0 to 2048 [ 249.024132][ T5367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.153544][ T5366] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 249.685938][ T5069] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.619405][ T5406] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 252.110120][ T5408] loop3: detected capacity change from 0 to 512 [ 252.203414][ T5408] ======================================================= [ 252.203414][ T5408] WARNING: The mand mount option has been deprecated and [ 252.203414][ T5408] and is ignored by this kernel. Remove the mand [ 252.203414][ T5408] option from the mount to silence this warning. [ 252.203414][ T5408] ======================================================= [ 252.238636][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.315055][ T5408] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 252.675630][ T5416] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 252.733812][ T5414] loop4: detected capacity change from 0 to 2048 [ 252.811957][ T5419] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.842833][ T5416] loop2: detected capacity change from 0 to 16 [ 252.917829][ T5416] erofs: (device loop2): mounted with root inode @ nid 36. [ 252.937726][ T5414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.059603][ T5418] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.152494][ T5413] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 253.255157][ T5424] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 253.584315][ T5428] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 253.587098][ T5070] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.841194][ T5428] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.851881][ T5428] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.258009][ T5428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.406917][ T5428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.535068][ T5428] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.546963][ T5428] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.557962][ T5428] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.567786][ T5428] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.515664][ T5473] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 261.502425][ T29] audit: type=1326 audit(1717709877.701:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 261.528867][ T29] audit: type=1326 audit(1717709877.711:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 261.552078][ T29] audit: type=1326 audit(1717709877.721:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 261.575302][ T29] audit: type=1326 audit(1717709877.721:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 261.599225][ T29] audit: type=1326 audit(1717709877.741:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 261.623369][ T29] audit: type=1326 audit(1717709877.751:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 261.646561][ T29] audit: type=1326 audit(1717709877.751:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 261.670040][ T29] audit: type=1326 audit(1717709877.751:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf73ec5a7 code=0x7ffc0000 [ 261.694071][ T29] audit: type=1326 audit(1717709877.751:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 261.717220][ T29] audit: type=1326 audit(1717709877.751:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf73ec5a7 code=0x7ffc0000 [ 263.682686][ T5455] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 264.082477][ T5455] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 264.092056][ T5455] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 264.102799][ T5455] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.303570][ T5455] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 264.313406][ T5455] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.321859][ T5455] usb 4-1: Product: syz [ 264.326591][ T5455] usb 4-1: Manufacturer: syz [ 264.331674][ T5455] usb 4-1: SerialNumber: syz [ 265.095744][ T5455] usb 4-1: 0:2 : does not exist [ 265.305146][ T5455] usb 4-1: USB disconnect, device number 2 [ 266.129614][ T5522] loop1: detected capacity change from 0 to 2048 [ 266.244096][ T5522] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 266.254508][ T5522] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 266.489175][ T5522] EXT4-fs (loop1): failed to initialize system zone (-117) [ 266.572389][ T5522] EXT4-fs (loop1): mount failed [ 266.645657][ T5455] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 267.213637][ T5455] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.226152][ T5455] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.236660][ T5455] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 267.246457][ T5455] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.319627][ T5455] usb 4-1: config 0 descriptor?? [ 267.897452][ T5455] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 267.904760][ T5455] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 267.968565][ T5455] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 268.131723][ T5455] arvo 0003:1E7D:30D4.0001: couldn't init struct arvo_device [ 268.139778][ T5455] arvo 0003:1E7D:30D4.0001: couldn't install keyboard [ 268.191095][ T5455] arvo 0003:1E7D:30D4.0001: probe with driver arvo failed with error -5 [ 268.304793][ T5455] usb 4-1: USB disconnect, device number 3 [ 269.247496][ T5558] syz-executor.0[5558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.248079][ T5558] syz-executor.0[5558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.755187][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 271.755268][ T29] audit: type=1326 audit(1717709888.021:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x0 [ 273.126612][ T5578] Zero length message leads to an empty skb [ 274.273010][ T5439] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 274.719997][ T5597] loop1: detected capacity change from 0 to 1024 [ 274.745715][ T5439] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.757005][ T5439] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.767182][ T5439] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 274.776979][ T5439] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.969630][ T5439] usb 1-1: config 0 descriptor?? [ 275.331944][ T29] audit: type=1804 audit(1717709891.531:51): pid=5605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir794953973/syzkaller.yGpbaW/19/bus" dev="sda1" ino=1954 res=1 errno=0 [ 275.357846][ T29] audit: type=1804 audit(1717709891.571:52): pid=5605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir794953973/syzkaller.yGpbaW/19/bus" dev="sda1" ino=1954 res=1 errno=0 [ 275.382099][ T5605] loop3: detected capacity change from 0 to 512 [ 275.393265][ T5605] ext4: Unknown parameter 'noacl' [ 275.568451][ T5439] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 275.575655][ T5439] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 275.688228][ T5439] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 275.818920][ T5439] arvo 0003:1E7D:30D4.0002: couldn't init struct arvo_device [ 275.836873][ T5439] arvo 0003:1E7D:30D4.0002: couldn't install keyboard [ 275.880635][ T5075] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.891626][ T5075] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.903052][ T5439] arvo 0003:1E7D:30D4.0002: probe with driver arvo failed with error -5 [ 275.932963][ T5075] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.982291][ T5075] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.038500][ T5075] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.048831][ T5075] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.177709][ T5455] usb 1-1: USB disconnect, device number 2 [ 276.188344][ T5612] loop1: detected capacity change