last executing test programs: 3m9.522965443s ago: executing program 1 (id=361): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x44201a6, r3}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r6}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r8}) 3m9.377233325s ago: executing program 1 (id=363): syz_mount_image$nilfs2(&(0x7f0000000540), &(0x7f0000000600)='./file0\x00', 0x10040, &(0x7f00000007c0)=ANY=[@ANYRES16, @ANYBLOB="cec24364b04814a9cffedeaef9b9ba2ef32d14a9c8818900f0a8c101a6b2d91df25c368f4a428c41bab16d1a2a03e02c3e620efe8c37174226fc7d6b97d687eb8608e291", @ANYRESHEX=0x0, @ANYBLOB="1d36b10b0ea32a53d6822ab8ea13aa0b64e397c64d84b4c7e99adc19ee2d70727b53b0c82b780f1f57d4011185abc4bb9bdbe9757acbb1b3fc08826974d35664f8ba19f281e01b8e71f7deb076d6970f538fa160ff75f3a02a17e14656520e2cb833cb4345581225cb777c4f0ae210fd468945bced117f393326168efd6e3f3ecb58d62b9a2a5c6ba45cdbe1e7bec0e3ad243602d48e617a85ea26379258d155d594a871138db295ca021dda3268997584ee17c53aac0917a47023f1b6bac7560b77bc1518b905dcbe7b76b74a72d9d0c65e2aaf7b23a6bd2622cc300a0401dc01a3a6081b929a5100d3fe", @ANYBLOB="06cc442cca3ef9e847411aa7eb2cc6b7b58e6fd2dfd7a010fa71d130df747268fc91dc48254363af11abb85e011899129fa2ba90692ca8c6936c758e1fd4a80ee34863bdbc10875752195f9c1c71280be7b3cd897aa18aabcd5a23447b6be56d61ecd738cea1e890853c0f661015e793d994ad6f04a232983692fed9209e921e9d9b8d9db3cbce586ae2c21c42ae983e93ca33c292d237f28bed0e7bbbad7b8134cb6c3482606d3bb1f878ed9cc77d"], 0x1, 0xf82, &(0x7f0000003080)="$eJzs3U9sHNX9APA36/W/2MRr4AcGfoQUWhEo2CGJ1PQWBOqlEuLSOygkNMJQ1NBKREBMD4hKiCIhThUHEBdKpRSpSKBKFeqp7alVb+0F9UKlKpWCemgjJa5iv1nvPu9k12N7dtf7+UjffX7zZuf7HXsTz4xn3wZgZNXWHo8dW8hCeOeztx99+ansk2vL7mqucXDtMYu9RghhvKWfJdv7Ii64cumlk53aLBxZe8z74bGLzefOhBBWwsHweWiEj5aWv/rw3UcOffza1C1vnnvmlV3a/aZ0PwAAYC+68Mflv973jz88MH/5woETYbK5PD8+b8T+TDzuPxwPlPPj5Vpo72ct0WoiWW8sRi1ZbyxZr57kqRfkG0+2M16w3kSXfGMtyzrtJwAAAAyj/Ly2EbLaYlu/VltcXD/vv+aLuYls8bkzy6fP9qlQAAAAoLR/n1+76XaIY2oAahBpTOcvsK0976Pvbv0524paxfnqFecbmSj3ehNCCCGE2LlwPCKGIFbnKrzYAAAAANBhvrBNVnZ2pq7m1hq95b/4cK3z82EHJK+/zdNO7PDr//r5pzavUGn+DnY//3if8193/z941f84AACUt1ePJvP9yo+j83kM0nkEx9qeNTO21fOPWrKd+hbrLJpXcFjmGyyqc6ziOsoqqn+rP8d+Kao/nQ9zUBXVn87TOaiK6p+suI6yiurvcOUnDOI/66L6pyuuo6yi+vdVXEdZRfXPVFxHWUX1z1ZcR1lF9d9QcR1lFdW/v+I6yiqqf1huqy2qv1FxHWUV1T+/3gz8YURR/TdWXEdZRfXfVHEdZRXVf3PFdfTLnbHNvw8HCtab6XDwN3AHgwAAAEBH/x36+f9GNOoDUIMQQgx9vLr+y7B9+VSHZWJbURuAGnYrpju9hoQQQoiBjPN9vPYAAAAADIb8fQH5u95Xo3x8bNP4396/9piP11vHpzY2kI+Pd9n+RJfxyS7jAAAAQAi/ef30bW9lG/Pdpe/p3+p8ePm8UdPhk6uhxDxG6XyEW82/3XnPtpu/84QjwzIbGwAAAHtV9p3Pr97/6HsvzF++cOBEy9nv1Xi+m88DWo/XBj6N/fy+gNmkn+Xn0Cfa89QK1kuvD9xQtL3Ht7mjAAAAMMLy8/dGyGqLLefdjVCrLS5unI8vhPHs9JnlU4djP/98lt/PjU9eW/5QxXUDAAAAvds43+98/p9/ju9CmMgWnzuzfPrsen+2uXy81npdYG5jedZ6XaCRLD9SsPxo7MfP7wzfn5teW7548gfLT+30zgMAAMCIOPviuWeeXF4+9cPR+aIeQtjWdsIg7IUvfLGrX/T7fyYAAGCnffnl2+M/Ojr72/X3/2/Mf3c1fnEw9htxbr8/xeX5fQL5+wA2vV//ifY8c0XrPd++XiNZbyzGZFL3VMt2wtp8g+3Pmy/K12jfzkRBvpkk32ySL52noJ6sn3WYSzB0mAkwX28uWZ7Ow1hPcmRJ/rs75AIAAIDc0gvPPr909sVzD5559smnTz196rmjR45/+/jxww9966Gltfv6l1rv7gcAAACG0cZNv/2uBAAAAAAAAAAAAAAAAAAAAEZXFR8n1u99BAAAgFH3r/MhhBUhCiL/gMF+1zHskQ1ADbsXq5P9r2FvR/DvUAghhBDbjP6e9005lhmMWF1NP2keAAAAYHddufTSydZ2k5VsR/M1t9ZYb67GvHk7++Bf5q9FvtrFh9uvl+zb0WoYdVW//uUf1PyTHcc/eHVn869diG9s9Lv//1dr38CJtcd67E33mvfepV8sNPOHEG6v95g/3f/He83Y7lCS/97QW/7V95L8T7T1ar3mvy/Jv6/H/Jv2//miDFPXzX9/zL8Q+4fu6TV/+y5OJtl6fQF8M9n/p0Kv+ZP9b/SYMPFAzA8Ao6j523z1fH8L2WH5UUJ+PD0T+/n+5ges6d0PWz3+ryXbqW+78vbt5sdBt8Z+86hupT1vbqv159+X2djeULLO1LDcVVJU/079HHdbUf3jFddRVlH9ExXXUVZR/Z3P3gdPUf3XP3scHEX193whos+K6h+W68pF9c9UXEdZRfXPVlxHWUX1b/X3eL8U1b+/4jrKKqp/ruI6yiqqv+RltcoV1T9fcR1lFdV/Y8V1lFVU/00V11FWUf03V1xHv9wR26Lz4fz8cy6O5f1G0p/s8L3s+Y8hAAAAwK7650DO/9dy5aDvtQghhBBiGGJsAGoQYpjjP6vr+l2HEGL3YnW1n1cf6LdsiO4VB2Dn7O5sFgw6P//R5uc/2vz8uZ78L/FZ0s+NdRmvdxkf7zI+kYxnyRMni8ajm5LtrubXNaObu4z/X9yDovH9yfN/nIzf2mX7C13Gb+syfnuX8Tu6jAMAADAabomt80MAAADYu17+5adv/PreJy7NX75w4ESY2DTv/OHYn4x/W3899tN573Pj8W/+P4n992P7u9j+PVnf/ScAAACw+/LPifH3fwAAANi78s8pdf4PAAAAe9d8bJ3/AwAAwN51Y2yd/wMAAMAelk11Xhzb/LrA3bHtdV4/AGDw/X9s74ztgdjeFduvxTY/Drgntl+vqD4AYOf8/Hs/Pf5WtjHf/9Fk/EpcnrebrKxfKchq7TP5T8d2X2y/0WM96ecB9Jo/t7/HPLuVf26b+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvaO29njs2EIWwjufvf3ozybe+PO1ZXc11zi49pjFXiOEMN58Xj660f9VXPHKpZdOtrZXY5uFIyELWXN5eOxiM9NMCGElHAyfh0b4aGn5qw/ffeTQx69N3fLmuWde2cVvQdv+AQAAwF70vwAAAP//7lUWHg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x40384708, &(0x7f0000000040)={0x8, 0x1ff, 0x9, 0xffffffff, 0x1a, "3eccd2000500"}) 3m7.714630201s ago: executing program 1 (id=367): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00142102800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 3m7.038111142s ago: executing program 1 (id=370): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r1}, 0x18) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) 3m6.662827698s ago: executing program 1 (id=373): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r0) 3m5.014920003s ago: executing program 1 (id=379): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r1, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) sendmmsg$sock(r2, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="1d", 0x1}], 0x1}}], 0x1, 0x4004000) r4 = dup2(r3, r0) close_range(r4, 0xffffffffffffffff, 0x0) 3m4.769795688s ago: executing program 32 (id=379): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r1, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) sendmmsg$sock(r2, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="1d", 