last executing test programs: 2m40.729902541s ago: executing program 0 (id=3043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 2m3.368924518s ago: executing program 0 (id=3043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 1m34.133888511s ago: executing program 0 (id=3043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 1m8.885543281s ago: executing program 0 (id=3043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 39.905077821s ago: executing program 0 (id=3043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 15.460292941s ago: executing program 0 (id=3043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 13.285394003s ago: executing program 1 (id=3514): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90824fc600d00030005000300ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 12.366056266s ago: executing program 1 (id=3516): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a}, 0x20) 11.815641118s ago: executing program 4 (id=3518): r0 = memfd_create(&(0x7f0000000140)='\xf1q\x97.\x8e\xc3\xfe\r\a\xee\xc9[\x9a%=\x01#\x00\r\x9a\xbf\xd9\xcb\xe4\"mqo\xa1\xd2dhV\xf3\n*_A\xef\xc7\xa4\xee\xb2z\xc0\r\n\xd2\xa3\x98_\xf6\xb6\f\xbdOS\t\xfe\x8a\xf9>\x05+\xfc\x9c\xa5y\xf8\x17Vo\x83l\v\xe5\xff\x92\xc9\xaeH\xeeK\x00S\xf6\xecz\x87iiO\xdauvJ\xad\x82\xa5\xa1]\xd5+=\xb4\xf0\x02\xadT\x81\x00\x00\x017\xc5\x8e\\\x00\x8a\x0e\xc50L \xd5\xf3\xee\xa8\x82-\xcb\x00\x00\x00\x00\x00\x00\x00\x04\xa6\x19\xe1\b\x84a\xb9^\xc4\xa3\xa2\xd8\x82\xd0\x8e\xd2\xd2m\xea\x92\xd4\x1f\x1d\xeb\xa0\xf7A\xf8\x00Wzh\xd6\x9a\x1d-\x03m^c\x05O\xa2wVA\xe2\xc0\"\xa9\x15\x1e\x13\x82o\xfe\x0e\x1a\x1a\xbb_.Bt\xa7\x8c\v\x92\x90H\xb9\xfd\xf4c\f{\x86\xfd`\xce_k\x17\xf9r\xe8^\xc0N\x8b>\xd6:\x1d\x02z\xec\x9d\xd64/\xc7&\x91\xa3C\xd4\xf8\x16\x82aS]\xa0\x9a\x9bE{\xf6\xfc\x8b\xfb\x96k\xfc0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r1, r2, r3, 0x0, 0x0, 0x0, 0xfffffffb}) 11.406447639s ago: executing program 4 (id=3520): open(&(0x7f00009e1000)='./file0\x00', 0x48062, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file1\x00') unlink(&(0x7f0000000100)='./file1\x00') 11.228951516s ago: executing program 1 (id=3521): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) 9.87468423s ago: executing program 4 (id=3522): syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000005b40)='./file0\x00', 0x3, &(0x7f0000000100)={[{@nocow}, {@data_checksum={'data_checksum', 0x3d, 'xxhash'}}, {@metadata_checksum={'metadata_checksum', 0x3d, 'crc64'}}, {@str_hash={'str_hash', 0x3d, 'crc64'}}, {@str_hash={'str_hash', 0x3d, 'crc32c'}}]}, 0x1, 0x5afb, &(0x7f0000005bc0)="$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") mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x33760f6, 0x0) 9.699020315s ago: executing program 2 (id=3523): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) epoll_create1(0x0) epoll_create1(0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40)={[], [], 0x2c}, 0x1, 0xee6, &(0x7f0000002d40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000003c0), 0xfd, 0x45d, &(0x7f0000000dc0)="$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") recvmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000c40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x2e6}, {{&(0x7f0000000e00)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0}, 0xfffffffc}], 0x3, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000200)={0x18, 0x0, {0x2, @random="bb7fb37b9489", 'ip6gretap0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) add_key(&(0x7f0000000280)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000480)="cc0a055443390169d763ed8f54b5d0bc41947c9e043919e9a444dd15b14cf689e47b562b303e10a00d6ad399647d6f7c22218c90457215", 0x37, 0xffffffffffffffff) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xffe6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xffe6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) fanotify_init(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000180)='./file0\x00', 0x1040000, &(0x7f0000000680)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@uid_ignore}, {@undelete}, {@undelete}, {@utf8}, {@volume={'volume', 0x3d, 0x5b62}}, {@mode={'mode', 0x3d, 0xe1}}, {@nostrict}]}, 0x1, 0xc4d, &(0x7f0000001d40)="$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") open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 8.47256044s ago: executing program 3 (id=3525): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1410e, &(0x7f0000000600)={[{@errors_remount}, {@nogrpid}, {@noload}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@resuid}, {@block_validity}]}, 0x1, 0x459, &(0x7f0000000680)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x1c}}, 0x0) 4.197995136s ago: executing program 3 (id=3529): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter, 0xfffffffffffffe98) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 4.18385809s ago: executing program 1 (id=3530): prlimit64(0x0, 0xe, &(0x7f0000000280)={0xfff, 0xa7b4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fcntl$getown(r2, 0x9) ioprio_set$pid(0x3, r3, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc0405668, &(0x7f0000000000)={0x0, 0x0, 0x2}) 4.162609216s ago: executing program 2 (id=3531): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa]}, @TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 2.853791623s ago: executing program 3 (id=3532): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet(r0, &(0x7f0000000000)="8d", 0x1, 0x41, 0x0, 0x0) 2.848471913s ago: executing program 2 (id=3533): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0x80184132, &(0x7f00000001c0)={0x0, [], '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r4, 0x705, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 2.78036065s ago: executing program 1 (id=3534): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000500), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x100, 0x20, [], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 2.560500201s ago: executing program 4 (id=3535): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff020000bfa300000000000007030000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc303000050000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffc93}, 0x48) 1.183824843s ago: executing program 3 (id=3536): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) getpriority(0x0, 0xffffffffffffffff) 1.09348115s ago: executing program 2 (id=3537): r0 = socket$kcm(0x29, 0xf, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, 0x0, 0x0, &(0x7f0000000480)=""/98, 0x62}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0xfea0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r1}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r2}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x2880008, r1}) 650.924285ms ago: executing program 3 (id=3538): epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) write(r4, &(0x7f0000000140)='i', 0x1) read(r3, &(0x7f0000032440)=""/102392, 0x18ff8) dup2(r1, r2) 438.072838ms ago: executing program 4 (id=3539): accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000100760100000475000000000000", @ANYRES32=r2, @ANYBLOB="9a"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8100, r7, 0x1, 0x0, 0x6, @local}, 0x14) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='cruft,block=0x0000000000000400\x00session=0x0000000000000006,check=relaxed,utf8,cruftAuid=', @ANYRES64, @ANYBLOB="2c8ef6fff25f71854bb02441c2edff2c66736dbdda08da0968bf8783e49a23113d3078303030303030303030303001003066581c000000000000bd2551db78fc65240062c543fd92499a55c4676e4ab57351fab1f21354c2000000000000a36961e03f1f9b339e1208fe76adf824d531e4f11e82cd11bccd3e4d4cd5b4502ba9708a2827923cada4e88ec20e806b355ece7f4afbdb8475f9b71f1eafd72d05729520434e51cc55317bb19441bd11c979ca9786b51118d9b1c2246f0b407eaa2083113d1bab6700000000000000", @ANYRES16, @ANYRESHEX=0x0, @ANYRESDEC], 0x0, 0x63b, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) mount(&(0x7f0000000300), &(0x7f0000000080)='./file0\x00', &(0x7f0000002340)='virtiofs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 0s ago: executing program 2 (id=3540): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) kernel console output (not intermixed with test programs): tered disabled state [ 1220.136780][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.155695][T10742] bridge_slave_0: left allmulticast mode [ 1220.170528][T10742] bridge_slave_0: left promiscuous mode [ 1220.176178][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.182629][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.203942][T10742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.222556][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.260721][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.286737][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.299511][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.323141][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.335742][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.347264][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.359852][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.369629][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.438655][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.481512][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.770696][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1220.802931][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.813900][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1220.830150][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1220.858725][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1220.885284][ T5090] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1220.903293][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1220.915185][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.155988][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.316625][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.371010][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.394713][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.417608][T16419] loop2: detected capacity change from 0 to 256 [ 1221.430809][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.466983][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.505381][T16412] loop1: detected capacity change from 0 to 256 [ 1221.520932][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.536685][T16412] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1221.561814][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.586939][T16419] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 1221.632058][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.689812][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.718351][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.776164][T16412] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 1221.785028][T16412] exFAT-fs (loop1): Filesystem has been set read-only [ 1221.811882][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.848519][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.912835][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.941794][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.980290][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.991764][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.032951][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.047258][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.073051][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.082766][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.122473][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.132083][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.151164][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.176800][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.187357][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.206159][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.227366][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.237112][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.246895][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.263059][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.307260][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.336081][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.356580][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.378264][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.387805][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.397397][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.410997][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.421010][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.457131][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.497991][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.529552][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.549610][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.591685][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.615143][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.638519][T16181] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 1223.040556][T10742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1223.102604][T10742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1223.147802][T10742] bond0 (unregistering): Released all slaves [ 1223.148917][T16076] Bluetooth: hci0: command tx timeout [ 1223.738344][T16434] mkiss: ax0: crc mode is auto. [ 1223.744870][T16432] loop2: detected capacity change from 0 to 4096 [ 1224.107728][T16439] 9pnet_fd: Insufficient options for proto=fd [ 1224.229508][T10742] hsr_slave_0: left promiscuous mode [ 1224.256686][T10742] hsr_slave_1: left promiscuous mode [ 1224.277365][T10742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1224.287864][T10742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1224.311849][T10742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1224.320288][T10742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1224.430793][T10742] veth1_macvtap: left promiscuous mode [ 1224.450537][T10742] veth0_macvtap: left promiscuous mode [ 1224.456434][T10742] veth1_vlan: left promiscuous mode [ 1224.471702][T10742] veth0_vlan: left promiscuous mode [ 1225.205055][ T5090] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1225.228547][T16193] Bluetooth: hci0: command tx timeout [ 1225.237718][ T5090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1225.248168][ T5090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1225.289650][ T5090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1225.301225][ T5090] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1225.310848][ T5090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1225.983183][T16449] loop3: detected capacity change from 