last executing test programs: 43.568140806s ago: executing program 3 (id=1093): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast1, 0x0, 0x0, 0x20}}) 41.593545007s ago: executing program 3 (id=1095): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1208002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@usrquota}, {@grpjquota}, {@lazytime}, {@jqfmt_vfsold}, {@grpid}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}) 41.090696068s ago: executing program 3 (id=1108): open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 28.090484235s ago: executing program 4 (id=1156): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) 27.612091514s ago: executing program 4 (id=1163): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x18, 0x4, 0x0, 0x0, 0x1}, 0x48) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) mkdir(0x0, 0x0) chown(0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0x10, 0x803, 0x0) fsopen(0x0, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x40044591, 0x0) writev(0xffffffffffffffff, &(0x7f0000004600)=[{&(0x7f0000003140)}], 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x38}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005ac0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @local}}}], 0x20}}], 0x1, 0x0) 20.842209555s ago: executing program 1 (id=1188): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x202030, &(0x7f0000000380)=ANY=[], 0x2, 0x224, &(0x7f0000000700)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r6 = socket(0x10, 0x2, 0x9) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r7) setgroups(0x1, &(0x7f0000000000)=[r7]) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) write$tcp_congestion(r5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 17.916205313s ago: executing program 1 (id=1192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000000850000003300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='jbd2_handle_stats\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 17.682307312s ago: executing program 1 (id=1194): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xb, 0x6a1, &(0x7f0000000240)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@cgroup, r0, 0x0, 0x1, 0xffffffffffffffff, @link_id=r3}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) msync(&(0x7f00002ee000/0x3000)=nil, 0x3000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="66bad00466edb006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="e256d471458ecdcf628b1456c4840b532a12b92b7482532c14e5069aa1601b70ffcdfe79fb6f2892a7a2683bc790f9ae6d290402d47049e9c1abb671a57a8333f5f9326a29c6d5d15dc46e90df496825d66cf59867e756d4f67b5fd4bc848510d50cf7c14ba0ec282b717e79512d7453d2e796001c046e028bbc6a365feec7f63c146d3a5d76067d6a73e1a634d8c506f8d0b09ef15eb5c048b5d0525b7de8f5b1cce2b762610db55e6b28af470fe7021aed8d", 0xb3) inotify_init1(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'lo\x00'}]}, 0x38}}, 0x0) 16.96747133s ago: executing program 1 (id=1198): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x27a, &(0x7f0000000540)="$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") open(&(0x7f0000000080)='./bus\x00', 0x8cc40, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f0000002140)='./file0\x00', 0x0) 16.334618602s ago: executing program 1 (id=1201): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x76) 15.703129733s ago: executing program 1 (id=1202): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000380)="a989d7b184832e98", 0x89a9}], 0x1) 13.044186969s ago: executing program 3 (id=1142): prlimit64(0x0, 0x2, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) 12.860279614s ago: executing program 3 (id=1212): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14711}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 12.504896053s ago: executing program 3 (id=1214): syz_clone(0x48209200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x50b86100, 0x0, 0x0, 0x0, 0x0, 0x0) 11.725277706s ago: executing program 2 (id=1215): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='u', 0x500}], 0x1, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.416170792s ago: executing program 2 (id=1216): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82710e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.755043458s ago: executing program 2 (id=1218): iopl(0x3) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') link(&(0x7f0000001240)='./file0\x00', 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) 8.47919844s ago: executing program 0 (id=1219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) 8.296129355s ago: executing program 0 (id=1220): r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$damon_target_ids(r0, &(0x7f0000000000), 0x8) write$damon_target_ids(r0, 0x0, 0x2a) 8.108153091s ago: executing program 0 (id=1221): syz_mount_image$xfs(&(0x7f00000004c0), &(0x7f0000009640)='./file1\x00', 0x1010840, &(0x7f00000000c0), 0x4, 0x970b, &(0x7f0000032680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0x11}) 7.664296627s ago: executing program 4 (id=1165): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f00000022c0)) 7.473776882s ago: executing program 4 (id=1222): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00', @ANYBLOB="85391582a4c8334ce61e0bcf252a5fbd7ea16799380b4f2d93aa6dbd24c3adca75056694fffac7794cc7cd7a851680646205b6aaeedec846b9c541047799dfeb5fc2e18abfb4c8b3b4ccee3a3fc11730957433c2e3bd28ca474ab9fffebf92d6c1b576c8a06864a14ffc00"/116], 0x1, 0x553d, &(0x7f0000001800)="$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") open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) unlink(&(0x7f0000000280)='./file1\x00') write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040), 0x2) 6.584262515s ago: executing program 0 (id=1223): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x7d}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 3.426451071s ago: executing program 2 (id=1224): epoll_create(0x9544) syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x2925, 0x0, 0x20000000, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000040)={{@my=0x1}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000004980)={0x2020}, 0x2020) 3.155507163s ago: executing program 4 (id=1225): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) iopl(0x3) mq_open(&(0x7f0000000440)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xceq\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000580)="97d3f7aea5611cc8f696614b76351299af6ac5769a7937cedd9d1087ddc54e17a7716bcd0571ccf279fcab1aae79c27081e15d8306a1c64d000000000000000036aba32d41ae86ff", 0x48, 0x3c6, 0x0) r0 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x100000}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x3652, &(0x7f00000003c0), &(0x7f0000000200)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x11, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000440)={0x0, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r5 = socket(0x1e, 0x1, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r6, 0xb101, 0x0) sendmmsg$sock(r5, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x4}, 0x80, 0x0}}], 0x2, 0xea) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040804008b0002"], 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c90012000e0005000000000700ffff00000700000000"], 0x17) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0xdf}}}, 0x4) syz_emit_vhci(0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() 2.232463868s ago: executing program 0 (id=1227): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x50}}, 0x0) 2.155953795s ago: executing program 2 (id=1229): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)='B', 0x1}], 0x1, &(0x7f0000000900)=ANY=[], 0xe0}}], 0x2, 0x4008440) 1.979849459s ago: executing program 2 (id=1230): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_CLASSID]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 93.272752ms ago: executing program 0 (id=1231): setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0xff, 0x0, 0xad0d}, 0xc) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001900)=0x14) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=@newtfilter={0x64, 0x2c, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x7, 0xfff2}, {0xd, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x2, 0xfff2}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x9c05}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xe, 0x8000}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x80) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000001200)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$sock(r7, &(0x7f00000004c0)={&(0x7f0000000380)=@can, 0x80, &(0x7f0000000400)=[{&(0x7f00000005c0)="1d2ac27aa7c0b955ce2dd3a9939cdfa08f6fc9dc985c595623ea5c54df780ec1a34eff30c84d7660f342a80ac8bfd210ca37597de0c86f93d5834220fd9efc13310112f3754c80e4c0fdac423daa02a2833158ddc8b91e2bdeedde1465253937d3588285a650a58a9b4704cd4c54cf47555c21da270c29e41114aedd866f6e947accb5e7d88d037d2c5947fdca392dbebf374ceda5e27800168a454913d09d20d4e8622d37893c", 0xa7}, {&(0x7f0000000880)="18d8c8abf71449a96d46d1f0c302b5c29e72d23d2281bb584cddb7c963f4445b32bf85668861ac21fe19c220c61ead27e27434330748cb371577ffd6916528c2ddce6c1b06599f798a1d5d248284457ae2ac1840feb1733a01b902e22091528c86e25d149a3d9a9c9f91243978422304b7db6864f895a94faad3856ad9b6455bfbdb446c0f8bb8dfe7cf73de958b6011369855e0427331ef52f9ddbc23b84322329b33c660d7db55252db06e6d072398e80f3242e0961f9764a34ce3cdf093d46c4eb4b418d519f650ff763a22d45ba9feef32936928292ad5e24352762d296300a95deeb1eba5", 0xe7}], 0x2, &(0x7f0000000980)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xe4c}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0xf0}, 0x4004045) r8 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r8, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="f2", 0x1}], 0x1}], 0x1, 0x20008001) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)={0x130, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @rand_addr=0x4}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbb98}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff124}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x130}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000240)=0x8, 0x4) r9 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) socket(0x28, 0x2, 0x3) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r13}}, 0x20}}, 0x0) 0s ago: executing program 4 (id=1232): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb}}}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): ANGE): macsec0: link becomes ready [ 290.170846][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.192424][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.223161][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.242795][ T3684] hid_mf 0003:0079:1801.0009: item fetching failed at offset 0/2 [ 290.260627][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.271552][ T3684] hid_mf 0003:0079:1801.0009: HID parse failed. [ 290.277837][ T3684] hid_mf: probe of 0003:0079:1801.0009 failed with error -22 [ 290.281665][ T6980] loop0: detected capacity change from 0 to 40427 [ 290.300594][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.339606][ T3650] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 290.351875][ T3650] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 290.360375][ T3643] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 290.385424][ T3650] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 290.387954][ T6980] F2FS-fs (loop0): invalid crc value [ 290.409576][ T3650] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 290.417513][ T3650] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 290.456230][ T3684] usb 4-1: USB disconnect, device number 14 [ 290.460543][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.502905][ T6980] F2FS-fs (loop0): Found nat_bits in checkpoint [ 290.540566][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.587711][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.619227][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.640898][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.641155][ T6980] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 290.659562][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.717346][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.772893][ T6765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.785215][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 290.805628][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.855728][ T6765] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.890601][ T6765] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.899336][ T6765] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.930553][ T6765] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.164293][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.165820][ T7000] netlink: 60 bytes leftover after parsing attributes in process `syz.2.884'. [ 291.213976][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.292249][ T6997] netlink: 32 bytes leftover after parsing attributes in process `syz.2.884'. [ 291.309596][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 291.420968][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.429411][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.437894][ T6991] chnl_net:caif_netlink_parms(): no params data found [ 291.450069][ T3846] bio_check_eod: 25575 callbacks suppressed [ 291.450085][ T3846] syz.2.43: attempt to access beyond end of device [ 291.450085][ T3846] loop2: rw=3, sector=21568290169808, nr_sectors = 8388600 limit=2048 [ 291.485982][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 291.510153][ T7000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.884'. [ 291.550704][ T3846] syz.2.43: attempt to access beyond end of device [ 291.550704][ T3846] loop2: rw=3, sector=21568298558408, nr_sectors = 8388600 limit=2048 [ 291.593553][ T7000] netlink: 20 bytes leftover after parsing attributes in process `syz.2.884'. [ 291.654539][ T7000] netlink: 'syz.2.884': attribute type 1 has an invalid length. [ 291.797850][ T7016] Â: renamed from pim6reg1 [ 291.803031][ T3846] syz.2.43: attempt to access beyond end of device [ 291.803031][ T3846] loop2: rw=3, sector=21568306947008, nr_sectors = 8388600 limit=2048 [ 291.828302][ T3846] syz.2.43: attempt to access beyond end of device [ 291.828302][ T3846] loop2: rw=3, sector=21568315335608, nr_sectors = 8388600 limit=2048 [ 291.901771][ T7000] netlink: 20 bytes leftover after parsing attributes in process `syz.2.884'. [ 292.075654][ T3846] syz.2.43: attempt to access beyond end of device [ 292.075654][ T3846] loop2: rw=3, sector=21568323724208, nr_sectors = 8388600 limit=2048 [ 292.492338][ T3644] Bluetooth: hci6: command tx timeout [ 292.509327][ T3846] syz.2.43: attempt to access beyond end of device [ 292.509327][ T3846] loop2: rw=3, sector=21568332112808, nr_sectors = 8388600 limit=2048 [ 292.843121][ T3846] syz.2.43: attempt to access beyond end of device [ 292.843121][ T3846] loop2: rw=3, sector=21568340501408, nr_sectors = 8388600 limit=2048 [ 292.977030][ T3846] syz.2.43: attempt to access beyond end of device [ 292.977030][ T3846] loop2: rw=3, sector=21568348890008, nr_sectors = 8388600 limit=2048 [ 293.005900][ T3846] syz.2.43: attempt to access beyond end of device [ 293.005900][ T3846] loop2: rw=3, sector=21568357278608, nr_sectors = 8388600 limit=2048 [ 293.049459][ T3846] syz.2.43: attempt to access beyond end of device [ 293.049459][ T3846] loop2: rw=3, sector=21568365667208, nr_sectors = 8388600 limit=2048 [ 293.107681][ T3643] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 293.116901][ T3643] Bluetooth: hci5: Injecting HCI hardware error event [ 293.125861][ T3644] Bluetooth: hci5: hardware error 0x00 [ 293.140260][ T7028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.370933][ T6991] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.378118][ T6991] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.404744][ T6991] device bridge_slave_0 entered promiscuous mode [ 293.460733][ T6991] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.488261][ T6991] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.530444][ T6991] device bridge_slave_1 entered promiscuous mode [ 293.698711][ T6991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.751124][ T6991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.034329][ T6991] team0: Port device team_slave_0 added [ 294.127174][ T6991] team0: Port device team_slave_1 added [ 294.561234][ T3643] Bluetooth: hci6: command tx timeout [ 294.616721][ T6991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.624130][ T6991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.682146][ T6991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.703551][ T6991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.890654][ T6991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.137067][ T6991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.202036][ T3644] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 295.942969][ T7073] netlink: 'syz.3.906': attribute type 10 has an invalid length. [ 296.022771][ T7073] team0: Port device netdevsim0 added [ 296.032935][ T6991] device hsr_slave_0 entered promiscuous mode [ 296.061108][ T6991] device hsr_slave_1 entered promiscuous mode [ 296.068217][ T6991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.095844][ T6991] Cannot create hsr debugfs directory [ 296.176027][ T7074] netem: incorrect ge model size [ 296.185598][ T7074] netem: change failed [ 296.455901][ T3846] bio_check_eod: 29843 callbacks suppressed [ 296.455917][ T3846] syz.2.43: attempt to access beyond end of device [ 296.455917][ T3846] loop2: rw=3, sector=21818715045608, nr_sectors = 8388600 limit=2048 [ 296.590820][ T3846] syz.2.43: attempt to access beyond end of device [ 296.590820][ T3846] loop2: rw=3, sector=21818723434208, nr_sectors = 8388600 limit=2048 [ 296.640939][ T3644] Bluetooth: hci6: command tx timeout [ 296.685839][ T3846] syz.2.43: attempt to access beyond end of device [ 296.685839][ T3846] loop2: rw=3, sector=21818731822808, nr_sectors = 8388600 limit=2048 [ 296.701050][ T3846] syz.2.43: attempt to access beyond end of device [ 296.701050][ T3846] loop2: rw=3, sector=21818740211408, nr_sectors = 8388600 limit=2048 [ 296.716939][ T3846] syz.2.43: attempt to access beyond end of device [ 296.716939][ T3846] loop2: rw=3, sector=21818748600008, nr_sectors = 8388600 limit=2048 [ 296.731688][ T3846] syz.2.43: attempt to access beyond end of device [ 296.731688][ T3846] loop2: rw=3, sector=21818756988608, nr_sectors = 8388600 limit=2048 [ 296.746354][ T3846] syz.2.43: attempt to access beyond end of device [ 296.746354][ T3846] loop2: rw=3, sector=21818765377208, nr_sectors = 8388600 limit=2048 [ 296.761047][ T3846] syz.2.43: attempt to access beyond end of device [ 296.761047][ T3846] loop2: rw=3, sector=21818773765808, nr_sectors = 8388600 limit=2048 [ 296.775685][ T3846] syz.2.43: attempt to access beyond end of device [ 296.775685][ T3846] loop2: rw=3, sector=21818782154408, nr_sectors = 8388600 limit=2048 [ 296.815367][ T3846] syz.2.43: attempt to access beyond end of device [ 296.815367][ T3846] loop2: rw=3, sector=21818790543008, nr_sectors = 8388600 limit=2048 [ 296.844203][ T6991] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.880188][ T7084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.911'. [ 296.898386][ T3643] Bluetooth: hci1: sending frame failed (-49) [ 296.907715][ T3644] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 296.921927][ T7084] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 296.968562][ T7084] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.020664][ T7084] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.058371][ T7084] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 297.255078][ T6991] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.291034][ T7087] netlink: 36 bytes leftover after parsing attributes in process `syz.3.912'. [ 297.459407][ T6991] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.880421][ T6991] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.720639][ T3644] Bluetooth: hci6: command tx timeout [ 299.110329][ T6991] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 299.143361][ T6991] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 299.209753][ T7109] loop3: detected capacity change from 0 to 1024 [ 299.225135][ T6991] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 299.289978][ T6991] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 299.435807][ T3878] hfsplus: b-tree write err: -5, ino 4 [ 299.614778][ T6991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.649252][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.649821][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.687683][ T6991] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.717892][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.718454][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.718855][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.718918][ T3679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.719395][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 299.745441][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.746042][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.746451][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.746508][ T3679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.763025][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 299.781528][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 299.789537][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 299.791315][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 299.792020][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 299.797507][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 299.799960][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.938682][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 299.958078][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.971333][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 300.012063][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.034103][ T7101] loop0: detected capacity change from 0 to 32768 [ 300.051277][ T6991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 300.073202][ T7101] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.916 (7101) [ 300.156781][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.167404][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.177818][ T7101] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 300.197696][ T6991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.220688][ T7101] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 300.233135][ T3091] udevd[3091]: worker [3780] terminated by signal 33 (Unknown signal 33) [ 300.250637][ T7101] BTRFS info (device loop0): setting nodatacow, compression disabled [ 300.272716][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 300.289665][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.298329][ T3091] udevd[3091]: worker [3780] failed while handling '/devices/virtual/block/loop0' [ 300.307873][ T7101] BTRFS info (device loop0): enabling auto defrag [ 300.328673][ T7101] BTRFS info (device loop0): max_inline at 0 [ 300.349865][ T7101] BTRFS info (device loop0): using free space tree [ 300.389425][ T6991] device veth0_vlan entered promiscuous mode [ 300.431242][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 300.439632][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.450066][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 300.458144][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 300.514919][ T6991] device veth1_vlan entered promiscuous mode [ 300.641890][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 300.650046][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 300.661382][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 300.669950][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 300.681196][ T6991] device veth0_macvtap entered promiscuous mode [ 300.695449][ T6991] device veth1_macvtap entered promiscuous mode [ 300.743269][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.791416][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.810640][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.821657][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.831813][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.842591][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.852666][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.863334][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.873499][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.884155][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.894953][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.905678][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.919214][ T6991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.928964][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 300.937914][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 300.946998][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.087049][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.108510][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.581513][ T7161] BTRFS info (device loop0): space_info DATA+METADATA has 16384 free, is not full [ 301.591362][ T7161] BTRFS info (device loop0): space_info total=3276800, used=53248, pinned=0, reserved=1200128, may_use=2007040, readonly=0 zone_unusable=0 [ 301.596338][ T3846] bio_check_eod: 50792 callbacks suppressed [ 301.596351][ T3846] syz.2.43: attempt to access beyond end of device [ 301.596351][ T3846] loop2: rw=3, sector=22244872702808, nr_sectors = 8388600 limit=2048 [ 301.605577][ T7161] BTRFS info (device loop0): global_block_rsv: size 917504 reserved 917504 [ 301.605782][ T7161] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 301.605805][ T7161] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 301.605826][ T7161] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 301.605846][ T7161] BTRFS info (device loop0): delayed_refs_rsv: size 786432 reserved 786432 [ 301.748287][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.758312][ T7161] BTRFS info (device loop0): space_info DATA+METADATA has 24576 free, is not full [ 301.767878][ T7161] BTRFS info (device loop0): space_info total=3276800, used=53248, pinned=20480, reserved=1196032, may_use=1982464, readonly=0 zone_unusable=0 [ 301.782502][ T7161] BTRFS info (device loop0): global_block_rsv: size 917504 reserved 917504 [ 301.791867][ T7161] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 301.799522][ T7161] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 301.807373][ T7161] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 301.809888][ T3846] syz.2.43: attempt to access beyond end of device [ 301.809888][ T3846] loop2: rw=3, sector=22244881091408, nr_sectors = 8388600 limit=2048 [ 301.815733][ T7161] BTRFS info (device loop0): delayed_refs_rsv: size 393216 reserved 393216 [ 301.841577][ T3846] syz.2.43: attempt to access beyond end of device [ 301.841577][ T3846] loop2: rw=3, sector=22244889480008, nr_sectors = 8388600 limit=2048 [ 301.856486][ T3846] syz.2.43: attempt to access beyond end of device [ 301.856486][ T3846] loop2: rw=3, sector=22244897868608, nr_sectors = 8388600 limit=2048 [ 301.877936][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.060621][ T3654] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 302.104911][ T3846] syz.2.43: attempt to access beyond end of device [ 302.104911][ T3846] loop2: rw=3, sector=22244906257208, nr_sectors = 8388600 limit=2048 [ 302.150667][ T3846] syz.2.43: attempt to access beyond end of device [ 302.150667][ T3846] loop2: rw=3, sector=22244914645808, nr_sectors = 8388600 limit=2048 [ 302.189236][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.201906][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.208652][ T3846] syz.2.43: attempt to access beyond end of device [ 302.208652][ T3846] loop2: rw=3, sector=22244923034408, nr_sectors = 8388600 limit=2048 [ 302.216641][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.239232][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.250454][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.262967][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.273634][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.278964][ T3846] syz.2.43: attempt to access beyond end of device [ 302.278964][ T3846] loop2: rw=3, sector=22244931423008, nr_sectors = 8388600 limit=2048 [ 302.283527][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.283543][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.285062][ T6991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.356270][ T3846] syz.2.43: attempt to access beyond end of device [ 302.356270][ T3846] loop2: rw=3, sector=22244939811608, nr_sectors = 8388600 limit=2048 [ 302.378593][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.409377][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.435820][ T4801] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 302.437096][ T3846] syz.2.43: attempt to access beyond end of device [ 302.437096][ T3846] loop2: rw=3, sector=22244948200208, nr_sectors = 8388600 limit=2048 [ 302.504168][ T6991] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.519589][ T6991] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.549329][ T6991] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.561057][ T3654] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 302.585469][ T6991] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.748906][ T3654] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.770883][ T3654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.789212][ T3654] usb 5-1: Product: syz [ 302.799803][ T3654] usb 5-1: Manufacturer: syz [ 302.805737][ T3654] usb 5-1: SerialNumber: syz [ 302.945436][ T3954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.980816][ T3954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.005074][ T3964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.013407][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 303.069245][ T3964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.115007][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 303.414891][ T3644] Bluetooth: Wrong link type (-71) [ 303.426498][ T7189] netlink: 'syz.0.936': attribute type 1 has an invalid length. [ 303.434745][ T7189] netlink: 'syz.0.936': attribute type 2 has an invalid length. [ 303.472557][ T4155] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 303.583445][ T4319] libceph: connect (1)[c::]:6789 error -101 [ 303.598165][ T4319] libceph: mon0 (1)[c::]:6789 connect error [ 303.750569][ T4155] usb 3-1: Using ep0 maxpacket: 16 [ 303.864072][ T6759] libceph: connect (1)[c::]:6789 error -101 [ 303.870096][ T6759] libceph: mon0 (1)[c::]:6789 connect error [ 303.880873][ T4155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.898254][ T4155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.938121][ T4155] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 303.951914][ T3654] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 303.959529][ T3654] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 303.979867][ T3654] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 303.990206][ T4155] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 304.028714][ T4155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.082829][ T4155] usb 3-1: config 0 descriptor?? [ 304.144337][ T7204] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 304.161161][ T3654] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 304.252554][ T3654] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 304.346424][ T3654] usb 5-1: USB disconnect, device number 8 [ 304.353517][ T7192] ceph: No mds server is up or the cluster is laggy [ 304.391639][ T3654] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 304.393830][ T4319] libceph: connect (1)[c::]:6789 error -101 [ 304.416585][ T4319] libceph: mon0 (1)[c::]:6789 connect error [ 304.623301][ T4155] microsoft 0003:045E:07DA.000A: report is too long [ 304.656827][ T4155] microsoft 0003:045E:07DA.000A: item 0 4 0 8 parsing failed [ 304.671521][ T4155] microsoft 0003:045E:07DA.000A: parse failed [ 304.695736][ T4155] microsoft: probe of 0003:045E:07DA.000A failed with error -22 [ 304.877523][ T3682] usb 3-1: USB disconnect, device number 11 [ 305.083288][ T7225] loop4: detected capacity change from 0 to 256 [ 305.129984][ T7225] /dev/loop4: Can't open blockdev [ 305.271990][ T7223] loop0: detected capacity change from 0 to 4096 [ 305.313859][ T7223] ntfs: (device loop0): map_mft_record_page(): Mft record 0xa is corrupt. Run chkdsk. [ 305.369556][ T7229] loop1: detected capacity change from 0 to 256 [ 305.376006][ T7223] ntfs: (device loop0): map_mft_record(): Failed with error code 5. [ 305.420568][ T7223] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 