0x1}], 0x1}}], 0x1, 0x4004000) r4 = dup2(r3, r0) close_range(r4, 0xffffffffffffffff, 0x0) 14.63498633s ago: executing program 3 (id=722): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="9745000000000076065884000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x5, 0xf7af, 0x8000, 0x8, 0x0, "4cb8b210acdc716f64cf76062d59a56f2584c4"}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sync() sync() 13.115005594s ago: executing program 3 (id=728): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x6004, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r3, 0xf50f, 0x0) 10.897035279s ago: executing program 2 (id=730): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) 10.459468266s ago: executing program 3 (id=732): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x60, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x61, 0x1, {0x1}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 10.446807466s ago: executing program 4 (id=733): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x70a, 0x41e3, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) timer_create(0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x208200, 0x2c) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000140)={0x100, r6}, 0x0) 9.759741827s ago: executing program 2 (id=734): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) clock_nanosleep(0x9, 0x2000000, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 8.775756602s ago: executing program 4 (id=736): write$binfmt_register(0xffffffffffffffff, &(0x7f0000027b40)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xffffffffffffffff, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xe1>8\x94\x02O\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xd7\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xb3\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8jN\x9a8\xab\xc6\x86\xab\xdbWyN', 0x3a, './file0'}, 0x1f5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) 7.798561088s ago: executing program 4 (id=737): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r4}) 7.572319482s ago: executing program 0 (id=738): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260300000fff0748670600000f000000170300000ee60020bf050000000000001d360000000000006507f9ff01000000070700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733b9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819c75c8ac86d8a297dff0445a13d006723888fb126a163f16fb2ad9bc1162ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f3767ce603c9d4867b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424ba1e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef58034c252629aefbfd5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b68f2e2ec7bebe423d4baae0e27845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bf1b3e6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a9586571182526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72b1598a12abddf58ac778bff2f1e49306a1d2f80b2a7d7a28f3997ee60793c62ffee96535e47adac9f367395cf26056a4b76d646f7682f21beafcdb7a9c07acfd145487426f1a009327b8ec6e695e6a7ddcc2c9151cc9c4efa413fa1e521b398151247104bc47748199441cf298e925ef2e3374f4ec0193b38a355c35ee44962fceb3f418510742c93a442f857733b74b6d9197cd62784d7f2afa6a4bc5cae18e33435665250241a7ffd96fc0790000009c17c570096bb75de737107e029b18ec0e61ab3761366452a1c6e3e3c912170f874555aaefc9644cffa768eb2b47c6b040698746df86026730db64859c46cdfb775b86214cfd1932d5ad87c56ea4f38bca780000000000000000000000003bf179c894590cb06b546082451bb735e7152afd5340683663e8effbfb49855ec98703a1e141ab7510fc0e3b081e72d25bfa4e52bedadd11e152bb1dcfcfe942b97b813cf4cdd8626ecfb630425db071c1bfdb03fee96f80b1a96f9427e17edfdc902749ccbab746e26a3a46527b3a32c49dab9608ab1dca3982590c1e78ff5c87d10eef5c3707974981c01c00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) setreuid(0xee01, 0xee00) utime(0x0, &(0x7f0000000140)={0x7, 0x5}) 7.571190591s ago: executing program 3 (id=739): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 5.598157562s ago: executing program 0 (id=740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x1f, 0x80000, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 5.597818602s ago: executing program 3 (id=741): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x6004, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r2, 0xf50f, 0x0) 5.589248243s ago: executing program 2 (id=742): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket(0x840000000002, 0x3, 0xc) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 5.573751013s ago: executing program 4 (id=743): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) 4.51813934s ago: executing program 4 (id=744): socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 3.659929022s ago: executing program 4 (id=745): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f3044d074000010203010902240001010330050904000801030101000f000000000000000b09058103100002ba07"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x19, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000b080003400000000008000440000000300500020007000000240001800b0001007470726f78790000140002800800034000000016080001400000000a0900010073797a30"], 0xf8}}, 0x0) 3.011889173s ago: executing program 2 (id=746): write$binfmt_register(0xffffffffffffffff, &(0x7f0000027b40)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xffffffffffffffff, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xe1>8\x94\x02O\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xd7\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xb3\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8jN\x9a8\xab\xc6\x86\xab\xdbWyN', 