from 0 to 512 [ 276.276552][ T5612] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 276.284509][ T5612] UDF-fs: Scanning with blocksize 512 failed [ 276.352392][ T5612] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 276.360132][ T5612] UDF-fs: Scanning with blocksize 1024 failed [ 276.388590][ T5612] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 276.396584][ T5612] UDF-fs: Scanning with blocksize 2048 failed [ 276.417996][ T5612] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 276.494599][ T5612] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.681961][ T5439] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 276.686358][ T58] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.729007][ T5617] loop2: detected capacity change from 0 to 1764 [ 276.843154][ T58] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.865182][ T5617] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 277.074439][ T58] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.093861][ T5439] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.104713][ T5439] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.118337][ T5439] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.127945][ T5439] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.231214][ T5439] usb 4-1: config 0 descriptor?? [ 277.317214][ T5439] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 277.378495][ T58] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.657970][ T58] bridge_slave_1: left allmulticast mode [ 277.664088][ T58] bridge_slave_1: left promiscuous mode [ 277.672173][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.723358][ T58] bridge_slave_0: left allmulticast mode [ 277.729263][ T58] bridge_slave_0: left promiscuous mode [ 277.737552][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.152582][ T5075] Bluetooth: hci5: command tx timeout [ 278.290577][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.376767][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.441156][ T58] bond0 (unregistering): Released all slaves [ 278.509443][ T5609] chnl_net:caif_netlink_parms(): no params data found [ 279.305544][ T58] hsr_slave_0: left promiscuous mode [ 279.327651][ T58] hsr_slave_1: left promiscuous mode [ 279.370994][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.378939][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.424290][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.432217][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.488036][ T58] veth1_macvtap: left promiscuous mode [ 279.494179][ T58] veth0_macvtap: left promiscuous mode [ 279.500106][ T58] veth1_vlan: left promiscuous mode [ 279.505845][ T58] veth0_vlan: left promiscuous mode [ 279.616071][ T5439] usb 4-1: USB disconnect, device number 4 [ 279.811925][ T5124] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 280.231824][ T5075] Bluetooth: hci5: command tx timeout [ 280.251968][ T5124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.263267][ T5124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.273476][ T5124] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 280.282897][ T5124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.332813][ T5124] usb 3-1: config 0 descriptor?? [ 280.569063][ T1218] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.576049][ T1218] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.615087][ T58] team0 (unregistering): Port device team_slave_1 removed [ 280.704114][ T58] team0 (unregistering): Port device team_slave_0 removed [ 281.072246][ T5124] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 281.079458][ T5124] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 281.119969][ T5124] arvo 0003:1E7D:30D4.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 281.269917][ T5124] arvo 0003:1E7D:30D4.0003: couldn't init struct arvo_device [ 281.277970][ T5124] arvo 0003:1E7D:30D4.0003: couldn't install keyboard [ 281.301715][ T5124] arvo 0003:1E7D:30D4.0003: probe with driver arvo failed with error -5 [ 281.548307][ T5124] usb 3-1: USB disconnect, device number 2 [ 281.739524][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.748302][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.756234][ T5609] bridge_slave_0: entered allmulticast mode [ 281.772269][ T5609] bridge_slave_0: entered promiscuous mode [ 281.846331][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.854259][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.862154][ T5609] bridge_slave_1: entered allmulticast mode [ 281.872930][ T5609] bridge_slave_1: entered promiscuous mode [ 282.150214][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.224002][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.311945][ T5075] Bluetooth: hci5: command tx timeout [ 282.493418][ T5609] team0: Port device team_slave_0 added [ 282.561837][ T5609] team0: Port device team_slave_1 added [ 282.735188][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.742500][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.769231][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.918710][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.926166][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.952549][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.398151][ T5609] hsr_slave_0: entered promiscuous mode [ 283.453434][ T5609] hsr_slave_1: entered promiscuous mode [ 283.491886][ T5609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.499791][ T5609] Cannot create hsr debugfs directory [ 284.392732][ T5075] Bluetooth: hci5: command tx timeout [ 285.127268][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 285.225433][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 285.248654][ T5668] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 285.325953][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 285.423080][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 286.498152][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.684214][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.789896][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.797768][ T5118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.923297][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.930990][ T5118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.490725][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.676766][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.834791][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.017154][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.220508][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.363442][ T58] bridge_slave_1: left allmulticast mode [ 289.369490][ T58] bridge_slave_1: left promiscuous mode [ 289.376400][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.419819][ T58] bridge_slave_0: left allmulticast mode [ 289.426253][ T58] bridge_slave_0: left promiscuous mode [ 289.433100][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.336877][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.402748][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.450238][ T58] bond0 (unregistering): Released all slaves [ 291.706850][ T58] hsr_slave_0: left promiscuous mode [ 291.742082][ T58] hsr_slave_1: left promiscuous mode [ 291.790009][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.803331][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.897841][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.910867][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.014276][ T58] veth1_macvtap: left promiscuous mode [ 292.020046][ T58] veth0_macvtap: left promiscuous mode [ 292.026091][ T58] veth1_vlan: left promiscuous mode [ 292.032722][ T58] veth0_vlan: left promiscuous mode [ 292.836458][ T4428] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 