305.470998][ T7223] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 305.482533][ T38] device hsr_slave_0 left promiscuous mode [ 305.506954][ T38] device hsr_slave_1 left promiscuous mode [ 305.520339][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.533312][ T7223] ntfs: (device loop0): map_mft_record_page(): Mft record 0x4 is corrupt. Run chkdsk. [ 305.539158][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.556361][ T7223] ntfs: (device loop0): map_mft_record(): Failed with error code 5. [ 305.564592][ T7229] FAT-fs (loop1): Directory bread(block 64) failed [ 305.575167][ T7229] FAT-fs (loop1): Directory bread(block 65) failed [ 305.594987][ T7229] FAT-fs (loop1): Directory bread(block 66) failed [ 305.597582][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.602820][ T7223] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x4 as bad. Run chkdsk. [ 305.610411][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.631032][ T7229] FAT-fs (loop1): Directory bread(block 67) failed [ 305.652445][ T38] device bridge_slave_1 left promiscuous mode [ 305.654052][ T7229] FAT-fs (loop1): Directory bread(block 68) failed [ 305.658674][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.675002][ T7223] ntfs: (device loop0): load_and_init_attrdef(): Failed to initialize attribute definition table. [ 305.690778][ T38] device bridge_slave_0 left promiscuous mode [ 305.704568][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.708440][ T7229] FAT-fs (loop1): Directory bread(block 69) failed [ 305.731416][ T7223] ntfs: (device loop0): ntfs_fill_super(): Failed to load system files. [ 305.741600][ T7229] FAT-fs (loop1): Directory bread(block 70) failed [ 305.749445][ T7229] FAT-fs (loop1): Directory bread(block 71) failed [ 305.768633][ T7229] FAT-fs (loop1): Directory bread(block 72) failed [ 305.785828][ T7229] FAT-fs (loop1): Directory bread(block 73) failed [ 305.795421][ T38] device veth1_macvtap left promiscuous mode [ 305.801671][ T38] device veth0_macvtap left promiscuous mode [ 305.828028][ T38] device veth1_vlan left promiscuous mode [ 305.869501][ T38] device veth0_vlan left promiscuous mode [ 306.009482][ T7219] loop3: detected capacity change from 0 to 40427 [ 306.037567][ T7219] F2FS-fs (loop3): Encrypt feature is off [ 306.116911][ T7237] loop0: detected capacity change from 0 to 1024 [ 306.454941][ T7246] loop3: detected capacity change from 0 to 512 [ 306.535484][ T7246] EXT4-fs (loop3): 1 truncate cleaned up [ 306.541207][ T7246] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 306.554684][ T7246] EXT4-fs error (device loop3): ext4_find_dest_de:2113: inode #2: block 13: comm syz.3.961: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 306.577677][ T7246] EXT4-fs (loop3): Remounting filesystem read-only [ 306.602626][ T3846] bio_check_eod: 86398 callbacks suppressed [ 306.602638][ T3846] syz.2.43: attempt to access beyond end of device [ 306.602638][ T3846] loop2: rw=3, sector=22969714851608, nr_sectors = 8388600 limit=2048 [ 306.651774][ T3846] syz.2.43: attempt to access beyond end of device [ 306.651774][ T3846] loop2: rw=3, sector=22969723240208, nr_sectors = 8388600 limit=2048 [ 306.713746][ T3846] syz.2.43: attempt to access beyond end of device [ 306.713746][ T3846] loop2: rw=3, sector=22969731628808, nr_sectors = 8388600 limit=2048 [ 306.775890][ T3846] syz.2.43: attempt to access beyond end of device [ 306.775890][ T3846] loop2: rw=3, sector=22969740017408, nr_sectors = 8388600 limit=2048 [ 306.860815][ T3846] syz.2.43: attempt to access beyond end of device [ 306.860815][ T3846] loop2: rw=3, sector=22969748406008, nr_sectors = 8388600 limit=2048 [ 306.913458][ T3846] syz.2.43: attempt to access beyond end of device [ 306.913458][ T3846] loop2: rw=3, sector=22969756794608, nr_sectors = 8388600 limit=2048 [ 306.930264][ T3846] syz.2.43: attempt to access beyond end of device [ 306.930264][ T3846] loop2: rw=3, sector=22969765183208, nr_sectors = 8388600 limit=2048 [ 306.961857][ T3846] syz.2.43: attempt to access beyond end of device [ 306.961857][ T3846] loop2: rw=3, sector=22969773571808, nr_sectors = 8388600 limit=2048 [ 307.018138][ T3846] syz.2.43: attempt to access beyond end of device [ 307.018138][ T3846] loop2: rw=3, sector=22969781960408, nr_sectors = 8388600 limit=2048 [ 307.069105][ T3846] syz.2.43: attempt to access beyond end of device [ 307.069105][ T3846] loop2: rw=3, sector=22969790349008, nr_sectors = 8388600 limit=2048 [ 307.702197][ T7264] loop1: detected capacity change from 0 to 1024 [ 307.769541][ T38] team0 (unregistering): Port device team_slave_1 removed [ 308.440991][ T7264] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 308.535041][ T38] team0 (unregistering): Port device team_slave_0 removed [ 308.689181][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.700833][ T6991] EXT4-fs (loop1): unmounting filesystem. [ 308.811564][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.949412][ T7270] loop1: detected capacity change from 0 to 1024 [ 309.032604][ T7270] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 309.063036][ T7270] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038 (0x7fffffff) [ 309.224437][ T6991] EXT4-fs (loop1): unmounting filesystem. [ 309.655720][ T26] audit: type=1326 audit(1857437413.938:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.1.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08297779f9 code=0x7ffc0000 [ 310.578044][ T38] bond0 (unregistering): Released all slaves [ 310.797189][ T6340] EXT4-fs (loop3): unmounting filesystem. [ 311.060869][ T7295] loop3: detected capacity change from 0 to 4096 [ 311.121726][ T7295] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 311.131811][ T7300] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 311.141887][ T7300] vhci_hcd: invalid port number 246 [ 311.147084][ T7300] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 311.157462][ T4159] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 311.201657][ T7295] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 311.281458][ T7295] ntfs3: loop3: ino=5, "/" attr_set_size [ 311.593969][ T4159] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 311.610220][ T4159] usb 2-1: config 0 has no interface number 0 [ 311.617513][ T3846] bio_check_eod: 49175 callbacks suppressed [ 311.617528][ T3846] syz.2.43: attempt to access beyond end of device [ 311.617528][ T3846] loop2: rw=3, sector=23382308142608, nr_sectors = 8388600 limit=2048 [ 311.659942][ T3846] syz.2.43: attempt to access beyond end of device [ 311.659942][ T3846] loop2: rw=3, sector=23382316531208, nr_sectors = 8388600 limit=2048 [ 311.693844][ T3846] syz.2.43: attempt to access beyond end of device [ 311.693844][ T3846] loop2: rw=3, sector=23382324919808, nr_sectors = 8388600 limit=2048 [ 311.704107][ T4159] usb 2-1: config 0 interface 216 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 311.743665][ T7297] loop0: detected capacity change from 0 to 8192 [ 311.743979][ T3846] syz.2.43: attempt to access beyond end of device [ 311.743979][ T3846] loop2: rw=3, sector=23382333308408, nr_sectors = 8388600 limit=2048 [ 311.787173][ T7297] FAT-fs (loop0): Unrecognized mount option "€: " or missing value [ 311.811330][ T3846] syz.2.43: attempt to access beyond end of device [ 311.811330][ T3846] loop2: rw=3, sector=23382341697008, nr_sectors = 8388600 limit=2048 [ 311.821494][ T4159] usb 2-1: config 0 interface 216 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 311.872159][ T3846] syz.2.43: attempt to access beyond end of device [ 311.872159][ T3846] loop2: rw=3, sector=23382350085608, nr_sectors = 8388600 limit=2048 [ 311.876898][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.987'. [ 311.936147][ T3846] syz.2.43: attempt to access beyond end of device [ 311.936147][ T3846] loop2: rw=3, sector=23382358474208, nr_sectors = 8388600 limit=2048 [ 311.977228][ T3846] syz.2.43: attempt to access beyond end of device [ 311.977228][ T3846] loop2: rw=3, sector=23382366862808, nr_sectors = 8388600 limit=2048 [ 312.029297][ T3846] syz.2.43: attempt to access beyond end of device [ 312.029297][ T3846] loop2: rw=3, sector=23382375251408, nr_sectors = 8388600 limit=2048 [ 312.058843][ T3846] syz.2.43: attempt to access beyond end of device [ 312.058843][ T3846] loop2: rw=3, sector=23382383640008, nr_sectors = 8388600 limit=2048 [ 312.110776][ T4159] usb 2-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7 [ 312.128213][ T4159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.164250][ T4159] usb 2-1: Product: syz [ 312.186704][ T4159] usb 2-1: Manufacturer: syz [ 312.196268][ T4159] usb 2-1: SerialNumber: syz [ 312.207941][ T7315] loop3: detected capacity change from 0 to 4096 [ 312.221488][ T4159] usb 2-1: config 0 descriptor?? [ 312.241057][ T3682] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 312.279687][ T7315] __ntfs_error: 10 callbacks suppressed [ 312.279698][ T7315] ntfs: (device loop3): map_mft_record_page(): Mft record 0xa is corrupt. Run chkdsk. [ 312.307690][ T4159] snd-usb-audio: probe of 2-1:0.216 failed with error -2 [ 312.341644][ T7315] ntfs: (device loop3): map_mft_record(): Failed with error code 5. [ 312.372338][ T3626] udevd[3626]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.216/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.400841][ T7315] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 312.505309][ T7315] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 312.520605][ T3682] usb 5-1: Using ep0 maxpacket: 32 [ 312.557061][ T7315] ntfs: (device loop3): map_mft_record_page(): Mft record 0x4 is corrupt. Run chkdsk. [ 312.571478][ T4159] usb 2-1: USB disconnect, device number 13 [ 312.638537][ T7315] ntfs: (device loop3): map_mft_record(): Failed with error code 5. [ 312.661167][ T7315] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x4 as bad. Run chkdsk. [ 312.704237][ T7315] ntfs: (device loop3): load_and_init_attrdef(): Failed to initialize attribute definition table. [ 312.743466][ T7315] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files. [ 312.820924][ T3682] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=67.9c [ 312.860920][ T3682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.901096][ T3682] usb 5-1: Product: syz [ 312.906171][ T3682] usb 5-1: Manufacturer: syz [ 312.927430][ T3682] usb 5-1: SerialNumber: syz [ 312.943324][ T3682] usb 5-1: config 0 descriptor?? [ 312.966032][ T7317] loop0: detected capacity change from 0 to 164 [ 313.062015][ T7319] device wg1 entered promiscuous mode [ 313.201231][ T4159] usb 5-1: USB disconnect, device number 9 [ 313.315037][ T7324] loop3: detected capacity change from 0 to 1024 [ 313.381403][ T7324] hfsplus: extend alloc file! (8192,65536,366) [ 313.600232][ T7324] user requested TSC rate below hardware speed [ 313.815303][ T7339] loop4: detected capacity change from 0 to 128 [ 314.152974][ T7346] loop4: detected capacity change from 0 to 128 [ 314.191431][ T7346] /dev/loop4: Can't open blockdev [ 314.641237][ T7355] Â: renamed from pim6reg1 [ 316.398577][ T7387] loop1: detected capacity change from 0 to 128 [ 316.487013][ T7387] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 316.636623][ T7385] loop0: detected capacity change from 0 to 4096 [ 316.660830][ T3846] bio_check_eod: 28304 callbacks suppressed [ 316.660848][ T3846] syz.2.43: attempt to access beyond end of device [ 316.660848][ T3846] loop2: rw=3, sector=23619822963008, nr_sectors = 8388600 limit=2048 [ 316.720208][ T7385] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 316.876816][ T3846] syz.2.43: attempt to access beyond end of device [ 316.876816][ T3846] loop2: rw=3, sector=23619831351608, nr_sectors = 8388600 limit=2048 [ 316.918697][ T3846] syz.2.43: attempt to access beyond end of device [ 316.918697][ T3846] loop2: rw=3, sector=23619839740208, nr_sectors = 8388600 limit=2048 [ 317.023662][ T3846] syz.2.43: attempt to access beyond end of device [ 317.023662][ T3846] loop2: rw=3, sector=23619848128808, nr_sectors = 8388600 limit=2048 [ 317.222102][ T3846] syz.2.43: attempt to access beyond end of device [ 317.222102][ T3846] loop2: rw=3, sector=23619856517408, nr_sectors = 8388600 limit=2048 [ 317.357097][ T3846] syz.2.43: attempt to access beyond end of device [ 317.357097][ T3846] loop2: rw=3, sector=23619864906008, nr_sectors = 8388600 limit=2048 [ 317.465486][ T3846] syz.2.43: attempt to access beyond end of device [ 317.465486][ T3846] loop2: rw=3, sector=23619873294608, nr_sectors = 8388600 limit=2048 [ 317.483119][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.489442][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.503663][ T7359] loop4: detected capacity change from 0 to 32768 [ 317.651283][ T3846] syz.2.43: attempt to access beyond end of device [ 317.651283][ T3846] loop2: rw=3, sector=23619881683208, nr_sectors = 8388600 limit=2048 [ 317.866729][ T3846] syz.2.43: attempt to access beyond end of device [ 317.866729][ T3846] loop2: rw=3, sector=23619890071808, nr_sectors = 8388600 limit=2048 [ 317.988316][ T3846] syz.2.43: attempt to access beyond end of device [ 317.988316][ T3846] loop2: rw=3, sector=23619898460408, nr_sectors = 8388600 limit=2048 [ 318.271178][ T7389] overlayfs: workdir and upperdir must reside under the same mount [ 318.381729][ T3626] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 318.598971][ T7411] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1026'. [ 318.650700][ T7411] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1026'. [ 318.847147][ T7418] netlink: 'syz.4.1030': attribute type 27 has an invalid length. [ 318.913897][ T7418] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 318.951797][ T7418] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 319.042971][ T7418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.278964][ T7432] loop0: detected capacity change from 0 to 512 [ 319.306383][ T26] audit: type=1326 audit(1857437423.588:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.4.1037" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c8f1779f9 code=0x0 [ 319.328116][ T7432] EXT4-fs: Ignoring removed bh option [ 319.328156][ T7432] ext4: Unknown parameter 'noacl' [ 319.350612][ T4325] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 319.831368][ T4325] usb 2-1: Using ep0 maxpacket: 32 [ 320.046309][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.278515][ T4325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.350584][ T4325] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 320.359688][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.408062][ T7448] loop4: detected capacity change from 0 to 128 [ 320.408493][ T4325] usb 2-1: config 0 descriptor?? [ 320.498219][ T4325] hub 2-1:0.0: USB hub found [ 320.506536][ T4032] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 320.558879][ T7453] loop4: detected capacity change from 0 to 128 [ 320.612826][ T4032] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 320.675325][ T3955] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 320.711282][ T4325] hub 2-1:0.0: 1 port detected [ 320.769029][ T7455] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 321.061842][ T3955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 321.080002][ T3955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 321.132103][ T22] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 321.260972][ T3955] usb 4-1: New USB device found, idVendor=413c, idProduct=3b2b, bcdDevice=7a.59 [ 321.280267][ T3955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.307593][ T3955] usb 4-1: Product: syz [ 321.312116][ T3955] usb 4-1: Manufacturer: syz [ 321.316735][ T3955] usb 4-1: SerialNumber: syz [ 321.346900][ T3955] usb 4-1: config 0 descriptor?? [ 321.391781][ T7460] loop0: detected capacity change from 0 to 128 [ 321.441308][ T4325] hub 2-1:0.0: activate --> -90 [ 321.527323][ T7462] loop4: detected capacity change from 0 to 256 [ 321.543962][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.585305][ T22] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 321.617224][ T3682] usb 4-1: USB disconnect, device number 15 [ 321.630868][ T7460] loop0: detected capacity change from 128 to 0 [ 321.643023][ T22] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 321.672203][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.678683][ T3846] bio_check_eod: 38500 callbacks suppressed [ 321.678697][ T3846] syz.2.43: attempt to access beyond end of device [ 321.678697][ T3846] loop2: rw=3, sector=23942867949008, nr_sectors = 8388600 limit=2048 [ 321.696015][ T22] usb 3-1: config 0 descriptor?? [ 321.707347][ T3846] syz.2.43: attempt to access beyond end of device [ 321.707347][ T3846] loop2: rw=3, sector=23942876337608, nr_sectors = 8388600 limit=2048 [ 321.746986][ T4325] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 321.781342][ T4324] usb 2-1: USB disconnect, device number 14 [ 321.787954][ T3846] syz.2.43: attempt to access beyond end of device [ 321.787954][ T3846] loop2: rw=3, sector=23942884726208, nr_sectors = 8388600 limit=2048 [ 321.833642][ T3846] syz.2.43: attempt to access beyond end of device [ 321.833642][ T3846] loop2: rw=3, sector=23942893114808, nr_sectors = 8388600 limit=2048 [ 321.864337][ T3878] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 321.941445][ T3846] syz.2.43: attempt to access beyond end of device [ 321.941445][ T3846] loop2: rw=3, sector=23942901503408, nr_sectors = 8388600 limit=2048 [ 321.966592][ T3846] syz.2.43: attempt to access beyond end of device [ 321.966592][ T3846] loop2: rw=3, sector=23942909892008, nr_sectors = 8388600 limit=2048 [ 322.000859][ T3846] syz.2.43: attempt to access beyond end of device [ 322.000859][ T3846] loop2: rw=3, sector=23942918280608, nr_sectors = 8388600 limit=2048 [ 322.035841][ T3846] syz.2.43: attempt to access beyond end of device [ 322.035841][ T3846] loop2: rw=3, sector=23942926669208, nr_sectors = 8388600 limit=2048 [ 322.101018][ T3846] syz.2.43: attempt to access beyond end of device [ 322.101018][ T3846] loop2: rw=3, sector=23942935057808, nr_sectors = 8388600 limit=2048 [ 322.170641][ T3846] syz.2.43: attempt to access beyond end of device [ 322.170641][ T3846] loop2: rw=3, sector=23942943446408, nr_sectors = 8388600 limit=2048 [ 322.415152][ T22] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x3 [ 322.445033][ T22] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x3 [ 322.470679][ T22] plantronics 0003:047F:FFFF.000B: item fetching failed at offset 13/15 [ 322.479522][ T22] plantronics 0003:047F:FFFF.000B: parse failed [ 322.560708][ T22] plantronics: probe of 0003:047F:FFFF.000B failed with error -22 [ 322.662294][ T22] usb 3-1: USB disconnect, device number 12 [ 322.894199][ T7470] loop1: detected capacity change from 0 to 164 [ 323.021479][ T7470] Unsupported NM flag settings (8) [ 323.497731][ T3643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 323.510002][ T3643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 323.570886][ T3643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 323.583105][ T3643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 323.602655][ T3643] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 323.609932][ T3643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 323.703824][ T7467] loop4: detected capacity change from 0 to 262144 [ 323.801274][ T3626] I/O error, dev loop4, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 324.369057][ T7472] chnl_net:caif_netlink_parms(): no params data found [ 324.561072][ T4159] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 324.672418][ T38] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.840982][ T4159] usb 4-1: Using ep0 maxpacket: 8 [ 324.962143][ T4159] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 325.035780][ T4159] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.196530][ T4159] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 325.215267][ T4159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.247132][ T4159] usb 4-1: config 0 descriptor?? [ 325.300144][ T38] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.438653][ T7504] loop1: detected capacity change from 0 to 512 [ 325.459997][ T7504] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 325.486504][ T38] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.546122][ T4159] usb 4-1: USB disconnect, device number 16 [ 325.570762][ T3682] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 325.598031][ T7504] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1060: casefold flag without casefold feature [ 325.634477][ T7504] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.1060: missing EA_INODE flag [ 325.657281][ T7504] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1060: error while reading EA inode 12 err=-117 [ 325.688392][ T7504] EXT4-fs (loop1): 1 orphan inode deleted [ 325.694649][ T3643] Bluetooth: hci1: command tx timeout [ 325.700805][ T7504] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 325.723261][ T38] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.813606][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.829266][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.850725][ T3682] usb 5-1: Using ep0 maxpacket: 32 [ 325.873228][ T7472] device bridge_slave_0 entered promiscuous mode [ 326.128800][ T3682] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.151045][ T7472] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.345942][ T3682] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.350764][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.371705][ T7472] device bridge_slave_1 entered promiscuous mode [ 326.464571][ T7472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.507416][ T3682] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 326.527126][ T7472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.541900][ T6991] EXT4-fs (loop1): unmounting filesystem. [ 326.545753][ T3682] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 326.569217][ T3682] usb 5-1: Product: syz [ 326.574038][ T3682] usb 5-1: Manufacturer: syz [ 326.654193][ T3682] hub 5-1:4.0: USB hub found [ 326.713828][ T7472] team0: Port device team_slave_0 added [ 326.734133][ T3846] bio_check_eod: 65707 callbacks suppressed [ 326.734149][ T3846] syz.2.43: attempt to access beyond end of device [ 326.734149][ T3846] loop2: rw=3, sector=24494141575208, nr_sectors = 8388600 limit=2048 [ 326.800792][ T7472] team0: Port device team_slave_1 added [ 326.850711][ T3846] syz.2.43: attempt to access beyond end of device [ 326.850711][ T3846] loop2: rw=3, sector=24494149963808, nr_sectors = 8388600 limit=2048 [ 326.880773][ T3682] hub 5-1:4.0: 2 ports detected [ 326.943782][ T3846] syz.2.43: attempt to access beyond end of device [ 326.943782][ T3846] loop2: rw=3, sector=24494158352408, nr_sectors = 8388600 limit=2048 [ 326.976191][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.005491][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.041307][ T7525] loop3: detected capacity change from 0 to 4096 [ 327.045838][ T3846] syz.2.43: attempt to access beyond end of device [ 327.045838][ T3846] loop2: rw=3, sector=24494166741008, nr_sectors = 8388600 limit=2048 [ 327.070566][ T7472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.081757][ T7525] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 327.122620][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.129597][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.187234][ T3846] syz.2.43: attempt to access beyond end of device [ 327.187234][ T3846] loop2: rw=3, sector=24494175129608, nr_sectors = 8388600 limit=2048 [ 327.230252][ T7472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.295362][ T3846] syz.2.43: attempt to access beyond end of device [ 327.295362][ T3846] loop2: rw=3, sector=24494183518208, nr_sectors = 8388600 limit=2048 [ 327.426846][ T3846] syz.2.43: attempt to access beyond end of device [ 327.426846][ T3846] loop2: rw=3, sector=24494191906808, nr_sectors = 8388600 limit=2048 [ 327.459844][ T7534] loop3: detected capacity change from 0 to 128 [ 327.480730][ T3682] hub 5-1:4.0: set hub depth failed [ 327.482670][ T3846] syz.2.43: attempt to access beyond end of device [ 327.482670][ T3846] loop2: rw=3, sector=24494200295408, nr_sectors = 8388600 limit=2048 [ 327.524935][ T3682] usb 5-1: USB disconnect, device number 10 [ 327.578063][ T3846] syz.2.43: attempt to access beyond end of device [ 327.578063][ T3846] loop2: rw=3, sector=24494208684008, nr_sectors = 8388600 limit=2048 [ 327.586558][ T4155] kernel write not supported for file /snd/seq (pid: 4155 comm: kworker/0:13) [ 327.605718][ T7472] device hsr_slave_0 entered promiscuous mode [ 327.652886][ T7472] device hsr_slave_1 entered promiscuous mode [ 327.703839][ T3846] syz.2.43: attempt to access beyond end of device [ 327.703839][ T3846] loop2: rw=3, sector=24494217072608, nr_sectors = 8388600 limit=2048 [ 327.718606][ T7472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.731421][ T7472] Cannot create hsr debugfs directory [ 327.767858][ T3643] Bluetooth: hci1: command tx timeout [ 327.826467][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'. [ 327.851120][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'. [ 327.868631][ T7530] loop1: detected capacity change from 0 to 32768 [ 328.370735][ T3682] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 328.379745][ T7550] loop1: detected capacity change from 0 to 2048 [ 328.443037][ T7550] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.740879][ T3682] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.770632][ T3682] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 328.810582][ T3682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.854340][ T26] audit: type=1326 audit(1857437433.138:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.1.1075" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08297779f9 code=0x0 [ 328.879383][ T3682] usb 4-1: config 0 descriptor?? [ 329.030763][ T3682] usb 4-1: bad CDC descriptors [ 329.039245][ T3682] usb 4-1: bad CDC descriptors [ 329.095022][ T7563] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 329.203016][ T7572] futex_wake_op: syz.2.1085 tries to shift op by -1; fix this program [ 329.806167][ T4159] usb 4-1: USB disconnect, device number 17 [ 329.840694][ T3643] Bluetooth: hci1: command tx timeout [ 329.983115][ T26] audit: type=1326 audit(1857437434.268:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7575 comm="syz.4.1077" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c8f1779f9 code=0x0 [ 330.045152][ T7580] loop1: detected capacity change from 0 to 8 [ 330.095904][ T7580] SQUASHFS error: zlib decompression failed, data probably corrupt [ 330.136333][ T7580] SQUASHFS error: Failed to read block 0x9b: -5 [ 330.166503][ T7579] loop4: detected capacity change from 0 to 4096 [ 330.180779][ T7580] SQUASHFS error: Unable to read metadata cache entry [99] [ 330.189668][ T7579] /dev/loop4: Can't open blockdev [ 330.203788][ T7580] SQUASHFS error: Unable to read inode 0x127 [ 330.300824][ T3626] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 330.533247][ T7592] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 330.804397][ T7597] loop1: detected capacity change from 0 to 256 [ 330.916008][ T7597] FAT-fs (loop1): Directory bread(block 64) failed [ 330.954267][ T7597] FAT-fs (loop1): Directory bread(block 65) failed [ 330.970811][ T7597] FAT-fs (loop1): Directory bread(block 66) failed [ 330.977367][ T7597] FAT-fs (loop1): Directory bread(block 67) failed [ 331.002131][ T7597] FAT-fs (loop1): Directory bread(block 68) failed [ 331.040487][ T7597] FAT-fs (loop1): Directory bread(block 69) failed [ 331.048984][ T7597] FAT-fs (loop1): Directory bread(block 70) failed [ 331.087146][ T7597] FAT-fs (loop1): Directory bread(block 71) failed [ 331.094215][ T7597] FAT-fs (loop1): Directory bread(block 72) failed [ 331.118544][ T7597] FAT-fs (loop1): Directory bread(block 73) failed [ 331.748117][ T3846] bio_check_eod: 42726 callbacks suppressed [ 331.748142][ T3846] syz.2.43: attempt to access beyond end of device [ 331.748142][ T3846] loop2: rw=3, sector=24852628396208, nr_sectors = 8388600 limit=2048 [ 331.825711][ T3846] syz.2.43: attempt to access beyond end of device [ 331.825711][ T3846] loop2: rw=3, sector=24852636784808, nr_sectors = 8388600 limit=2048 [ 331.856992][ T3846] syz.2.43: attempt to access beyond end of device [ 331.856992][ T3846] loop2: rw=3, sector=24852645173408, nr_sectors = 8388600 limit=2048 [ 331.880137][ T3846] syz.2.43: attempt to access beyond end of device [ 331.880137][ T3846] loop2: rw=3, sector=24852653562008, nr_sectors = 8388600 limit=2048 [ 331.912844][ T3846] syz.2.43: attempt to access beyond end of device [ 331.912844][ T3846] loop2: rw=3, sector=24852661950608, nr_sectors = 8388600 limit=2048 [ 331.931015][ T3643] Bluetooth: hci1: command tx timeout [ 331.973878][ T38] device hsr_slave_0 left promiscuous mode [ 331.983301][ T38] device hsr_slave_1 left promiscuous mode [ 332.000738][ T3846] syz.2.43: attempt to access beyond end of device [ 332.000738][ T3846] loop2: rw=3, sector=24852670339208, nr_sectors = 8388600 limit=2048 [ 332.023831][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.037941][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.045640][ T3846] syz.2.43: attempt to access beyond end of device [ 332.045640][ T3846] loop2: rw=3, sector=24852678727808, nr_sectors = 8388600 limit=2048 [ 332.069582][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.077636][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.095407][ T3846] syz.2.43: attempt to access beyond end of device [ 332.095407][ T3846] loop2: rw=3, sector=24852687116408, nr_sectors = 8388600 limit=2048 [ 332.114623][ T38] device bridge_slave_1 left promiscuous mode [ 332.127971][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.135780][ T4324] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 332.152662][ T3846] syz.2.43: attempt to access beyond end of device [ 332.152662][ T3846] loop2: rw=3, sector=24852695505008, nr_sectors = 8388600 limit=2048 [ 332.178382][ T38] device bridge_slave_0 left promiscuous mode [ 332.185941][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.200561][ T3846] syz.2.43: attempt to access beyond end of device [ 332.200561][ T3846] loop2: rw=3, sector=24852703893608, nr_sectors = 8388600 limit=2048 [ 332.287113][ T38] device veth1_macvtap left promiscuous mode [ 332.316988][ T38] device veth0_macvtap left promiscuous mode [ 332.334494][ T38] device veth1_vlan left promiscuous mode [ 332.340332][ T38] device veth0_vlan left promiscuous mode [ 332.400701][ T4324] usb 2-1: Using ep0 maxpacket: 32 [ 332.711003][ T4324] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=82.28 [ 332.730334][ T4324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.768945][ T4324] usb 2-1: Product: syz [ 332.768968][ T4324] usb 2-1: Manufacturer: syz [ 332.768983][ T4324] usb 2-1: SerialNumber: syz [ 332.777957][ T4324] usb 2-1: config 0 descriptor?? [ 332.842337][ T38] bond1 (unregistering): Released all slaves [ 332.880897][ T26] audit: type=1326 audit(1857437437.098:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.3.1083" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62ee3779f9 code=0x0 [ 333.109518][ T6895] usb 2-1: USB disconnect, device number 15 [ 333.964689][ T7627] loop1: detected capacity change from 0 to 8192 [ 334.005084][ T7627] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 334.046819][ T7627] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 334.074014][ T7627] REISERFS (device loop1): using ordered data mode [ 334.096773][ T38] team0 (unregistering): Port device team_slave_1 removed [ 334.100615][ T7627] reiserfs: using flush barriers [ 334.264590][ T38] team0 (unregistering): Port device team_slave_0 removed [ 334.325327][ T7627] REISERFS warning (device loop1): sh-458 journal_init_dev: cannot init journal device unknown-block(2,0): -6 [ 334.349923][ T7627] REISERFS warning (device loop1): sh-462 journal_init: unable to initialize journal device [ 334.372571][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.384312][ T7627] REISERFS warning (device loop1): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 334.504303][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.313735][ T38] bond0 (unregistering): Released all slaves [ 335.621429][ T7635] loop3: detected capacity change from 0 to 1024 [ 335.642082][ T7635] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 335.801277][ T7472] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 335.845413][ T7472] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 335.866856][ T7635] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 335.909699][ T7472] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 336.052423][ T6340] EXT4-fs (loop3): unmounting filesystem. [ 336.076751][ T7472] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 336.145497][ T7648] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 336.152016][ T7648] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 336.177839][ T7648] vhci_hcd vhci_hcd.0: Device attached [ 336.189479][ T7648] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1099'. [ 336.199900][ T7648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1099'. [ 336.218681][ T7650] vhci_hcd: connection closed [ 336.223155][ T9] vhci_hcd: stop threads [ 336.280301][ T9] vhci_hcd: release socket [ 336.437025][ T7472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.453381][ T9] vhci_hcd: disconnect device [ 336.481974][ T4155] usb 18-1: enqueue for inactive port 0 [ 336.492331][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 336.504569][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 336.523291][ T7472] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.542910][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 336.560417][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.589864][ T3654] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.596992][ T3654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.650778][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 336.665153][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 336.692862][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 336.728650][ T3684] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.735874][ T3684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.752873][ T3846] bio_check_eod: 69886 callbacks suppressed [ 336.752924][ T3846] syz.2.43: attempt to access beyond end of device [ 336.752924][ T3846] loop2: rw=3, sector=25438957981808, nr_sectors = 8388600 limit=2048 [ 336.815404][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 336.840261][ T3846] syz.2.43: attempt to access beyond end of device [ 336.840261][ T3846] loop2: rw=3, sector=25438966370408, nr_sectors = 8388600 limit=2048 [ 336.860578][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 336.873893][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 336.910983][ T3846] syz.2.43: attempt to access beyond end of device [ 336.910983][ T3846] loop2: rw=3, sector=25438974759008, nr_sectors = 8388600 limit=2048 [ 336.912311][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 336.984163][ T3846] syz.2.43: attempt to access beyond end of device [ 336.984163][ T3846] loop2: rw=3, sector=25438983147608, nr_sectors = 8388600 limit=2048 [ 336.985006][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 337.008301][ T4155] usb usb18-port1: attempt power cycle [ 337.061450][ T3846] syz.2.43: attempt to access beyond end of device [ 337.061450][ T3846] loop2: rw=3, sector=25438991536208, nr_sectors = 8388600 limit=2048 [ 337.081698][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 337.096897][ T7472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 337.127986][ T3846] syz.2.43: attempt to access beyond end of device [ 337.127986][ T3846] loop2: rw=3, sector=25438999924808, nr_sectors = 8388600 limit=2048 [ 337.130917][ T7472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 337.208390][ T3846] syz.2.43: attempt to access beyond end of device [ 337.208390][ T3846] loop2: rw=3, sector=25439008313408, nr_sectors = 8388600 limit=2048 [ 337.221935][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 337.237630][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 337.250719][ T3846] syz.2.43: attempt to access beyond end of device [ 337.250719][ T3846] loop2: rw=3, sector=25439016702008, nr_sectors = 8388600 limit=2048 [ 337.281835][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 337.303481][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 337.341406][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 337.359675][ T3846] syz.2.43: attempt to access beyond end of device [ 337.359675][ T3846] loop2: rw=3, sector=25439025090608, nr_sectors = 8388600 limit=2048 [ 337.399800][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 337.477338][ T3846] syz.2.43: attempt to access beyond end of device [ 337.477338][ T3846] loop2: rw=3, sector=25439033479208, nr_sectors = 8388600 limit=2048 [ 337.651046][ T4155] usb usb18-port1: unable to enumerate USB device [ 338.281672][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 338.301519][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 338.330342][ T7472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.419496][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 338.439264][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 338.507617][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 338.531734][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 338.562601][ T7472] device veth0_vlan entered promiscuous mode [ 338.571649][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 338.610467][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 338.623595][ T7472] device veth1_vlan entered promiscuous mode [ 338.684656][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 338.703056][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 338.732595][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 338.772732][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 338.813901][ T7472] device veth0_macvtap entered promiscuous mode [ 338.849440][ T7681] loop4: detected capacity change from 0 to 32768 [ 338.849649][ T7472] device veth1_macvtap entered promiscuous mode [ 338.939049][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.015281][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.070847][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.105885][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.134201][ T7695] tmpfs: Bad value for 'mpol' [ 339.148861][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.192404][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.221060][ T7690] overlayfs: failed to resolve './file1': -2 [ 339.236645][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.270805][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.310724][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.370597][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.385516][ T7699] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 339.399016][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.425049][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 339.441381][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 339.469874][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 339.500221][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.523300][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.560664][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.612898][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.624565][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.634665][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.645457][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.655943][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.666677][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.676819][ T3682] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 339.684832][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.695998][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.728761][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.770698][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 339.786484][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 339.799502][ T7472] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.818233][ T7472] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.827825][ T7472] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.844130][ T7472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.029818][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.061714][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.098257][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.103279][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 340.140585][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.184693][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 340.211215][ T3682] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 340.231920][ T3682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.239980][ T3682] usb 5-1: Product: syz [ 340.265419][ T3682] usb 5-1: Manufacturer: syz [ 340.270065][ T3682] usb 5-1: SerialNumber: syz [ 340.334035][ T3682] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 340.529390][ T7716] loop1: detected capacity change from 0 to 4096 [ 340.757195][ T7716] ntfs3: loop1: failed to convert "0080" to koi8-r [ 340.835668][ T7716] ntfs3: loop1: failed to convert name for inode 1e. [ 341.060865][ T3682] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 341.503107][ T3955] usb 5-1: USB disconnect, device number 11 [ 341.767702][ T3846] bio_check_eod: 51019 callbacks suppressed [ 341.767720][ T3846] syz.2.43: attempt to access beyond end of device [ 341.767720][ T3846] loop2: rw=3, sector=25867019851208, nr_sectors = 8388600 limit=2048 [ 341.791221][ T3846] syz.2.43: attempt to access beyond end of device [ 341.791221][ T3846] loop2: rw=3, sector=25867028239808, nr_sectors = 8388600 limit=2048 [ 341.847000][ T3846] syz.2.43: attempt to access beyond end of device [ 341.847000][ T3846] loop2: rw=3, sector=25867036628408, nr_sectors = 8388600 limit=2048 [ 341.901004][ T3846] syz.2.43: attempt to access beyond end of device [ 341.901004][ T3846] loop2: rw=3, sector=25867045017008, nr_sectors = 8388600 limit=2048 [ 341.948704][ T3846] syz.2.43: attempt to access beyond end of device [ 341.948704][ T3846] loop2: rw=3, sector=25867053405608, nr_sectors = 8388600 limit=2048 [ 342.011449][ T3846] syz.2.43: attempt to access beyond end of device [ 342.011449][ T3846] loop2: rw=3, sector=25867061794208, nr_sectors = 8388600 limit=2048 [ 342.030885][ C0] eth0: bad gso: type: 1, size: 1408 [ 342.068659][ T3846] syz.2.43: attempt to access beyond end of device [ 342.068659][ T3846] loop2: rw=3, sector=25867070182808, nr_sectors = 8388600 limit=2048 [ 342.163460][ T3846] syz.2.43: attempt to access beyond end of device [ 342.163460][ T3846] loop2: rw=3, sector=25867078571408, nr_sectors = 8388600 limit=2048 [ 342.254979][ T3846] syz.2.43: attempt to access beyond end of device [ 342.254979][ T3846] loop2: rw=3, sector=25867086960008, nr_sectors = 8388600 limit=2048 [ 342.321192][ T3682] usb 5-1: Service connection timeout for: 256 [ 342.333877][ T3682] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 342.340998][ T3846] syz.2.43: attempt to access beyond end of device [ 342.340998][ T3846] loop2: rw=3, sector=25867095348608, nr_sectors = 8388600 limit=2048 [ 342.433137][ T3682] ath9k_htc: Failed to initialize the device [ 342.578520][ T3955] usb 5-1: ath9k_htc: USB layer deinitialized [ 343.993808][ T7755] loop0: detected capacity change from 0 to 32768 [ 344.041029][ T7755] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1122 (7755) [ 344.103545][ T7755] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 344.150651][ T7755] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 344.172945][ T7755] BTRFS info (device loop0): use zlib compression, level 3 [ 344.196782][ T7755] BTRFS info (device loop0): using free space tree [ 344.449089][ T7755] BTRFS info (device loop0): enabling ssd optimizations [ 344.474550][ T7809] tipc: Started in network mode [ 344.480025][ T7809] tipc: Node identity ac1414aa, cluster identity 4711 [ 344.491299][ T7809] tipc: New replicast peer: 100.1.1.1 [ 344.497037][ T7809] tipc: Enabled bearer , priority 10 [ 344.661226][ C0] eth0: bad gso: type: 1, size: 1408 [ 344.725157][ T7472] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 346.216235][ T26] audit: type=1326 audit(1857437450.488:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c57779f9 code=0x7ff00000 [ 346.251191][ T3682] tipc: Node number set to 2886997162 [ 346.320824][ T7834] loop0: detected capacity change from 0 to 512 [ 346.371358][ T26] audit: type=1326 audit(1857437450.488:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c57779f9 code=0x7ff00000 [ 346.410085][ T7834] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 346.494902][ T26] audit: type=1326 audit(1857437450.488:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c57779f9 code=0x7ff00000 [ 346.553985][ T7834] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #17: comm syz.0.1135: iget: bad i_size value: -6917529027641081756 [ 346.591420][ T7834] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1135: couldn't read orphan inode 17 (err -117) [ 346.603589][ T26] audit: type=1326 audit(1857437450.488:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c57779f9 code=0x7ff00000 [ 346.647072][ T7834] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 346.730878][ T26] audit: type=1326 audit(1857437450.488:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c57779f9 code=0x7ff00000 [ 346.771088][ T3846] bio_check_eod: 22466 callbacks suppressed [ 346.771105][ T3846] syz.2.43: attempt to access beyond end of device [ 346.771105][ T3846] loop2: rw=3, sector=26055562024808, nr_sectors = 8388600 limit=2048 [ 346.799376][ T7834] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1135: bg 0: block 65: padding at end of block bitmap is not set [ 347.331785][ T7834] Quota error (device loop0): write_blk: dquota write failed [ 347.355174][ T7855] infiniband syz2: set active [ 347.358809][ T26] audit: type=1326 audit(1857437450.488:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c57779f9 code=0x7ff00000 [ 347.360277][ T7855] infiniband syz2: added team_slave_1 [ 347.408762][ T7834] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 347.432742][ T7855] RDS/IB: syz2: added [ 347.437790][ T7855] smc: adding ib device syz2 with port count 1 [ 347.444248][ T7855] smc: ib device syz2 port 1 has pnetid [ 347.447479][ T3846] syz.2.43: attempt to access beyond end of device [ 347.447479][ T3846] loop2: rw=3, sector=26055570413408, nr_sectors = 8388600 limit=2048 [ 347.481927][ T7857] Quota error (device loop0): do_check_range: Getting block 144 out of range 0-5 [ 347.547287][ T26] audit: type=1326 audit(1857437450.488:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7816 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c57779f9 code=0x7ff00000 [ 347.631916][ T3846] syz.2.43: attempt to access beyond end of device [ 347.631916][ T3846] loop2: rw=3, sector=26055578802008, nr_sectors = 8388600 limit=2048 [ 347.708572][ T7834] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.1135: Failed to acquire dquot type 0 [ 347.730693][ T3846] syz.2.43: attempt to access beyond end of device [ 347.730693][ T3846] loop2: rw=3, sector=26055587190608, nr_sectors = 8388600 limit=2048 [ 347.943822][ T3846] syz.2.43: attempt to access beyond end of device [ 347.943822][ T3846] loop2: rw=3, sector=26055595579208, nr_sectors = 8388600 limit=2048 [ 348.027263][ T3644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.037615][ T7472] EXT4-fs (loop0): unmounting filesystem. [ 348.050690][ T3846] syz.2.43: attempt to access beyond end of device [ 348.050690][ T3846] loop2: rw=3, sector=26055603967808, nr_sectors = 8388600 limit=2048 [ 348.080057][ T7865] loop4: detected capacity change from 0 to 512 [ 348.111122][ T3644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.119961][ T3644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.130068][ T3846] syz.2.43: attempt to access beyond end of device [ 348.130068][ T3846] loop2: rw=3, sector=26055612356408, nr_sectors = 8388600 limit=2048 [ 348.147397][ T3650] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.156325][ T3650] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 348.163705][ T3650] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.205209][ T3846] syz.2.43: attempt to access beyond end of device [ 348.205209][ T3846] loop2: rw=3, sector=26055620745008, nr_sectors = 8388600 limit=2048 [ 348.211212][ T7865] /dev/loop4: Can't open blockdev [ 348.234645][ T3846] syz.2.43: attempt to access beyond end of device [ 348.234645][ T3846] loop2: rw=3, sector=26055629133608, nr_sectors = 8388600 limit=2048 [ 348.250096][ T3846] syz.2.43: attempt to access beyond end of device [ 348.250096][ T3846] loop2: rw=3, sector=26055637522208, nr_sectors = 8388600 limit=2048 [ 348.543800][ T7878] netlink: 'syz.0.1150': attribute type 2 has an invalid length. [ 348.943804][ T7861] chnl_net:caif_netlink_parms(): no params data found [ 349.080662][ T6895] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 