0x3a, './file0'}, 0x1f5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) 3.010970163s ago: executing program 0 (id=754): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 1.969294349s ago: executing program 0 (id=747): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sg(&(0x7f0000000340), 0xfff, 0x40000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="120183008000", 0x0, 0x0, 0x4, 0x0, 0x0}) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 1.041728204s ago: executing program 0 (id=748): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)={0x68, r4, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x4a, 0x33, @probe_request={{{}, {}, @device_b, @device_b}, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x95ce, 0xe9}}, @val={0x72, 0x6}}}]}, 0x68}}, 0x14) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 1.041474084s ago: executing program 2 (id=749): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe2$9p(0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 733.749639ms ago: executing program 3 (id=750): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="50000000080211000001ffffffffffff0802110000000000000000000000000064000100000602020202020201010b"], 0x48) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000021c0)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110000001000000002"], 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200004a000000c0001"], 0x3c) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x44, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3d}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 994.16µs ago: executing program 2 (id=751): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) setreuid(0xee01, 0xee00) utime(0x0, &(0x7f0000000140)={0x7, 0x5}) 0s ago: executing program 0 (id=760): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) kernel console output (not intermixed with test programs): _1 (retrying later): interface not active [ 63.534932][ T5770] hsr_slave_0: entered promiscuous mode [ 63.541232][ T5770] hsr_slave_1: entered promiscuous mode [ 63.551698][ T5772] hsr_slave_0: entered promiscuous mode [ 63.558315][ T5772] hsr_slave_1: entered promiscuous mode [ 63.564813][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.572607][ T5772] Cannot create hsr debugfs directory [ 63.603875][ T5765] hsr_slave_0: entered promiscuous mode [ 63.610075][ T5765] hsr_slave_1: entered promiscuous mode [ 63.616600][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.624228][ T5765] Cannot create hsr debugfs directory [ 63.681830][ T5766] hsr_slave_0: entered promiscuous mode [ 63.688127][ T5766] hsr_slave_1: entered promiscuous mode [ 63.695074][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.702616][ T5766] Cannot create hsr debugfs directory [ 63.744179][ T5780] Bluetooth: hci2: command tx timeout [ 63.747372][ T5773] Bluetooth: hci0: command tx timeout [ 63.749743][ T5089] Bluetooth: hci1: command tx timeout [ 63.823358][ T5089] Bluetooth: hci3: command tx timeout [ 64.086162][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.098472][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.122378][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.138716][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.161274][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.170418][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.191013][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.200906][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.276616][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.288795][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.299571][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.318861][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.417024][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.430694][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.441660][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.452356][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.545213][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.560749][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.607696][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.619453][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.634088][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.659135][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.666390][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.688557][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.695710][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.706512][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.713666][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.729614][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.749346][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.756451][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.777530][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.784684][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.835358][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.842493][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.937255][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.980866][ T5765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.035455][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.067215][ T1310] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.074418][ T1310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.124978][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.132466][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.228992][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.331934][ T5772] veth0_vlan: entered promiscuous mode [ 65.367555][ T5772] veth1_vlan: entered promiscuous mode [ 65.471924][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.486583][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.495651][ T5772] veth0_macvtap: entered promiscuous mode [ 65.529508][ T5772] veth1_macvtap: entered promiscuous mode [ 65.598609][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.619327][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.634924][ T5765] veth0_vlan: entered promiscuous mode [ 65.649008][ T5766] veth0_vlan: entered promiscuous mode [ 65.660819][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.670233][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.680735][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.689555][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.709038][ T5765] veth1_vlan: entered promiscuous mode [ 65.731340][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.760574][ T5766] veth1_vlan: entered promiscuous mode [ 65.823344][ T5089] Bluetooth: hci2: command tx timeout [ 65.823452][ T5780] Bluetooth: hci0: command tx timeout [ 65.834052][ T5089] Bluetooth: hci1: command tx timeout [ 65.850540][ T5765] veth0_macvtap: entered promiscuous mode [ 65.895436][ T5765] veth1_macvtap: entered promiscuous mode [ 65.905434][ T5780] Bluetooth: hci3: command tx timeout [ 65.914748][ T5766] veth0_macvtap: entered promiscuous mode [ 65.937163][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.941085][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.956964][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.969820][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.975473][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.996858][ T5766] veth1_macvtap: entered promiscuous mode [ 66.014792][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.025614][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.037442][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.046752][ T5770] veth0_vlan: entered promiscuous mode [ 66.091916][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.094623][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.101311][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.114275][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.118721][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.134487][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.160314][ T5770] veth1_vlan: entered promiscuous mode [ 66.168807][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.180198][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.192285][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.205152][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.217052][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.229168][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.240053][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.250225][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.260933][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.273021][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.316286][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.325606][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.334975][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.343874][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.538702][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.561719][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.580364][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.588296][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.727355][ T5770] veth0_macvtap: entered promiscuous mode [ 66.750184][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.056187][ T5770] veth1_macvtap: entered promiscuous mode [ 67.098797][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.397450][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.441774][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.452211][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.464419][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.474324][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.484804][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.502912][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.543719][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.551767][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.647057][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.680523][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.711896][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.738621][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.749287][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.759783][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.772010][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.802344][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.811237][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.863334][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.872254][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.963880][ T5780] Bluetooth: hci0: command tx timeout [ 67.969853][ T5780] Bluetooth: hci1: command tx timeout [ 67.977847][ T5089] Bluetooth: hci2: command tx timeout [ 67.984739][ T5780] Bluetooth: hci3: command tx timeout [ 69.361199][ T5877] syz.3.4[5877]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 69.370581][ T1310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.388360][ T1310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.401312][ T5877] loop3: detected capacity change from 0 to 128 [ 69.439125][ T5877] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.462555][ T5877] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.477270][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.513641][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.673422][ T27] audit: type=1326 audit(1751322406.475:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228578e929 code=0x7fc00000 [ 69.773409][ T27] audit: type=1326 audit(1751322406.475:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f228578e929 code=0x7fc00000 [ 69.847703][ T27] audit: type=1326 audit(1751322406.475:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228578e929 code=0x7fc00000 [ 69.913297][ T27] audit: type=1326 audit(1751322406.475:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228578e929 code=0x7fc00000 [ 69.944779][ T27] audit: type=1326 audit(1751322406.475:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228578e929 code=0x7fc00000 [ 69.978707][ T27] audit: type=1326 audit(1751322406.475:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228578e929 code=0x7fc00000 [ 70.007972][ T27] audit: type=1326 audit(1751322406.475:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228578e929 code=0x7fc00000 [ 70.030280][ T27] audit: type=1326 audit(1751322406.475:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228578e929 code=0x7fc00000 [ 70.053777][ T27] audit: type=1326 audit(1751322406.475:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228578e929 code=0x7fc00000 [ 70.077536][ T5773] Bluetooth: hci3: command tx timeout [ 70.083271][ T5780] Bluetooth: hci2: command tx timeout [ 70.090358][ T5089] Bluetooth: hci1: command tx timeout [ 70.097169][ T50] Bluetooth: hci0: command tx timeout [ 70.102921][ T27] audit: type=1326 audit(1751322406.475:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228578e929 code=0x7fc00000 [ 70.161836][ T5887] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.103659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.354138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.425458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 71.525352][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.551118][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.583539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.591849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.628333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.744287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.834113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 71.842595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 71.939853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.994758][ T5926] process 'syz.2.17' launched './file1' with NULL argv: empty string added [ 74.751013][ T5928] loop1: detected capacity change from 0 to 8 [ 74.763400][ T5928] SQUASHFS error: zlib decompression failed, data probably corrupt [ 74.771412][ T5928] SQUASHFS error: Failed to read block 0x9b: -5 [ 74.777669][ T5928] SQUASHFS error: Unable to read metadata cache entry [99] [ 74.784902][ T5928] SQUASHFS error: Unable to read inode 0x127 [ 74.869652][ T5780] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 74.878686][ T5780] Bluetooth: hci1: Injecting HCI hardware error event [ 74.886678][ T5780] Bluetooth: hci1: hardware error 0x00 [ 75.030348][ T5771] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.958922][ T5937] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 76.042814][ T5942] loop2: detected capacity change from 0 to 1024 [ 76.256803][ T5945] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.063505][ T5780] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 77.505683][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 77.505697][ T27] audit: type=1326 audit(1751322414.315:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5477d8e929 code=0x7ffc0000 [ 77.531272][ T5962] loop2: detected capacity change from 0 to 1024 [ 77.573276][ T27] audit: type=1326 audit(1751322414.315:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f5477d8e929 code=0x7ffc0000 [ 77.598283][ T5962] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.619634][ T5962] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 77.661981][ T27] audit: type=1326 audit(1751322414.315:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5477d8e929 code=0x7ffc0000 [ 77.684646][ T5962] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 77.751788][ T5962] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 2: comm syz.2.26: lblock 2 mapped to illegal pblock 2 (length 1) [ 77.828920][ T27] audit: type=1326 audit(1751322414.315:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5477d8e929 code=0x7ffc0000 [ 77.844452][ T5962] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 77.871070][ T27] audit: type=1326 audit(1751322414.315:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5477d8e929 