last executing test programs: 53.83350938s ago: executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b27, &(0x7f0000000040)) 53.259965682s ago: executing program 2: mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 53.037167143s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth1_to_bridge\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0), 0x38}}, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0xf8, 0x28, 0xf09, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc0, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x9]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0xf8}}, 0x0) r7 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f00000001c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r9, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x400, &(0x7f0000000d80)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,uid=forget,noadinicb,shortad,iocharset=ascii,lastblock=00000000000000000009,iocharset=cp950,fileset=00000000000000000001,undelete,anchor=00000000000000000006,partition=00000000000000000008,anchor=00000000000008421375,session=00000000000000000001,anchor=00000000000000000005,gid=', @ANYRESDEC=0x0, @ANYBLOB="83338f47e5f6c59d", @ANYRESHEX, @ANYRES8=r7, @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b66736465663d233f9d1abf59c53229ddd780b162f44a0e44f3436d598025e596d23078a3e733e07b480ad2f41c3ccd7956530c3be5c0d1833ad4954140d857bb924e0f613fe32a0c1461263f77581d8ed8b341959c53a341493644534a4b27223d1faac6bf7df530d100a57452b6a3abc826bb0f0b82809ca1e13376959935f589115abe267b25f42757304b4d6c7ffaec13f3079a4658933152fe693cc762ce82776b4003c4ac3d9d3478da3da1f79ad788d3b25f59422ba668e32c00"], 0x9, 0xc26, &(0x7f0000001e80)="$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") write$FUSE_NOTIFY_INVAL_INODE(r8, &(0x7f0000000240)={0x28}, 0x28) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2800715, &(0x7f0000000280)={[{@usrjquota}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x22}}, {@errors_remount}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@usrjquota}, {@delalloc}, {@nodiscard}]}, 0xee, 0x43a, &(0x7f00000008c0)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r10, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x0) 51.70248902s ago: executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r5 = dup(r4) bind$unix(r5, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0, "1241b72d7fffff5b000f000000462200"}) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "5a5f0020008a3fc945e8724a114177ffffef00"}) r7 = syz_open_pts(r6, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x2, 0x0, "f937267f0f7ba57603a6a12e3f0a7f64c64c56"}) r8 = dup(r7) read$FUSE(r8, &(0x7f0000000380)={0x2020}, 0x2020) read$FUSE(r8, &(0x7f0000004540)={0x2020}, 0x4) getsockname$packet(r5, 0x0, &(0x7f0000000bc0)) recvmsg$unix(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r11 = syz_open_dev$video4linux(&(0x7f0000001040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r11, 0xc0585604, &(0x7f0000000080)={0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x3, 0x4}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 48.691717398s ago: executing program 1: unshare(0x22020400) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, 0x0, 0x0) 40.873176566s ago: executing program 1: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000064c0)='./bus\x00', 0x28108c0, &(0x7f0000006980)=ANY=[@ANYBLOB="646973636172642c696f636861727365743d63703837342c6572726f72733d72656d6f756e742d726f2c75737271756f74612c696f636861727365743d63703836312c696f636861727365743d6370313235302c696e7465677269747900696f636861727365743d69736f383835392d342c646973636172643d30783030303030303030303030303030396943b95b49aca56faf1cc22189cc312c696f636861727365743d6d6163677265656b2c71756f74612c726573697a653d3078303030303030303030303030376666662c646973636172643d3078303030303030303066666666666666662c756d61736b3d3078303030303030303030303032303034352c6673636f6e746578743d836e636f6e66696e65645f752c66736d616769633d3078303030303030303030303230303030392c324216873b95edfe8ceab2bb0b11835a5cf531ac6273c29a4d4f9d056f1bcb8cd0a969ed12cf99802b3e3201518ecfc59a4fd94dd5349dc55633bd2bde1128ad071807ef13a9f10c0fbf3ad861c2009067c5c6c84cdba2806fa74eddff8373799d0b8c1e6f7e2b205235161b610ae5c66d1d9cfc2bc0cb617ae49331ade71595c2a5438139933aada47236dafdffffff088a552445f95768ccecb0c35797e832beced2077fa197623cd3de51d69d7a4f77a80eb5f783f091e5ec6047a0f67676819f4bf66744c1cb0975b96baf730000000000000001004e257bbabf33e3fa8d0cca2fbb4dabe1c5634bdf889b764ce26ae4e539fdffa2ea82c34b16308e26ce945d101d5f2e2577d8e2a21d9401194a97a6c281b603da7c66934f0c341df8ff02d91cd4f2d80ea7dde697"], 0xfe, 0x6180, &(0x7f000000df40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file1\x00') 40.872853342s ago: executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) futex(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) 40.869640168s ago: executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000400)={{0x3, 0x0, 0x0, 0x1}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) 40.868480871s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x5e, &(0x7f00000000c0), 0xfe, 0x440, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000240)=""/60, 0x3c) getdents(r0, 0x0, 0x66) 40.838868824s ago: executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockname$netlink(r0, 0x0, &(0x7f00000002c0)) 40.838774703s ago: executing program 1: unshare(0x22020400) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, 0x0, 0x0) 40.757019794s ago: executing program 0: sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {0x13}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000007"], 0x24d8}], 0x1}, 0x0) 40.688075542s ago: executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) r0 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000006c0)=0x39) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010200000000000000001000000008000300", @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32=r5], 0x24}}, 0x0) 40.471760812s ago: executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x0) syz_emit_ethernet(0x14a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0x2, 0x80805, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x7d, 0x0, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000180)=0x8) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000280)) prlimit64(0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x5400, 0x0) 40.43889503s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 39.478678887s ago: executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000880)) lseek(r0, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r2}, 0x0, &(0x7f00000008c0)='%pB \x00'}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x7fffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000095"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) semctl$SEM_STAT(0xffffffffffffffff, 0x2, 0x12, &(0x7f0000000000)=""/64) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000040), &(0x7f0000000140)=""/72, 0x700}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r5, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x64) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=0x1, 0xffffffffffffffff, 0x2f, 0x18, 0xffffffffffffffff, @prog_id}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003fc0)={@cgroup, 0xffffffffffffffff, 0x1b, 0x0, 0x0, @prog_fd}, 0x20) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 35.719944895s ago: executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast1}, 0x10) io_setup(0x9, 0x0) eventfd2(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r5 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r5, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, 0x0, r6, 0x0, 0x7ffff000, 0x0) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[], 0x3a7) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000002c40)="4c053425c292a724cee5e7b46297ca7d4dd9c5097c85f9fc9719785f26f00334e5fad57d1c8ae64a8242805a4a2370a9ec422947c030cad8170e303883653e41bbfe71ae3a83c1bc83680a503d59fb2481f399a0952a433a8bb92dff8721b37ce194fea8c022084bbf8e19e008b0013e41f4ba222329d48d0081470c92d2652e74b7b0dbae718f8b789a64619b6486f8c30f365473cf56b6f6b92d040de77ff8cb16220c6b3c3c0c0ebeddbfda2da6a92e9ba05c41f7317cfad58e2e6988fa8e3fe867f204f02392b909aed27efb5d3be750208266cbb47e69c18296b6b512ad958b551358effc67c2eeb062785f44c12182cacae686b129c239384122eb9a5842337cd3cc061ce3ba7f63fede1c9224bddec74124202d3f1d828e31fb838a6fe4064c8c3b0ceb08a8a05d1f1a232a019106204d20ccfa32f1058a5bca0f946dd1efb0a6305300f1214e0d0fc11d8631b9a0d4732c74d5a3e9f82fd7ddc809181ac711cd0a5e90e59e0d95f669c13d237891fed2842f48dd04865a846fd157a614476a6882f0661ac9bdf9d010a956df9e61254c7eaeaf409c505bc23128c2bc37a8dfa65a9af9be973fb70e4d68235f85cdcb362f52c932e7da7ff2e2df339f90f2ae62c679516c8b3a859ceb52754aa1abecdf51ee7f64b4fcc769a8ab50d45f37a73d4f3eec5057a74060cb792faad971835835b51e422d59fbaf35273c8765180666cd3d52b4b7922eb245602d217a066b708598916296d06bab7ece49abc0e743e06270e108708e25b2a8cfec9b33f6f97a8377c2f2a151a45db18887170924ce84d1991d8b92e3e3019a6b0c5a9f1cc8fbfafff99353ea8505b00cedd237eec69605d398a388d1ac916fa84557f1e0d08e52035b27ff166dbbe76df5221d4d0e1b5d6a7aca1f84e1a5a8e07a43e83d8f2a994cc97e28faf57c354eea12dd0f1060cf406a33a9a7a1991c2d4d44afd04975d19dd48477c43f3f2f01e405f384768b58389e88c100ba87a2e41e75944b15d28c9a0651edd246176f5181e90252879b50e07af7ff185d62ce2ea314e4958c1a0ca6f5e30985ac4e474b71fbc0fc7eef9472c22d010a18d5dddbd06b230675475efeba4d8a46c0983b40ef6d09e1f87060a82a4b6b45a2e9a6dc0a31fce06aa9ac17ee4bcaf225dc67bb7d8226890a52697fdf85e152b41dbcf64aa999d4eeb50a82c2dfc4ca2506ec34c44e8e1bef940216e2b412b7e863224331aab0ff2febb73312b6251602a815f9172a5d3d6d0c9a3e0b03c75d3687df116f87293e9b2fe7579d6cd0aae0abb43d4d4b3299e3bf7d993eeacc360ab79abb80a3b3b2823dd4a4e3542bd87e7e612545680cc19d53d3618372910dbba9006d245d96f256fbbba115a20f1c852a58f98a32bdfeb497c2f3b5d00fe6a357c0c6301f4b279e0549002117475ada8e8b91eadabdc43ce6b405648c23c194fab66aabf7c88c32ad425ea5aa0780fdfbb4117b615ed1683cc0b06a46870fe2aceab08b9018f6", 0x432}], 0x1}}], 0x1, 0x0) 34.40145461s ago: executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rt_sigprocmask(0x0, &(0x7f000078b000), 0x0, 0x8) 34.155786348s ago: executing program 5: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569"], 0x398}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) msync(&(0x7f0000533000/0x4000)=nil, 0x4000, 0x0) ftruncate(r5, 0x3) socket(0x1d, 0x0, 0x6) getsockopt$nfc_llcp(0xffffffffffffffff, 0x6a, 0x3, 0x0, 0x2000003b) r6 = socket$unix(0x1, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$unix(r6, &(0x7f0000000200)=@abs, 0x6e) mlock2(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x1) 32.822381537s ago: executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 32.69441205s ago: executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000057000/0x3000)=nil, 0x3000) socket$inet_udp(0x2, 0x2, 0x0) 32.663656903s ago: executing program 4: prlimit64(0x0, 0x2, &(0x7f0000000140), 0x0) mremap(&(0x7f0000b96000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) 32.485511185s ago: executing program 4: sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {0x13}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000007"], 0x24d8}], 0x1}, 0x0) 32.266134908s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000100)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffff38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 32.024930692s ago: executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf00, 0x0, 0x4f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) r0 = epoll_create1(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = epoll_create1(0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x1, 0xfff0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x5, &(0x7f0000000a80), 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) r4 = epoll_create(0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000000)='\t', 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000080)) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) epoll_pwait(r4, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 31.96967622s ago: executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="01bb", 0x2}], 0x1) 30.904514749s ago: executing program 3: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001140)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9ac720dd515e0d1b}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x69}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x44001) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x19}}, {}, [], {{0x6}, {0x5}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) 30.742096821s ago: executing program 3: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file2\x00', 0x22108c0, &(0x7f000001f500), 0x5, 0x6172, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) ftruncate(r0, 0xc17a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000780)=ANY=[@ANYRESOCT, @ANYRES8, @ANYRESOCT=0x0, @ANYBLOB="f1bcca05ed588d63a576cc3afd51baf29cde2281a84392f4e66ff7ef22aa9af727ceae8a8ec95fc1b73083de2de825a0cb2b0be774fdb33650d7dace27c16bc23b2f7c7fb72585548939698f280d138aa9255a8a924008f8477e82ba11cdb11efd5ca2f1ab049ce2ccc415d2daf8dac725533a558d561654faf5e0924f1376174f374d664fad4a6ab24ec0e822e7f9426e8e5de1fe58085a0ae86fd02a118b9365961834d46208b9fb4cb1a1fa962a8b0000dc2e319379ea1e5a07aeb3f9cd4e648df4dd18e6253e7b2310a78d63a232a2a40758027a472e7d263ef567a84166f26ee56e701c63a8863787889bf1c90fccf31954a940c8b584ca89a512f28edec086b1c0823c028840eeaf3f5d8769023c01218614f4fa40be9892e7a285ac63f7f97aaa5b8ecc86e28c6193bc21a2b833e5c9c703c4cfa063dd34c245706bde3d7ac373ab04b62b4111b59eabd436dd97e788a36ef25bad99be2aa924949558c821a92b65df1ebf416277aacc0451f99020a3c85ce69195a56d9841738b483e291a9a5f6008786b844f8d20a63c6a55f3fa19eacf42a78c6f3c2cc31b7d54697fffaccf26ea6fee989b4f583b955a9df7606e531b3fd50653972cb679ac4185dbd135f930def9254edc05f1bd4ba5fb3de64eaae7f6aac65ca2de584e296d0ebc29f352ba125a3e5bd0e89dcdf7985a42436cef6e71c2729ee65b101c48463e2dd5b6cddccef391ac6b7a7a99f85b0811", @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRESHEX], 0x1, 0x0, &(0x7f0000000000)) 30.346534733s ago: executing program 3: syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4812, &(0x7f0000002140)=ANY=[], 0x11, 0x6aa, &(0x7f0000000fc0)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0x10000, 0x0) getdents(r0, 0x0, 0x58) 30.104541022s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002a40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x14, r1, 0x1}, 0x14}}, 0x0) 30.021159776s ago: executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x1b}, {&(0x7f0000000280)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x4}, {&(0x7f0000000340)="527302587e0a4e47ad", 0x9}], 0x3, 0x0, 0x0) 10.447437807s ago: executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6d706f6c3d7072656665723d5b4d721dc4c4153e668dbbb3c135ef297374617469633a30"]) 9.457170621s ago: executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x502, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x10) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x80) 