292.882488][ T4428] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 292.921333][ T4428] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 292.962948][ T4428] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 292.982788][ T4428] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 293.070173][ T4428] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 293.246782][ T58] team0 (unregistering): Port device team_slave_1 removed [ 293.289067][ T58] team0 (unregistering): Port device team_slave_0 removed [ 294.162712][ T5609] veth0_vlan: entered promiscuous mode [ 294.281039][ T5609] veth1_vlan: entered promiscuous mode [ 294.651289][ T5609] veth0_macvtap: entered promiscuous mode [ 294.755874][ T5609] veth1_macvtap: entered promiscuous mode [ 294.914725][ T5711] chnl_net:caif_netlink_parms(): no params data found [ 294.982941][ T5609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.994166][ T5609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.004316][ T5609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.015027][ T5609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.030211][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.137402][ T4428] Bluetooth: hci1: command tx timeout [ 295.264162][ T5609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.275909][ T5609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.286572][ T5609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.297418][ T5609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.312465][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.470457][ T5609] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.479859][ T5609] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.489162][ T5609] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.498303][ T5609] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.655353][ T5711] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.663237][ T5711] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.671137][ T5711] bridge_slave_0: entered allmulticast mode [ 296.680481][ T5711] bridge_slave_0: entered promiscuous mode [ 296.777381][ T5711] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.785316][ T5711] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.793297][ T5711] bridge_slave_1: entered allmulticast mode [ 296.802771][ T5711] bridge_slave_1: entered promiscuous mode [ 297.109484][ T5711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.184051][ T5711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.202872][ T4428] Bluetooth: hci1: command tx timeout [ 297.356133][ T5711] team0: Port device team_slave_0 added [ 297.386592][ T5711] team0: Port device team_slave_1 added [ 297.620716][ T5711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.628809][ T5711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.659231][ T5711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.777699][ T5711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.785026][ T5711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.811363][ T5711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.240168][ T5711] hsr_slave_0: entered promiscuous mode [ 298.292734][ T5711] hsr_slave_1: entered promiscuous mode [ 298.332922][ T5711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.340722][ T5711] Cannot create hsr debugfs directory [ 299.275338][ T4428] Bluetooth: hci1: command tx timeout [ 299.706403][ T5711] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 299.755959][ T5711] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 299.856350][ T5711] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 299.954641][ T5711] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 301.157182][ T5711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.352374][ T4428] Bluetooth: hci1: command tx timeout [ 301.382774][ T5711] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.552352][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.560055][ T5118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.667523][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.675449][ T5118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.740714][ T5455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.749018][ T5455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.025284][ T5439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.033574][ T5439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.740643][ T29] audit: type=1804 audit(1717709918.961:53): pid=5768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir48117220/syzkaller.jF6s9H/0/bus" dev="sda1" ino=1959 res=1 errno=0 [ 302.766486][ T29] audit: type=1804 audit(1717709918.961:54): pid=5768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir48117220/syzkaller.jF6s9H/0/bus" dev="sda1" ino=1959 res=1 errno=0 [ 303.723950][ T5711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.141221][ T5711] veth0_vlan: entered promiscuous mode [ 304.214972][ T5711] veth1_vlan: entered promiscuous mode [ 304.546517][ T5711] veth0_macvtap: entered promiscuous mode [ 304.604465][ T5711] veth1_macvtap: entered promiscuous mode [ 304.769599][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.782070][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.793406][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.805516][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.816040][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.826913][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.842429][ T5711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.014372][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.025319][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.036041][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.046842][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.057074][ T5711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.067851][ T5711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.083478][ T5711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.326729][ T5711] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.336099][ T5711] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.345438][ T5711] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.354654][ T5711] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.165495][ T5804] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 309.282849][ T5809] trusted_key: syz-executor.0 sent an empty control message without MSG_MORE. [ 309.343029][ T5811] loop1: detected capacity change from 0 to 64 [ 309.427688][ T5811] syz-executor.1: attempt to access beyond end of device [ 309.427688][ T5811] loop1: rw=0, sector=516, nr_sectors = 4 limit=64 [ 309.441815][ T5811] Buffer I/O error on dev loop1, logical block 129, async page read [ 309.450158][ T5811] syz-executor.1: attempt to access beyond end of device [ 309.450158][ T5811] loop1: rw=0, sector=520, nr_sectors = 4 limit=64 [ 309.464237][ T5811] Buffer I/O error on dev loop1, logical block 130, async page read [ 309.654070][ T5811] hfs: unable to open catalog tree [ 309.673129][ T5811] hfs: can't find a HFS filesystem on dev loop1 [ 309.904339][ T5811] loop1: detected capacity change from 0 to 8 [ 309.967746][ T5811] squashfs: Unknown parameter 'vlan0' [ 310.050205][ T5820] loop0: detected capacity change from 0 to 164 [ 310.221072][ T5820] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=82 [ 310.566814][ T5825] loop1: detected capacity change from 0 to 128 [ 310.638822][ T5821] loop3: detected capacity change from 0 to 4096 [ 310.974133][ T5821] ntfs3: loop3: Failed to load $Extend (-22). [ 310.980684][ T5821] ntfs3: loop3: Failed to initialize $Extend. [ 311.792422][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.800500][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.821048][ T29] audit: type=1800 audit(1717709928.021:55): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1954 res=0 errno=0 [ 312.028342][ T3185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.036577][ T3185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.566584][ T5858] serio: Serial port pts0 [ 313.821834][ T5075] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 313.835790][ T5075] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 313.852912][ T5075] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 313.889399][ T5075] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 313.926386][ T5075] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 313.935897][ T5075] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.434140][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 315.701544][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.854281][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.962134][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.002218][ T4428] Bluetooth: hci4: command tx timeout [ 316.142213][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.462471][ T58] bridge_slave_1: left allmulticast mode [ 316.468367][ T58] bridge_slave_1: left promiscuous mode [ 316.476639][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.513018][ T58] bridge_slave_0: left allmulticast mode [ 316.518918][ T58] bridge_slave_0: left promiscuous mode [ 316.526211][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.208214][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.279158][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.335893][ T58] bond0 (unregistering): Released all slaves [ 318.074935][ T4428] Bluetooth: hci4: command tx timeout [ 318.347486][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.355427][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.366330][ T5867] bridge_slave_0: entered allmulticast mode [ 318.375695][ T5867] bridge_slave_0: entered promiscuous mode [ 318.437238][ T58] hsr_slave_0: left promiscuous mode [ 318.470784][ T58] hsr_slave_1: left promiscuous mode [ 318.495404][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.503906][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.565315][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.573336][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.676400][ T58] veth1_macvtap: left promiscuous mode [ 318.682597][ T58] veth0_macvtap: left promiscuous mode [ 318.688418][ T58] veth1_vlan: left promiscuous mode [ 318.693992][ T58] veth0_vlan: left promiscuous mode [ 318.713173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 319.705318][ T58] team0 (unregistering): Port device team_slave_1 removed [ 319.780990][ T58] team0 (unregistering): Port device team_slave_0 removed [ 320.122347][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.132159][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.141007][ T5867] bridge_slave_1: entered allmulticast mode [ 320.154364][ T4428] Bluetooth: hci4: command tx timeout [ 320.154513][ T5867] bridge_slave_1: entered promiscuous mode [ 320.189833][ T5900] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 320.567987][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.685226][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.917119][ T5867] team0: Port device team_slave_0 added [ 320.970512][ T5867] team0: Port device team_slave_1 added [ 321.097789][ T5905] loop4: detected capacity change from 0 to 2048 [ 321.188590][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.198140][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.226305][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.334936][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.337202][ T5905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.342585][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.381773][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.634804][ T5867] hsr_slave_0: entered promiscuous mode [ 321.670786][ T5867] hsr_slave_1: entered promiscuous mode [ 321.768782][ T5457] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 322.172000][ T5457] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 322.183936][ T5457] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 322.194270][ T5457] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 322.203911][ T5457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.246598][ T4428] Bluetooth: hci4: command tx timeout [ 322.294029][ T5905] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 322.958694][ T5909] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 323.021793][ T5909] EXT4-fs (loop4): Remounting filesystem read-only [ 323.052601][ T5124] usb 5-1: USB disconnect, device number 2 [ 323.359313][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 323.419183][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 323.523068][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.583517][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 323.964187][ T25] libceph: connect (1)[c::]:6789 error -101 [ 323.970667][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 324.130862][ T5918] loop2: detected capacity change from 0 to 256 [ 324.143656][ T5914] ceph: No mds server is up or the cluster is laggy [ 324.176870][ T5918] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 324.317918][ T5609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.866132][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.056749][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.130748][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.138547][ T5124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.277731][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.285526][ T5124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.893572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 327.208269][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.923471][ T5867] veth0_vlan: entered promiscuous mode [ 328.036913][ T5867] veth1_vlan: entered promiscuous mode [ 328.318199][ T4428] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 328.327053][ T4428] Bluetooth: hci1: Injecting HCI hardware error event [ 328.334991][ T4428] Bluetooth: hci1: hardware error 0x00 [ 328.399380][ T5867] veth0_macvtap: entered promiscuous mode [ 328.427606][ T5867] veth1_macvtap: entered promiscuous mode [ 328.505933][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.517702][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.527938][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.539296][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.549378][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.563581][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.578363][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.759367][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.775468][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.787598][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.798551][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.808772][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.820005][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.835515][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.981292][ T5867] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.991638][ T5867] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.000655][ T5867] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.009834][ T5867] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.392590][ T4428] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 331.962201][ T5975] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 332.078774][ T5974] loop1: detected capacity change from 0 to 1764 [ 333.832311][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 333.838675][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 