code=0x7ffc0000 [ 77.926740][ T5962] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 48: comm syz.2.26: lblock 0 mapped to illegal pblock 48 (length 1) [ 77.928730][ T27] audit: type=1326 audit(1751322414.315:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5477d8e963 code=0x7ffc0000 [ 77.971157][ T27] audit: type=1326 audit(1751322414.315:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5477d8d3df code=0x7ffc0000 [ 78.012604][ T5962] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 78.041588][ T5962] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.26: Failed to acquire dquot type 0 [ 78.119828][ T5962] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 78.150420][ T5962] EXT4-fs error (device loop2): ext4_evict_inode:252: inode #11: comm syz.2.26: mark_inode_dirty error [ 78.168479][ T27] audit: type=1326 audit(1751322414.315:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5959 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5477d8e9b7 code=0x7ffc0000 [ 78.200520][ T5962] EXT4-fs warning (device loop2): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 78.244638][ T5962] EXT4-fs (loop2): 1 orphan inode deleted [ 78.276631][ T5962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.301966][ T48] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 78.348237][ T48] EXT4-fs error (device loop2): ext4_release_dquot:6974: comm kworker/u4:3: Failed to release dquot type 0 [ 78.373639][ T5962] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.395758][ T5962] EXT4-fs error (device loop2): __ext4_get_inode_loc:4483: comm syz.2.26: Invalid inode table block 1 in block_group 0 [ 78.436853][ T5962] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 78.472495][ T5962] EXT4-fs error (device loop2): ext4_quota_off:7222: inode #3: comm syz.2.26: mark_inode_dirty error [ 79.094674][ T5982] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.637362][ T5975] loop0: detected capacity change from 0 to 4096 [ 80.245080][ T5988] netlink: 'syz.3.35': attribute type 21 has an invalid length. [ 80.261572][ T5988] netlink: 132 bytes leftover after parsing attributes in process `syz.3.35'. [ 80.318080][ T5988] syz.3.35 uses obsolete (PF_INET,SOCK_PACKET) [ 82.954936][ T5990] sched: RT throttling activated [ 83.526269][ T28] cfg80211: failed to load regulatory.db [ 83.531641][ T5995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.36'. [ 83.565554][ T5995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.36'. [ 83.582321][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'. [ 83.603637][ T6001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.38'. [ 83.661992][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'. [ 83.687577][ T6004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.39'. [ 83.740252][ T6005] syz_tun: entered promiscuous mode [ 83.882852][ T6005] batadv_slave_0: entered promiscuous mode [ 83.913179][ T6005] hsr1: entered allmulticast mode [ 84.137027][ T6008] mmap: syz.2.40 (6008): VmData 37736448 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 86.401084][ T6031] syz.1.46 (6031): attempted to duplicate a private mapping with mremap. This is not supported. [ 86.415408][ T6031] loop1: detected capacity change from 0 to 128 [ 86.519656][ T6031] FAT-fs (loop1): Directory bread(block 32) failed [ 86.573837][ T6031] FAT-fs (loop1): Directory bread(block 33) failed [ 86.661928][ T6031] FAT-fs (loop1): Directory bread(block 34) failed [ 86.677814][ T6031] FAT-fs (loop1): Directory bread(block 35) failed [ 86.700469][ T6031] FAT-fs (loop1): Directory bread(block 36) failed [ 87.228686][ T6031] FAT-fs (loop1): Directory bread(block 37) failed [ 87.278708][ T6031] FAT-fs (loop1): Directory bread(block 38) failed [ 87.285430][ T6031] FAT-fs (loop1): Directory bread(block 39) failed [ 87.292042][ T6031] FAT-fs (loop1): Directory bread(block 40) failed [ 88.213195][ T6031] FAT-fs (loop1): Directory bread(block 41) failed [ 89.379465][ T6031] syz.1.46: attempt to access beyond end of device [ 89.379465][ T6031] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 89.403683][ T6031] FAT-fs (loop1): Filesystem has been set read-only [ 89.419260][ T6050] loop2: detected capacity change from 0 to 512 [ 89.443462][ T6031] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 89.582597][ T6050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.602742][ T6050] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.343840][ T6050] syz.2.50 (6050) used greatest stack depth: 20304 bytes left [ 91.371160][ T6068] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.446245][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.712739][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 94.798425][ T6074] warning: `syz.0.58' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.069197][ T6076] dccp_close: ABORT with 32 bytes unread [ 97.165889][ T6102] sit0: entered promiscuous mode [ 97.208523][ T6102] netlink: 21 bytes leftover after parsing attributes in process `syz.2.64'. [ 97.346055][ T6100] kvm: emulating exchange as write [ 100.565633][ T6132] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.72'. [ 100.766636][ T6132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.72'. [ 101.461731][ T6139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.469413][ T6139] IPv6: NLM_F_CREATE should be set when creating new route [ 101.493663][ T6139] lo: entered allmulticast mode [ 101.670874][ T6139] tunl0: entered allmulticast mode [ 101.690524][ T6139] gre0: entered allmulticast mode [ 102.435813][ T6139] gretap0: entered allmulticast mode [ 102.647873][ T6139] erspan0: entered allmulticast mode [ 102.783855][ T6139] ip_vti0: entered allmulticast mode [ 104.398968][ T6139] ip6_vti0: entered allmulticast mode [ 104.460556][ T6139] sit0: entered allmulticast mode [ 104.518678][ T6139] ip6tnl0: entered allmulticast mode [ 104.589010][ T6139] ip6gre0: entered allmulticast mode [ 104.645907][ T6139] syz_tun: entered allmulticast mode [ 104.651501][ T6156] loop3: detected capacity change from 0 to 8192 [ 104.673045][ T6139] ip6gretap0: entered allmulticast mode [ 104.762165][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.770666][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.785751][ T6139] bridge0: entered allmulticast mode [ 104.865771][ T6139] vcan0: entered allmulticast mode [ 104.893772][ T6139] bond0: entered allmulticast mode [ 104.901924][ T6139] bond_slave_0: entered allmulticast mode [ 104.913269][ T6139] bond_slave_1: entered allmulticast mode [ 104.986394][ T6139] team0: entered allmulticast mode [ 105.008053][ T6139] team_slave_0: entered allmulticast mode [ 105.034442][ T6139] team_slave_1: entered allmulticast mode [ 105.077387][ T6139] dummy0: entered allmulticast mode [ 105.154747][ T6139] nlmon0: entered allmulticast mode [ 105.162339][ T6139] caif0: entered allmulticast mode [ 105.193808][ T6139] batadv0: entered allmulticast mode [ 105.238655][ T6139] vxcan0: entered allmulticast mode [ 105.273041][ T6139] vxcan1: entered allmulticast mode [ 105.292841][ T6139] veth0: entered allmulticast mode [ 105.347878][ T6139] veth1: entered allmulticast mode [ 105.431122][ T6139] wg0: entered allmulticast mode [ 105.460504][ T6139] wg1: entered allmulticast mode [ 105.526342][ T6139] wg2: entered allmulticast mode [ 105.590278][ T6139] veth0_to_bridge: entered allmulticast mode [ 105.689694][ T6139] veth1_to_bridge: entered allmulticast mode [ 105.850554][ T6167] loop0: detected capacity change from 0 to 1764 [ 105.950120][ T6139] veth0_to_bond: entered allmulticast mode [ 105.981293][ T6139] veth1_to_bond: entered allmulticast mode [ 106.017377][ T6139] veth0_to_team: entered allmulticast mode [ 106.837313][ T6139] veth1_to_team: entered allmulticast mode [ 106.912069][ T6139] veth0_to_batadv: entered allmulticast mode [ 106.933917][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.947957][ T6139] batadv_slave_0: entered allmulticast mode [ 106.972704][ T6139] veth1_to_batadv: entered allmulticast mode [ 106.987282][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.004755][ T6139] batadv_slave_1: entered allmulticast mode [ 107.028462][ T6139] xfrm0: entered allmulticast mode [ 107.052146][ T6139] veth0_to_hsr: entered allmulticast mode [ 107.090238][ T6139] hsr_slave_0: entered allmulticast mode [ 107.114232][ T6139] veth1_to_hsr: entered allmulticast mode [ 107.158718][ T6139] hsr_slave_1: entered allmulticast mode [ 107.192027][ T6139] hsr0: entered allmulticast mode [ 107.227137][ T6139] veth1_virt_wifi: entered allmulticast mode [ 107.241436][ T6139] veth0_virt_wifi: entered allmulticast mode [ 107.255296][ T6139] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 107.279183][ T6139] veth1_vlan: entered allmulticast mode [ 107.310034][ T6139] veth0_vlan: entered allmulticast mode [ 107.362708][ T6139] vlan0: entered allmulticast mode [ 107.385574][ T6139] vlan1: entered allmulticast mode [ 107.402102][ T6139] macvlan0: entered allmulticast mode [ 107.438280][ T6139] macvlan1: entered allmulticast mode [ 107.449995][ T6139] ipvlan0: entered allmulticast mode [ 107.463302][ T6139] ipvlan1: entered allmulticast mode [ 107.475087][ T6139] veth1_macvtap: entered allmulticast mode [ 107.499367][ T6139] veth0_macvtap: entered allmulticast mode [ 107.526072][ T6139] macvtap0: entered allmulticast mode [ 107.556604][ T6139] macsec0: entered allmulticast mode [ 107.582923][ T6139] geneve0: entered allmulticast mode [ 107.603529][ T6139] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.612439][ T6139] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.621878][ T6139] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.630822][ T6139] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.645823][ T6139] geneve1: entered allmulticast mode [ 107.675650][ T6139] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 107.699613][ T6139] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 107.732179][ T6139] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 107.756065][ T6139] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 107.772435][ T6139] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 107.800458][ T6139] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 108.542487][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 108.853178][ T6190] hsr_slave_1 (unregistering): left promiscuous mode [ 109.042965][ T6204] wireguard0: entered promiscuous mode [ 109.048782][ T6204] wireguard0: entered allmulticast mode [ 110.049144][ T6209] loop1: detected capacity change from 0 to 1024 [ 112.500747][ T6227] loop2: detected capacity change from 0 to 512 [ 113.206305][ T6227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.240647][ T6227] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.966495][ T6227] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 