7.000090783s ago: executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/189, 0xbd}, {&(0x7f0000000180)=""/168, 0xa8}], 0x2, &(0x7f0000000100), 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) r5 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r5, 0x29, 0x16, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9"}, 0x3c) 1.935808409s ago: executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000480)="d9e0e2a9b4b8654ccd1cc2f8c8140a00f84de2997d7cd172abab9eae9886af326563c823811c51a975827708c37445b84421b51c9b1554d8", 0x38}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1}, 0x0) recvmmsg$unix(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/238, 0xee}], 0x1}}], 0x1, 0x2, 0x0) 0s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x15c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x13e, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @val, @void, [{0xdd, 0xab, "8b7668a21729e4ad77e366ae9e66d671f8bb54784e373e2223fde04977365429048047ad806c438142ae7889f37bbd41e50a26612ce77fcf71400d7c1e0a34b043fbb4ca6b6e5ecb7c8169982fe3f1261537a3b4467e0db0ca915ec1964c56db466602eed1b321bfab5c5b2ab6d6e1ffff58b596e2cfca04801aae25adb2b4b53aa135a66ae836452cff03af5ed4b78b2f98cb570d7c4f266d0396d7725da4b37cefc58749a97b5c215b6a"}, {0xdd, 0x6b, "95e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b67336957356a02e1c5bdcbd4acf120d5d44f07910bdee6eabe82f6c76ecc7c98d5a107f6eab471672d7179671906048fe7622486b"}]}}]}, 0x15c}}, 0x0) kernel console output (not intermixed with test programs): idge0: port 2(bridge_slave_1) entered disabled state [ 642.981791][ T5289] bridge_slave_0: left allmulticast mode [ 642.987442][ T5289] bridge_slave_0: left promiscuous mode [ 642.993590][ T5289] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.600368][ T5120] Bluetooth: hci1: command tx timeout [ 647.370731][ T5120] Bluetooth: hci5: command tx timeout [ 647.376393][ T5120] Bluetooth: hci6: command tx timeout [ 647.937336][T14332] EXT4-fs warning (device sda1): verify_group_input:167: Cannot read last block (537193983) [ 648.771910][ T5289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.803159][ T5289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.837202][ T5289] bond0 (unregistering): Released all slaves [ 649.076377][ T5289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.101435][ T5289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.123540][ T5289] bond0 (unregistering): Released all slaves [ 649.289871][ T5289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.307805][ T5289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.319283][ T5289] bond0 (unregistering): Released all slaves [ 649.339706][T14241] hsr_slave_0: entered promiscuous mode [ 649.346768][T14241] hsr_slave_1: entered promiscuous mode [ 649.354348][T14241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.362054][T14241] Cannot create hsr debugfs directory [ 649.517810][T14344] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 649.530273][T14344] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. [ 649.539724][T14344] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 649.590408][T14344] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 649.610976][T14344] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 649.668112][ T5289] tipc: Left network mode [ 649.675661][T14346] binder: 14345:14346 ioctl c018620c 20000080 returned -22 [ 649.706771][T14346] 9pnet_fd: Insufficient options for proto=fd [ 649.930558][T14354] loop3: detected capacity change from 0 to 512 [ 650.033117][T14354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.064116][T14354] ext4 filesystem being mounted at /root/syzkaller-testdir3589987268/syzkaller.d11iJ1/327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 650.236947][ T8706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.312120][T14366] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 650.380216][ T29] audit: type=1326 audit(2390204391.061:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14369 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5ee67d0a9 code=0x0 [ 651.016079][T14388] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 651.338524][T14391] binder: 14390:14391 ioctl c018620c 20000080 returned -22 [ 651.398046][T14391] 9pnet_fd: Insufficient options for proto=fd [ 651.429234][T14237] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 651.460512][T14393] loop3: detected capacity change from 0 to 1024 [ 651.481246][T14237] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 651.501725][ T29] audit: type=1804 audit(2390204392.181:1037): pid=14393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3589987268/syzkaller.d11iJ1/329/file1/file1" dev="loop3" ino=20 res=1 errno=0 [ 651.538089][T14393] syz-executor.3: attempt to access beyond end of device [ 651.538089][T14393] loop3: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 651.541317][T14237] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 651.653722][T14393] Buffer I/O error on dev loop3, logical block 2889, lost async page write [ 651.715530][T14237] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 651.893959][T14403] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 651.939900][T14405] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 652.283321][T14412] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 652.316015][T14412] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 652.342223][T14412] bond1: left allmulticast mode [ 652.347106][T14412] bond1: left promiscuous mode [ 652.369206][T14412] bridge0: port 3(bond1) entered disabled state [ 652.393312][T14412] bridge_slave_1: left allmulticast mode [ 652.401760][T14412] bridge_slave_1: left promiscuous mode [ 652.407670][T14412] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.457026][T14412] bridge_slave_0: left allmulticast mode [ 652.457419][T14419] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 652.502492][T14412] bridge_slave_0: left promiscuous mode [ 652.520678][T14412] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.570306][ T29] audit: type=1326 audit(2390204393.241:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14420 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5ee67d0a9 code=0x0 [ 652.889114][T14425] loop5: detected capacity change from 0 to 4096 [ 652.927106][T14425] ntfs3: loop5: failed to replay log file. Can't mount rw! [ 652.935287][ T5289] hsr_slave_0: left promiscuous mode [ 652.941836][ T5289] hsr_slave_1: left promiscuous mode [ 653.000081][ T29] audit: type=1326 audit(2390204393.681:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14415 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73aee7d0a9 code=0x7ffc0000 [ 653.023711][ T29] audit: type=1326 audit(2390204393.681:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14415 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73aee7d0a9 code=0x7ffc0000 [ 653.073735][ T5289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.087940][ T5289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.098492][ T29] audit: type=1326 audit(2390204393.681:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14415 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73aee7d0a9 code=0x7ffc0000 [ 653.126466][ T5289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.151622][ T5289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.194078][ T29] audit: type=1326 audit(2390204393.681:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14415 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73aee7d0a9 code=0x7ffc0000 [ 653.228728][ T29] audit: type=1326 audit(2390204393.681:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14415 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73aee7d0a9 code=0x7ffc0000 [ 653.345373][ T29] audit: type=1326 audit(2390204393.731:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14415 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73aee7d0a9 code=0x7ffc0000 [ 653.421569][ T29] audit: type=1326 audit(2390204393.731:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14415 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73aee7d0a9 code=0x7ffc0000 [ 653.457728][ T5289] hsr_slave_0: left promiscuous mode [ 653.500989][ T5289] hsr_slave_1: left promiscuous mode [ 653.512993][ T5289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.521726][ T5289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.538207][ T5289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.546701][T14433] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 653.560126][ T5289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.589513][ T5289] hsr_slave_0: left promiscuous mode [ 653.642048][ T5289] hsr_slave_1: left promiscuous mode [ 653.652532][ T5289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.663380][ T5289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.682732][ T5289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.691607][ T5289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.857760][ T5289] veth1_macvtap: left promiscuous mode [ 653.870325][ T5289] veth0_macvtap: left promiscuous mode [ 653.876123][ T5289] veth1_vlan: left promiscuous mode [ 653.881686][ T5289] veth0_vlan: left promiscuous mode [ 654.214472][ T5289] veth1_macvtap: left promiscuous mode [ 654.243434][ T5289] veth0_macvtap: left promiscuous mode [ 654.292562][ T5289] veth1_vlan: left promiscuous mode [ 654.325200][ T5289] veth0_vlan: left promiscuous mode [ 654.397962][ T5289] veth1_macvtap: left promiscuous mode [ 654.645284][ T5289] veth0_macvtap: left promiscuous mode [ 654.653216][ T5289] veth1_vlan: left promiscuous mode [ 654.665152][ T5289] veth0_vlan: left promiscuous mode [ 655.696409][ T5289] team0 (unregistering): Port device team_slave_1 removed [ 655.753318][ T5289] team0 (unregistering): Port device team_slave_0 removed [ 656.845952][ T5289] team0 (unregistering): Port device team_slave_1 removed [ 656.910834][ T5289] team0 (unregistering): Port device team_slave_0 removed [ 657.999032][ T5289] team0 (unregistering): Port device team_slave_1 removed [ 658.070128][ T5289] team0 (unregistering): Port device team_slave_0 removed [ 658.613995][T14431] netlink: 'syz-executor.5': attribute type 21 has an invalid length. [ 658.634609][T14431] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.5'. [ 658.652334][T14431] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 658.660494][T14431] netlink: 'syz-executor.5': attribute type 6 has an invalid length. [ 658.668565][T14431] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 658.678264][T14433] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 658.715754][T14237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.899580][T14237] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.025039][T14233] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 659.092231][T14233] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 659.135415][ T5197] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.142903][ T5197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.205378][T14233] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 659.289553][T14233] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 659.386398][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.393640][ T5129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.786878][T14241] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 659.821608][T14241] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 659.859253][T14241] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 659.884238][T14468] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 659.914587][T14470] loop5: detected capacity change from 0 to 64 [ 659.921383][T14468] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 659.943260][T14468] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 659.960803][T14468] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 659.965658][T14470] hfs: get root inode failed [ 659.982754][T14468] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 660.046677][T14241] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 660.172631][T14472] loop3: detected capacity change from 0 to 64 [ 660.277632][T14472] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 660.336421][T14472] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 660.390453][T14477] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 660.433248][T14233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.526356][T14233] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.684737][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.691984][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.738328][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.745562][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.901546][T14485] loop3: detected capacity change from 0 to 4096 [ 660.923642][T14485] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 660.934883][T14237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.095129][T14470] loop5: detected capacity change from 0 to 32768 [ 661.149219][T14241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.278555][T14470] bcachefs (loop5): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,nojournal_transaction_names [ 661.309750][T14470] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 661.394437][T14470] bcachefs (loop5): alloc_read... done [ 661.408516][T14470] bcachefs (loop5): stripes_read... done [ 661.415059][T14470] bcachefs (loop5): snapshots_read... done [ 661.425626][T14470] bcachefs (loop5): journal_replay... done [ 661.441291][T14470] bcachefs (loop5): resume_logged_ops... done [ 661.449173][T14470] bcachefs (loop5): going read-write [ 661.492240][T14470] bcachefs (loop5): done starting filesystem [ 661.509545][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 661.509562][ T29] audit: type=1326 audit(2390204402.191:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14502 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5ee67d0a9 code=0x0 [ 661.647079][T14241] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.683285][T14237] veth0_vlan: entered promiscuous mode [ 661.739752][ T5174] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.747115][ T5174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.764927][T14470] syz-executor.5 (14470) used greatest stack depth: 15376 bytes left [ 661.814315][ T9928] bcachefs (loop5): shutting down [ 661.819362][ T9928] bcachefs (loop5): going read-only [ 661.826894][T14237] veth1_vlan: entered promiscuous mode [ 661.832262][ T9928] bcachefs (loop5): finished waiting for writes to stop [ 661.855501][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.862702][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.874091][ T9928] bcachefs (loop5): flushing journal and stopping allocators, journal seq 12 [ 661.928021][ T9928] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 13 [ 661.954168][ T9928] bcachefs (loop5): shutdown complete, journal seq 14 [ 661.978059][ T9928] bcachefs (loop5): marking filesystem clean [ 662.057441][ T9928] bcachefs (loop5): shutdown complete [ 662.211750][T14237] veth0_macvtap: entered promiscuous mode [ 662.233063][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805a79d400: rx timeout, send abort [ 662.245479][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802c992400: rx timeout, send abort [ 662.254509][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805a79d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 662.256304][T14237] veth1_macvtap: entered promiscuous mode [ 662.271057][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802c992400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 662.411056][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.503521][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.547915][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.582883][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.620713][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.647078][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.659043][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.680096][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.694573][T14237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.714205][T14233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.770872][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.820007][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.836927][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.859737][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.891325][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.921275][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.961985][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.979262][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.992976][T14237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.007782][T14237] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.016674][T14237] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.025697][T14237] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.044526][T14237] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.196786][T14241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.474525][ T5289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.502019][ T5289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.526301][T14535] 9pnet: p9_errstr2errno: server reported unknown error _exclusive [ 663.738739][T14241] veth0_vlan: entered promiscuous mode [ 663.759864][ T5289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.798930][ T5289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.819839][T14538] loop5: detected capacity change from 0 to 1024 [ 663.851240][T14233] veth0_vlan: entered promiscuous mode [ 663.878621][T14233] veth1_vlan: entered promiscuous mode [ 663.958297][T14241] veth1_vlan: entered promiscuous mode [ 664.126490][T14241] veth0_macvtap: entered promiscuous mode [ 664.176559][T14241] veth1_macvtap: entered promiscuous mode [ 664.269641][T14233] veth0_macvtap: entered promiscuous mode [ 664.354102][T14233] veth1_macvtap: entered promiscuous mode [ 664.388411][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.456217][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.490782][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.537427][T11967] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 664.571846][T11967] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 664.582012][T11967] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 664.593882][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.604658][T14556] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 664.609976][T11967] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 664.822509][T11967] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 664.830261][T11967] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 664.854556][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.080022][T11967] Bluetooth: hci3: command tx timeout [ 669.340470][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.365048][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.391490][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.401743][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.416041][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.428687][T14241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.507486][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.547811][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.569020][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.579604][T14564] loop3: detected capacity change from 0 to 64 [ 669.580067][ T29] audit: type=1326 audit(2390204410.261:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73aee7d0a9 code=0x0 [ 669.616585][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.627707][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.642489][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.652487][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.669348][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.681918][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 669.699960][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.747415][T14241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.817493][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.847344][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.873455][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.884808][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.895589][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.910526][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.933817][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.945075][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.955132][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.966025][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.012949][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.027907][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.043548][T14233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.089855][T14241] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.100853][T14241] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.109887][T14241] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.120732][T14241] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.186389][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.211993][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.244719][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.275875][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.296285][T14571] 9pnet: p9_errstr2errno: server reported unknown error _exclusive [ 670.300210][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.345248][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.388323][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.422455][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.467458][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.510219][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.530210][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.575316][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.595692][T14233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.678171][T14233] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.695015][T14578] loop5: detected capacity change from 0 to 1024 [ 670.710251][T14233] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.718965][T14233] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.746353][T14233] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.817079][T14582] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 671.121051][ T5120] Bluetooth: hci3: command tx timeout [ 671.124630][T14594] loop5: detected capacity change from 0 to 1024 [ 671.134832][T14594] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 671.171543][T14595] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 671.224631][T14594] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 671.233415][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.251480][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.287301][T14594] EXT4-fs (loop5): orphan cleanup on readonly fs [ 671.304597][T14594] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=2 [ 671.318455][T14594] EXT4-fs warning (device loop5): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 671.343110][T14594] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 671.369120][T14594] EXT4-fs (loop5): 1 truncate cleaned up [ 671.387346][T14594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 671.422709][ T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.459376][ T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.599390][ T9928] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.656848][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.685958][T14552] chnl_net:caif_netlink_parms(): no params data found [ 671.705647][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.776093][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.827063][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.918584][T14604] loop5: detected capacity change from 0 to 64 [ 672.219212][T14607] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 672.319466][T14607] loop3: detected capacity change from 0 to 256 [ 672.698830][T14630] loop3: detected capacity change from 0 to 8 [ 672.723902][T14552] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.754454][T14552] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.774304][T14552] bridge_slave_0: entered allmulticast mode [ 672.859808][T14552] bridge_slave_0: entered promiscuous mode [ 673.230132][ T5120] Bluetooth: hci3: command tx timeout [ 674.982639][T14552] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.020721][T14552] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.027963][T14552] bridge_slave_1: entered allmulticast mode [ 675.051515][T14552] bridge_slave_1: entered promiscuous mode [ 675.259375][T14552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.283310][ T5120] Bluetooth: hci3: command tx timeout [ 675.335706][T14552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.367173][T14662] loop4: detected capacity change from 0 to 128 [ 675.406592][T14662] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 675.443413][T14662] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 675.605134][T14552] team0: Port device team_slave_0 added [ 675.658583][T14552] team0: Port device team_slave_1 added [ 675.677944][T14668] loop5: detected capacity change from 0 to 2048 [ 675.764010][T14673] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 675.865695][T14552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.900708][T14552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.981214][T14552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.002845][T14668] 9pnet_fd: Insufficient options for proto=fd [ 676.017871][T14552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.060371][T14552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.111297][T14552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.169439][T14683] loop4: detected capacity change from 0 to 2048 [ 676.206248][T14683] EXT4-fs: Ignoring removed mblk_io_submit option [ 676.233748][T14683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.311134][ T29] audit: type=1800 audit(2390204417.001:1076): pid=14683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 676.332936][T14694] loop2: detected capacity change from 0 to 64 [ 676.362977][T14693] loop5: detected capacity change from 0 to 8 [ 676.375953][T14683] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 234: padding at end of block bitmap is not set [ 676.393568][ T29] audit: type=1800 audit(2390204417.001:1077): pid=14683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 676.426233][T14552] hsr_slave_0: entered promiscuous mode [ 676.445537][T14683] EXT4-fs (loop4): Remounting filesystem read-only [ 676.460087][T14552] hsr_slave_1: entered promiscuous mode [ 676.482219][T14233] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.878739][T14714] loop4: detected capacity change from 0 to 2048 [ 676.992834][T14716] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 677.093264][T14709] loop3: detected capacity change from 0 to 32768 [ 677.164435][T14714] 9pnet_fd: Insufficient options for proto=fd [ 677.193487][T14709] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 677.207334][T14709] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 677.287118][T14709] bcachefs (loop3): alloc_read... done [ 677.292818][T14709] bcachefs (loop3): stripes_read... done [ 677.298511][T14709] bcachefs (loop3): snapshots_read... done [ 677.307465][T14709] bcachefs (loop3): journal_replay... done [ 677.313492][T14709] bcachefs (loop3): resume_logged_ops... done [ 677.319668][T14709] bcachefs (loop3): going read-write [ 677.345507][T14709] bcachefs (loop3): done starting filesystem [ 677.438908][ T29] audit: type=1804 audit(2390204418.121:1078): pid=14709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3589987268/syzkaller.d11iJ1/363/file0/bus" dev="loop3" ino=4098 res=1 errno=0 [ 677.455236][T14552] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.600267][ T29] audit: type=1804 audit(2390204418.281:1079): pid=14738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3589987268/syzkaller.d11iJ1/363/file0/bus" dev="loop3" ino=4098 res=1 errno=0 [ 677.635058][T14709] syz-executor.3 (14709) used greatest stack depth: 14200 bytes left [ 677.666407][ T29] audit: type=1804 audit(2390204418.311:1080): pid=14709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3589987268/syzkaller.d11iJ1/363/file0/bus" dev="loop3" ino=4098 res=1 errno=0 [ 677.749679][ T8706] bcachefs (loop3): shutting down [ 677.755127][ T8706] bcachefs (loop3): going read-only [ 677.763351][ T8706] bcachefs (loop3): finished waiting for writes to stop [ 677.781057][ T8706] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 677.806088][ T8706] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13 [ 677.818196][T14745] loop5: detected capacity change from 0 to 512 [ 677.819147][T14552] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.836547][ T8706] bcachefs (loop3): shutdown complete, journal seq 14 [ 677.837162][T14746] loop4: detected capacity change from 0 to 8 [ 677.853738][ T8706] bcachefs (loop3): marking filesystem clean [ 677.923755][T14745] Bluetooth: MGMT ver 1.22 [ 677.934407][ T8706] bcachefs (loop3): shutdown complete [ 678.085789][T14552] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.402596][T14552] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.471096][T14761] loop1: detected capacity change from 0 to 1024 [ 678.593863][T14765] loop2: detected capacity change from 0 to 2048 [ 678.691578][T14765] NILFS (loop2): invalid segment: Checksum error in segment payload [ 678.699580][T14765] NILFS (loop2): trying rollback from an earlier position [ 678.763690][T14767] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 