334.720136][ T2811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.728932][ T2811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.898391][ T2811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.912786][ T2811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.477605][ T6007] loop3: detected capacity change from 0 to 1024 [ 336.274221][ T6007] EXT4-fs: Ignoring removed orlov option [ 336.305125][ T6007] EXT4-fs (loop3): Test dummy encryption mode enabled [ 336.350839][ T6007] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 336.362223][ T6007] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 336.362465][ T6007] EXT4-fs: failed to create workqueue [ 336.377805][ T6007] EXT4-fs (loop3): mount failed [ 337.406674][ T6029] loop2: detected capacity change from 0 to 128 [ 337.564684][ T6029] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 339.276598][ T6034] loop1: detected capacity change from 0 to 1764 [ 339.367940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 340.477158][ T3185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.653827][ T3185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.888602][ T3185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.036962][ T3185] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.342549][ T3185] bridge_slave_1: left allmulticast mode [ 341.348440][ T3185] bridge_slave_1: left promiscuous mode [ 341.369383][ T3185] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.421116][ T3185] bridge_slave_0: left allmulticast mode [ 341.427208][ T3185] bridge_slave_0: left promiscuous mode [ 341.434190][ T3185] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.020437][ T1218] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.027379][ T1218] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.040512][ T5455] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 342.103391][ T3185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.193333][ T3185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.263968][ T3185] bond0 (unregistering): Released all slaves [ 342.472582][ T5455] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 342.483824][ T5455] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 342.496166][ T5455] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.564664][ T5455] usb 5-1: config 0 descriptor?? [ 342.583354][ T6046] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 342.629197][ T5455] hub 5-1:0.0: bad descriptor, ignoring hub [ 342.640675][ T5455] hub 5-1:0.0: probe with driver hub failed with error -5 [ 342.655621][ T5455] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 343.287093][ T3185] hsr_slave_0: left promiscuous mode [ 343.332807][ T3185] hsr_slave_1: left promiscuous mode [ 343.352880][ T3185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.360966][ T3185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.400541][ T3185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.413884][ T3185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.475673][ T3185] veth1_macvtap: left promiscuous mode [ 343.481657][ T3185] veth0_macvtap: left promiscuous mode [ 343.487553][ T3185] veth1_vlan: left promiscuous mode [ 343.493390][ T3185] veth0_vlan: left promiscuous mode [ 343.496953][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.509976][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.532101][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.555068][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.568114][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 343.578457][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.373949][ T3185] team0 (unregistering): Port device team_slave_1 removed [ 344.399985][ T3185] team0 (unregistering): Port device team_slave_0 removed [ 344.799453][ T6072] process 'syz-executor.3' launched '/dev/fd/3' with NULL argv: empty string added [ 344.982424][ T43] usb 5-1: USB disconnect, device number 3 [ 345.130991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 345.499321][ T6078] loop2: detected capacity change from 0 to 128 [ 345.842077][ T50] Bluetooth: hci0: command tx timeout [ 346.278830][ T6060] chnl_net:caif_netlink_parms(): no params data found [ 346.381879][ T5455] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 346.772511][ T5455] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.783991][ T5455] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.795126][ T5455] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 346.952003][ T5457] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 346.973045][ T5455] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.982701][ T5455] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.992005][ T5455] usb 5-1: Product: syz [ 346.996404][ T5455] usb 5-1: Manufacturer: syz [ 347.001221][ T5455] usb 5-1: SerialNumber: syz [ 347.296293][ T6090] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 347.411978][ T5457] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 347.423660][ T5457] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 347.434278][ T5457] usb 4-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 347.443818][ T5457] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.466947][ T6060] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.475022][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.483104][ T6060] bridge_slave_0: entered allmulticast mode [ 347.494855][ T6060] bridge_slave_0: entered promiscuous mode [ 347.534267][ T5457] usb 4-1: config 0 descriptor?? [ 347.572174][ T6060] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.579967][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.588063][ T6060] bridge_slave_1: entered allmulticast mode [ 347.597842][ T6060] bridge_slave_1: entered promiscuous mode [ 347.923094][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 347.932142][ T6060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.942088][ T50] Bluetooth: hci0: command tx timeout [ 348.030626][ T6060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.045413][ T6090] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 348.079147][ T5457] usb 4-1: USB disconnect, device number 5 [ 348.124437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 348.134675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 348.231851][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 348.312193][ T5455] cdc_ncm 5-1:1.0: bind() failure [ 348.352939][ T43] usb 1-1: config 0 has no interfaces? [ 348.365601][ T6060] team0: Port device team_slave_0 added [ 348.382126][ T5455] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 348.422201][ T6060] team0: Port device team_slave_1 added [ 348.446224][ T5455] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 348.482264][ T43] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 348.491724][ T43] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 348.500074][ T43] usb 1-1: Product: syz [ 348.504544][ T43] usb 1-1: Manufacturer: syz [ 348.527775][ T5455] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 348.606292][ T5455] usb 5-1: USB disconnect, device number 4 [ 348.613101][ T6060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.620299][ T6060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.650201][ T6060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.683515][ T6060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.690647][ T6060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.716940][ T6060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.775075][ T43] r8152-cfgselector 1-1: Unknown version 0x0000 [ 348.782029][ T43] r8152-cfgselector 1-1: config 0 descriptor?? [ 348.942305][ T6060] hsr_slave_0: entered promiscuous mode [ 348.982060][ T6060] hsr_slave_1: entered promiscuous mode [ 