349.216412][ T7861] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.233855][ T7861] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.258173][ T7861] device bridge_slave_0 entered promiscuous mode [ 349.312823][ T7861] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.320058][ T7861] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.340928][ T6895] usb 2-1: Using ep0 maxpacket: 8 [ 349.347827][ T7861] device bridge_slave_1 entered promiscuous mode [ 349.422707][ T7861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.445133][ T7861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.479364][ T6895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 349.508962][ T6895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.539231][ T6895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 349.589608][ T7861] team0: Port device team_slave_0 added [ 349.620188][ T7910] loop0: detected capacity change from 0 to 512 [ 349.686983][ T102] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.734927][ T6895] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 349.912678][ T7861] team0: Port device team_slave_1 added [ 349.917179][ T7910] EXT4-fs (loop0): 1 orphan inode deleted [ 349.930605][ T6895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.938621][ T6895] usb 2-1: Product: syz [ 349.944537][ T7910] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 349.953470][ T6895] usb 2-1: Manufacturer: syz [ 349.958087][ T6895] usb 2-1: SerialNumber: syz [ 349.962937][ T7910] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038 (0x7fffffff) [ 349.982369][ T6895] usb 2-1: config 0 descriptor?? [ 350.261635][ T3643] Bluetooth: hci4: command tx timeout [ 350.641554][ T3714] usb 2-1: USB disconnect, device number 16 [ 350.670673][ T3644] Bluetooth: hci1: SCO packet for unknown connection handle 346 [ 350.725207][ T7861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.742862][ T7861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.797876][ T7861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.839861][ T7861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.858707][ T7861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.926253][ T7861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.027449][ T102] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.085999][ T7922] netlink: 'syz.2.1166': attribute type 13 has an invalid length. [ 351.135887][ T7923] 9pnet_fd: Insufficient options for proto=fd [ 351.138691][ T7922] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 351.199001][ T7922] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 351.225021][ T7922] device gretap1 entered promiscuous mode [ 351.258772][ T3643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 351.271597][ T3643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 351.321593][ T3643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 351.334993][ T7861] device hsr_slave_0 entered promiscuous mode [ 351.373811][ T3643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 351.384855][ T3643] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 351.388996][ T7861] device hsr_slave_1 entered promiscuous mode [ 351.404002][ T3643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 351.450835][ T7861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.483800][ T7861] Cannot create hsr debugfs directory [ 351.517129][ T102] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.702956][ T102] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.755602][ T7472] EXT4-fs (loop0): unmounting filesystem. [ 351.784661][ T3846] bio_check_eod: 58660 callbacks suppressed [ 351.784677][ T3846] syz.2.43: attempt to access beyond end of device [ 351.784677][ T3846] loop2: rw=3, sector=26547721186808, nr_sectors = 8388600 limit=2048 [ 351.886916][ T3846] syz.2.43: attempt to access beyond end of device [ 351.886916][ T3846] loop2: rw=3, sector=26547729575408, nr_sectors = 8388600 limit=2048 [ 351.931325][ T3846] syz.2.43: attempt to access beyond end of device [ 351.931325][ T3846] loop2: rw=3, sector=26547737964008, nr_sectors = 8388600 limit=2048 [ 351.965612][ T3846] syz.2.43: attempt to access beyond end of device [ 351.965612][ T3846] loop2: rw=3, sector=26547746352608, nr_sectors = 8388600 limit=2048 [ 352.030702][ T3846] syz.2.43: attempt to access beyond end of device [ 352.030702][ T3846] loop2: rw=3, sector=26547754741208, nr_sectors = 8388600 limit=2048 [ 352.134733][ T3846] syz.2.43: attempt to access beyond end of device [ 352.134733][ T3846] loop2: rw=3, sector=26547763129808, nr_sectors = 8388600 limit=2048 [ 352.149496][ T3846] syz.2.43: attempt to access beyond end of device [ 352.149496][ T3846] loop2: rw=3, sector=26547771518408, nr_sectors = 8388600 limit=2048 [ 352.171027][ T3846] syz.2.43: attempt to access beyond end of device [ 352.171027][ T3846] loop2: rw=3, sector=26547779907008, nr_sectors = 8388600 limit=2048 [ 352.196926][ T3846] syz.2.43: attempt to access beyond end of device [ 352.196926][ T3846] loop2: rw=3, sector=26547788295608, nr_sectors = 8388600 limit=2048 [ 352.239073][ T3846] syz.2.43: attempt to access beyond end of device [ 352.239073][ T3846] loop2: rw=3, sector=26547796684208, nr_sectors = 8388600 limit=2048 [ 352.383459][ T7935] loop0: detected capacity change from 0 to 512 [ 352.431000][ T3643] Bluetooth: hci4: command tx timeout [ 352.629561][ T7935] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 352.639075][ T7935] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff) [ 352.793240][ T7861] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.821619][ T7861] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 353.031253][ T7472] EXT4-fs (loop0): unmounting filesystem. [ 353.117758][ T102] tipc: Disabling bearer [ 353.142927][ T102] tipc: Left network mode [ 353.203740][ T7861] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.250763][ T7861] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 353.278341][ T7951] loop1: detected capacity change from 0 to 1024 [ 353.322430][ T7951] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 353.369535][ T7951] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 353.441856][ T3644] Bluetooth: hci2: command tx timeout [ 353.614291][ T7861] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.649128][ T7861] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 353.861422][ T7861] team0: Port device netdevsim0 removed [ 353.869603][ T7861] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.925565][ T7861] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 353.941244][ T7947] loop0: detected capacity change from 0 to 32768 [ 353.989111][ T7924] chnl_net:caif_netlink_parms(): no params data found [ 354.489300][ T3644] Bluetooth: hci4: command tx timeout [ 354.728003][ T6991] EXT4-fs (loop1): unmounting filesystem. [ 354.874337][ T7980] loop1: detected capacity change from 0 to 256 [ 355.007415][ T7924] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.028081][ T7924] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.066441][ T7924] device bridge_slave_0 entered promiscuous mode [ 355.154996][ T7924] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.166746][ T7924] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.176411][ T7924] device bridge_slave_1 entered promiscuous mode [ 355.178464][ T7992] loop1: detected capacity change from 0 to 256 [ 355.275154][ T7924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.353133][ T7924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.373493][ T7861] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 355.403402][ T7861] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 355.520656][ T3643] Bluetooth: hci2: command tx timeout [ 355.534507][ T7995] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1183'. [ 355.551492][ T7861] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 355.605783][ T7924] team0: Port device team_slave_0 added [ 355.623670][ T7924] team0: Port device team_slave_1 added [ 355.640620][ T7861] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 355.801811][ T7924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.808770][ T7924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.855333][ T7924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.954347][ T7924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.964229][ T7924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.058721][ T7924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.161526][ T102] device hsr_slave_0 left promiscuous mode [ 356.196335][ T102] device hsr_slave_1 left promiscuous mode [ 356.211612][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.219062][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.243562][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.280828][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.311411][ T102] device bridge_slave_1 left promiscuous mode [ 356.317656][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.346047][ T8020] loop1: detected capacity change from 0 to 256 [ 356.381550][ T102] device bridge_slave_0 left promiscuous mode [ 356.387791][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.414447][ T3626] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 356.470298][ T102] device veth1_macvtap left promiscuous mode [ 356.484912][ T102] device veth0_macvtap left promiscuous mode [ 356.509659][ T102] device veth1_vlan left promiscuous mode [ 356.515753][ T102] device veth0_vlan left promiscuous mode [ 356.560768][ T3643] Bluetooth: hci4: command tx timeout [ 356.750692][ T22] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 356.792907][ T3846] bio_check_eod: 67732 callbacks suppressed [ 356.792972][ T3846] syz.2.43: attempt to access beyond end of device [ 356.792972][ T3846] loop2: rw=3, sector=27115981728008, nr_sectors = 8388600 limit=2048 [ 357.083875][ T3846] syz.2.43: attempt to access beyond end of device [ 357.083875][ T3846] loop2: rw=3, sector=27115990116608, nr_sectors = 8388600 limit=2048 [ 357.277728][ T3846] syz.2.43: attempt to access beyond end of device [ 357.277728][ T3846] loop2: rw=3, sector=27115998505208, nr_sectors = 8388600 limit=2048 [ 357.292775][ T3846] syz.2.43: attempt to access beyond end of device [ 357.292775][ T3846] loop2: rw=3, sector=27116006893808, nr_sectors = 8388600 limit=2048 [ 357.307643][ T3846] syz.2.43: attempt to access beyond end of device [ 357.307643][ T3846] loop2: rw=3, sector=27116015282408, nr_sectors = 8388600 limit=2048 [ 357.337776][ T3846] syz.2.43: attempt to access beyond end of device [ 357.337776][ T3846] loop2: rw=3, sector=27116023671008, nr_sectors = 8388600 limit=2048 [ 357.353652][ T3846] syz.2.43: attempt to access beyond end of device [ 357.353652][ T3846] loop2: rw=3, sector=27116032059608, nr_sectors = 8388600 limit=2048 [ 357.370918][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.378585][ T3846] syz.2.43: attempt to access beyond end of device [ 357.378585][ T3846] loop2: rw=3, sector=27116040448208, nr_sectors = 8388600 limit=2048 [ 357.392372][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.404492][ T3846] syz.2.43: attempt to access beyond end of device [ 357.404492][ T3846] loop2: rw=3, sector=27116048836808, nr_sectors = 8388600 limit=2048 [ 357.406340][ T22] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 357.429499][ T3846] syz.2.43: attempt to access beyond end of device [ 357.429499][ T3846] loop2: rw=3, sector=27116057225408, nr_sectors = 8388600 limit=2048 [ 357.430669][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.478439][ T22] usb 3-1: config 0 descriptor?? [ 357.607497][ T3643] Bluetooth: hci2: command tx timeout [ 357.917250][ T102] team0 (unregistering): Port device team_slave_1 removed [ 357.971490][ T22] hid (null): bogus close delimiter [ 358.032992][ T102] team0 (unregistering): Port device team_slave_0 removed [ 358.079234][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.168439][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.189035][ T22] usb 3-1: string descriptor 0 read error: -22 [ 358.458069][ T22] uclogic 0003:256C:006D.000C: interface is invalid, ignoring [ 358.814898][ T22] usb 3-1: USB disconnect, device number 13 [ 358.902020][ T102] bond0 (unregistering): Released all slaves [ 359.142105][ T7924] device hsr_slave_0 entered promiscuous mode [ 359.159238][ T7924] device hsr_slave_1 entered promiscuous mode [ 359.392653][ T7861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.459470][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 359.480238][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 359.504712][ T7861] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.542671][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 359.551887][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 359.560320][ T6759] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.567460][ T6759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.588868][ T8037] loop1: detected capacity change from 0 to 1024 [ 359.635221][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 359.644149][ T8037] hfsplus: failed to load root directory [ 359.663801][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 359.680890][ T3643] Bluetooth: hci2: command tx timeout [ 359.710192][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 359.763720][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.770910][ T4325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.922378][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 359.939411][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 359.972230][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 360.007006][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 360.050161][ T7861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 360.101921][ T7861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.154156][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 360.171616][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 360.200868][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 360.217597][ T8054] loop1: detected capacity change from 0 to 512 [ 360.231308][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 360.239786][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 360.268444][ T8054] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 360.279053][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 360.309813][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 360.320978][ T8054] EXT4-fs (loop1): 1 truncate cleaned up [ 360.326647][ T8054] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 360.441834][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 360.441850][ T26] audit: type=1800 audit(1857437464.728:158): pid=8054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1198" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 360.468486][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 360.596542][ T8054] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 360.730652][ T3681] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 360.746812][ T6991] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 360.802097][ T6991] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 360.880228][ T6991] EXT4-fs (loop1): unmounting filesystem. [ 360.975667][ T3681] usb 3-1: Using ep0 maxpacket: 8 [ 361.100912][ T3681] usb 3-1: config 0 has no interfaces? [ 361.152699][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 361.169796][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 361.199997][ T7861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.268099][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 361.286715][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 361.295190][ T3681] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=97.58 [ 361.313475][ T3681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.353020][ T3681] usb 3-1: Product: syz [ 361.366244][ T3681] usb 3-1: Manufacturer: syz [ 361.389074][ T7861] device veth0_vlan entered promiscuous mode [ 361.404046][ T3681] usb 3-1: SerialNumber: syz [ 361.418908][ T3681] usb 3-1: config 0 descriptor?? [ 361.455064][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 361.478143][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 361.508317][ T7861] device veth1_vlan entered promiscuous mode [ 361.526341][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 361.541353][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 361.559400][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 