678.763944][T14765] NILFS (loop2): recovery complete [ 678.834727][T14768] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 678.899297][T14552] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 678.949818][T14552] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 678.962675][ T29] audit: type=1800 audit(2390204419.651:1081): pid=14765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 679.055132][T14552] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 679.082849][ T29] audit: type=1800 audit(2390204419.731:1082): pid=14771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=12 res=0 errno=0 [ 679.133735][T14552] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 679.386381][T14775] loop4: detected capacity change from 0 to 128 [ 679.424036][T14775] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 679.446091][T14775] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 679.458805][T14755] loop5: detected capacity change from 0 to 32768 [ 679.598108][T14755] XFS (loop5): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 679.626339][T14552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.776172][T14789] loop1: detected capacity change from 0 to 8 [ 679.798715][T14552] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.815565][ T5197] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.822795][ T5197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.846696][ T5197] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.851772][T14755] XFS (loop5): Ending clean mount [ 679.853887][ T5197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.940852][ T9928] XFS (loop5): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 680.021826][T14795] loop2: detected capacity change from 0 to 1024 [ 680.076539][T14795] hfsplus: bad catalog entry type [ 680.188611][ T1262] hfsplus: b-tree write err: -5, ino 4 [ 680.464905][T14805] loop4: detected capacity change from 0 to 256 [ 680.596154][T14805] FAT-fs (loop4): Directory bread(block 64) failed [ 680.684188][T14805] FAT-fs (loop4): Directory bread(block 65) failed [ 680.733999][T14805] FAT-fs (loop4): Directory bread(block 66) failed [ 680.784606][T14805] FAT-fs (loop4): Directory bread(block 67) failed [ 680.847693][T14805] FAT-fs (loop4): Directory bread(block 68) failed [ 680.900094][T14805] FAT-fs (loop4): Directory bread(block 69) failed [ 680.948659][T14805] FAT-fs (loop4): Directory bread(block 70) failed [ 680.990613][ T29] audit: type=1800 audit(2390204421.571:1083): pid=14815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1962 res=0 errno=0 [ 681.048915][T14805] FAT-fs (loop4): Directory bread(block 71) failed [ 681.063329][T14819] loop2: detected capacity change from 0 to 128 [ 681.108350][ T29] audit: type=1800 audit(2390204421.621:1084): pid=14815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1962 res=0 errno=0 [ 681.112042][T14805] FAT-fs (loop4): Directory bread(block 72) failed [ 681.150785][T14819] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 681.185545][T14552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.201855][T14819] UDF-fs: warning (device loop2): udf_fill_super: No fileset found [ 681.220797][T14805] FAT-fs (loop4): Directory bread(block 73) failed [ 681.330461][T14552] veth0_vlan: entered promiscuous mode [ 681.349672][T14821] loop1: detected capacity change from 0 to 2048 [ 681.387760][T14552] veth1_vlan: entered promiscuous mode [ 681.434940][T14821] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 681.453040][T14821] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 681.501540][T14829] loop3: detected capacity change from 0 to 256 [ 681.538769][T14826] 9pnet: p9_errstr2errno: server reported unknown error _exclusive [ 681.544075][T14552] veth0_macvtap: entered promiscuous mode [ 681.578744][T14829] exFAT-fs (loop3): bogus fat length [ 681.591196][T14829] exFAT-fs (loop3): failed to read boot sector [ 681.598347][T14552] veth1_macvtap: entered promiscuous mode [ 681.612097][T14829] exFAT-fs (loop3): failed to recognize exfat type [ 681.708302][T14552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.960581][T14552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.804361][T14552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.817596][T14552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.831650][T14552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.857839][T14839] loop5: detected capacity change from 0 to 1024 [ 682.862489][T14552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.910616][T14839] hfsplus: bad catalog entry type [ 682.925888][T14552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.955192][ T29] audit: type=1800 audit(2390204423.631:1085): pid=14843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 682.956291][T14552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.003844][T14552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.020160][T14552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.039756][T14552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.060657][T14552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.078435][T14552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.091575][T14552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.122404][ T987] hfsplus: b-tree write err: -5, ino 4 [ 683.159321][T14552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.201709][T14552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.249298][T14552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.268019][T14552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.288476][T14552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.322860][T14552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.347817][T14552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.372176][T14841] loop4: detected capacity change from 0 to 32768 [ 683.375924][T14552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.399635][T14552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.419723][T14552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.439698][T14552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.456799][T14852] loop3: detected capacity change from 0 to 128 [ 683.466943][T14841] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (14841) [ 683.491601][T14552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.520217][T14852] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 683.539484][T14552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.560439][T14852] FAT-fs (loop3): Filesystem has been set read-only [ 683.567596][T14552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.601990][T14552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.637266][T14552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.648173][T14841] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 683.668171][T14841] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 683.679784][T14841] BTRFS info (device loop4): using free-space-tree [ 683.685955][ T8706] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 684.022147][T14552] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.354348][T14552] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.397854][T14552] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.430583][T14552] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.575133][ T29] audit: type=1804 audit(2390204425.261:1086): pid=14872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2765270070/syzkaller.AbPrad/20/file1/bus" dev="loop4" ino=263 res=1 errno=0 [ 684.763151][T14880] loop3: detected capacity change from 0 to 128 [ 684.857152][ T5289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.890879][ T5289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.957199][T14233] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 684.981947][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.992599][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.135910][T14888] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 685.231727][T14895] [U] ^R [ 685.294921][T14888] team0: Failed to send options change via netlink (err -105) [ 685.373286][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.380676][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.397279][T14888] team0: Port device netdevsim0 added [ 685.449621][T14893] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 686.134925][ T29] audit: type=1326 audit(2390204426.661:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14894 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33d47d0a9 code=0x7ffc0000 [ 686.483875][ T29] audit: type=1326 audit(2390204426.661:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14894 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33d47d0a9 code=0x7ffc0000 [ 686.715210][ T29] audit: type=1326 audit(2390204426.661:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14894 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa33d47d0a9 code=0x7ffc0000 [ 686.746840][ T29] audit: type=1326 audit(2390204426.661:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14894 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33d47d0a9 code=0x7ffc0000 [ 686.793071][ T29] audit: type=1326 audit(2390204426.661:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14894 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33d47d0a9 code=0x7ffc0000 [ 686.829563][ T29] audit: type=1326 audit(2390204426.671:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14894 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa33d47d0a9 code=0x7ffc0000 [ 686.855788][ T29] audit: type=1326 audit(2390204426.671:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14894 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33d47d0a9 code=0x7ffc0000 [ 686.995564][ T29] audit: type=1326 audit(2390204426.671:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14894 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33d47d0a9 code=0x7ffc0000 [ 688.053724][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 688.053745][ T29] audit: type=1326 audit(2390204428.741:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14928 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73aee7d0a9 code=0x0 [ 688.437120][T14946] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 688.520342][ T5197] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 688.536256][T14950] loop2: detected capacity change from 0 to 512 [ 688.616059][T14950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.711763][ T5197] usb 5-1: Using ep0 maxpacket: 32 [ 688.724869][ T5197] usb 5-1: config 0 has an invalid interface number: 37 but max is 2 [ 688.740254][ T5197] usb 5-1: config 0 has an invalid interface number: 14 but max is 2 [ 688.750511][ T5197] usb 5-1: config 0 has no interface number 1 [ 688.757645][ T5197] usb 5-1: config 0 has no interface number 2 [ 688.764622][ T5197] usb 5-1: config 0 interface 0 has no altsetting 0 [ 688.774399][ T5197] usb 5-1: New USB device found, idVendor=0403, idProduct=ff3c, bcdDevice=cd.a0 [ 688.788702][ T5197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.807765][ T5197] usb 5-1: Product: syz [ 688.818542][ T5197] usb 5-1: Manufacturer: syz [ 688.832215][ T5197] usb 5-1: SerialNumber: syz [ 688.852621][ T5197] usb 5-1: config 0 descriptor?? [ 688.868512][ T5197] ftdi_sio 5-1:0.37: FTDI USB Serial Device converter detected [ 688.932769][ T5197] ftdi_sio ttyUSB0: unknown device type: 0xcda0 [ 688.986373][ T5197] ftdi_sio 5-1:0.14: FTDI USB Serial Device converter detected [ 689.026954][ T5197] ftdi_sio ttyUSB1: unknown device type: 0xcda0 [ 689.064190][ T5197] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 689.111570][ T5197] ftdi_sio ttyUSB2: unknown device type: 0xcda0 [ 689.150335][ T5197] usb 5-1: USB disconnect, device number 13 [ 689.162073][ T5197] ftdi_sio 5-1:0.37: device disconnected [ 689.169893][ T5197] ftdi_sio 5-1:0.14: device disconnected [ 689.194410][T14237] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.244712][T14925] loop3: detected capacity change from 0 to 32768 [ 689.254660][T14925] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (14925) [ 689.268697][ T5197] ftdi_sio 5-1:0.0: device disconnected [ 689.309956][T14925] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 689.344578][T14925] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 689.377398][T14925] BTRFS info (device loop3): using free-space-tree [ 689.452987][T14972] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 689.494424][T14980] loop5: detected capacity change from 0 to 256 [ 689.542190][T14980] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 689.770542][ T29] audit: type=1804 audit(2390204430.441:1109): pid=14925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3589987268/syzkaller.d11iJ1/377/file1/bus" dev="loop3" ino=263 res=1 errno=0 [ 689.920105][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 690.030942][ T8706] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 690.072585][T14958] loop1: detected capacity change from 0 to 32768 [ 690.074957][T14958] XFS: attr2 mount option is deprecated. [ 690.112864][T14958] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 690.141470][T14958] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 690.148347][T15013] loop5: detected capacity change from 0 to 128 [ 690.362638][T14958] XFS (loop1): Ending clean mount [ 690.394463][T14958] XFS (loop1): Quotacheck needed: Please wait. [ 690.542132][T14958] XFS (loop1): Quotacheck: Done. [ 690.693642][T14241] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 691.815960][T15039] loop5: detected capacity change from 0 to 4096 [ 691.922092][T15039] NILFS (loop5): invalid segment: Checksum error in segment payload [ 691.980799][T15039] NILFS (loop5): trying rollback from an earlier position [ 692.042188][T15040] loop2: detected capacity change from 0 to 40427 [ 692.051377][T15040] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 692.060149][T15040] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 692.102649][T15039] NILFS (loop5): recovery complete [ 692.118167][T15040] F2FS-fs (loop2): Found nat_bits in checkpoint [ 692.173176][T15048] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 692.216390][T15040] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 692.228185][T15040] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 692.260367][T15038] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 692.276135][T15038] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 692.619517][T15058] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 693.875885][T15066] loop4: detected capacity change from 0 to 2048 [ 694.057505][T15066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 695.280405][T15081] fuse: root generation should be zero [ 695.356125][T14233] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.417278][T15068] loop1: detected capacity change from 0 to 32768 [ 695.426544][T15068] XFS: attr2 mount option is deprecated. [ 695.510646][T15068] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 