0 to 32768 [ 1226.130285][T16449] XFS (loop3): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 1226.267900][T16449] XFS (loop3): Ending clean mount [ 1226.575061][T16183] XFS (loop3): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 1226.852961][T10742] team0 (unregistering): Port device team_slave_1 removed [ 1227.074030][ T5090] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1227.093626][ T5090] Bluetooth: hci6: Injecting HCI hardware error event [ 1227.106339][ T5090] Bluetooth: hci6: hardware error 0x00 [ 1227.171212][T10742] team0 (unregistering): Port device team_slave_0 removed [ 1227.316720][T16076] Bluetooth: hci0: command tx timeout [ 1227.398279][T16076] Bluetooth: hci2: command tx timeout [ 1229.007751][T16479] loop3: detected capacity change from 0 to 512 [ 1229.187995][T16479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1229.201461][T16479] ext4 filesystem being mounted at /root/syzkaller.wtxxVF/15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1229.318403][ T5090] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1229.580072][ T5090] Bluetooth: hci0: command tx timeout [ 1229.585667][ T5090] Bluetooth: hci2: command tx timeout [ 1231.380382][T16183] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1231.624473][T16076] Bluetooth: hci2: command tx timeout [ 1232.217152][T16413] chnl_net:caif_netlink_parms(): no params data found [ 1233.371258][T16413] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.381477][T16413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.392379][T16413] bridge_slave_0: entered allmulticast mode [ 1233.404694][T16413] bridge_slave_0: entered promiscuous mode [ 1233.417850][T16451] chnl_net:caif_netlink_parms(): no params data found [ 1233.472200][T16413] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.493713][T16413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.501112][T16413] bridge_slave_1: entered allmulticast mode [ 1233.520351][T16413] bridge_slave_1: entered promiscuous mode [ 1233.713394][T16076] Bluetooth: hci2: command tx timeout [ 1233.848589][T16413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1233.905561][T16413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1234.386573][T16413] team0: Port device team_slave_0 added [ 1234.535487][T16518] loop3: detected capacity change from 0 to 32768 [ 1234.574919][T10742] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.622291][T16413] team0: Port device team_slave_1 added [ 1234.841966][T10742] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.969384][T16413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1234.982812][T16413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1235.010174][T16413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.033446][ T25] IPVS: starting estimator thread 0... [ 1235.116518][T16530] netlink: 'syz.1.3256': attribute type 4 has an invalid length. [ 1235.163191][T16532] IPVS: using max 16 ests per chain, 38400 per kthread [ 1235.238874][T10742] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.329912][T16413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.360416][T16413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1235.395860][T16413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1235.433668][T16451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.443439][T16451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.470278][T16451] bridge_slave_0: entered allmulticast mode [ 1235.509741][T16451] bridge_slave_0: entered promiscuous mode [ 1235.551861][T16451] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.570975][T16451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.580089][T16451] bridge_slave_1: entered allmulticast mode [ 1235.604863][T16451] bridge_slave_1: entered promiscuous mode [ 1235.704207][ T29] audit: type=1400 audit(2000000990.444:1125): avc: denied { read } for pid=16535 comm="syz.2.3260" name="loop-control" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1235.730603][T10742] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.984407][ T29] audit: type=1400 audit(2000000990.444:1126): avc: denied { open } for pid=16535 comm="syz.2.3260" path="/dev/loop-control" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1236.931394][ T29] audit: type=1400 audit(2000000990.824:1127): avc: denied { ioctl } for pid=16535 comm="syz.2.3260" path="/dev/loop-control" dev="devtmpfs" ino=647 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1237.248436][T16413] hsr_slave_0: entered promiscuous mode [ 1237.268413][T16413] hsr_slave_1: entered promiscuous mode [ 1237.335211][T16451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.399612][T16451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.599335][T16451] team0: Port device team_slave_0 added [ 1237.650149][ T29] audit: type=1326 audit(2000000992.385:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16545 comm="syz.3.3263" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a39375d39 code=0x0 [ 1237.722483][T16451] team0: Port device team_slave_1 added [ 1237.931219][T16451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.938220][T16451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1237.970346][T16451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1238.026801][T10742] bridge_slave_1: left allmulticast mode [ 1238.032777][T10742] bridge_slave_1: left promiscuous mode [ 1238.040931][T10742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.055622][T10742] bridge_slave_0: left allmulticast mode [ 1238.071213][T10742] bridge_slave_0: left promiscuous mode [ 1238.078171][T10742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.227465][T16556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3267'. [ 1238.270647][T16556] loop1: detected capacity change from 0 to 16 [ 1238.291690][T16556] erofs: (device loop1): erofs_read_inode: unsupported datalayout 5 of nid 36 [ 1239.890004][T10742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.905576][T10742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1239.917773][T10742] bond0 (unregistering): Released all slaves [ 1239.937319][T16451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.944522][T16451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1239.973514][T16451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.022128][T16554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3266'. [ 1240.229433][T16568] netlink: 'syz.1.3271': attribute type 1 has an invalid length. [ 1240.428120][T16451] hsr_slave_0: entered promiscuous mode [ 1240.437173][T16451] hsr_slave_1: entered promiscuous mode [ 1240.448256][T16451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1240.456416][T16451] Cannot create hsr debugfs directory [ 1240.715897][T10742] hsr_slave_0: left promiscuous mode [ 1240.731665][T10742] hsr_slave_1: left promiscuous mode [ 1240.751788][T10742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1240.773499][T10742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1240.796738][ T8730] IPVS: starting estimator thread 0... [ 1240.811337][T10742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1240.823593][T10742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1240.889964][T16576] IPVS: using max 15 ests per chain, 36000 per kthread [ 1240.907025][T10742] veth1_macvtap: left promiscuous mode [ 1240.913127][T10742] veth0_macvtap: left promiscuous mode [ 1240.919065][T10742] veth1_vlan: left promiscuous mode [ 1240.930352][T10742] veth0_vlan: left promiscuous mode [ 1242.130456][ T29] audit: type=1800 audit(2000000996.877:1129): pid=16586 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3278" name="bus" dev="sda1" ino=1998 res=0 errno=0 [ 1242.388222][ T29] audit: type=1326 audit(2000000997.117:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16585 comm="syz.3.3278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a39375d39 code=0x0 [ 1243.417235][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.660814][T10742] team0 (unregistering): Port device team_slave_1 removed [ 1243.807207][T10742] team0 (unregistering): Port device team_slave_0 removed [ 1245.210547][T16573] netlink: 'syz.2.3272': attribute type 4 has an invalid length. [ 1246.272868][T16600] loop1: detected capacity change from 0 to 32768 [ 1246.988868][T16600] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,noshard_inode_numbers,noinodes_use_key_cache,gc_reserve_bytes=512 GiB,nojournal_transaction_names [ 1247.012379][T16600] bcachefs (loop1): recovering from clean shutdown, journal seq 8 [ 1247.087131][T16413] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1247.304100][T16600] bcachefs (loop1): alloc_read... done [ 1247.311773][T16600] bcachefs (loop1): stripes_read... done [ 1247.317868][T16600] bcachefs (loop1): snapshots_read... done [ 1247.338247][T16600] bcachefs (loop1): journal_replay... done [ 1247.344209][T16600] bcachefs (loop1): resume_logged_ops... done [ 1247.351798][T16600] bcachefs (loop1): going read-write [ 1247.397230][T16600] bcachefs (loop1): done starting filesystem [ 1247.513640][T16413] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1247.587870][T16620] bcachefs (loop1): going read-only [ 1247.633857][T16620] bcachefs (loop1): finished waiting for writes to stop [ 1247.669442][T16413] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1247.779966][T16620] bcachefs (loop1): flushing journal and stopping allocators, journal seq 8 [ 1247.843543][T16620] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 8 [ 1247.888839][T16620] bcachefs (loop1): shutdown complete, journal seq 9 [ 1247.900368][T16620] bcachefs (loop1): marking filesystem clean [ 1247.954221][T16413] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1248.421748][T16185] bcachefs (loop1): shutting down [ 1248.601778][T16185] bcachefs (loop1): shutdown complete [ 1248.775189][T16413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1248.910407][T16413] 8021q: adding VLAN 0 to HW filter on device team0 [ 1248.948085][T15350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.955284][T15350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1248.966288][T16451] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1249.001944][T16451] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1249.085761][T16451] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1249.113775][T14572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.121143][T14572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.190833][T16451] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1249.349130][T16622] loop3: detected capacity change from 0 to 32768 [ 1249.871946][T16622] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 1249.952845][T16622] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 1250.008223][T16451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1250.103383][T16622] bcachefs (loop3): alloc_read... done [ 1250.110329][T16622] bcachefs (loop3): stripes_read... done [ 1250.117865][T16622] bcachefs (loop3): snapshots_read... done [ 1250.128702][T16622] bcachefs (loop3): journal_replay... done [ 1250.134862][T16622] bcachefs (loop3): resume_logged_ops... done [ 1250.139621][T16451] 8021q: adding VLAN 0 to HW filter on device team0 [ 1250.155587][T16622] bcachefs (loop3): going read-write [ 1250.173993][T14572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.181382][T14572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1250.216195][T16622] bcachefs (loop3): done starting filesystem [ 1250.236372][T14572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.243706][T14572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1250.424670][T16413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.506729][T16622] syz.3.3284 (16622) used greatest stack depth: 18560 bytes left [ 1250.790742][T16413] veth0_vlan: entered promiscuous mode [ 1250.893113][ T29] audit: type=1804 audit(2000001005.641:1131): pid=16648 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3286" name="/root/syzkaller.M6Axdk/41/bus" dev="sda1" ino=2000 res=1 errno=0 [ 1250.900040][T16183] bcachefs (loop3): shutting down [ 1250.922052][T16413] veth1_vlan: entered promiscuous mode [ 1250.925230][T16183] bcachefs (loop3): going read-only [ 1250.943032][T16183] bcachefs (loop3): finished waiting for writes to stop [ 1250.971685][T16183] bcachefs (loop3): flushing journal and stopping allocators, journal seq 9 [ 1251.071036][T16183] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 1251.158270][T16183] bcachefs (loop3): shutdown complete, journal seq 11 [ 1251.199869][T16654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3289'. [ 1251.229417][T16183] bcachefs (loop3): marking filesystem clean [ 1251.241309][T16413] veth0_macvtap: entered promiscuous mode [ 1251.267398][T16656] loop2: detected capacity change from 0 to 16 [ 1251.290023][T16656] erofs: (device loop2): erofs_read_inode: unsupported datalayout 5 of nid 36 [ 1251.320694][T16413] veth1_macvtap: entered promiscuous mode [ 1251.430814][T16183] bcachefs (loop3): shutdown complete [ 1251.470749][T16451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1251.485881][T16413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.504412][T16413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.532179][T16413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.549138][T16413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.559791][T16413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.571948][T16413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.582634][T16413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.593804][T16413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.625357][T16413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1251.680561][T16413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.714282][T16413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.724175][T16413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.759130][T16413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.776700][T16413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.795790][T16413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.811430][T16413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.829130][T16413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.847391][T16413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1251.929150][T16413] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.963077][T16413] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.985863][T16661] loop1: detected capacity change from 0 to 1024 [ 1251.989273][T16413] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.003810][T16413] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.458886][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.476733][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.632066][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.686683][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.769242][T16451] veth0_vlan: entered promiscuous mode [ 1252.853948][T16451] veth1_vlan: entered promiscuous mode [ 1253.162364][T16451] veth0_macvtap: entered promiscuous mode [ 1253.249907][T16451] veth1_macvtap: entered promiscuous mode [ 1253.339680][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1253.372278][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.433481][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1253.468368][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.504250][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1253.539826][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.572155][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1253.610602][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.655371][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1253.679812][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.696702][T16451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1253.746957][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.759653][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.770432][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.806950][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.827730][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.866038][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.897219][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.927321][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.970966][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.997334][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.036815][T16451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1254.124412][T16451] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.161057][T16451] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.193149][T16451] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.201935][T16451] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.487360][T10742] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.842184][T10742] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.033872][T10742] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.063994][T16683] loop3: detected capacity change from 0 to 32768 [ 1255.102883][T16683] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3295 (16683) [ 1255.129053][T16683] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1255.142379][T16683] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1255.152036][T16683] BTRFS info (device loop3): using free-space-tree [ 1255.234800][T10742] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.342596][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.350495][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.528772][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.577934][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.608171][T16688] loop1: detected capacity change from 0 to 32768 [ 1255.691796][T16688] bcachefs (/dev/loop1): error validating superblock: Invalid option invalid compression opt 240 [ 1255.747587][T16183] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1256.073272][T10742] bridge_slave_1: left allmulticast mode [ 1256.109591][T10742] bridge_slave_1: left promiscuous mode [ 1256.130598][T10742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.243984][T10742] bridge_slave_0: left allmulticast mode [ 1256.249714][T10742] bridge_slave_0: left promiscuous mode [ 1256.277466][T10742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.738493][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1256.757823][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1256.770415][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1256.817728][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1256.831971][ T5090] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1256.840989][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1257.162437][T16713] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [FSP]L3 index 0 [ 1257.246938][T16713] loop3: detected capacity change from 0 to 8 [ 1257.299001][T16713] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1257.310959][T16713] SQUASHFS error: Failed to read block 0x28d: -5 [ 1257.317697][T16713] SQUASHFS error: Unable to read metadata cache entry [28b] [ 1257.325207][T16713] SQUASHFS error: Unable to read inode 0x11f [ 1257.400087][T16706] loop2: detected capacity change from 0 to 32768 [ 1257.459562][T16706] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section downgrade: downgrade entry with mismatched major version (0 != 1) [ 1257.459562][T16706] downgrade (size 40): [ 1257.459562][T16706] version: 0.9: (unknown version) [ 1257.459562][T16706] recovery passes: [ 1257.459562][T16706] errors: [ 1257.459562][T16706] [ 1257.777415][T16718] loop1: detected capacity change from 0 to 512 [ 1257.793164][T16708] loop4: detected capacity change from 0 to 32768 [ 1257.839741][T16718] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1257.906737][ T29] audit: type=1400 audit(2000001012.655:1132): avc: denied { watch } for pid=16707 comm="syz.4.3233" path="/root/syzkaller.XWT39R/0/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1258.089280][T16718] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.3300: bg 0: block 64: padding at end of block bitmap is not set [ 1258.127424][T16718] Quota error (device loop1): write_blk: dquota write failed [ 1258.136339][T16718] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1258.150413][T16718] EXT4-fs error (device loop1): ext4_acquire_dquot:6858: comm syz.1.3300: Failed to acquire dquot type 0 [ 1258.166375][T16718] EXT4-fs (loop1): 1 truncate cleaned up [ 1258.207975][T16718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1259.158792][T16076] Bluetooth: hci0: command tx timeout [ 1259.766565][T10742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1259.785277][T10742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1259.811120][T10742] bond0 (unregistering): Released all slaves [ 1260.108982][T16185] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1260.428435][T16735] loop3: detected capacity change from 0 to 4096 [ 1260.484857][T16735] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1260.496682][T16732] loop2: detected capacity change from 0 to 4096 [ 1260.546602][T16732] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1260.608697][T16735] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1260.709930][T10742] hsr_slave_0: left promiscuous mode [ 1260.718522][T16732] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1260.729384][ T29] audit: type=1400 audit(2000001015.466:1133): avc: denied { setattr } for pid=16729 comm="syz.3.3304" name="file0" dev="loop3" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1260.766105][T10742] hsr_slave_1: left promiscuous mode [ 1260.783863][T10742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1260.792957][T10742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1260.832477][T10742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1260.889903][T10742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.061246][T10742] veth1_macvtap: left promiscuous mode [ 1261.067014][T10742] veth0_macvtap: left promiscuous mode [ 1261.098943][T10742] veth1_vlan: left promiscuous mode [ 1261.120027][T10742] veth0_vlan: left promiscuous mode [ 1261.209819][T16076] Bluetooth: hci0: command tx timeout [ 1261.545374][T16745] use of bytesused == 0 is deprecated and will be removed in the future, [ 1261.569386][T16745] use the actual size instead. [ 1261.805437][T16752] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1261.834261][T16739] loop4: detected capacity change from 0 to 32768 [ 1261.885039][T16739] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3306 (16739) [ 1261.911572][T16739] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1261.928054][T16739] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1261.951565][T16739] BTRFS info (device loop4): using free-space-tree [ 1262.644735][T16770] loop3: detected capacity change from 0 to 32768 [ 1262.961101][T16770] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,noshard_inode_numbers,noinodes_use_key_cache,gc_reserve_bytes=512 GiB,nojournal_transaction_names [ 1262.961975][T16451] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1262.981124][T16770] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 1263.039140][T16770] bcachefs (loop3): alloc_read... done [ 1263.044763][T16770] bcachefs (loop3): stripes_read... done [ 1263.051562][T16770] bcachefs (loop3): snapshots_read... done [ 1263.061922][T16770] bcachefs (loop3): journal_replay... done [ 1263.067862][T16770] bcachefs (loop3): resume_logged_ops... done [ 1263.074178][T16770] bcachefs (loop3): going read-write [ 1263.103090][T16770] bcachefs (loop3): done starting filesystem [ 1263.247762][T16785] bcachefs (loop3): going read-only [ 1263.259374][T16785] bcachefs (loop3): finished waiting for writes to stop [ 1263.300242][T16076] Bluetooth: hci0: command tx timeout [ 1263.369882][T16785] bcachefs (loop3): flushing journal and stopping allocators, journal seq 8 [ 1263.489111][T16785] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 8 [ 1263.671104][T16785] bcachefs (loop3): shutdown complete, journal seq 9 [ 1263.679880][T16785] bcachefs (loop3): marking filesystem clean [ 1264.151845][T16183] bcachefs (loop3): shutting down [ 1264.295228][T16183] bcachefs (loop3): shutdown complete [ 1264.701750][T16789] loop1: detected capacity change from 0 to 4096 [ 1264.788778][T16789] ntfs3: Unknown parameter '" ' [ 1265.147068][T16789] loop1: detected capacity change from 0 to 128 [ 1265.159495][T16789] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 1265.179079][T16789] sysv_free_block: trying to free block not in datazone [ 1265.270350][T16789] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1265.381228][T16076] Bluetooth: hci0: command tx timeout [ 1266.230298][T16791] loop4: detected capacity change from 0 to 32768 [ 1266.256362][T10742] team0 (unregistering): Port device team_slave_1 removed [ 1266.393674][T10742] team0 (unregistering): Port device team_slave_0 removed [ 1266.526404][T16791] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 1266.542588][T16791] bcachefs (loop4): recovering from clean shutdown, journal seq 8 [ 1266.605561][T16791] bcachefs (loop4): alloc_read... done [ 1266.612299][T16791] bcachefs (loop4): stripes_read... done [ 1266.618592][T16791] bcachefs (loop4): snapshots_read... done [ 1266.628662][T16791] bcachefs (loop4): journal_replay... done [ 1266.634590][T16791] bcachefs (loop4): resume_logged_ops... done [ 1266.642056][T16791] bcachefs (loop4): going read-write [ 1266.685721][T16791] bcachefs (loop4): done starting filesystem [ 1266.943879][ T5136] IPVS: starting estimator thread 0... [ 1267.062744][T16806] IPVS: using max 21 ests per chain, 50400 per kthread [ 1267.095947][ C0] vkms_vblank_simulate: vblank timer overrun [ 1267.141058][T16451] bcachefs (loop4): shutting down [ 1267.149533][T16451] bcachefs (loop4): going read-only [ 1267.159538][T16451] bcachefs (loop4): finished waiting for writes to stop [ 1267.191771][T16451] bcachefs (loop4): flushing journal and stopping allocators, journal seq 9 [ 1267.313195][T16451] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 1267.341946][T16451] bcachefs (loop4): shutdown complete, journal seq 11 [ 1267.353930][T16451] bcachefs (loop4): marking filesystem clean [ 1267.443845][T16451] bcachefs (loop4): shutdown complete [ 1268.907194][T16804] netlink: 'syz.3.3315': attribute type 4 has an invalid length. [ 1269.345174][T16709] chnl_net:caif_netlink_parms(): no params data found [ 1269.750952][T16709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.775492][T16709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.800733][T16709] bridge_slave_0: entered allmulticast mode [ 1269.814254][T16709] bridge_slave_0: entered promiscuous mode [ 1269.821308][T16822] loop2: detected capacity change from 0 to 2048 [ 1269.839289][T16709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.916509][T16819] virtio-fs: tag <(null)> not found [ 1269.983487][T16709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.306970][T16709] bridge_slave_1: entered allmulticast mode [ 1270.322858][T16709] bridge_slave_1: entered promiscuous mode [ 1270.517696][T16822] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1270.617009][T16827] loop4: detected capacity change from 0 to 128 [ 1271.418852][T16827] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 1271.574612][T16825] sysv_count_free_blocks: cannot read free-list block [ 1271.632455][T16825] sysv_count_free_inodes: unable to read inode table [ 1271.638976][T16709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1271.644089][T16827] sysv_count_free_blocks: cannot read free-list block [ 1271.656741][T16827] sysv_count_free_inodes: unable to read inode table [ 1271.682640][T16825] nbd: illegal input index -748760761 [ 1271.686599][T16709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1271.771871][T16709] team0: Port device team_slave_0 added [ 1271.823488][T16709] team0: Port device team_slave_1 added [ 1271.886110][T16709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.893114][T16709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.922279][T16709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.936546][T16709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.943539][T16709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.971504][T16709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.149839][T16709] hsr_slave_0: entered promiscuous mode [ 1272.157417][T16709] hsr_slave_1: entered promiscuous mode [ 1272.168115][T16451] sysv_free_block: trying to free block not in datazone [ 1272.200503][T16451] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1272.470552][T16835] loop1: detected capacity change from 0 to 512 [ 1272.534591][T16835] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1272.552808][T16835] EXT4-fs (loop1): invalid journal inode [ 1272.559019][T16835] EXT4-fs (loop1): can't get journal size [ 1272.689248][T16835] EXT4-fs (loop1): 1 truncate cleaned up [ 1272.728649][T16835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1272.935247][T16842] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 1272.990780][T16842] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1273.569791][T16185] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1273.731082][T16847] loop4: detected capacity change from 0 to 1024 [ 1273.748817][T16836] loop2: detected capacity change from 0 to 32768 [ 