361.593086][ T7924] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 361.638777][ T7861] device veth0_macvtap entered promiscuous mode [ 361.663318][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 361.672185][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 361.716665][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 361.746014][ T7924] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 361.755597][ T4157] usb 3-1: USB disconnect, device number 14 [ 361.807771][ T7924] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 361.824309][ T3846] bio_check_eod: 124930 callbacks suppressed [ 361.824327][ T3846] syz.2.43: attempt to access beyond end of device [ 361.824327][ T3846] loop2: rw=3, sector=28164053412008, nr_sectors = 8388600 limit=2048 [ 361.863293][ T7861] device veth1_macvtap entered promiscuous mode [ 361.880201][ T3846] syz.2.43: attempt to access beyond end of device [ 361.880201][ T3846] loop2: rw=3, sector=28164061800608, nr_sectors = 8388600 limit=2048 [ 361.900725][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 361.908889][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 361.938928][ T7924] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 361.956769][ T3846] syz.2.43: attempt to access beyond end of device [ 361.956769][ T3846] loop2: rw=3, sector=28164070189208, nr_sectors = 8388600 limit=2048 [ 361.962545][ T7861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.012947][ T3846] syz.2.43: attempt to access beyond end of device [ 362.012947][ T3846] loop2: rw=3, sector=28164078577808, nr_sectors = 8388600 limit=2048 [ 362.020543][ T7861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.076134][ T3846] syz.2.43: attempt to access beyond end of device [ 362.076134][ T3846] loop2: rw=3, sector=28164086966408, nr_sectors = 8388600 limit=2048 [ 362.078664][ T7861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.120691][ T3846] syz.2.43: attempt to access beyond end of device [ 362.120691][ T3846] loop2: rw=3, sector=28164095355008, nr_sectors = 8388600 limit=2048 [ 362.149600][ T7861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.176407][ T3846] syz.2.43: attempt to access beyond end of device [ 362.176407][ T3846] loop2: rw=3, sector=28164103743608, nr_sectors = 8388600 limit=2048 [ 362.180546][ T7861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.221197][ T3644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.230535][ T7861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.240626][ T3650] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.248648][ T3846] syz.2.43: attempt to access beyond end of device [ 362.248648][ T3846] loop2: rw=3, sector=28164112132208, nr_sectors = 8388600 limit=2048 [ 362.248738][ T3650] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.270817][ T7861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.283792][ T3650] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.290953][ T3846] syz.2.43: attempt to access beyond end of device [ 362.290953][ T3846] loop2: rw=3, sector=28164120520808, nr_sectors = 8388600 limit=2048 [ 362.305627][ T3846] syz.2.43: attempt to access beyond end of device [ 362.305627][ T3846] loop2: rw=3, sector=28164128909408, nr_sectors = 8388600 limit=2048 [ 362.320358][ T7861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.330622][ T3650] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 362.340671][ T3650] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.440987][ T7861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.508600][ T7861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.550432][ T7861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.602257][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 362.611857][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 362.657456][ T7861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.686992][ T7861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.710777][ T7861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.747990][ T7861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.787328][ T7861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.809062][ T7861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.848635][ T7861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.860738][ T7861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.881447][ T7861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.910539][ T7861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.926627][ T7861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.953157][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 362.968109][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 363.028313][ T7861] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.048578][ T7861] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.068345][ T7861] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.086778][ T7861] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.284497][ T3954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.321516][ T3954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.354251][ T7924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.380786][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 363.432624][ T7924] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.439981][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 363.458948][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 363.508619][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 363.519392][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 363.539412][ T3714] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.546587][ T3714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.567863][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 363.615693][ T3714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 363.634536][ T3714] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.641704][ T3714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.672146][ T3954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.701049][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 363.710590][ T3954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.723183][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 363.749481][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 363.761157][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 363.806268][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 363.822385][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 363.848980][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 363.892492][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 363.904228][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 363.912657][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 363.929004][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 363.959412][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 363.979445][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 364.007090][ T7924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 364.362752][ T8127] device wlan0 entered promiscuous mode [ 364.400749][ T3643] Bluetooth: hci6: command tx timeout [ 364.409823][ T8127] device macsec1 entered promiscuous mode [ 364.441204][ T8127] device wlan0 left promiscuous mode [ 364.505613][ T8082] chnl_net:caif_netlink_parms(): no params data found [ 364.698909][ T102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.777792][ T8131] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.787356][ T8131] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.796982][ T8131] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.805881][ T8131] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.823543][ T8131] device vxlan0 entered promiscuous mode [ 364.852980][ T8131] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.862349][ T8131] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.871296][ T8131] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.880168][ T8131] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.047389][ T102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.136364][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 365.144305][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 365.170911][ T7924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.232087][ T102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.383030][ T102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.437978][ T8082] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.462621][ T8082] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.479585][ T8082] device bridge_slave_0 entered promiscuous mode [ 365.516512][ T8082] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.526762][ T8082] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.575459][ T8082] device bridge_slave_1 entered promiscuous mode [ 365.765721][ T8082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.821292][ T8082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.018151][ T8082] team0: Port device team_slave_0 added [ 366.079533][ T8082] team0: Port device team_slave_1 added [ 366.142058][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 366.161095][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 366.180869][ T4325] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 366.261747][ T8082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.295107][ T8082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.338506][ T8082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.355510][ T7924] device veth0_vlan entered promiscuous mode [ 366.390854][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 366.399372][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 366.422423][ T8082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.431641][ T8082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.458164][ T4325] usb 3-1: Using ep0 maxpacket: 16 [ 366.480867][ T3643] Bluetooth: hci6: command tx timeout [ 366.526380][ T8082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.544336][ T7924] device veth1_vlan entered promiscuous mode [ 366.651067][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 366.659069][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 366.668017][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 366.756701][ T7924] device veth0_macvtap entered promiscuous mode [ 366.770312][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 366.780726][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 366.791524][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 366.804522][ T4325] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 366.818864][ T4325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.831195][ T3846] bio_check_eod: 84216 callbacks suppressed [ 366.831209][ T3846] syz.2.43: attempt to access beyond end of device [ 366.831209][ T3846] loop2: rw=3, sector=28870591635608, nr_sectors = 8388600 limit=2048 [ 366.832353][ T8082] device hsr_slave_0 entered promiscuous mode [ 366.850553][ T4325] usb 3-1: Product: syz [ 366.861208][ T3846] syz.2.43: attempt to access beyond end of device [ 366.861208][ T3846] loop2: rw=3, sector=28870600024208, nr_sectors = 8388600 limit=2048 [ 366.865943][ T4325] usb 3-1: Manufacturer: syz [ 366.877242][ T8082] device hsr_slave_1 entered promiscuous mode [ 366.892504][ T3846] syz.2.43: attempt to access beyond end of device [ 366.892504][ T3846] loop2: rw=3, sector=28870608412808, nr_sectors = 8388600 limit=2048 [ 366.907288][ T8082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.914954][ T8082] Cannot create hsr debugfs directory [ 366.920847][ T3846] syz.2.43: attempt to access beyond end of device [ 366.920847][ T3846] loop2: rw=3, sector=28870616801408, nr_sectors = 8388600 limit=2048 [ 366.943414][ T4325] usb 3-1: SerialNumber: syz [ 366.948981][ T3846] syz.2.43: attempt to access beyond end of device [ 366.948981][ T3846] loop2: rw=3, sector=28870625190008, nr_sectors = 8388600 limit=2048 [ 366.973745][ T3846] syz.2.43: attempt to access beyond end of device [ 366.973745][ T3846] loop2: rw=3, sector=28870633578608, nr_sectors = 8388600 limit=2048 [ 366.977757][ T4325] r8152-cfgselector 3-1: config 0 descriptor?? [ 366.997581][ T7924] device veth1_macvtap entered promiscuous mode [ 367.010224][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 367.021871][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 367.035383][ T3846] syz.2.43: attempt to access beyond end of device [ 367.035383][ T3846] loop2: rw=3, sector=28870641967208, nr_sectors = 8388600 limit=2048 [ 367.054006][ T3846] syz.2.43: attempt to access beyond end of device [ 367.054006][ T3846] loop2: rw=3, sector=28870650355808, nr_sectors = 8388600 limit=2048 [ 367.072204][ T3846] syz.2.43: attempt to access beyond end of device [ 367.072204][ T3846] loop2: rw=3, sector=28870658744408, nr_sectors = 8388600 limit=2048 [ 367.103287][ T3846] syz.2.43: attempt to access beyond end of device [ 367.103287][ T3846] loop2: rw=3, sector=28870667133008, nr_sectors = 8388600 limit=2048 [ 367.129125][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.167133][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.200004][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.240771][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.271214][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.290621][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.300454][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.320543][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.330381][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.361601][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.379950][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.400569][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.422005][ T7924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.481378][ T4325] r8152-cfgselector 3-1: Unknown version 0x0000 [ 367.487777][ T4325] r8152-cfgselector 3-1: bad CDC descriptors [ 367.497018][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 367.519461][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 367.531141][ T4325] r8152-cfgselector 3-1: Unknown version 0x0000 [ 367.550148][ T4325] r8152-cfgselector 3-1: USB disconnect, device number 15 [ 367.604916][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.630917][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.652788][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.669796][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.692004][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.711205][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.730577][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.747361][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.778919][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.795726][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.807250][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.817972][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.842064][ T7924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.885753][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 367.911162][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 368.032742][ T7924] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.050709][ T7924] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.059430][ T7924] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.090576][ T7924] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.560767][ T3643] Bluetooth: hci6: command tx timeout [ 368.604309][ T3954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.656627][ T3954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.985319][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 369.076702][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.121189][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.358680][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 369.684223][ T102] device hsr_slave_0 left promiscuous mode [ 369.751702][ T102] device hsr_slave_1 left promiscuous mode [ 369.761430][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.768882][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.828961][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.840610][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.880031][ T102] device bridge_slave_1 left promiscuous mode [ 369.890683][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.911810][ T102] device bridge_slave_0 left promiscuous mode [ 