695.567311][T15068] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 695.772820][T15068] XFS (loop1): Ending clean mount [ 695.778862][T15111] IPVS: Unknown mcast interface: [ 695.841586][T15068] XFS (loop1): Quotacheck needed: Please wait. [ 695.903857][T15114] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 696.128786][T15068] XFS (loop1): Quotacheck: Done. [ 696.205000][T15130] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 696.243100][T14241] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 696.260873][T15132] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.5'. [ 696.840482][T15142] loop4: detected capacity change from 0 to 2048 [ 697.005341][T15142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 697.144917][T15151] IPVS: Unknown mcast interface: [ 697.353641][T15160] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 697.501819][T15165] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 697.683116][T14233] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.168341][T15192] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 698.198425][T15192] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 698.325418][ T29] audit: type=1326 audit(698.284:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73aee7d0a9 code=0x7ffc0000 [ 699.877721][ T29] audit: type=1326 audit(698.334:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73aee7d0a9 code=0x7ffc0000 [ 699.887933][T15200] loop3: detected capacity change from 0 to 256 [ 700.130096][T15200] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 700.160811][ T29] audit: type=1326 audit(698.494:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73aee7d0a9 code=0x7ffc0000 [ 700.238705][ T29] audit: type=1326 audit(698.494:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73aee7d0a9 code=0x7ffc0000 [ 700.270311][ T29] audit: type=1326 audit(698.524:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f73aee7a827 code=0x7ffc0000 [ 700.323647][T15200] loop3: detected capacity change from 0 to 8 [ 700.350551][T15200] unable to read xattr id index table [ 700.357822][ T29] audit: type=1326 audit(698.524:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73aee404e9 code=0x7ffc0000 [ 700.413704][ T29] audit: type=1326 audit(698.554:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73aee7d0a9 code=0x7ffc0000 [ 700.504520][T15212] loop5: detected capacity change from 0 to 128 [ 700.522829][ T29] audit: type=1326 audit(698.584:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f73aee7a827 code=0x7ffc0000 [ 700.610083][T15212] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 700.625602][ T29] audit: type=1326 audit(698.584:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73aee404e9 code=0x7ffc0000 [ 700.820416][ T29] audit: type=1326 audit(698.604:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73aee7d0a9 code=0x7ffc0000 [ 700.958137][ T9928] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 701.310618][T15231] loop5: detected capacity change from 0 to 256 [ 701.383940][T15231] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 701.874526][T15256] loop5: detected capacity change from 0 to 128 [ 701.982324][T15256] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 702.265322][ T9928] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 702.339249][T15270] loop3: detected capacity change from 0 to 2048 [ 702.422020][T15273] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 702.437923][T15270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 702.615667][T15280] loop5: detected capacity change from 0 to 4096 [ 702.631779][T11967] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 702.646283][T11967] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 702.654905][T11967] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 702.664345][T11967] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 702.672351][T11967] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 702.679842][T11967] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 702.798907][T15280] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 703.333879][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 703.333902][ T29] audit: type=1800 audit(703.296:1141): pid=15288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 703.387123][T15291] ieee802154 phy0 wpan0: encryption failed: -90 [ 703.675010][ T8706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.797545][ T5289] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.035247][T15312] syz-executor.5[15312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 704.035415][T15312] syz-executor.5[15312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 704.053331][T15306] usb usb8: usbfs: process 15306 (syz-executor.2) did not claim interface 0 before use [ 704.167456][ T5289] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.467761][ T5289] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.523946][T15300] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 704.541505][T15313] pim6reg1: entered promiscuous mode [ 704.547851][T15313] pim6reg1: entered allmulticast mode [ 704.584819][T15305] pim6reg1: left promiscuous mode [ 704.624184][T15316] pim6reg1: left allmulticast mode [ 704.716547][T15335] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 704.729803][T11967] Bluetooth: hci6: command tx timeout [ 704.756394][ T5289] team0: Port device netdevsim0 removed [ 704.776888][ T5289] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.836181][T15331] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 705.012597][T15342] loop4: detected capacity change from 0 to 2048 [ 705.044352][T15344] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 705.078924][T15342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.094633][T15344] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.0'. [ 705.969891][ T29] audit: type=1326 audit(705.929:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15356 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33d47d0a9 code=0x7ffc0000 [ 705.992298][ C0] vkms_vblank_simulate: vblank timer overrun [ 706.037243][T15282] chnl_net:caif_netlink_parms(): no params data found [ 706.129125][ T29] audit: type=1326 audit(705.929:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15356 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33d47d0a9 code=0x7ffc0000 [ 706.176185][ T5289] bridge_slave_1: left allmulticast mode [ 706.200397][ T5289] bridge_slave_1: left promiscuous mode [ 706.271757][ T29] audit: type=1326 audit(705.959:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15356 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa33d47d0a9 code=0x7ffc0000 [ 706.294594][ T29] audit: type=1326 audit(705.969:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15356 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33d47d0a9 code=0x7ffc0000 [ 706.325148][ T29] audit: type=1326 audit(705.969:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15356 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33d47d0a9 code=0x7ffc0000 [ 706.335961][T14233] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.352014][ T29] audit: type=1326 audit(705.969:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15356 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa33d47d0a9 code=0x7ffc0000 [ 706.363380][ T5289] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.388900][ T29] audit: type=1326 audit(705.969:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15356 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33d47d0a9 code=0x7ffc0000 [ 706.411804][ T29] audit: type=1326 audit(705.969:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15356 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa33d47a827 code=0x7ffc0000 [ 706.435719][ T29] audit: type=1326 audit(705.969:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15356 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa33d4404e9 code=0x7ffc0000 [ 706.501965][ T5289] bridge_slave_0: left allmulticast mode [ 706.509532][ T5289] bridge_slave_0: left promiscuous mode [ 706.521243][ T5289] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.666083][T15372] loop4: detected capacity change from 0 to 16 [ 706.719315][T15372] erofs: (device loop4): mounted with root inode @ nid 36. [ 706.809904][T11967] Bluetooth: hci6: command tx timeout [ 706.913320][T15371] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 707.074429][T15379] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 708.811764][T15387] syz-executor.0 uses old SIOCAX25GETINFO [ 708.867283][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 708.867305][ T29] audit: type=1326 audit(708.829:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd536e7d0a9 code=0x7ffc0000 [ 708.897217][T11967] Bluetooth: hci6: command tx timeout [ 708.958759][ T29] audit: type=1326 audit(708.829:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd536e7d0a9 code=0x7ffc0000 [ 708.982115][ T29] audit: type=1326 audit(708.899:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd536e7d0a9 code=0x7ffc0000 [ 709.005824][ T29] audit: type=1326 audit(708.899:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd536e7d0a9 code=0x7ffc0000 [ 709.032225][ T29] audit: type=1326 audit(708.899:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd536e7d0a9 code=0x7ffc0000 [ 709.074589][ T29] audit: type=1326 audit(708.919:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd536e7d0a9 code=0x7ffc0000 [ 709.111914][T15394] SET target dimension over the limit! [ 709.116958][ T29] audit: type=1326 audit(708.919:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd536e7d0a9 code=0x7ffc0000 [ 709.139678][ C0] vkms_vblank_simulate: vblank timer overrun [ 709.172615][ T29] audit: type=1326 audit(708.959:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd536e7d0a9 code=0x7ffc0000 [ 709.199197][ T29] audit: type=1326 audit(708.959:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd536e7d0a9 code=0x7ffc0000 [ 709.221539][ C0] vkms_vblank_simulate: vblank timer overrun [ 709.264392][ T29] audit: type=1326 audit(709.029:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd536e7d0a9 code=0x7ffc0000 [ 709.686374][T15406] loop2: detected capacity change from 0 to 2048 [ 709.768771][T15406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.862361][ T5289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.889576][ T5289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.907463][ T5289] bond0 (unregistering): Released all slaves [ 710.801886][T15426] input: syz1 as /devices/virtual/input/input15 [ 710.964980][T11967] Bluetooth: hci6: command tx timeout [ 710.982586][T15282] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.989782][T15282] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.004533][T14237] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.054843][T15282] bridge_slave_0: entered allmulticast mode [ 711.069444][T15282] bridge_slave_0: entered promiscuous mode [ 711.224979][T15439] Cannot find add_set index 0 as target [ 711.424577][T15282] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.441031][T15282] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.451026][T15282] bridge_slave_1: entered allmulticast mode [ 711.469872][T15282] bridge_slave_1: entered promiscuous mode [ 711.701349][ T5176] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 711.745910][T15282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.762774][T15282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.790636][T15454] usb usb8: usbfs: process 15454 (syz-executor.5) did not claim interface 0 before use [ 711.910624][ T5176] usb 1-1: Using ep0 maxpacket: 8 [ 711.937529][ T5176] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.985556][ T5176] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 712.019708][ T5176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.054369][ T5176] usb 1-1: config 0 descriptor?? [ 712.077879][ T5176] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 712.185144][T15282] team0: Port device team_slave_0 added [ 712.239260][T15464] loop3: detected capacity change from 0 to 64 [ 712.249715][T15282] team0: Port device team_slave_1 added [ 712.497404][T15282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.514290][ T5176] gspca_vc032x: reg_w err -71 [ 712.519091][ T5176] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 712.560636][T15282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.611190][ T5176] usb 1-1: USB disconnect, device number 14 [ 712.633449][T15282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.708396][ T5289] hsr_slave_0: left promiscuous mode [ 712.730833][ T5289] hsr_slave_1: left promiscuous mode [ 712.743225][ T5289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.755489][ T5289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.815101][ T5289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.845144][ T5289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.947177][ T5289] veth1_macvtap: left promiscuous mode [ 712.975179][ T5289] veth0_macvtap: left promiscuous mode [ 712.989422][ T5289] veth1_vlan: left promiscuous mode [ 713.010139][ T5289] veth0_vlan: left promiscuous mode [ 715.709072][ T5289] team0 (unregistering): Port device team_slave_1 removed [ 715.778590][ T5289] team0 (unregistering): Port device team_slave_0 removed [ 716.503982][T15282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.511199][T15282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.545268][T15282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.727416][T15511] delete_channel: no stack [ 716.771439][T15510] delete_channel: no stack [ 716.848192][T15515] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 717.019633][T15282] hsr_slave_0: entered promiscuous mode [ 717.087232][T15282] hsr_slave_1: entered promiscuous mode [ 717.114704][T15282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 717.125383][T15282] Cannot create hsr debugfs directory [ 717.517763][T15538] loop3: detected capacity change from 0 to 64 [ 717.835687][T15550] delete_channel: no stack [ 717.871132][T15549] delete_channel: no stack [ 718.081313][T15556] loop2: detected capacity change from 0 to 1024 [ 718.125473][T15556] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 718.125473][T15556] [ 718.185929][T15556] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 718.195476][T15558] loop4: detected capacity change from 0 to 128 [ 720.467312][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 720.467336][ T29] audit: type=1804 audit(976.426:1316): pid=15571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1504025730/syzkaller.sVQlVr/53/file0" dev="sda1" ino=1959 res=1 errno=0 [ 720.553530][T15576] tipc: Can't bind to reserved service type 0 [ 720.695476][T15580] usb usb8: usbfs: process 15580 (syz-executor.4) did not claim interface 0 before use [ 720.713339][ T29] audit: type=1804 audit(1232.677:1317): pid=15582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1091253157/syzkaller.N0XtyP/357/file0" dev="sda1" ino=1971 res=1 