1273.783745][T16847] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1273.795335][T16836] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3323 (16836) [ 1273.823442][T16847] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1273.861336][T16847] jbd2_journal_init_inode: Cannot locate journal superblock [ 1273.881420][T16836] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1273.892253][T16847] EXT4-fs (loop4): Could not load journal inode [ 1273.939716][T16836] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1273.964159][T16836] BTRFS info (device loop2): using free-space-tree [ 1274.025772][T16847] loop4: detected capacity change from 0 to 1024 [ 1274.037908][T16847] EXT4-fs (loop4): first meta block group too large: 7 (group descriptor block count 1) [ 1274.099652][T16841] loop3: detected capacity change from 0 to 32768 [ 1274.161542][T16841] bcachefs (/dev/loop3): error validating superblock: Invalid option invalid compression opt 240 [ 1274.181683][T16851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3328'. [ 1274.532014][T16709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1274.678973][T16868] loop4: detected capacity change from 0 to 164 [ 1274.803866][T16868] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 1274.890621][T16868] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 1275.539902][T16709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1275.580664][T16709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1275.609291][T16709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1275.652825][T16238] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1276.159321][T16873] loop4: detected capacity change from 0 to 512 [ 1276.290000][T16873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1276.394966][T16873] ext4 filesystem being mounted at /root/syzkaller.XWT39R/8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1276.419100][T16709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.577843][T16709] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.866890][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.874167][ T5135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1278.351951][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.359167][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1278.466186][T16451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1278.684767][T16888] loop3: detected capacity change from 0 to 2048 [ 1278.802545][T16888] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1279.198649][ T29] audit: type=1800 audit(2000001033.956:1134): pid=16895 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.3334" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 1279.697983][T16709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.969454][T16709] veth0_vlan: entered promiscuous mode [ 1280.049175][T16709] veth1_vlan: entered promiscuous mode [ 1280.193608][T16709] veth0_macvtap: entered promiscuous mode [ 1280.264401][T16709] veth1_macvtap: entered promiscuous mode [ 1280.366344][T16709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1280.412451][T16709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.441478][T16709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1280.452830][T16709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.463030][T16709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1280.476947][T16709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.504030][T16709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1280.559590][T16709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.564706][T16911] loop2: detected capacity change from 0 to 512 [ 1280.607866][T16709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1280.638268][T16911] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1280.638548][T16709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.690787][T16911] EXT4-fs (loop2): invalid journal inode [ 1280.701098][T16709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1280.712185][T16911] EXT4-fs (loop2): can't get journal size [ 1280.717557][T16709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.772988][T16911] EXT4-fs (loop2): 1 truncate cleaned up [ 1280.774820][T16709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.801030][T16911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1280.809881][T16709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.869309][T16709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.893875][T16709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.937127][T16709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.996634][T16709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1281.040583][T16709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.058114][T16709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1281.069278][T16709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.112208][T16709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1281.179110][T16709] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.208787][T16709] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.248608][T16709] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.274438][T16709] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.705920][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.728280][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.787050][T16238] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.805618][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.844068][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.916820][T16922] loop3: detected capacity change from 0 to 1024 [ 1282.019693][T16922] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1282.069311][T16922] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1282.104973][T16922] jbd2_journal_init_inode: Cannot locate journal superblock [ 1282.117899][T16922] EXT4-fs (loop3): Could not load journal inode [ 1282.191669][T16922] loop3: detected capacity change from 0 to 1024 [ 1282.200551][T16922] EXT4-fs (loop3): first meta block group too large: 7 (group descriptor block count 1) [ 1282.475213][T16928] tmpfs: Bad value for 'mpol' [ 1282.791242][T16930] loop3: detected capacity change from 0 to 164 [ 1282.837657][T16930] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 1282.922862][T16930] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 1283.857780][T10742] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.202489][T16927] loop2: detected capacity change from 0 to 32768 [ 1284.228553][T16927] bcachefs (/dev/loop2): error validating superblock: Invalid option invalid compression opt 240 [ 1284.259761][T16934] loop4: detected capacity change from 0 to 2048 [ 1284.382290][T16937] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1284.475979][T16937] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1284.490218][T16937] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1284.506201][T16937] Remounting filesystem read-only [ 1284.511578][T10732] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 1284.526661][T10732] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 1284.534137][T10732] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1284.543654][T10732] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1284.567859][T10732] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1284.578648][T10732] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 1284.589949][T10732] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 1284.597287][T10732] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1284.606313][T10732] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1284.615355][T10732] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1284.627980][T10732] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 1284.642015][T10732] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 1284.653280][T10732] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1284.670038][T10742] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.676832][T10732] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1284.692500][T10732] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1284.707849][T10732] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 1284.714625][T10732] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 1284.757889][T10732] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 1284.765261][T10732] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 1284.795295][T10732] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1284.813089][T10732] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 1284.824035][T10732] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1284.841339][T10732] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1284.857038][T10732] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 1284.872006][T10732] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1284.885854][T10732] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 1284.924105][T10742] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.945479][T10732] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 1284.965751][T10732] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1285.547971][T16946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3347'. [ 1285.557207][T16946] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3347'. [ 1286.122406][T10732] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1286.172522][T10732] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1286.221640][T16934] NILFS (loop4): mounting fs with errors [ 1286.233980][T16947] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [FSP]L3 index 0 [ 1286.349802][T10742] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.371584][T16934] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1286.451093][T16947] loop2: detected capacity change from 0 to 8 [ 1286.482978][T16934] Remounting filesystem read-only [ 1286.528480][T16934] NILFS (loop4): error -5 reading inode: ino=18 [ 1286.552856][T16947] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1286.575072][T16947] SQUASHFS error: Failed to read block 0x28d: -5 [ 1286.585284][T16934] NILFS (loop4): cannot mark inode dirty (ino=18): error -5 loading inode block [ 1286.605875][T16947] SQUASHFS error: Unable to read metadata cache entry [28b] [ 1286.617918][T16947] SQUASHFS error: Unable to read inode 0x11f [ 1286.879536][T16451] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 1286.927559][T16451] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 1286.951482][T16451] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 1286.967748][T16451] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 1286.975115][T16451] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 1287.026617][T16451] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 1287.193364][T10742] bridge_slave_1: left allmulticast mode [ 1287.216298][T10742] bridge_slave_1: left promiscuous mode [ 1287.240712][T10742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.289657][T10742] bridge_slave_0: left allmulticast mode [ 1287.316628][T10742] bridge_slave_0: left promiscuous mode [ 1287.322566][T10742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.403795][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1287.420167][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1287.430153][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1287.446658][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1287.469295][ T5090] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1287.484311][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1287.945537][T16963] loop4: detected capacity change from 0 to 4096 [ 1288.028259][T16965] loop2: detected capacity change from 0 to 512 [ 1288.048896][T16963] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 1288.077011][T16965] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1288.081806][T16954] loop1: detected capacity change from 0 to 32768 [ 1288.103753][T16965] EXT4-fs (loop2): invalid journal inode [ 1288.110464][T16965] EXT4-fs (loop2): can't get journal size [ 1288.139527][T16963] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1288.150052][T16954] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3350 (16954) [ 1288.194117][T16954] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1288.206527][T16954] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1288.215471][T16954] BTRFS info (device loop1): using free-space-tree [ 1288.226054][T16965] EXT4-fs (loop2): 1 truncate cleaned up [ 1288.241047][T16965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1288.575257][ T51] ntfs3: loop4: ino=5, ntfs3_write_inode failed, -22. [ 1288.948286][ T29] audit: type=1400 audit(2000001043.700:1135): avc: denied { mount } for pid=16986 comm="syz.4.3354" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1289.042168][T16185] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1289.133643][T16989] overlayfs: failed to resolve 'func=MODULE_CHECK': -2 [ 1289.149682][ T29] audit: type=1400 audit(2000001043.901:1136): avc: denied { mounton } for pid=16986 comm="syz.4.3354" path="/root/syzkaller.XWT39R/13/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1289.596426][T16076] Bluetooth: hci0: command tx timeout [ 1290.198411][T10742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1290.242906][T10742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1290.280718][T10742] bond0 (unregistering): Released all slaves [ 1291.514869][T16076] Bluetooth: hci7: command 0x0406 tx timeout [ 1291.536238][T16238] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1291.685454][ T5090] Bluetooth: hci0: command tx timeout [ 1291.756103][T16999] loop1: detected capacity change from 0 to 8 [ 1291.775339][ T29] audit: type=1400 audit(2000001046.552:1137): avc: denied { unmount } for pid=16451 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1291.904636][T16999] SQUASHFS error: Unable to read directory block [1d0:22] [ 1291.941272][T16999] SQUASHFS error: Unable to read directory block [1d0:22] [ 1292.069894][T10742] hsr_slave_0: left promiscuous mode [ 1292.079672][T10742] hsr_slave_1: left promiscuous mode [ 1292.087766][T10742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1292.097260][T10742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1292.109187][T10742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1292.117774][T10742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1292.208616][T16185] SQUASHFS error: Unable to read directory block [1d0:22] [ 1292.232033][T10742] veth1_macvtap: left promiscuous mode [ 1292.241368][T16185] SQUASHFS error: Unable to read directory block [1d0:22] [ 1292.244211][T10742] veth0_macvtap: left promiscuous mode [ 1292.253672][T16185] SQUASHFS error: Failed to read block 0x2d7: -5 [ 1292.258264][T10742] veth1_vlan: left promiscuous mode [ 1292.263596][T16185] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 1292.301411][T10742] veth0_vlan: left promiscuous mode [ 1292.307466][T16185] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=5 [ 1292.360436][T16185] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 1292.411463][T16185] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=5 [ 1292.464704][T17007] loop4: detected capacity change from 0 to 64 [ 1292.507716][ T29] audit: type=1400 audit(2000001047.272:1138): avc: denied { mounton } for pid=17003 comm="syz.4.3359" path="/root/syzkaller.XWT39R/14/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 1293.803205][ T5090] Bluetooth: hci0: command tx timeout [ 1293.868094][ T29] audit: type=1400 audit(2000001047.893:1139): avc: denied { remount } for pid=17003 comm="syz.4.3359" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1295.833118][ T5090] Bluetooth: hci0: command tx timeout [ 1296.059626][T17032] loop2: detected capacity change from 0 to 764 [ 1296.609243][T17039] loop3: detected capacity change from 0 to 512 [ 1296.640543][ T5090] Bluetooth: hci1: command 0x0406 tx timeout [ 1296.711490][T17039] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1296.773585][T17039] EXT4-fs (loop3): invalid journal inode [ 1296.779376][T17039] EXT4-fs (loop3): can't get journal size [ 1296.898647][T17039] EXT4-fs (loop3): 1 truncate cleaned up [ 1297.017934][T17039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1297.196684][T10742] team0 (unregistering): Port device team_slave_1 removed [ 1297.292034][T17045] loop4: detected capacity change from 0 to 128 [ 1297.464415][T17045] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 1297.492171][T17045] sysv_free_block: trying to free block not in datazone [ 1297.528400][T17045] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1297.691399][T10742] team0 (unregistering): Port device team_slave_0 removed [ 1298.048973][T17050] loop2: detected capacity change from 0 to 1024 [ 1298.126860][T17050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1299.693987][T16238] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.079964][T16183] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.197143][T16958] chnl_net:caif_netlink_parms(): no params data found [ 1300.248459][T17062] loop1: detected capacity change from 0 to 8 [ 1300.416882][T17062] SQUASHFS error: Unable to read directory block [1d0:22] [ 1300.424308][T17062] SQUASHFS error: Unable to read directory block [1d0:22] [ 1300.501858][T16958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.510088][T16958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.517434][T16958] bridge_slave_0: entered allmulticast mode [ 1300.532224][T16958] bridge_slave_0: entered promiscuous mode [ 1300.543054][T16958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.577007][T16958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.584454][T16958] bridge_slave_1: entered allmulticast mode [ 1300.594911][T16958] bridge_slave_1: entered promiscuous mode [ 1300.618459][T16185] SQUASHFS error: Unable to read directory block [1d0:22] [ 1300.630155][T16185] SQUASHFS error: Unable to read directory block [1d0:22] [ 1300.642766][T16185] SQUASHFS error: Failed to read block 0x2d7: -5 [ 1300.652667][T16185] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 1300.674997][T16185] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=5 [ 1300.694527][T16185] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 1300.707096][T16958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1300.766969][T16958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1300.893866][T16185] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=5 [ 1301.820769][T16958] team0: Port device team_slave_0 added [ 1301.848622][T16958] team0: Port device team_slave_1 added [ 1301.908075][T14573] libceph: connect (1)[c::]:6789 error -101 [ 1301.932346][T14573] libceph: mon0 (1)[c::]:6789 connect error [ 1301.955199][T14573] libceph: connect (1)[c::]:6789 error -101 [ 1301.961577][T14573] libceph: mon0 (1)[c::]:6789 connect error [ 1302.092110][T16958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.099439][T16958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1302.133064][T16958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1302.145962][T17077] ceph: No mds server is up or the cluster is laggy [ 1302.156375][T16958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1302.175093][T16958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1302.209843][T16958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1302.236612][ T9534] libceph: connect (1)[c::]:6789 error -101 [ 1302.259182][T17084] netlink: 'syz.1.3376': attribute type 1 has an invalid length. [ 1302.275300][ T9534] libceph: mon0 (1)[c::]:6789 connect error [ 1302.464802][T16958] hsr_slave_0: entered promiscuous mode [ 1302.474914][T16958] hsr_slave_1: entered promiscuous mode [ 1303.127100][T16958] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1303.139478][T16958] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1303.151906][T16958] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1303.167336][T16958] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1303.325329][T16958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1303.358043][T16958] 8021q: adding VLAN 0 to HW filter on device team0 [ 1303.376822][T14573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.384091][T14573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1303.415082][T14573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.422424][T14573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1303.742738][T16958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1303.824772][T16958] veth0_vlan: entered promiscuous mode [ 1303.854068][T16958] veth1_vlan: entered promiscuous mode [ 1303.965048][T16958] veth0_macvtap: entered promiscuous mode [ 1303.982780][T16958] veth1_macvtap: entered promiscuous mode [ 1304.016359][T16958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1304.027622][T16958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.050008][T16958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1304.077351][T16958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.106428][T16958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1304.131269][T17093] loop4: detected capacity change from 0 to 2048 [ 1304.144842][T16958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.161592][T16958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1304.174483][T16958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.199383][T17093] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1304.212924][T16958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1304.227519][T16958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.251738][T17093] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1304.252353][T17094] loop2: detected capacity change from 0 to 4096 [ 1304.264248][T16958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1304.315288][T16958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1304.367547][T16958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.382980][T16958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1304.411330][T16958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.427779][T16958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1304.461164][T16958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.472270][T16958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1304.483115][T16958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.493182][T16958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1304.503768][T16958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1304.577993][T16958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1304.603408][T16958] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.634426][T16958] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.652533][T16958] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.661711][T16958] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.728554][T17101] loop3: detected capacity change from 0 to 64 [ 1304.805078][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.042708][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.077894][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.262619][ T6918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1305.284047][T17106] loop4: detected capacity change from 0 to 512 [ 1305.296989][ T6918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1305.357692][T17106] ext3: Unknown parameter 'uid>00000000000000000000' [ 1305.665670][T17112] loop4: detected capacity change from 0 to 2048 [ 1305.778813][T17112] loop4: p3 < > p4 < > [ 1305.783076][T17112] loop4: partition table partially beyond EOD, truncated [ 1305.835017][T17112] loop4: p3 start 4284289 is beyond EOD, truncated [ 1307.379069][T17123] loop1: detected capacity change from 0 to 8 [ 1307.413222][T17122] loop2: detected capacity change from 0 to 1024 [ 1307.469310][T17122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1307.597693][T17123] SQUASHFS error: Unable to read directory block [1d0:22] [ 1307.629879][T17123] SQUASHFS error: Unable to read directory block [1d0:22] [ 1307.702091][T17128] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1307.793702][T17130] loop3: detected capacity change from 0 to 512 [ 1307.857846][T16185] SQUASHFS error: Unable to read directory block [1d0:22] [ 1307.899189][T16185] SQUASHFS error: Unable to read directory block [1d0:22] [ 1307.915494][T17130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1307.937425][T17130] ext4 filesystem being mounted at /root/syzkaller.wtxxVF/51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1307.954695][T16185] SQUASHFS error: Failed to read block 0x2d7: -5 [ 1307.965906][T16185] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 1307.975688][T16185] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=5 [ 1308.021910][T17130] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.3389: corrupted xattr block 32: bad e_name length [ 1308.155079][T16185] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 1308.552327][T16185] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=5 [ 1308.674915][T17130] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 1308.736861][T17130] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.3389: corrupted xattr block 32: bad e_name length [ 1308.879137][T17130] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 1309.028486][T17130] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #15: comm syz.3.3389: corrupted xattr block 32: bad e_name length [ 1309.064921][T10732] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.091210][T17130] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -117) [ 1309.114571][T16238] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1309.265065][T16183] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1309.531304][T17145] loop1: detected capacity change from 0 to 512 [ 1309.548507][T17145] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1309.580840][T17145] EXT4-fs (loop1): invalid journal inode [ 1309.587117][T17145] EXT4-fs (loop1): can't get journal size [ 1309.602584][T17145] EXT4-fs (loop1): 1 truncate cleaned up [ 1309.617380][T17145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1309.724741][T10732] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.931669][T10732] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.264797][T10732] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.799753][T16185] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.823384][T17159] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3396'. [ 1311.051023][T10732] bridge_slave_1: left allmulticast mode [ 1311.073917][T10732] bridge_slave_1: left promiscuous mode [ 1311.105400][T10732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.160966][T10732] bridge_slave_0: left allmulticast mode [ 1311.167110][T10732] bridge_slave_0: left promiscuous mode [ 1311.173067][T10732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.350933][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1311.368223][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1311.380133][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1311.392919][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1311.399048][ T25] kernel write not supported for file /dsp (pid: 25 comm: kworker/1:0) [ 1311.417025][ T5090] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1311.427640][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1311.734449][T17155] loop4: detected capacity change from 0 to 32768 [ 1311.777018][T17155] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3395 (17155) [ 1311.843399][T17155] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1311.856627][T17155] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1311.866079][T17155] BTRFS info (device loop4): using free-space-tree [ 1312.730561][T16451] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1312.873849][T10732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1312.948718][T10732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1313.022793][T10732] bond0 (unregistering): Released all slaves [ 1313.531481][T16076] Bluetooth: hci0: command tx timeout [ 1313.910436][T17204] loop1: detected capacity change from 0 to 512 [ 1313.949875][T17204] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1314.055756][T10732] hsr_slave_0: left promiscuous mode [ 1314.074141][T10732] hsr_slave_1: left promiscuous mode [ 1314.092744][T10732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1314.130820][T17204] EXT4-fs (loop1): invalid journal inode [ 1314.142917][T10732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1314.150726][T17204] EXT4-fs (loop1): can't get journal size [ 1314.182874][T10732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1314.202361][T10732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1314.231000][T17204] EXT4-fs (loop1): 1 truncate cleaned up [ 1314.265712][T17204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1314.497701][T10732] veth1_macvtap: left promiscuous mode [ 1314.537875][T10732] veth0_macvtap: left promiscuous mode [ 1314.611742][T10732] veth1_vlan: left promiscuous mode [ 1314.659118][T10732] veth0_vlan: left promiscuous mode [ 1315.235868][T16185] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1315.337113][T17201] loop3: detected capacity change from 0 to 32768 [ 1315.416299][T17201] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3409 (17201) [ 1315.518154][T17201] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1315.562730][T17201] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1315.582646][T16076] Bluetooth: hci0: command tx timeout [ 1315.598714][T17201] BTRFS info (device loop3): using free-space-tree [ 1315.712761][T17221] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3410'. [ 1315.983136][T17221] loop1: detected capacity change from 0 to 512 [ 1316.005726][T17221] ext4: Unknown parameter 'nouser_xattr' [ 1316.212039][ T29] audit: type=1400 audit(2000001070.964:1140): avc: denied { bind } for pid=17215 comm="syz.1.3410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1316.252236][ T29] audit: type=1400 audit(2000001070.964:1141): avc: denied { name_bind } for pid=17215 comm="syz.1.3410" src=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1316.349379][ T29] audit: type=1400 audit(2000001070.964:1142): avc: denied { node_bind } for pid=17215 comm="syz.1.3410" src=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1316.645616][T16183] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1317.630035][T17238] overlayfs: failed to resolve 'func=MODULE_CHECK': -2 [ 1317.717187][T16076] Bluetooth: hci0: command tx timeout [ 1318.893200][T17244] loop3: detected capacity change from 0 to 8 [ 1318.927029][T17233] loop1: detected capacity change from 0 to 32768 [ 1318.987219][T17244] SQUASHFS error: Unable to read directory block [629:46] [ 1319.019537][T17233] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3412 (17233) [ 1319.071748][T17233] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1319.099450][T17233] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1319.108364][T17233] BTRFS info (device loop1): using free-space-tree [ 1319.422949][T10732] team0 (unregistering): Port device team_slave_1 removed [ 1319.594173][T10732] team0 (unregistering): Port device team_slave_0 removed [ 1319.627735][T17263] sctp: [Deprecated]: syz.4.3416 (pid 17263) Use of int in maxseg socket option. [ 1319.627735][T17263] Use struct sctp_assoc_value instead [ 1319.740622][T16076] Bluetooth: hci0: command tx timeout [ 1319.850222][ T29] audit: type=1400 audit(2000001074.616:1143): avc: denied { read } for pid=17261 comm="syz.4.3416" path="socket:[65707]" dev="sockfs" ino=65707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1319.915894][T16185] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1320.705194][T17271] loop3: detected capacity change from 0 to 4096 [ 1320.847474][T17271] ntfs3: Unknown parameter '" ' [ 1321.319155][T17271] loop3: detected capacity change from 0 to 128 [ 1321.347410][T17271] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 1321.386469][T17271] sysv_free_block: trying to free block not in datazone [ 1321.397122][T17271] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1322.144271][T17268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1322.677062][T17164] chnl_net:caif_netlink_parms(): no params data found [ 1323.369090][ T29] audit: type=1326 audit(2000001078.148:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17287 comm="syz.3.3424" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a39375d39 code=0x0 [ 1323.402218][T17288] loop4: detected capacity change from 0 to 4096 [ 1323.481775][T17288] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1323.612764][T17164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.634348][T17164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.668579][T17164] bridge_slave_0: entered allmulticast mode [ 1323.715277][T17164] bridge_slave_0: entered promiscuous mode [ 1323.724010][T17288] ntfs3: loop4: failed to convert "c46c" to maccroatian [ 1323.755575][T17164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.780131][T17164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.817047][T17164] bridge_slave_1: entered allmulticast mode [ 1323.834154][T17164] bridge_slave_1: entered promiscuous mode [ 1323.844956][T17279] loop1: detected capacity change from 0 to 32768 [ 1323.884478][T17279] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3422 (17279) [ 1323.964217][T17279] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1324.004307][T17279] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1324.028240][T17279] BTRFS info (device loop1): using free-space-tree [ 1324.048452][T17164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.106161][T17164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1324.318857][T17164] team0: Port device team_slave_0 added [ 1324.377353][T17164] team0: Port device team_slave_1 added [ 1324.545216][T17315] loop4: detected capacity change from 0 to 2048 [ 1324.576178][T17164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1324.586026][T17164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.615875][T17164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1324.658499][T17164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1324.665618][T17164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.675969][T17315] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1324.697321][T17164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.729984][T17316] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1324.845592][T16185] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1324.976444][T17318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3428'. [ 1325.107762][T17319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3428'. [ 1325.340669][T17322] Invalid ELF header magic: != ELF [ 1325.346557][ T29] audit: type=1804 audit(2000001080.069:1145): pid=17322 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.3430" name="/root/syzkaller.EbDoKv/65/bus" dev="sda1" ino=2012 res=1 errno=0 [ 1325.514002][T17164] hsr_slave_0: entered promiscuous mode [ 1325.544389][T17164] hsr_slave_1: entered promiscuous mode [ 1325.636477][ T29] audit: type=1400 audit(2000001080.419:1146): avc: denied { setopt } for pid=17317 comm="syz.3.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1325.936190][ T29] audit: type=1400 audit(2000001080.719:1147): avc: denied { mount } for pid=17327 comm="syz.1.3429" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1326.130369][ T29] audit: type=1800 audit(2000001080.919:1148): pid=17326 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.3427" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 1326.278498][ T29] audit: type=1400 audit(2000001081.059:1149): avc: denied { unmount } for pid=16185 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1326.954674][T17340] loop2: detected capacity change from 0 to 256 [ 1327.326868][T17341] loop1: detected capacity change from 0 to 164 [ 1327.360618][ T29] audit: type=1326 audit(2000001082.150:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17342 comm="syz.3.3437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a39375d39 code=0x0 [ 1327.534773][T17348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3437'. [ 1327.837946][T17164] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1327.860160][T17164] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1327.898353][T17164] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1327.939168][T17164] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1328.230427][T17164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1328.294734][T17164] 8021q: adding VLAN 0 to HW filter on device team0 [ 1328.302971][T17355] loop1: detected capacity change from 0 to 512 [ 1328.333007][ T8730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.340326][ T8730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1328.349351][T17355] EXT4-fs (loop1): filesystem is read-only [ 1328.373512][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.380770][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1328.508424][ T29] audit: type=1400 audit(2000001083.300:1151): avc: denied { connect } for pid=17353 comm="syz.1.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1328.787965][ T29] audit: type=1804 audit(2000001083.580:1152): pid=17363 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.3441" name="/root/syzkaller.XWT39R/29/bus" dev="sda1" ino=2014 res=1 errno=0 [ 1328.906549][T17363] Invalid ELF header magic: != ELF [ 1329.053335][T17164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.257952][T17164] veth0_vlan: entered promiscuous mode [ 1329.319931][T17164] veth1_vlan: entered promiscuous mode [ 1329.615789][T17164] veth0_macvtap: entered promiscuous mode [ 1329.675810][T17372] loop2: detected capacity change from 0 to 764 [ 1329.713615][T17164] veth1_macvtap: entered promiscuous mode [ 1329.860318][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.924266][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.959530][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.030131][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.088394][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.123890][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.189530][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.235930][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.269382][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.314265][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.392487][T17164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1330.518299][T17380] loop1: detected capacity change from 0 to 4096 [ 1330.555881][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.580519][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.601336][T17380] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1330.609595][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.657077][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.727030][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.782082][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.814827][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.860187][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.882017][T17164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.893167][T17164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.943218][T17164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1330.997446][T17164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.034296][T17164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.062898][T17164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.072421][T17164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.097920][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3446'. [ 1331.111571][T17376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3446'. [ 1331.217314][T17370] loop3: detected capacity change from 0 to 32768 [ 1331.292032][T17370] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3445 (17370) [ 1331.348833][T17370] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1331.378882][T17370] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1331.432144][T17370] BTRFS info (device loop3): using free-space-tree [ 1331.715627][T17398] sctp: [Deprecated]: syz.4.3450 (pid 17398) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1331.715627][T17398] Use struct sctp_sack_info instead [ 1331.745047][T10732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.752936][T10732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.933302][ T7440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.943874][ T7440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.096467][T17404] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3451'. [ 1332.295049][T16183] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1332.321437][T17406] loop2: detected capacity change from 0 to 1764 [ 1332.480247][T17406] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1335.376481][ T29] audit: type=1400 audit(2000001089.663:1153): avc: denied { accept } for pid=17409 comm="syz.1.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1336.205160][T17425] loop1: detected capacity change from 0 to 4096 [ 1336.253257][T17425] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1336.340512][T17430] loop3: detected capacity change from 0 to 164 [ 1336.388479][T17425] ntfs3: loop1: failed to convert "c46c" to maccroatian [ 1336.826400][T17437] loop4: detected capacity change from 0 to 256 [ 1337.038844][T17437] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1337.816009][T17424] loop2: detected capacity change from 0 to 32768 [ 1337.883667][ T6918] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.130617][T17424] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=ro,metadata_checksum=crc64,data_checksum=xxhash,str_hash=crc32c,nojournal_transaction_names,read_only,nocow [ 1338.148972][T17424] bcachefs (loop2): recovering from clean shutdown, journal seq 8 [ 1338.261689][ T6918] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.262908][T17424] bcachefs (loop2): alloc_read... done [ 1338.293657][T17424] bcachefs (loop2): stripes_read... done [ 1338.308006][T17424] bcachefs (loop2): snapshots_read... done [ 1338.345530][T17424] bcachefs (loop2): journal_replay... done [ 1338.361119][T17424] bcachefs (loop2): resume_logged_ops... done [ 1338.381530][T17424] bcachefs (loop2): done starting filesystem [ 1338.430711][ T6918] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.431863][T17424] bcachefs (loop2): going read-write [ 1338.599458][ T6918] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.613267][T16238] bcachefs (loop2): shutting down [ 1338.618356][T16238] bcachefs (loop2): going read-only [ 1338.635940][T16238] bcachefs (loop2): finished waiting for writes to stop [ 1338.650172][T16238] bcachefs (loop2): flushing journal and stopping allocators, journal seq 8 [ 1338.659354][T16238] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 8 [ 1338.712683][T16238] bcachefs (loop2): shutdown complete, journal seq 9 [ 1338.720702][T16238] bcachefs (loop2): marking filesystem clean [ 1338.852245][ T6918] bridge_slave_1: left allmulticast mode [ 1338.857959][ T6918] bridge_slave_1: left promiscuous mode [ 1338.864184][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.877350][ T6918] bridge_slave_0: left allmulticast mode [ 1338.883782][ T6918] bridge_slave_0: left promiscuous mode [ 1338.888153][T16238] bcachefs (loop2): shutdown complete [ 1338.889675][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.330579][ T29] audit: type=1804 audit(2000001094.106:1154): pid=17459 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.3465" name="/root/syzkaller.XWT39R/36/bus" dev="sda1" ino=1998 res=1 errno=0 [ 1339.440630][T17459] Invalid ELF header magic: != ELF [ 1340.434935][T16076] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1340.451738][T16076] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1340.463039][T16076] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1340.490180][T16076] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1340.519981][T16076] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1340.527688][T16076] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1340.853117][T17460] loop3: detected capacity change from 0 to 32768 [ 1340.891753][T17468] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3468'. [ 1340.926560][T17460] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3464 (17460) [ 1341.000842][T17460] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1341.019141][T17460] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1341.029944][T17460] BTRFS info (device loop3): using free-space-tree [ 1341.065558][T17474] loop4: detected capacity change from 0 to 764 [ 1341.233752][ T6918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1341.341817][ T6918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1341.378068][ T6918] bond0 (unregistering): Released all slaves [ 1341.850961][T16183] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1342.527276][ T6918] hsr_slave_0: left promiscuous mode [ 1342.561118][ T6918] hsr_slave_1: left promiscuous mode [ 1342.619251][ T5090] Bluetooth: hci0: command tx timeout [ 1342.645686][ T6918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1342.676278][ T6918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1342.732160][ T6918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1342.761949][ T6918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1343.044929][ T6918] veth1_macvtap: left promiscuous mode [ 1343.063022][ T6918] veth0_macvtap: left promiscuous mode [ 1343.097077][T17500] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3470'. [ 1343.097172][ T6918] veth1_vlan: left promiscuous mode [ 1343.141086][ T6918] veth0_vlan: left promiscuous mode [ 1343.695724][T17496] loop1: detected capacity change from 0 to 32768 [ 1343.868040][ T29] audit: type=1400 audit(2000001098.658:1155): avc: denied { unlink } for pid=17495 comm="syz.1.3471" name="file0" dev="loop1" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1343.935019][ T29] audit: type=1400 audit(2000001098.698:1156): avc: denied { connect } for pid=17501 comm="syz.4.3473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1343.956508][ T29] audit: type=1400 audit(2000001098.728:1157): avc: denied { create } for pid=17495 comm="syz.1.3471" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 1344.148056][ T29] audit: type=1400 audit(2000001098.938:1158): avc: denied { read write } for pid=16451 comm="syz-executor" name="loop4" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1344.222353][ T29] audit: type=1400 audit(2000001098.938:1159): avc: denied { open } for pid=16451 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1344.280251][ T29] audit: type=1400 audit(2000001098.938:1160): avc: denied { ioctl } for pid=16451 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1344.687933][ T5090] Bluetooth: hci0: command tx timeout [ 1345.054307][ T6918] team0 (unregistering): Port device team_slave_1 removed [ 1345.226621][ T6918] team0 (unregistering): Port device team_slave_0 removed [ 1346.082092][T17512] loop1: detected capacity change from 0 to 32768 [ 1346.363842][T17512] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=ro,metadata_checksum=crc64,data_checksum=xxhash,str_hash=crc32c,nojournal_transaction_names,read_only,nocow [ 1346.381390][T17512] bcachefs (loop1): recovering from clean shutdown, journal seq 8 [ 1346.453258][T17512] bcachefs (loop1): alloc_read... done [ 1346.466540][T17512] bcachefs (loop1): stripes_read... done [ 1346.472439][T17512] bcachefs (loop1): snapshots_read... done [ 1346.486728][T17512] bcachefs (loop1): journal_replay... done [ 1346.492911][T17512] bcachefs (loop1): resume_logged_ops... done [ 1346.499581][T17512] bcachefs (loop1): done starting filesystem [ 1346.533293][T17512] bcachefs (loop1): going read-write [ 1346.635115][T16185] bcachefs (loop1): shutting down [ 1346.643102][T16185] bcachefs (loop1): going read-only [ 1346.653240][T16185] bcachefs (loop1): finished waiting for writes to stop [ 1346.673327][T16185] bcachefs (loop1): flushing journal and stopping allocators, journal seq 8 [ 1346.691131][T16185] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 8 [ 1346.723208][T16185] bcachefs (loop1): shutdown complete, journal seq 9 [ 1346.731872][T16185] bcachefs (loop1): marking filesystem clean [ 1346.741019][T17500] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3470'. [ 1346.781861][T16076] Bluetooth: hci0: command tx timeout [ 1346.865729][T16185] bcachefs (loop1): shutdown complete [ 1347.185601][T17469] chnl_net:caif_netlink_parms(): no params data found [ 1347.392011][T17533] loop4: detected capacity change from 0 to 512 [ 1347.698099][T17533] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3481'. [ 1347.721285][T17540] loop2: detected capacity change from 0 to 512 [ 1347.749025][ T29] audit: type=1400 audit(2000001102.530:1161): avc: denied { ioctl } for pid=17531 comm="syz.4.3481" path="socket:[67738]" dev="sockfs" ino=67738 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1347.775558][T17469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.797496][T17469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.808389][T17540] EXT4-fs (loop2): filesystem is read-only [ 1347.816787][T16076] Bluetooth: hci2: command 0x0405 tx timeout [ 1347.848876][T17469] bridge_slave_0: entered allmulticast mode [ 1347.897511][T17469] bridge_slave_0: entered promiscuous mode [ 1347.916964][T17469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.952607][T17469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.961681][T17469] bridge_slave_1: entered allmulticast mode [ 1347.970808][T17469] bridge_slave_1: entered promiscuous mode [ 1348.064223][T17469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1348.090201][T17469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1348.271442][T17469] team0: Port device team_slave_0 added [ 1348.304363][T17469] team0: Port device team_slave_1 added [ 1348.420342][T17469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1348.427448][T17469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1348.650309][T17550] loop4: detected capacity change from 0 to 256 [ 1350.506911][ T5090] Bluetooth: hci0: command tx timeout [ 1350.517500][T17469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1350.536144][ T29] audit: type=1326 audit(2000001104.381:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17542 comm="syz.1.3478" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84ec175d39 code=0x0 [ 1350.906498][T17550] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1350.945315][T17469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.952337][T17469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1351.036604][T17469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1351.133383][T17469] hsr_slave_0: entered promiscuous mode [ 1351.146150][T17469] hsr_slave_1: entered promiscuous mode [ 1352.128211][T17469] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1352.162444][T17469] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1352.219594][T17469] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1352.259764][T17469] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1352.322162][ T29] audit: type=1400 audit(2000001107.122:1163): avc: denied { ioctl } for pid=17568 comm="syz.3.3490" path="socket:[67300]" dev="sockfs" ino=67300 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1352.351326][T17567] loop2: detected capacity change from 0 to 4096 [ 1353.687280][ T29] audit: type=1400 audit(2000001108.453:1164): avc: denied { read } for pid=17566 comm="syz.2.3489" path="socket:[67337]" dev="sockfs" ino=67337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1353.825947][T17469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1353.882724][T17469] 8021q: adding VLAN 0 to HW filter on device team0 [ 1353.906259][T15342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.913580][T15342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1353.976277][T15342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.983718][T15342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1354.211698][T17565] loop1: detected capacity change from 0 to 32768 [ 1354.477349][T17565] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=ro,metadata_checksum=crc64,data_checksum=xxhash,str_hash=crc32c,nojournal_transaction_names,read_only,nocow [ 1354.499019][T17565] bcachefs (loop1): recovering from clean shutdown, journal seq 8 [ 1354.567385][T17565] bcachefs (loop1): alloc_read... done [ 1354.576706][T17565] bcachefs (loop1): stripes_read... done [ 1354.585004][T17565] bcachefs (loop1): snapshots_read... done [ 1354.599917][T17565] bcachefs (loop1): journal_replay... done [ 1354.607475][T17565] bcachefs (loop1): resume_logged_ops... done [ 1354.615019][T17565] bcachefs (loop1): done starting filesystem [ 1354.658528][T17469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1354.684353][ T29] audit: type=1400 audit(2000001109.473:1165): avc: denied { create } for pid=17592 comm="syz.3.3495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1354.741047][ T29] audit: type=1400 audit(2000001109.503:1166): avc: denied { listen } for pid=17592 comm="syz.3.3495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1354.743214][T17565] bcachefs (loop1): going read-write [ 1354.794840][ T29] audit: type=1400 audit(2000001109.503:1167): avc: denied { accept } for pid=17592 comm="syz.3.3495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1355.330453][ T29] audit: type=1326 audit(2000001109.843:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17595 comm="syz.4.3496" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b51375d39 code=0x0 [ 1355.777108][T17469] veth0_vlan: entered promiscuous mode [ 1355.913268][T16185] bcachefs (loop1): shutting down [ 1355.918368][T16185] bcachefs (loop1): going read-only [ 1355.975443][T16185] bcachefs (loop1): finished waiting for writes to stop [ 1355.992912][T17469] veth1_vlan: entered promiscuous mode [ 1356.008403][T16185] bcachefs (loop1): flushing journal and stopping allocators, journal seq 8 [ 1356.039824][T16185] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 8 [ 1356.073384][T16185] bcachefs (loop1): shutdown complete, journal seq 9 [ 1356.083380][T16185] bcachefs (loop1): marking filesystem clean [ 1356.226250][T17469] veth0_macvtap: entered promiscuous mode [ 1356.271195][T17469] veth1_macvtap: entered promiscuous mode [ 1356.291654][T16185] bcachefs (loop1): shutdown complete [ 1356.354019][T17469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.375800][T17469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.389895][T17469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.402576][T17469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.430587][T17469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.450336][T17469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.471635][T17469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.492786][T17469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.531815][T17469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.579203][T17469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.610816][T17469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1356.699677][T17469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.732961][T17469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.776474][T17469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.790383][T17469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.800870][T17469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.811557][T17469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.822423][T17469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.861624][T17469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.891751][T17469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1356.925605][T17469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.984600][T17469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1357.019532][T17469] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.039516][T17469] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.066944][T17469] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.087395][T17469] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.681938][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.713444][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.915755][ T6918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.939750][ T6918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.420266][T17630] loop3: detected capacity change from 0 to 4096 [ 1359.615607][T17631] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3497'. [ 1361.944872][T17639] loop4: detected capacity change from 0 to 256 [ 1362.129618][T17639] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1362.632002][T10732] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.752154][ C0] vkms_vblank_simulate: vblank timer overrun [ 1362.806404][T10732] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.931300][T10732] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.052877][T17642] loop2: detected capacity change from 0 to 32768 [ 1363.068227][T10732] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.188128][T17642] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=ro,metadata_checksum=crc64,data_checksum=xxhash,str_hash=crc32c,nojournal_transaction_names,read_only,nocow [ 1363.217521][T17642] bcachefs (loop2): recovering from clean shutdown, journal seq 8 [ 1363.259612][T17642] bcachefs (loop2): alloc_read... done [ 1363.265198][T17642] bcachefs (loop2): stripes_read... done [ 1363.272249][T17642] bcachefs (loop2): snapshots_read... done [ 1363.282967][T17642] bcachefs (loop2): journal_replay... done [ 1363.289029][T17642] bcachefs (loop2): resume_logged_ops... done [ 1363.298738][T17642] bcachefs (loop2): done starting filesystem [ 1363.331535][T17642] bcachefs (loop2): going read-write [ 1363.363117][T10732] bridge_slave_1: left allmulticast mode [ 1363.374535][T10732] bridge_slave_1: left promiscuous mode [ 1363.380779][T10732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.392338][T10732] bridge_slave_0: left allmulticast mode [ 1363.401967][T10732] bridge_slave_0: left promiscuous mode [ 1363.407816][T10732] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.416052][T16238] bcachefs (loop2): shutting down [ 1363.422474][T16238] bcachefs (loop2): going read-only [ 1363.430116][T16238] bcachefs (loop2): finished waiting for writes to stop [ 1363.443453][T16238] bcachefs (loop2): flushing journal and stopping allocators, journal seq 8 [ 1363.458182][T16238] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 8 [ 1363.498468][T16238] bcachefs (loop2): shutdown complete, journal seq 9 [ 1363.506316][T16238] bcachefs (loop2): marking