369.918032][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.943581][ T8233] loop0: detected capacity change from 0 to 32768 [ 370.125201][ T8233] XFS (loop0): Mounting V5 Filesystem [ 370.139073][ T102] device veth1_macvtap left promiscuous mode [ 370.148464][ T102] device veth0_macvtap left promiscuous mode [ 370.157863][ T102] device veth1_vlan left promiscuous mode [ 370.172640][ T102] device veth0_vlan left promiscuous mode [ 370.284461][ T8233] XFS (loop0): Ending clean mount [ 370.470727][ T102] infiniband syz2: set down [ 370.516186][ T7472] XFS (loop0): Unmounting Filesystem [ 370.640701][ T3643] Bluetooth: hci6: command tx timeout [ 370.667306][ T8243] loop4: detected capacity change from 0 to 40427 [ 373.549342][ T3846] bio_check_eod: 54147 callbacks suppressed [ 373.549363][ T3846] syz.2.43: attempt to access beyond end of device [ 373.549363][ T3846] loop2: rw=3, sector=29324893045808, nr_sectors = 8388600 limit=2048 [ 373.584181][ T3846] syz.2.43: attempt to access beyond end of device [ 373.584181][ T3846] loop2: rw=3, sector=29324901434408, nr_sectors = 8388600 limit=2048 [ 373.627680][ T3846] syz.2.43: attempt to access beyond end of device [ 373.627680][ T3846] loop2: rw=3, sector=29324909823008, nr_sectors = 8388600 limit=2048 [ 373.627699][ T4032] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 373.642899][ T3846] syz.2.43: attempt to access beyond end of device [ 373.642899][ T3846] loop2: rw=3, sector=29324918211608, nr_sectors = 8388600 limit=2048 [ 373.683073][ T3846] syz.2.43: attempt to access beyond end of device [ 373.683073][ T3846] loop2: rw=3, sector=29324926600208, nr_sectors = 8388600 limit=2048 [ 373.755516][ T3846] syz.2.43: attempt to access beyond end of device [ 373.755516][ T3846] loop2: rw=3, sector=29324934988808, nr_sectors = 8388600 limit=2048 [ 373.793328][ T3846] syz.2.43: attempt to access beyond end of device [ 373.793328][ T3846] loop2: rw=3, sector=29324943377408, nr_sectors = 8388600 limit=2048 [ 373.850764][ T3846] syz.2.43: attempt to access beyond end of device [ 373.850764][ T3846] loop2: rw=3, sector=29324951766008, nr_sectors = 8388600 limit=2048 [ 373.868800][ T3846] syz.2.43: attempt to access beyond end of device [ 373.868800][ T3846] loop2: rw=3, sector=29324960154608, nr_sectors = 8388600 limit=2048 [ 373.918320][ T3846] syz.2.43: attempt to access beyond end of device [ 373.918320][ T3846] loop2: rw=3, sector=29324968543208, nr_sectors = 8388600 limit=2048 [ 374.098173][ T3650] Bluetooth: hci2: hardware error 0xdf [ 375.298582][ T3644] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 375.309785][ T3644] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 375.320229][ T3644] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 375.341319][ T3645] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 375.348919][ T3645] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 375.356922][ T3645] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 375.574269][ T102] team0 (unregistering): Port device team_slave_1 removed [ 375.619827][ T3700] smc: removing ib device syz2 [ 375.662573][ T102] team0 (unregistering): Port device team_slave_0 removed [ 375.764064][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.831546][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.790227][ T102] bond0 (unregistering): Released all slaves [ 376.962434][ T3650] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 377.063745][ T8271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1230'. [ 377.116561][ T8275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1231'. [ 377.126059][ T27] INFO: task segctord:3847 blocked for more than 143 seconds. [ 377.150652][ T27] Not tainted 6.1.103-syzkaller #0 [ 377.156319][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 377.217115][ T27] task:segctord state:D stack:28248 pid:3847 ppid:2 flags:0x00004000 [ 377.272555][ T27] Call Trace: [ 377.310565][ T27] [ 377.314165][ T27] __schedule+0x143f/0x4570 [ 377.318727][ T27] ? release_firmware_map_entry+0x186/0x186 [ 377.332456][ T27] ? print_irqtrace_events+0x210/0x210 [ 377.337954][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 377.360622][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 377.365863][ T27] schedule+0xbf/0x180 [ 377.369950][ T27] rwsem_down_write_slowpath+0xea1/0x14b0 [ 377.384675][ T27] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 377.400646][ T27] ? down_write_killable_nested+0x90/0x90 [ 377.406399][ T27] ? read_lock_is_recursive+0x10/0x10 [ 377.420616][ T27] ? rcu_is_watching+0x11/0xb0 [ 377.425416][ T27] nilfs_transaction_lock+0x25c/0x4f0 [ 377.440781][ T3650] Bluetooth: hci7: command tx timeout [ 377.452757][ T27] nilfs_segctor_thread+0x547/0x11a0 [ 377.458096][ T27] ? print_irqtrace_events+0x210/0x210 [ 377.464007][ T27] ? nilfs_iput_work_func+0x70/0x70 [ 377.469241][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 377.475453][ T27] ? release_firmware_map_entry+0x186/0x186 [ 377.481628][ T27] ? wake_bit_function+0x210/0x210 [ 377.487233][ T27] ? _raw_spin_unlock+0x40/0x40 [ 377.493321][ T27] ? __kthread_parkme+0x168/0x1c0 [ 377.498375][ T27] kthread+0x28d/0x320 [ 377.502879][ T27] ? nilfs_iput_work_func+0x70/0x70 [ 377.508103][ T27] ? kthread_blkcg+0xd0/0xd0 [ 377.513087][ T27] ret_from_fork+0x1f/0x30 [ 377.517541][ T27] [ 377.521131][ T27] [ 377.521131][ T27] Showing all locks held in the system: [ 377.528966][ T27] 1 lock held by rcu_tasks_kthre/12: [ 377.535190][ T27] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 377.545986][ T27] 1 lock held by rcu_tasks_trace/13: [ 377.554315][ T27] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 377.567515][ T27] 1 lock held by khungtaskd/27: [ 377.572714][ T27] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 377.582856][ T27] 5 locks held by kworker/u4:4/102: [ 377.588058][ T27] #0: ffff888012a1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 377.599346][ T27] #1: ffffc900015d7d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 377.609847][ T27] #2: ffffffff8e4eb8d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 377.619465][ T27] #3: ffff88805c1453e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x10c/0x2f0 [ 377.629760][ T27] #4: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 377.650646][ T27] 1 lock held by dhcpcd/3305: [ 377.655341][ T27] #0: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x12e/0x6e0 [ 377.671828][ T27] 2 locks held by getty/3397: [ 377.676517][ T27] #0: ffff88814b465098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 377.700668][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 377.715923][ T27] 4 locks held by udevd/3626: [ 377.729496][ T27] #0: ffff88806827c790 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xae/0xd10 [ 377.750573][ T27] #1: ffff88805c2b7088 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x4f/0x3a0 [ 377.759860][ T27] #2: ffff8880491dae88 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x6e/0x3a0 [ 377.781828][ T27] #3: ffff88807e2f10e8 (&dev->mutex){....}-{3:3}, at: uevent_show+0x176/0x330 [ 377.791182][ T27] 4 locks held by kworker/u4:5/3700: [ 377.797137][ T27] 2 locks held by syz.2.43/3846: [ 377.810542][ T27] 1 lock held by segctord/3847: [ 377.815413][ T27] #0: ffff8880591472a0 (&nilfs->ns_segctor_sem){++++}-{3:3}, at: nilfs_transaction_lock+0x25c/0x4f0 [ 377.830605][ T27] 3 locks held by kworker/0:14/4156: [ 377.835904][ T27] #0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 377.870592][ T27] #1: ffffc9000aba7d20 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 377.880305][ T27] #2: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 377.897506][ T27] 3 locks held by kworker/0:15/4157: [ 377.905651][ T27] #0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 377.916646][ T27] #1: ffffc9000b477d20 (fqdir_free_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 377.926970][ T27] #2: ffffffff8d330480 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5f0 [ 377.937872][ T27] 3 locks held by kworker/1:14/4320: [ 377.943467][ T27] #0: ffff88814b194d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 377.965394][ T27] #1: ffffc9000320fd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 377.988183][ T27] #2: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 377.997964][ T27] 2 locks held by kworker/1:17/4325: [ 378.006607][ T27] #0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 378.017293][ T27] #1: ffffc9000343fd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 378.029997][ T27] 2 locks held by kworker/1:18/6759: [ 378.035593][ T27] #0: ffff888012872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 378.060673][ T27] #1: ffffc90004d9fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 378.080556][ T27] 6 locks held by syz-executor/8082: [ 378.085850][ T27] #0: ffff8880137bc460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 378.112389][ T27] #1: ffff888022929488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 378.130552][ T27] #2: ffff8880220c2bd0 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 378.150551][ T27] #3: ffffffff8de21548 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1ad/0x800 [ 378.180577][ T27] #4: ffff88807e2f10e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570 [ 378.189850][ T27] #5: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: devlink_nl_port_fill+0x2b1/0xa00 [ 378.216125][ T27] 2 locks held by syz.3.1214/8141: [ 378.235812][ T27] #0: ffffffff8e4eb8d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 378.254862][ T27] #1: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: fib6_rules_net_exit_batch+0x1c/0xc0 [ 378.273281][ T27] 2 locks held by syz-executor/8272: [ 378.278587][ T27] #0: ffffffff8e4eb8d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 378.295360][ T27] #1: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x80/0x270 [ 378.310916][ T27] 1 lock held by syz.0.1231/8275: [ 378.315965][ T27] #0: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 378.334594][ T27] 1 lock held by syz.0.1231/8278: [ 378.339644][ T27] #0: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 378.355591][ T27] 1 lock held by syz.0.1231/8279: [ 378.365257][ T27] #0: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 378.379208][ T27] 1 lock held by syz.4.1232/8277: [ 378.388745][ T27] #0: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 378.403085][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.410022][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.438583][ T27] [ 378.442181][ T27] ============================================= [ 378.442181][ T27] [ 378.500576][ T27] NMI backtrace for cpu 0 [ 378.504945][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0 [ 378.512841][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 378.522901][ T27] Call Trace: [ 378.526176][ T27] [ 378.529104][ T27] dump_stack_lvl+0x1e3/0x2cb [ 378.533794][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 378.539259][ T27] ? panic+0x764/0x764 [ 378.543327][ T27] ? vprintk_emit+0x622/0x740 [ 378.548011][ T27] ? printk_sprint+0x490/0x490 [ 378.552778][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 378.557897][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 378.562841][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 378.568988][ T27] ? _printk+0xd1/0x111 [ 378.573128][ T27] ? panic+0x764/0x764 [ 378.577202][ T27] ? __wake_up_klogd+0xcc/0x100 [ 378.582038][ T27] ? panic+0x764/0x764 [ 378.586089][ T27] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 378.592145][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 378.598201][ T27] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 378.604170][ T27] watchdog+0xf88/0xfd0 [ 378.608317][ T27] ? watchdog+0x1f8/0xfd0 [ 378.612641][ T27] kthread+0x28d/0x320 [ 378.616708][ T27] ? hungtask_pm_notify+0x50/0x50 [ 378.621730][ T27] ? kthread_blkcg+0xd0/0xd0 [ 378.626309][ T27] ret_from_fork+0x1f/0x30 [ 378.630723][ T27] [ 378.634427][ T27] Sending NMI from CPU 0 to CPUs 1: [ 378.639664][ C1] NMI backtrace for cpu 1 [ 378.639674][ C1] CPU: 1 PID: 3700 Comm: kworker/u4:5 Not tainted 6.1.103-syzkaller #0 [ 378.639689][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 378.639698][ C1] Workqueue: bat_events batadv_nc_worker [ 378.639726][ C1] RIP: 0010:rcu_is_watching+0x40/0xb0 [ 378.639742][ C1] Code: 73 76 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 60 88 d8 8c 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 50 c4 6e 00 <48> c7 c3 a8 56 03 00 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 [ 378.639755][ C1] RSP: 0018:ffffc90004c2fbd8 EFLAGS: 00000246 [ 378.639766][ C1] RAX: 1ffffffff19b110d RBX: 0000000000000001 RCX: ffff888022965940 [ 378.639777][ C1] RDX: ffff888022965940 RSI: ffffffff8b5d5dc0 RDI: ffffffff8b5d5d80 [ 378.639787][ C1] RBP: ffff88807bcf4628 R08: ffffffff8a75f29d R09: fffffbfff20e7245 [ 378.639798][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888062358c80 [ 378.639808][ C1] R13: 00000000000000c5 R14: ffffffff8cd88868 R15: dffffc0000000000 [ 378.639818][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 378.639831][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.639840][ C1] CR2: 00007f14c6437d60 CR3: 0000000029b80000 CR4: 00000000003506e0 [ 378.639853][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 378.639862][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 378.639871][ C1] Call Trace: [ 378.639875][ C1] [ 378.639881][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 378.639902][ C1] ? read_lock_is_recursive+0x10/0x10 [ 378.639924][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 378.639945][ C1] ? nmi_handle+0x25/0x440 [ 378.639973][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 378.639994][ C1] ? nmi_handle+0x12e/0x440 [ 378.640015][ C1] ? nmi_handle+0x25/0x440 [ 378.640036][ C1] ? rcu_is_watching+0x40/0xb0 [ 378.640049][ C1] ? default_do_nmi+0x62/0x150 [ 378.640070][ C1] ? exc_nmi+0xa8/0x100 [ 378.640089][ C1] ? end_repeat_nmi+0x16/0x31 [ 378.640111][ C1] ? batadv_nc_worker+0xfd/0x610 [ 378.640130][ C1] ? rcu_is_watching+0x40/0xb0 [ 378.640144][ C1] ? rcu_is_watching+0x40/0xb0 [ 378.640158][ C1] ? rcu_is_watching+0x40/0xb0 [ 378.640171][ C1] [ 378.640175][ C1] [ 378.640180][ C1] batadv_nc_worker+0x107/0x610 [ 378.640198][ C1] ? batadv_nc_worker+0xc7/0x610 [ 378.640218][ C1] ? process_one_work+0x7a9/0x11d0 [ 378.640234][ C1] process_one_work+0x8a9/0x11d0 [ 378.640257][ C1] ? worker_detach_from_pool+0x260/0x260 [ 378.640276][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 378.640291][ C1] ? kthread_data+0x4e/0xc0 [ 378.640313][ C1] ? wq_worker_running+0x97/0x190 [ 378.640336][ C1] worker_thread+0xa47/0x1200 [ 378.640353][ C1] ? _raw_spin_unlock+0x40/0x40 [ 378.640368][ C1] ? release_firmware_map_entry+0x186/0x186 [ 378.640391][ C1] ? _raw_spin_unlock+0x40/0x40 [ 378.640417][ C1] kthread+0x28d/0x320 [ 378.640430][ C1] ? worker_clr_flags+0x190/0x190 [ 378.640445][ C1] ? kthread_blkcg+0xd0/0xd0 [ 378.640458][ C1] ret_from_fork+0x1f/0x30 [ 378.640484][ C1] [ 378.660608][ T3846] bio_check_eod: 153906 callbacks suppressed [ 378.660622][ T3846] syz.2.43: attempt to access beyond end of device [ 378.660622][ T3846] loop2: rw=3, sector=30616032803408, nr_sectors = 8388600 limit=2048 [ 378.978424][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 378.985291][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0 [ 378.993184][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 379.003240][ T27] Call Trace: [ 379.006523][ T27] [ 379.009455][ T27] dump_stack_lvl+0x1e3/0x2cb [ 379.014149][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 379.019614][ T27] ? panic+0x764/0x764 [ 379.023690][ T27] ? llist_add_batch+0x160/0x1d0 [ 379.028640][ T27] ? vscnprintf+0x59/0x80 [ 379.032970][ T27] panic+0x318/0x764 [ 379.036869][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 379.043118][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 379.048501][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 379.054669][ T27] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 379.060831][ T27] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 379.066988][ T27] watchdog+0xfc7/0xfd0 [ 379.071156][ T27] ? watchdog+0x1f8/0xfd0 [ 379.075495][ T27] kthread+0x28d/0x320 [ 379.079571][ T27] ? hungtask_pm_notify+0x50/0x50 [ 379.084603][ T27] ? kthread_blkcg+0xd0/0xd0 [ 379.089183][ T27] ret_from_fork+0x1f/0x30 [ 379.093622][ T27] [ 379.096859][ T27] Kernel Offset: disabled [ 379.101171][ T27] Rebooting in 86400 seconds..