errno=0 [ 720.717224][T15282] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 720.911622][T15282] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 721.004593][T15282] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 721.165367][T15282] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 721.286218][T15587] Cannot find add_set index 0 as target [ 721.564862][T15593] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 721.882807][T15282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.001824][T15282] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.109732][T15606] sp0: Synchronizing with TNC [ 722.122120][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.129388][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.261518][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.268790][ T5178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.891114][T15282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.109744][T15282] veth0_vlan: entered promiscuous mode [ 723.226475][T15282] veth1_vlan: entered promiscuous mode [ 723.380712][T15282] veth0_macvtap: entered promiscuous mode [ 723.401597][T15282] veth1_macvtap: entered promiscuous mode [ 723.460743][T15282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.471374][T15282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.481353][T15282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.492164][T15282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.502150][T15282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.525183][T15282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.538368][T15650] xt_hashlimit: max too large, truncated to 1048576 [ 723.570344][T15282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.576068][T15650] xt_hashlimit: overflow, try lower: 0/0 [ 723.618352][T15282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.640402][T15282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.677565][T15282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.012130][T15282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.230051][T15282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.473310][T15282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.540053][T15282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.606741][T15282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.703207][T15282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.705931][ T29] audit: type=1326 audit(1236.677:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15670 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd536e7d0a9 code=0x0 [ 724.736396][T15282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.777290][T15282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.808984][T15282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.842526][T15282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.929758][T15282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.958976][T15282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.020421][T15282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.081234][T15282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.150228][T15282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.738305][T15282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.964685][T15282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.974663][T15282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.991136][T15282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.025886][T15282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.064633][T15282] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.130321][T15282] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.139088][T15282] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.190328][T15282] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.652580][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 727.801331][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.830472][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.894428][T15700] delete_channel: no stack [ 727.952767][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.971236][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.064921][T15725] loop5: detected capacity change from 0 to 1024 [ 728.194613][T15725] hfsplus: invalid btree flag [ 728.230321][T15725] hfsplus: failed to load catalog file [ 729.172393][T15750] loop5: detected capacity change from 0 to 4096 [ 729.495744][T15750] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 729.851538][T15750] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 729.898328][T15750] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 730.080221][ T29] audit: type=1800 audit(1242.047:1319): pid=15766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1958 res=0 errno=0 [ 730.211853][T15765] loop4: detected capacity change from 0 to 2048 [ 730.268278][T15765] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 730.328326][T15765] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 731.058606][T15765] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 731.286085][T15774] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 731.513477][ T5120] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 731.531954][ T5120] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 731.543274][ T5120] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 731.556167][ T5120] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 731.564780][ T5120] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 731.576216][ T5120] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 731.845378][ T1262] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.275695][ T1262] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.550828][ T5174] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 732.558394][ T1262] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.805693][ T5174] usb 6-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 732.809558][ T1262] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.852375][ T5174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.911125][ T5174] usb 6-1: config 0 descriptor?? [ 733.281911][T15790] loop4: detected capacity change from 0 to 32768 [ 733.415576][ T1262] bridge_slave_1: left allmulticast mode [ 733.423096][T15817] loop3: detected capacity change from 0 to 2048 [ 733.446224][ T1262] bridge_slave_1: left promiscuous mode [ 733.452892][ T1262] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.463415][ T1262] bridge_slave_0: left allmulticast mode [ 733.469871][ T1262] bridge_slave_0: left promiscuous mode [ 733.472474][T15817] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 733.476549][ T1262] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.526345][T15817] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 733.582631][T15830] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 733.593538][T15817] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 733.676130][T15790] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 733.704688][ T5120] Bluetooth: hci6: command tx timeout [ 733.736519][T15790] bcachefs (loop4): recovering from clean shutdown, journal seq 7 [ 733.892593][T15790] bcachefs (loop4): alloc_read... done [ 733.899216][T15790] bcachefs (loop4): stripes_read... done [ 733.950227][T15790] bcachefs (loop4): snapshots_read... done [ 733.973388][T15790] bcachefs (loop4): journal_replay... done [ 733.981553][T15790] bcachefs (loop4): resume_logged_ops... done [ 734.022167][T15790] bcachefs (loop4): going read-write [ 734.066356][T15790] bcachefs (loop4): done starting filesystem [ 734.473553][ T29] audit: type=1800 audit(1246.437:1320): pid=15838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=4101 res=0 errno=0 [ 734.620521][ C0] vkms_vblank_simulate: vblank timer overrun [ 734.851600][T15833] delete_channel: no stack [ 735.080692][ T1262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.097709][ T1262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.126519][ T1262] bond0 (unregistering): Released all slaves [ 735.287751][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 735.354120][ T5174] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 735.394911][ T5174] asix 6-1:0.0: probe with driver asix failed with error -71 [ 735.413227][T15840] netlink: 'syz-executor.2': attribute type 64 has an invalid length. [ 735.459423][ T5174] usb 6-1: USB disconnect, device number 13 [ 735.530651][ T29] audit: type=1326 audit(1247.487:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15841 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73aee7d0a9 code=0x0 [ 735.552606][ C0] vkms_vblank_simulate: vblank timer overrun [ 735.762716][T11967] Bluetooth: hci6: command tx timeout [ 735.768656][T14233] bcachefs (loop4): shutting down [ 735.903614][T14233] bcachefs (loop4): going read-only [ 735.916391][T14233] bcachefs (loop4): finished waiting for writes to stop [ 736.092251][ T5120] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 736.108203][ T5120] Bluetooth: hci3: Injecting HCI hardware error event [ 736.119554][T11967] Bluetooth: hci3: hardware error 0x00 [ 737.842441][ T5120] Bluetooth: hci6: command tx timeout [ 738.371151][T14233] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12 [ 738.434328][T14233] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 14 [ 738.465457][T14233] bcachefs (loop4): shutdown complete, journal seq 15 [ 738.479603][T14233] bcachefs (loop4): marking filesystem clean [ 738.606978][T14233] bcachefs (loop4): shutdown complete [ 738.793993][T15861] loop2: detected capacity change from 0 to 8192 [ 739.462876][T15777] chnl_net:caif_netlink_parms(): no params data found [ 739.753941][ T1262] hsr_slave_0: left promiscuous mode [ 739.791950][ T1262] hsr_slave_1: left promiscuous mode [ 739.839223][ T1262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.847162][ T1262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.884164][ T1262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.902908][ T1262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.920926][ T5120] Bluetooth: hci6: command tx timeout [ 740.033339][ T1262] veth1_macvtap: left promiscuous mode [ 740.038930][ T1262] veth0_macvtap: left promiscuous mode [ 740.049682][ T1262] veth1_vlan: left promiscuous mode [ 740.116029][ T1262] veth0_vlan: left promiscuous mode [ 740.330271][T11967] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 740.411087][ T5331] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 740.649526][ T5331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 740.694447][ T5331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 740.742696][ T5331] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 740.806710][ T5331] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 740.841605][ T5331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.881717][ T5331] usb 6-1: config 0 descriptor?? [ 740.888545][T15894] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 741.359700][ T5331] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 741.382808][ T5331] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 741.399545][ T5331] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 741.423385][ T5331] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 741.431037][ T5331] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 741.460063][ T5331] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 741.467783][ T5331] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 741.475518][ T5331] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 741.501978][ T5331] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 741.509555][ T5331] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 741.532138][ T29] audit: type=1326 audit(1253.507:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f73aee7a827 code=0x0 [ 741.554418][ T5331] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 741.568403][ T5331] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 741.576020][ T5331] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 741.590868][ T5331] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 741.598463][ T5331] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 741.612271][ T5331] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 741.634748][ T5331] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 742.005712][ T1262] team0 (unregistering): Port device team_slave_1 removed [ 742.073833][ T1262] team0 (unregistering): Port device team_slave_0 removed [ 742.796963][T15888] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 743.245363][ T25] usb 6-1: USB disconnect, device number 14 [ 744.198149][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 744.217376][T15777] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.262030][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 744.269477][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x2 [ 744.290479][T15777] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.297854][T15777] bridge_slave_0: entered allmulticast mode [ 744.350508][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 744.360151][T15777] bridge_slave_0: entered promiscuous mode [ 744.378520][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 744.397767][T15777] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.414424][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 744.456546][T15777] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.465240][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 744.486160][T15777] bridge_slave_1: entered allmulticast mode [ 744.530953][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 744.538477][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 744.580653][T15777] bridge_slave_1: entered promiscuous mode [ 744.590281][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 744.617886][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 744.640764][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 744.648167][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 744.713138][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 744.726865][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 744.768171][T15777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.788337][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 744.812010][T15957] input: syz1 as /devices/virtual/input/input16 [ 744.828857][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 744.841968][T15777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.851221][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 744.858620][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 744.928941][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 744.974634][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 744.999804][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 745.015514][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 745.029859][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 745.072914][T15777] team0: Port device team_slave_0 added [ 