filesystem clean [ 1363.657966][T16238] bcachefs (loop2): shutdown complete [ 1363.783661][T17658] loop1: detected capacity change from 0 to 64 [ 1364.011406][ T29] audit: type=1400 audit(2000001118.798:1169): avc: denied { rename } for pid=17655 comm="syz.1.3509" name="file6" dev="loop1" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1364.464629][T17663] loop3: detected capacity change from 0 to 512 [ 1364.647252][T16076] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1364.664659][T16076] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1364.674527][T16076] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1364.693848][T16076] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1364.704083][T16076] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1364.707994][T17668] netlink: 'syz.1.3514': attribute type 1 has an invalid length. [ 1364.732495][T16076] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1364.746164][T17668] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3514'. [ 1364.997172][T17671] netlink: zone id is out of range [ 1365.074055][T17671] netlink: del zone limit has 4 unknown bytes [ 1365.216613][ T29] audit: type=1326 audit(2000001119.989:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17662 comm="syz.3.3513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a39375d39 code=0x0 [ 1365.769701][T10732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1365.785040][T10732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1365.800480][T10732] bond0 (unregistering): Released all slaves [ 1366.206931][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.921255][T16076] Bluetooth: hci0: command tx timeout [ 1367.284655][T17696] loop3: detected capacity change from 0 to 4096 [ 1367.404555][T17696] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 1367.626650][T17696] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 1367.684977][T10732] hsr_slave_0: left promiscuous mode [ 1367.733670][T10732] hsr_slave_1: left promiscuous mode [ 1367.746033][T10732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1367.756672][T10732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1367.765441][T10732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1367.773428][T10732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1367.832776][T10732] veth1_macvtap: left promiscuous mode [ 1367.838627][T10732] veth0_macvtap: left promiscuous mode [ 1367.844457][T10732] veth1_vlan: left promiscuous mode [ 1367.851246][T10732] veth0_vlan: left promiscuous mode [ 1368.733944][T17702] loop2: detected capacity change from 0 to 4096 [ 1368.940775][T17705] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1369.002850][T16076] Bluetooth: hci0: command tx timeout [ 1369.235357][T17699] loop4: detected capacity change from 0 to 32768 [ 1369.481698][T17714] loop3: detected capacity change from 0 to 512 [ 1369.515425][ T29] audit: type=1400 audit(2000001124.321:1171): avc: denied { read } for pid=17700 comm="syz.2.3523" name="mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1369.529227][T17714] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1369.538488][ C0] vkms_vblank_simulate: vblank timer overrun [ 1369.560660][ T29] audit: type=1400 audit(2000001124.321:1172): avc: denied { open } for pid=17700 comm="syz.2.3523" path="/dev/input/mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1369.650096][T17714] EXT4-fs (loop3): 1 orphan inode deleted [ 1369.673157][T17714] EXT4-fs (loop3): 1 truncate cleaned up [ 1369.689400][T17714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1369.838051][ C0] vkms_vblank_simulate: vblank timer overrun [ 1369.950604][T17699] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=ro,metadata_checksum=crc64,data_checksum=xxhash,str_hash=crc32c,nojournal_transaction_names,read_only,nocow [ 1369.970407][T17699] bcachefs (loop4): recovering from clean shutdown, journal seq 8 [ 1370.040055][T17699] bcachefs (loop4): alloc_read... done [ 1370.055978][T17699] bcachefs (loop4): stripes_read... done [ 1370.060806][T17720] EXT4-fs error (device loop3): ext4_lookup:1854: inode #15: comm syz.3.3525: iget: bad extra_isize 46 (inode size 256) [ 1370.066140][T17699] bcachefs (loop4): snapshots_read... done [ 1370.091986][T17722] kAFS: unable to lookup cell '' [ 1370.112458][T17720] EXT4-fs (loop3): Remounting filesystem read-only [ 1370.147544][T17699] bcachefs (loop4): journal_replay... done [ 1370.156508][ C0] vkms_vblank_simulate: vblank timer overrun [ 1370.186868][T17699] bcachefs (loop4): resume_logged_ops... done [ 1370.194350][T17699] bcachefs (loop4): done starting filesystem [ 1370.241308][T17699] bcachefs (loop4): going read-write [ 1370.501373][T16451] bcachefs (loop4): shutting down [ 1370.513582][T16451] bcachefs (loop4): going read-only [ 1370.521232][T16183] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1370.534819][T16451] bcachefs (loop4): finished waiting for writes to stop [ 1370.571526][ C0] vkms_vblank_simulate: vblank timer overrun [ 1370.578346][T16451] bcachefs (loop4): flushing journal and stopping allocators, journal seq 8 [ 1370.602914][T16451] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 8 [ 1370.677158][T16451] bcachefs (loop4): shutdown complete, journal seq 9 [ 1370.686589][T16451] bcachefs (loop4): marking filesystem clean [ 1370.827993][T16451] bcachefs (loop4): shutdown complete [ 1371.024945][T10732] team0 (unregistering): Port device team_slave_1 removed [ 1371.106198][ T5090] Bluetooth: hci0: command tx timeout [ 1371.448717][T10732] team0 (unregistering): Port device team_slave_0 removed [ 1373.154137][ T5090] Bluetooth: hci0: command tx timeout [ 1373.185046][T17731] netlink: 'syz.3.3527': attribute type 10 has an invalid length. [ 1373.451490][T17735] loop4: detected capacity change from 0 to 32768 [ 1373.497777][T17666] chnl_net:caif_netlink_parms(): no params data found [ 1373.622111][T17735] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 1373.665771][T17735] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1374.392498][T17735] XFS (loop4): Ending clean mount [ 1374.600358][T17735] XFS (loop4): Quotacheck needed: Please wait. [ 1374.750788][T17735] XFS (loop4): Quotacheck: Done. [ 1374.759725][T17666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.767855][T17666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.776378][T17666] bridge_slave_0: entered allmulticast mode [ 1374.788756][T17666] bridge_slave_0: entered promiscuous mode [ 1374.806665][T17666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.814160][T17666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.821509][T17666] bridge_slave_1: entered allmulticast mode [ 1374.830967][T17666] bridge_slave_1: entered promiscuous mode [ 1374.914765][T17666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1374.931055][T17666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1374.999176][T16451] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1375.098792][T17666] team0: Port device team_slave_0 added [ 1375.134479][T17666] team0: Port device team_slave_1 added [ 1375.400183][ T29] audit: type=1400 audit(2000001130.124:1173): avc: denied { bind } for pid=17758 comm="syz.3.3532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1375.476492][T17666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1375.502349][T17666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1375.528652][T17666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1375.914825][T17666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.032633][T17666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.211437][T17666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1376.569143][T17666] hsr_slave_0: entered promiscuous mode [ 1376.588218][ T29] audit: type=1326 audit(2000001131.394:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17768 comm="syz.3.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a39375d39 code=0x7ffc0000 [ 1376.629232][T17666] hsr_slave_1: entered promiscuous mode [ 1376.644878][ T29] audit: type=1326 audit(2000001131.424:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17768 comm="syz.3.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a39375d39 code=0x7ffc0000 [ 1376.723551][ T29] audit: type=1326 audit(2000001131.434:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17768 comm="syz.3.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a39375d39 code=0x7ffc0000 [ 1376.771970][ T29] audit: type=1326 audit(2000001131.474:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17768 comm="syz.3.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a39375d39 code=0x7ffc0000 [ 1376.831698][ T29] audit: type=1326 audit(2000001131.484:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17768 comm="syz.3.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a39375d39 code=0x7ffc0000 [ 1376.906803][ T29] audit: type=1326 audit(2000001131.494:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17768 comm="syz.3.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a39375d39 code=0x7ffc0000 [ 1376.965257][ T29] audit: type=1326 audit(2000001131.494:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17768 comm="syz.3.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a39375d39 code=0x7ffc0000 [ 1377.071100][ T29] audit: type=1326 audit(2000001131.494:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17768 comm="syz.3.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3a3936cba7 code=0x7ffc0000 [ 1377.131645][ T29] audit: type=1326 audit(2000001131.494:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17768 comm="syz.3.3536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3a39311569 code=0x7ffc0000 [ 1377.263605][T17763] loop1: detected capacity change from 0 to 32768 [ 1377.309453][T17763] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3534 (17763) [ 1377.382928][T17763] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1377.406833][T17763] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1377.427446][T17763] BTRFS info (device loop1): using free-space-tree [ 1377.532466][T17793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3539'. [ 1377.625641][T17793] ------------[ cut here ]------------ [ 1377.633200][T17793] WARNING: CPU: 1 PID: 17793 at net/mac80211/rx.c:5345 ieee80211_rx_list+0x14c7/0x2e90 [ 1377.643294][T17793] Modules linked in: [ 1377.647258][T17793] CPU: 1 PID: 17793 Comm: syz.4.3539 Not tainted 6.10.0-rc5-syzkaller-00012-g626737a5791b #0 [ 1377.657539][T17793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1377.667926][T17793] RIP: 0010:ieee80211_rx_list+0x14c7/0x2e90 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 1377.673978][T17793] Code: 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e ca 19 00 00 8b 53 70 4c 89 ee 48 89 ef e8 a4 da fd ff e9 fa ef ff ff e8 fa 0d 30 f7 90 <0f> 0b 90 e9 15 ec ff ff e8 ec 0d 30 f7 90 0f 0b 90 e9 f3 ef ff ff [ 1377.693739][T17793] RSP: 0018:ffffc9000313eba0 EFLAGS: 00010246 [ 1377.700419][T17793] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9000e382000 [ 1377.708569][T17793] RDX: 0000000000040000 RSI: ffffffff8a5dd5e6 RDI: 0000000000000005 [ 1377.710117][T17797] loop4: detected capacity change from 0 to 164 [ 1377.718063][T17793] RBP: ffff88806a8ec8c0 R08: 0000000000000005 R09: 0000000000000000 [ 1377.734476][T17793] R10: 0000000000000000 R11: 0000000000000002 R12: ffff88806a8ec8c0 [ 1377.746834][T17793] R13: ffff88806a8ec998 R14: 0000000000000000 R15: 0000000000000001 [ 1377.754960][T17793] FS: 00007f8b5207c6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1377.764008][T17793] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1377.770667][T17793] CR2: 00007f3a3a0f9d58 CR3: 000000006ff3c000 CR4: 00000000003506f0 [ 1377.778796][T17793] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1377.786880][T17793] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1377.795072][T17793] Call Trace: [ 1377.798397][T17793] [ 1377.801449][T17793] ? show_regs+0x8c/0xa0 [ 1377.805776][T17793] ? __warn+0xe5/0x3c0 [ 1377.809933][T17793] ? ieee80211_rx_list+0x14c7/0x2e90 [ 1377.815454][T17793] ? report_bug+0x3c0/0x580 [ 1377.820024][T17793] ? handle_bug+0x3d/0x70 [ 1377.826270][T17793] ? exc_invalid_op+0x17/0x50 [ 1377.831040][T17793] ? asm_exc_invalid_op+0x1a/0x20 [ 1377.837268][T17793] ? ieee80211_rx_list+0x14c6/0x2e90 [ 1377.842677][T17793] ? ieee80211_rx_list+0x14c7/0x2e90 [ 1377.848049][T17793] ? hlock_class+0x4e/0x130 [ 1377.852701][T17793] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1377.858255][T17793] ? __pfx_lock_acquire+0x10/0x10 [ 1377.863440][T17793] ? lock_acquire+0x1b1/0x560 [ 1377.868188][T17793] ? find_held_lock+0x2d/0x110 [ 1377.873704][T17793] ? skb_dequeue+0x126/0x180 [ 1377.878368][T17793] ieee80211_rx_napi+0xdd/0x400 [ 1377.883469][T17793] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1377.889017][T17793] ? lockdep_hardirqs_on+0x7c/0x110 [ 1377.894339][T17793] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1377.900215][T17793] ieee80211_handle_queued_frames+0xd5/0x130 [ 1377.906464][T17793] ieee80211_stop_device+0x1e/0xe0 [ 1377.911768][T17793] ieee80211_do_stop+0x18bd/0x2200 [ 1377.917189][T17793] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 1377.923131][T17793] ? __pfx_lock_release+0x10/0x10 [ 1377.929860][T17793] ? mark_held_locks+0x9f/0xe0 [ 1377.930209][T17797] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 1377.935907][T17793] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1377.948766][T17793] ieee80211_stop+0x11e/0x6b0 [ 1377.953730][T17793] ? __pfx_ieee80211_stop+0x10/0x10 [ 1377.959012][T17793] __dev_close_many+0x1c5/0x310 [ 1377.964032][T17793] ? __pfx___dev_close_many+0x10/0x10 [ 1377.969489][T17793] ? preempt_schedule_thunk+0x1a/0x30 [ 1377.975053][T17793] __dev_change_flags+0x4dc/0x720 [ 1377.980156][T17793] ? __pfx___dev_change_flags+0x10/0x10 [ 1377.987456][T17793] ? __pfx_mark_lock+0x10/0x10 [ 1377.992390][T17793] dev_change_flags+0x8f/0x160 [ 1377.997227][T17793] do_setlink+0x1a42/0x3ff0 [ 1378.002763][T17793] ? __pfx_do_setlink+0x10/0x10 [ 1378.007701][T17793] ? __orc_find+0x104/0x130 [ 1378.012405][T17793] ? stack_access_ok+0xf9/0x270 [ 1378.017330][T17793] ? __module_address+0x55/0x3c0 [ 1378.022476][T17793] ? is_module_text_address+0x145/0x1a0 [ 1378.028100][T17793] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1378.037278][T17793] ? kernel_text_address+0x6e/0xe0 [ 1378.043772][T17793] ? __kernel_text_address+0xd/0x40 [ 1378.049085][T17793] ? unwind_get_return_address+0x45/0xe0 [ 1378.054857][T17793] ? __asan_memset+0x23/0x50 [ 1378.059489][T17793] ? __nla_validate_parse+0x601/0x2880 [ 1378.065196][T17793] ? __pfx___nla_validate_parse+0x10/0x10 [ 1378.071256][T17793] ? stack_trace_save+0x95/0xd0 [ 1378.076299][T17793] ?