349.023862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 349.033749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 349.043807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 349.073044][ T6060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.080800][ T6060] Cannot create hsr debugfs directory [ 349.158038][ T43] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 349.991775][ T50] Bluetooth: hci0: command tx timeout [ 350.240248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 350.697066][ T6060] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 350.773458][ T6060] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 350.840820][ T6060] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 350.920113][ T6060] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 351.825216][ T6060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.003364][ T6060] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.067334][ T5457] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.075236][ T5457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.104881][ T50] Bluetooth: hci0: command tx timeout [ 352.176417][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.184236][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.492086][ T5457] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 352.683868][ T6142] loop3: detected capacity change from 0 to 128 [ 352.912000][ T5457] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 352.923551][ T5457] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 352.935117][ T5457] usb 3-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 352.945166][ T5457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.011274][ T5457] usb 3-1: config 0 descriptor?? [ 353.645203][ T5455] usb 3-1: USB disconnect, device number 3 [ 354.423687][ T6060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.970377][ T6060] veth0_vlan: entered promiscuous mode [ 355.068593][ T6060] veth1_vlan: entered promiscuous mode [ 355.428660][ T6060] veth0_macvtap: entered promiscuous mode [ 355.505760][ T6060] veth1_macvtap: entered promiscuous mode [ 355.688256][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.700258][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.710861][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.721865][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.732501][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.743322][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.758907][ T6060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.966162][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.977048][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.987302][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.999203][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.010569][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.021781][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.037452][ T6060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.200421][ T6060] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.210892][ T6060] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.220445][ T6060] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.229705][ T6060] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.289991][ T6178] loop0: detected capacity change from 0 to 128 [ 359.349156][ T6178] hpfs: bad mount options. [ 361.935877][ T6201] loop2: detected capacity change from 0 to 128 [ 361.983844][ T2811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.992740][ T2811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.075511][ T5118] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 362.301012][ T5441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.309236][ T5441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.442173][ T5118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 362.455679][ T5118] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 362.466938][ T5118] usb 4-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 362.482101][ T5118] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.527854][ T5118] usb 4-1: config 0 descriptor?? [ 363.127641][ T5118] usb 4-1: USB disconnect, device number 6 [ 364.388785][ T6218] loop3: detected capacity change from 0 to 128 [ 364.421324][ T6218] hpfs: bad mount options. [ 366.614697][ T6241] loop4: detected capacity change from 0 to 128 [ 367.562145][ T5457] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 367.775059][ T6251] loop3: detected capacity change from 0 to 128 [ 367.835908][ T6251] hpfs: bad mount options. [ 367.962727][ T5457] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 367.974363][ T5457] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 367.986566][ T5457] usb 3-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 367.996753][ T5457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.054660][ T5457] usb 3-1: config 0 descriptor?? [ 368.161595][ C1] hrtimer: interrupt took 253363 ns [ 368.481037][ T5118] usb 3-1: USB disconnect, device number 4 [ 369.080381][ T6259] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0 [ 370.705504][ T6277] loop1: detected capacity change from 0 to 128 [ 371.858521][ T6287] pim6reg1: entered promiscuous mode [ 371.865559][ T6287] pim6reg1: entered allmulticast mode [ 372.275941][ T5118] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 372.692055][ T5118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 372.706448][ T5118] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 372.717065][ T5118] usb 4-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 372.727024][ T5118] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.817670][ T5118] usb 4-1: config 0 descriptor?? [ 373.247405][ T5118] usb 4-1: USB disconnect, device number 7 [ 373.427532][ T6314] loop0: detected capacity change from 0 to 128 [ 375.630747][ T6351] vlan2: entered promiscuous mode [ 375.637341][ T6351] erspan0: entered promiscuous mode [ 375.720984][ T6351] erspan0: left promiscuous mode [ 375.733718][ T6353] Bluetooth: MGMT ver 1.22 [ 375.830514][ T6355] loop2: detected capacity change from 0 to 128 [ 376.621802][ T5118] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 377.015418][ T5118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 377.027055][ T5118] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 377.037910][ T5118] usb 5-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 377.047444][ T5118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.094536][ T5118] usb 5-1: config 0 descriptor?? [ 377.470128][ T5441] usb 5-1: USB disconnect, device number 5 [ 378.080581][ T6394] loop1: detected capacity change from 0 to 128 [ 380.665368][ T6414] overlayfs: failed to resolve './file0': -2 [ 382.019645][ T5118] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 382.310209][ T6428] loop0: detected capacity change from 0 to 128 [ 382.424838][ T5118] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 382.436574][ T5118] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 382.448016][ T5118] usb 3-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 382.457631][ T5118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.578501][ T5118] usb 3-1: config 0 descriptor?? [ 383.006927][ T5455] usb 3-1: USB disconnect, device number 5 [ 384.537592][ T6463] loop3: detected capacity change from 0 to 128 [ 386.142853][ T5455] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 386.528871][ T5455] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 386.540700][ T5455] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 386.551536][ T5455] usb 5-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 386.560885][ T5455] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.593068][ T5455] usb 5-1: config 0 descriptor?? [ 387.019220][ T5455] usb 5-1: USB disconnect, device number 6 [ 387.162628][ T6503] loop0: detected capacity change from 0 to 128 [ 388.820105][ T6528] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.0'. [ 389.340225][ T6535] loop4: detected capacity change from 0 to 128 [ 390.091844][ T5457] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 390.508090][ T5457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 390.521678][ T5457] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 390.532839][ T5457] usb 2-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 390.542323][ T5457] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.571848][ T5457] usb 2-1: config 0 descriptor?? [ 390.899168][ T5457] usb 2-1: USB disconnect, device number 2 [ 391.835128][ T6563] loop4: detected capacity change from 0 to 1024 [ 391.997913][ T6563] hfsplus: bad catalog entry type [ 392.039287][ T6561] loop3: detected capacity change from 0 to 8192 [ 392.089457][ T6561] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 392.103068][ T6561] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 392.142347][ T6561] REISERFS (device loop3): using ordered data mode [ 392.152072][ T6561] reiserfs: using flush barriers [ 392.162056][ T6561] REISERFS warning (device loop3): sh-458 journal_init_dev: cannot init journal device unknown-block(7,3): -16 [ 392.174285][ T6561] REISERFS warning (device loop3): sh-462 journal_init: unable to initialize journal device [ 392.214120][ T2811] hfsplus: b-tree write err: -5, ino 4 [ 393.249736][ T6579] loop0: detected capacity change from 0 to 128 [ 394.615033][ T6590] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0 [ 395.451903][ T5118] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 395.697418][ T6604] loop2: detected capacity change from 0 to 1024 [ 395.824748][ T5118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 395.840098][ T5118] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 395.851634][ T5118] usb 1-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 395.861098][ T5118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.920020][ T5118] usb 1-1: config 0 descriptor?? [ 395.932343][ T6604] hfsplus: bad catalog entry type [ 396.194837][ T59] hfsplus: b-tree write err: -5, ino 4 [ 396.311039][ T5441] usb 1-1: USB disconnect, device number 4 [ 397.327276][ T6619] loop4: detected capacity change from 0 to 128 [ 397.383223][ T6620] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 397.439144][ T29] audit: type=1326 audit(1717710013.661:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742a579 code=0x7ffc0000 [ 397.462277][ T29] audit: type=1326 audit(1717710013.661:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742a579 code=0x7ffc0000 [ 397.489646][ T29] audit: type=1326 audit(1717710013.671:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf742a579 code=0x7ffc0000 [ 397.513874][ T29] audit: type=1326 audit(1717710013.701:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742a579 code=0x7ffc0000 [ 397.536984][ T29] audit: type=1326 audit(1717710013.731:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf742a579 code=0x7ffc0000 [ 397.648349][ T29] audit: type=1326 audit(1717710013.861:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742a579 code=0x7ffc0000 [ 397.671769][ T29] audit: type=1326 audit(1717710013.881:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf742a579 code=0x7ffc0000 [ 397.699175][ T29] audit: type=1326 audit(1717710013.901:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf742a5a7 code=0x7ffc0000 [ 397.723490][ T29] audit: type=1326 audit(1717710013.911:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf742a579 code=0x7ffc0000 [ 397.811176][ T29] audit: type=1326 audit(1717710014.031:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf742a579 code=0x7ffc0000 [ 398.884230][ T6634] loop2: detected capacity change from 0 to 1024 [ 399.038526][ T6634] hfsplus: bad catalog entry type [ 399.283812][ T11] hfsplus: b-tree write err: -5, ino 4 [ 400.152145][ T5118] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 400.391798][ T4428] Bluetooth: hci5: command 0x0406 tx timeout [ 400.509324][ T6651] loop4: detected capacity change from 0 to 128 [ 400.523092][ T5118] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 400.534749][ T5118] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 400.547302][ T5118] usb 3-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 400.557251][ T5118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.608131][ T5118] usb 3-1: config 0 descriptor?? [ 400.895336][ T5118] usb 3-1: USB disconnect, device number 6 [ 402.411067][ T6668] loop4: detected capacity change from 0 to 1024 [ 402.502589][ T6668] hfsplus: bad catalog entry type [ 402.578057][ T6666] loop0: detected capacity change from 0 to 512 [ 402.609566][ T6666] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 402.656677][ T6666] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 402.771727][ T6666] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz-executor.0: inode #15: comm syz-executor.0: iget: illegal inode # [ 402.832301][ T6666] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 402.855451][ T59] hfsplus: b-tree write err: -5, ino 4 [ 402.867705][ T6666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.989519][ T6666] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.361080][ T6676] loop4: detected capacity change from 0 to 164 [ 403.443539][ T6676] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 403.474407][ T1218] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.481119][ T1218] ieee802154 phy1 wpan1: encryption failed: -22 [ 404.090260][ T6687] loop4: detected capacity change from 0 to 128 [ 404.572318][ T5118] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 404.970277][ T5118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 404.982025][ T5118] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 404.992587][ T5118] usb 4-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 405.002796][ T5118] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.046683][ T5118] usb 4-1: config 0 descriptor?? [ 405.357010][ T5457] usb 4-1: USB disconnect, device number 8 [ 405.381906][ T6699] loop1: detected capacity change from 0 to 1024 [ 405.478697][ T6699] hfsplus: bad catalog entry type [ 405.638141][ T59] hfsplus: b-tree write err: -5, ino 4 [ 407.564903][ T6729] loop0: detected capacity change from 0 to 128 [ 407.607574][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 407.607774][ T29] audit: type=1326 audit(1717710023.871:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x0 [ 407.685000][ T6730] loop4: detected capacity change from 0 to 1024 [ 407.803424][ T6730] hfsplus: bad catalog entry type [ 408.073390][ T2811] hfsplus: b-tree write err: -5, ino 4 [ 408.446096][ T6737] loop1: detected capacity change from 0 to 764 [ 408.803273][ T6742] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 408.812995][ T6742] bridge_slave_1: left allmulticast mode [ 408.818872][ T6742] bridge_slave_1: left promiscuous mode [ 408.826007][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.869635][ T6742] bridge_slave_0: left allmulticast mode [ 408.876489][ T6742] bridge_slave_0: left promiscuous mode [ 408.883338][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.055088][ T6764] loop1: detected capacity change from 0 to 128 [ 411.088024][ T6763] loop4: detected capacity change from 0 to 1024 [ 411.474344][ T2811] hfsplus: b-tree write err: -5, ino 4 [ 411.977142][ T29] audit: type=1800 audit(1717710028.211:92): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1966 res=0 errno=0 [ 412.573104][ T6773] loop4: detected capacity change from 0 to 512 [ 412.658072][ T6773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.671523][ T6773] ext4 