745.079554][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 745.098136][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 745.108776][T15777] team0: Port device team_slave_1 added [ 745.127307][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 745.155734][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 745.164723][T15961] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 745.177087][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 745.203523][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 745.245891][ T25] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 745.268016][T15777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.290654][T15777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.335920][ T29] audit: type=1804 audit(1257.307:1323): pid=15963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1091253157/syzkaller.N0XtyP/378/file0" dev="sda1" ino=1970 res=1 errno=0 [ 745.378265][T15777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.429174][T15777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.430856][T15935] loop2: detected capacity change from 0 to 32768 [ 745.452878][T15777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.497124][T15935] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (15935) [ 745.516923][T15777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.581470][T15935] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 745.591935][T15935] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 745.600730][T15935] BTRFS info (device loop2): using free-space-tree [ 745.834231][T15984] loop3: detected capacity change from 0 to 47 [ 745.881894][T15777] hsr_slave_0: entered promiscuous mode [ 745.919660][T15777] hsr_slave_1: entered promiscuous mode [ 745.929120][T15777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 745.941604][T15935] BTRFS warning (device loop2): this kernel does not support the compat:2 feature bit [ 745.962708][T15777] Cannot create hsr debugfs directory [ 746.083323][T14237] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 746.770141][T16003] ip6t_rpfilter: unknown options [ 746.803622][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.810198][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.867780][T16006] i2c i2c-0: Invalid block write size 33 [ 747.278593][T16019] loop4: detected capacity change from 0 to 47 [ 747.796348][T16000] loop3: detected capacity change from 0 to 32768 [ 747.818554][T16000] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (16000) [ 747.867023][T16000] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 747.911678][T16000] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 747.949485][T15777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 747.967674][T16000] BTRFS info (device loop3): using free-space-tree [ 748.000747][T16038] i2c i2c-0: Invalid block write size 33 [ 748.032441][T15777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 748.079283][T15777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 748.094138][T15777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 748.219477][T16000] BTRFS info (device loop3): checking UUID tree [ 748.259948][T16016] loop2: detected capacity change from 0 to 32768 [ 748.350679][T16016] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 748.372228][T16069] loop4: detected capacity change from 0 to 47 [ 748.536372][T16066] loop5: detected capacity change from 0 to 4096 [ 748.582735][T16075] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 748.632331][T16066] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 748.644473][ T8706] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 748.662889][T16066] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=12) [ 748.666921][T15777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.741393][T16016] XFS (loop2): Ending clean mount [ 748.750599][T16066] Remounting filesystem read-only [ 748.755959][T16066] NILFS (loop5): error -5 truncating bmap (ino=12) [ 748.804739][T15777] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.859275][ T5211] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.866609][ T5211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.922289][ T5211] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.929479][ T5211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.946671][ T9928] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 748.957873][ T9928] NILFS (loop5): discard dirty page: offset=0, ino=2 [ 748.989252][ T9928] NILFS (loop5): discard dirty block: blocknr=14, size=4096 [ 749.016723][ T9928] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 749.060302][ T9928] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 749.070615][ T9928] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 749.077588][ T9928] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 749.137433][ T9928] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 749.157414][ T9928] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 749.349007][T14237] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 749.869891][ T29] audit: type=1800 audit(1261.837:1324): pid=16055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1942 res=0 errno=0 [ 750.002717][T16095] xt_hashlimit: max too large, truncated to 1048576 [ 750.016894][T15777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.035180][T16095] xt_hashlimit: overflow, try lower: 0/0 [ 750.243213][T15777] veth0_vlan: entered promiscuous mode [ 750.310006][T15777] veth1_vlan: entered promiscuous mode [ 750.494511][T15777] veth0_macvtap: entered promiscuous mode [ 750.514018][T16055] overlay: ./bus is not a directory [ 750.536625][T15777] veth1_macvtap: entered promiscuous mode [ 750.653853][T15777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.695286][T15777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.750537][T15777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.798887][T15777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.830221][T15777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.858514][T16086] loop4: detected capacity change from 0 to 32768 [ 750.865354][T15777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.880225][T15777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.906124][T15777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.958082][T15777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.975138][T15777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.995808][T15777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.017957][T15777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.028095][T15777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.047686][T15777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.084891][T15777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.121304][T15777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.155057][T15777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.189680][T15777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.221037][T15777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.250610][T15777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.294198][T15777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.314613][T15777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.331206][T15777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.349212][T15777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.361111][T15777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.379667][T15777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.402974][T15777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.422252][T15777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.439755][T15777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.465477][T15777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.516406][T15777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.550255][T15777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.574965][T15777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.604454][T15777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.915092][T16114] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 752.036448][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.046496][T16114] loop2: detected capacity change from 0 to 512 [ 752.069916][T16114] EXT4-fs: Ignoring removed i_version option [ 752.077655][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.109441][T16114] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 752.155266][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.202780][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.260849][T16114] EXT4-fs (loop2): 1 truncate cleaned up [ 752.300006][T16114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.730350][T14237] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir1955339309/syzkaller.YrtbKj/96/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 752.759882][T14237] EXT4-fs error (device loop2): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 752.834985][T14237] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir1955339309/syzkaller.YrtbKj/96/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 752.919145][T14237] EXT4-fs error (device loop2): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 752.971696][T14237] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir1955339309/syzkaller.YrtbKj/96/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 753.059014][T14237] EXT4-fs error (device loop2): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 753.091298][T14237] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir1955339309/syzkaller.YrtbKj/96/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 753.142680][T14237] EXT4-fs error (device loop2): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 753.187707][T14237] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir1955339309/syzkaller.YrtbKj/96/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 753.224429][T14237] EXT4-fs error (device loop2): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 753.734434][ T29] audit: type=1800 audit(1265.707:1325): pid=16152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1969 res=0 errno=0 [ 756.051229][T14237] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.352016][ T5291] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.962323][ T5291] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.000417][ T58] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 757.082734][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 757.270618][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 757.314841][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.439572][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.492347][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 757.570519][ T58] usb 5-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00 [ 757.655471][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.760787][ T58] usb 5-1: config 0 descriptor?? [ 757.766081][ T25] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 757.772870][ T5291] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.793604][ T25] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 757.846378][ T25] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 757.894099][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.143200][ T5291] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.335558][T16197] loop1: detected capacity change from 0 to 32768 [ 758.386803][T16221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.492991][T16221] batadv_slave_0: entered allmulticast mode [ 758.517738][ T5124] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 758.531810][T16221] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 758.556032][ T5124] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 758.567042][ T5124] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 758.569395][T16197] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 758.569395][T16197] [ 758.617269][ T5124] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 758.644234][ T5124] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 758.652180][ T5124] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 758.681380][T16221] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 758.691092][T16221] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 758.710617][T16197] ERROR: (device loop1): remounting filesystem as read-only [ 758.760731][T16197] ERROR: (device loop1): jfs_rename: [ 758.760731][T16197] [ 758.957255][T15777] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 758.957255][T15777] [ 759.047069][ T5291] bridge_slave_1: left allmulticast mode [ 759.064736][ T5291] bridge_slave_1: left promiscuous mode [ 759.084211][ T5291] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.150773][ T5291] bridge_slave_0: left allmulticast mode [ 759.176087][ T5291] bridge_slave_0: left promiscuous mode [ 759.196111][ T5291] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.280828][ T5120] Bluetooth: hci1: command 0x0406 tx timeout [ 759.696620][ T5178] usb 4-1: USB disconnect, device number 16 [ 760.455913][ T5291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.468726][ T5291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.480577][ T5291] bond0 (unregistering): Released all slaves [ 760.653215][ T58] usbhid 5-1:0.0: can't add hid device: -71 [ 760.659268][ T58] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 760.681104][ T58] usb 5-1: USB disconnect, device number 14 [ 760.800706][T11967] Bluetooth: hci5: command tx timeout [ 760.888728][T16222] chnl_net:caif_netlink_parms(): no params data found [ 761.139024][T16222] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.149598][T16222] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.165432][T16222] bridge_slave_0: entered allmulticast mode [ 761.182376][T16222] bridge_slave_0: entered promiscuous mode [ 761.199951][ T5291] hsr_slave_0: left promiscuous mode [ 761.207527][ T5291] hsr_slave_1: left promiscuous mode [ 761.221109][ T5291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.228506][ T5291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.237591][ T5291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.245182][ T5291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.273866][ T5291] veth1_macvtap: left promiscuous mode [ 761.279403][ T5291] veth0_macvtap: left promiscuous mode [ 761.285714][ T5291] veth1_vlan: left promiscuous mode [ 761.291248][ T5291] veth0_vlan: left promiscuous mode [ 762.031492][ T5291] team0 (unregistering): Port device team_slave_1 removed [ 762.095326][ T5291] team0 (unregistering): Port device team_slave_0 removed [ 762.766204][T16222] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.773917][T16222] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.781387][T16222] bridge_slave_1: entered allmulticast mode [ 762.790573][T16222] bridge_slave_1: entered promiscuous mode [ 762.851447][T16222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.874918][T16222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.902187][T11967] Bluetooth: hci5: command tx timeout [ 762.979659][T16222] team0: Port device team_slave_0 added [ 762.990407][T16222] team0: Port device team_slave_1 added [ 763.043593][T16222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.053876][T16222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.081081][T16222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.096792][T16222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.103904][T16222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.132594][T16222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.193998][T16222] hsr_slave_0: entered promiscuous mode [ 763.201085][T16222] hsr_slave_1: entered promiscuous mode [ 763.207392][T16222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 763.215746][T16222] Cannot create hsr debugfs directory [ 763.609995][T16240] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.748189][T16245] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 763.780384][T16245] netlink: 9372 bytes leftover after parsing attributes in process `syz-executor.0'. [ 763.814120][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 763.853648][T16245] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'. [ 764.965863][T11967] Bluetooth: hci5: command tx timeout [ 765.004102][T16222] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 765.079176][T16222] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 765.160133][T16222] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 765.221816][T16222] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 765.557091][T16290] loop5: detected capacity change from 0 to 16 [ 765.589479][T16290] erofs: (device loop5): mounted with root inode @ nid 36. [ 765.904322][T16222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.028168][T16222] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.063663][T16283] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 766.096447][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.103624][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.115338][T16283] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 766.197218][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.204445][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.903603][T16283] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 766.909550][T16283] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 767.044409][T16279] loop3: detected capacity change from 0 to 40427 [ 767.049648][T11967] Bluetooth: hci5: command tx timeout [ 767.096673][T16279] F2FS-fs (loop3): Found nat_bits in checkpoint [ 767.252797][T16283] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 767.270757][T16222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 767.289490][T16283] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 767.310923][T16279] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 767.466004][ T8706] syz-executor.3: attempt to access beyond end of device [ 767.466004][ T8706] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 767.503656][ T8706] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 767.738090][T16316] loop4: detected capacity change from 0 to 512 [ 767.756221][T16316] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: e_name out of bounds [ 767.782635][T16316] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 767.802210][T16316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.887174][T16222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.977090][T16222] veth0_vlan: entered promiscuous mode [ 768.016168][T16222] veth1_vlan: entered promiscuous mode [ 768.145174][T16222] veth0_macvtap: entered promiscuous mode [ 768.171944][T16222] veth1_macvtap: entered promiscuous mode [ 768.209164][T16324] loop5: detected capacity change from 0 to 8192 [ 768.232727][T16222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.250806][ T29] audit: type=1804 audit(1280.217:1326): pid=16325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1091253157/syzkaller.N0XtyP/405/bus" dev="sda1" ino=1968 res=1 errno=0 [ 768.286023][T16222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.311558][T16222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.332991][T16222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.350359][T16222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.362745][T16222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.373515][T16222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.384021][T16222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.399466][T16222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.418213][T16222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.429055][T16222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.439983][T16222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.462120][T16222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.484477][T16324] loop5: p1 < > p2 p3 < p5 p6 > p4 [ 768.485329][T14233] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.490722][T16324] loop5: partition table partially beyond EOD, truncated [ 768.503669][T16222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.517581][T16222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.539367][T16222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.547052][T16324] loop5: p1 start 277760 is beyond EOD, [ 768.549863][T16222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.549890][T16222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.564156][T16324] truncated [ 768.577963][T16222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.589424][T16324] loop5: p2 start 6684676 is beyond EOD, truncated [ 768.591252][T16222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.611325][T16324] loop5: p5 start 6684676 is beyond EOD, truncated [ 768.616617][T16222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.627861][T16222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.644027][T16222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.654613][T16222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.668873][T16222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.686531][T16222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.697093][T16222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.708816][T16222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.728259][T16222] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.737420][T16222] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.746359][T16222] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.757560][T16222] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.920618][T16333] 9pnet: p9_errstr2errno: server reported unknown error [ 770.257139][T16351] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 771.822584][T16366] mmap: syz-executor.4 (16366): VmData 37388288 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 771.975532][T16368] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 772.010444][T16368] netlink: 9372 bytes leftover after parsing attributes in process `syz-executor.4'. [ 772.035242][T16368] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 772.060343][T16368] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.4'. [ 772.167324][T16361] loop3: detected capacity change from 0 to 32768 [ 772.179482][T16361] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (16361) [ 772.216823][T16370] loop4: detected capacity change from 0 to 512 [ 772.229422][T16361] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 772.240093][T16361] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 772.258497][T16361] BTRFS info (device loop3): using free-space-tree [ 772.293757][T16370] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 772.310870][T16370] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 772.346975][T16370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 772.439660][T14233] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.468127][ T29] audit: type=1800 audit(1284.437:1327): pid=16361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 772.528538][ T29] audit: type=1804 audit(1284.497:1328): pid=16392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3589987268/syzkaller.d11iJ1/455/file0/file1" dev="loop3" ino=260 res=1 errno=0 [ 772.556470][ T29] audit: type=1804 audit(1284.497:1329): pid=16361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3589987268/syzkaller.d11iJ1/455/file0/file1" dev="loop3" ino=260 res=1 errno=0 [ 772.582575][ T29] audit: type=1804 audit(1284.497:1330): pid=16361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3589987268/syzkaller.d11iJ1/455/file0/file1" dev="loop3" ino=260 res=1 errno=0 [ 772.698999][ T8706] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 773.091922][T16401] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 773.199272][T16405] loop3: detected capacity change from 0 to 256 [ 773.237060][ T29] audit: type=1800 audit(1285.207:1331): pid=16405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048859 res=0 errno=0 [ 773.536155][T16414] team_slave_0: entered promiscuous mode [ 773.542598][T16414] team_slave_1: entered promiscuous mode [ 773.549240][T16414] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 773.563294][T16414] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 773.593872][T16414] bond0: entered promiscuous mode [ 773.598968][T16414] bond_slave_0: entered promiscuous mode [ 773.604932][T16414] bond_slave_1: entered promiscuous mode [ 773.610954][T16414] macvlan2: entered promiscuous mode [ 773.616262][T16414] team0: entered promiscuous mode [ 773.964408][T16416] loop3: detected capacity change from 0 to 32768 [ 774.009076][T16416] jfs: Unrecognized mount option "0177777777777777777777700000000000000000000000Xcv:Q"Co"'ή_0-%+ t6P'k;/|%T9i(%Z@G~ͱ\%S:UVTOvO7MfOJjN"Bn]XZ [ 774.009076][T16416] o*e4bL*" or missing value [ 774.256639][T16418] loop3: detected capacity change from 0 to 1024 [ 808.246397][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.253144][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.690833][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.697188][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.292418][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.305383][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.319636][ T35] bond0 (unregistering): Released all slaves [ 875.335404][ T35] bond1 (unregistering): Released all slaves [ 915.120589][ T30] INFO: task kworker/1:9:5211 blocked for more than 143 seconds. [ 915.128380][ T30] Not tainted 6.10.0-rc4-syzkaller-00301-g5f583a3162ff #0 [ 915.136952][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 915.145665][ T30] task:kworker/1:9 state:D stack:19120 pid:5211 tgid:5211 ppid:2 flags:0x00004000 [ 915.155857][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 915.162776][ T30] Call Trace: [ 915.166326][ T30] 1970/01/01 00:23:47 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 915.169269][ T30] __schedule+0x17e8/0x4a20 [ 915.174048][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 915.205685][ T30] ? __pfx___schedule+0x10/0x10 [ 915.220245][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 915.226281][ T30] ? __pfx_lock_release+0x10/0x10 [ 915.236631][ T30] ? kick_pool+0x1bd/0x620 [ 915.246437][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 915.251822][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 915.257475][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 915.271793][ T30] ? schedule+0x90/0x320 [ 915.276075][ T30] schedule+0x14b/0x320 [ 915.280567][ T30] schedule_preempt_disabled+0x13/0x30 [ 915.286179][ T30] __mutex_lock+0x6a4/0xd70 [ 915.290825][ T30] ? __mutex_lock+0x527/0xd70 [ 915.295531][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 915.301886][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 915.306930][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 915.313010][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 915.319387][ T30] ? process_scheduled_works+0x945/0x1830 [ 915.325262][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 915.331431][ T30] ? process_scheduled_works+0x945/0x1830 [ 915.337177][ T30] process_scheduled_works+0xa2e/0x1830 [ 915.342884][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 915.348909][ T30] ? assign_work+0x364/0x3d0 [ 915.353597][ T30] worker_thread+0x86d/0xd70 [ 915.358234][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 915.364368][ T30] ? __kthread_parkme+0x169/0x1d0 [ 915.369432][ T30] ? __pfx_worker_thread+0x10/0x10 [ 915.374609][ T30] kthread+0x2f2/0x390 [ 915.378709][ T30] ? __pfx_worker_thread+0x10/0x10 [ 915.383943][ T30] ? __pfx_kthread+0x10/0x10 [ 915.388566][ T30] ret_from_fork+0x4d/0x80 [ 915.393233][ T30] ? __pfx_kthread+0x10/0x10 [ 915.397869][ T30] ret_from_fork_asm+0x1a/0x30 [ 915.402773][ T30] [ 915.405854][ T30] INFO: task syz-executor.2:16222 blocked for more than 143 seconds. [ 915.416482][ T30] Not tainted 6.10.0-rc4-syzkaller-00301-g5f583a3162ff #0 [ 915.424465][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 915.438184][ T30] task:syz-executor.2 state:D stack:20288 pid:16222 tgid:16222 ppid:1 flags:0x00000006 [ 915.460034][ T30] Call Trace: [ 915.463471][ T30] [ 915.466422][ T30] __schedule+0x17e8/0x4a20 [ 915.479994][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 915.485772][ T30] ? __pfx___schedule+0x10/0x10 [ 915.491131][ T30] ? __pfx_lock_release+0x10/0x10 [ 915.496186][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 915.510370][ T30] ? schedule+0x90/0x320 [ 915.514647][ T30] schedule+0x14b/0x320 [ 915.518825][ T30] schedule_preempt_disabled+0x13/0x30 [ 915.532651][ T30] __mutex_lock+0x6a4/0xd70 [ 915.537286][ T30] ? __mutex_lock+0x527/0xd70 [ 915.548388][ T30] ? rfkill_fop_open+0x131/0x850 [ 915.553621][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 915.558684][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 915.567158][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 915.572895][ T30] ? __init_waitqueue_head+0xae/0x150 [ 915.578298][ T30] rfkill_fop_open+0x131/0x850 [ 915.583294][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 915.588950][ T30] ? module_put+0x13a/0x2d0 [ 915.593547][ T30] ? __pfx_rfkill_fop_open+0x10/0x10 [ 915.598857][ T30] misc_open+0x315/0x390 [ 915.603388][ T30] chrdev_open+0x5b2/0x630 [ 915.607857][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 915.613120][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 915.618919][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 915.624767][ T30] ? security_file_open+0x5bc/0x730 [ 915.630005][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 915.635068][ T30] do_dentry_open+0x95c/0x1720 [ 915.639892][ T30] path_openat+0x289f/0x3280 [ 915.644803][ T30] ? mark_lock+0x9a/0x350 [ 915.649181][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 915.659853][ T30] ? mark_lock+0x9a/0x350 [ 915.664377][ T30] ? __pfx_path_openat+0x10/0x10 [ 915.669370][ T30] do_filp_open+0x235/0x490 [ 915.676495][ T30] ? __pfx_do_filp_open+0x10/0x10 [