filesystem being mounted at /root/syzkaller-testdir48117220/syzkaller.jF6s9H/84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.175633][ T5609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.874599][ T29] audit: type=1326 audit(1717710030.081:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7453579 code=0x7ffc0000 [ 413.898718][ T29] audit: type=1326 audit(1717710030.121:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7453579 code=0x7ffc0000 [ 414.111893][ T29] audit: type=1326 audit(1717710030.291:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6782 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7437579 code=0x0 [ 414.134384][ T29] audit: type=1326 audit(1717710030.331:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7453579 code=0x7ffc0000 [ 414.157447][ T29] audit: type=1326 audit(1717710030.331:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7453579 code=0x7ffc0000 [ 414.271982][ T29] audit: type=1326 audit(1717710030.491:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7453579 code=0x7ffc0000 [ 414.295118][ T29] audit: type=1326 audit(1717710030.491:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7453579 code=0x7ffc0000 [ 414.318118][ T29] audit: type=1326 audit(1717710030.501:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7453579 code=0x7ffc0000 [ 414.341062][ T29] audit: type=1326 audit(1717710030.521:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf74535a7 code=0x7ffc0000 [ 414.364013][ T29] audit: type=1326 audit(1717710030.531:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6785 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7453579 code=0x7ffc0000 [ 415.433191][ T6799] loop1: detected capacity change from 0 to 1024 [ 415.842509][ T1553] hfsplus: b-tree write err: -5, ino 4 [ 417.291061][ T6832] loop2: detected capacity change from 0 to 1024 [ 417.587639][ T2811] hfsplus: b-tree write err: -5, ino 4 [ 418.083421][ T6844] loop2: detected capacity change from 0 to 16 [ 418.144040][ T6844] erofs: (device loop2): mounted with root inode @ nid 36. [ 418.418619][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 418.507756][ T6851] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 421.109714][ T6872] ===================================================== [ 421.117057][ T6872] BUG: KMSAN: uninit-value in __bpf_strtoull+0x245/0x5b0 [ 421.124391][ T6872] __bpf_strtoull+0x245/0x5b0 [ 421.129271][ T6872] bpf_strtol+0x7c/0x270 [ 421.133826][ T6872] ___bpf_prog_run+0x13fe/0xe0f0 [ 421.138957][ T6872] __bpf_prog_run96+0xb5/0xe0 [ 421.143925][ T6872] bpf_test_run+0x43e/0xc30 [ 421.148645][ T6872] bpf_prog_test_run_xdp+0xeaa/0x1a40 [ 421.154349][ T6872] bpf_prog_test_run+0x6b7/0xad0 [ 421.159478][ T6872] __sys_bpf+0x6aa/0xd90 [ 421.164039][ T6872] __ia32_sys_bpf+0xa0/0xe0 [ 421.168708][ T6872] ia32_sys_call+0xf7e/0x40a0 [ 421.173723][ T6872] __do_fast_syscall_32+0xb4/0x120 [ 421.179056][ T6872] do_fast_syscall_32+0x38/0x80 [ 421.184224][ T6872] do_SYSENTER_32+0x1f/0x30 [ 421.188920][ T6872] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.195603][ T6872] [ 421.198019][ T6872] Local variable stack created at: [ 421.203338][ T6872] __bpf_prog_run96+0x45/0xe0 [ 421.208194][ T6872] bpf_test_run+0x43e/0xc30 [ 421.213012][ T6872] [ 421.215439][ T6872] CPU: 0 PID: 6872 Comm: syz-executor.4 Not tainted 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 421.225711][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 421.236038][ T6872] ===================================================== [ 421.243190][ T6872] Disabling lock debugging due to kernel taint [ 421.249447][ T6872] Kernel panic - not syncing: kmsan.panic set ... [ 421.255982][ T6872] CPU: 0 PID: 6872 Comm: syz-executor.4 Tainted: G B 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 421.267620][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 421.277878][ T6872] Call Trace: [ 421.281267][ T6872] [ 421.284302][ T6872] dump_stack_lvl+0x216/0x2d0 [ 421.289197][ T6872] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 421.295213][ T6872] dump_stack+0x1e/0x30 [ 421.299576][ T6872] panic+0x4e2/0xcd0 [ 421.303699][ T6872] ? kmsan_get_metadata+0xf1/0x1d0 [ 421.309020][ T6872] kmsan_report+0x2d5/0x2e0 [ 421.313819][ T6872] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 421.319820][ T6872] ? __msan_warning+0x95/0x120 [ 421.324756][ T6872] ? __bpf_strtoull+0x245/0x5b0 [ 421.329817][ T6872] ? bpf_strtol+0x7c/0x270 [ 421.334437][ T6872] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 421.339743][ T6872] ? __bpf_prog_run96+0xb5/0xe0 [ 421.344788][ T6872] ? bpf_test_run+0x43e/0xc30 [ 421.349684][ T6872] ? bpf_prog_test_run_xdp+0xeaa/0x1a40 [ 421.355462][ T6872] ? bpf_prog_test_run+0x6b7/0xad0 [ 421.360783][ T6872] ? __sys_bpf+0x6aa/0xd90 [ 421.365379][ T6872] ? __ia32_sys_bpf+0xa0/0xe0 [ 421.370226][ T6872] ? ia32_sys_call+0xf7e/0x40a0 [ 421.375300][ T6872] ? __do_fast_syscall_32+0xb4/0x120 [ 421.380890][ T6872] ? do_fast_syscall_32+0x38/0x80 [ 421.386131][ T6872] ? do_SYSENTER_32+0x1f/0x30 [ 421.391020][ T6872] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.397761][ T6872] ? kmsan_get_metadata+0x146/0x1d0 [ 421.403381][ T6872] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 421.409873][ T6872] ? kmsan_get_metadata+0x146/0x1d0 [ 421.415265][ T6872] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 421.421274][ T6872] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 421.427278][ T6872] ? stack_depot_save_flags+0x66d/0x6e0 [ 421.433015][ T6872] ? kmsan_get_metadata+0x146/0x1d0 [ 421.438403][ T6872] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 421.444890][ T6872] ? kmsan_get_metadata+0x146/0x1d0 [ 421.450288][ T6872] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 421.456308][ T6872] __msan_warning+0x95/0x120 [ 421.461068][ T6872] __bpf_strtoull+0x245/0x5b0 [ 421.465955][ T6872] ? bpf_strtol+0x5c/0x270 [ 421.470578][ T6872] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 421.475902][ T6872] bpf_strtol+0x7c/0x270 [ 421.480357][ T6872] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 421.486367][ T6872] ___bpf_prog_run+0x13fe/0xe0f0 [ 421.491511][ T6872] ? kmsan_get_metadata+0x146/0x1d0 [ 421.496924][ T6872] __bpf_prog_run96+0xb5/0xe0 [ 421.501821][ T6872] ? ktime_get+0x4c7/0x530 [ 421.506461][ T6872] ? __pfx___bpf_prog_run96+0x10/0x10 [ 421.512063][ T6872] bpf_test_run+0x43e/0xc30 [ 421.516796][ T6872] ? bpf_test_run+0x388/0xc30 [ 421.521722][ T6872] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 421.527739][ T6872] bpf_prog_test_run_xdp+0xeaa/0x1a40 [ 421.533382][ T6872] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 421.539432][ T6872] bpf_prog_test_run+0x6b7/0xad0 [ 421.544596][ T6872] __sys_bpf+0x6aa/0xd90 [ 421.549148][ T6872] __ia32_sys_bpf+0xa0/0xe0 [ 421.553844][ T6872] ia32_sys_call+0xf7e/0x40a0 [ 421.558745][ T6872] __do_fast_syscall_32+0xb4/0x120 [ 421.564075][ T6872] ? switch_fpu_return+0x17/0x20 [ 421.569217][ T6872] do_fast_syscall_32+0x38/0x80 [ 421.574275][ T6872] do_SYSENTER_32+0x1f/0x30 [ 421.578989][ T6872] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.585573][ T6872] RIP: 0023:0xf7437579 [ 421.589778][ T6872] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 421.609679][ T6872] RSP: 002b:00000000eda9f5ac EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 421.618369][ T6872] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000640 [ 421.626494][ T6872] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 421.634608][ T6872] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 421.642731][ T6872] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 421.650843][ T6872] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 421.659236][ T6872] [ 421.662580][ T6872] Kernel Offset: disabled [ 421.666964][ T6872] Rebooting in 86400 seconds..