114.085898][ T6227] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 114.219480][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.243637][ T28] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 115.493232][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 115.534021][ T28] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 115.583327][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.628707][ T28] usb 3-1: config 0 descriptor?? [ 115.650771][ T6257] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.930620][ T28] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 116.981866][ T6280] bridge_slave_0: left allmulticast mode [ 116.991301][ T6281] xt_hashlimit: max too large, truncated to 1048576 [ 117.003987][ T6280] bridge_slave_0: left promiscuous mode [ 117.016485][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.046839][ T6280] bridge_slave_1: left allmulticast mode [ 117.052505][ T6280] bridge_slave_1: left promiscuous mode [ 117.061307][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.121740][ T6280] bond0: (slave bond_slave_0): Releasing backup interface [ 117.161162][ T6280] bond0: (slave bond_slave_1): Releasing backup interface [ 117.268368][ T6280] team0: Port device team_slave_0 removed [ 117.283861][ T6282] fido_id (6282) used greatest stack depth: 20176 bytes left [ 117.311115][ T5872] usb 3-1: USB disconnect, device number 2 [ 117.316942][ T6280] team0: Port device team_slave_1 removed [ 117.317737][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.346707][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.362323][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.382126][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.461191][ T6285] team0: Mode changed to "roundrobin" [ 117.803188][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'. [ 121.018464][ T6303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.124'. [ 121.027964][ T6303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.124'. [ 121.089086][ T6303] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 121.130111][ T6303] dummy0: entered promiscuous mode [ 121.169560][ T6303] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 121.171900][ T6307] loop2: detected capacity change from 0 to 128 [ 121.216166][ T6303] Cannot create hsr debugfs directory [ 121.222394][ T6303] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 121.369401][ T6303] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 121.859685][ T6317] syz.2.117: attempt to access beyond end of device [ 121.859685][ T6317] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 122.357569][ T6315] loop1: detected capacity change from 0 to 2048 [ 122.468599][ T6315] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.710982][ T6324] loop2: detected capacity change from 0 to 1024 [ 122.828666][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 122.842489][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 122.853499][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 122.861497][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 122.870170][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 122.877741][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 122.887124][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 122.894694][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 122.902817][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 122.910756][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 122.918211][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 122.926061][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 122.935645][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 122.944192][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 122.951720][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 122.961812][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 122.970470][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 122.979193][ T23] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 122.986739][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 122.994612][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 123.002876][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 123.010474][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 123.018885][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 123.026893][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 123.034990][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 123.042486][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 123.050038][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 123.057422][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 123.065149][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 123.072617][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 123.080682][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 123.088714][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 123.096248][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 123.104073][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 123.111373][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 123.119004][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 123.126484][ T6324] hfsplus: request for non-existent node 16777216 in B*Tree [ 123.135348][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 123.135359][ T27] audit: type=1800 audit(1751322459.945:99): pid=6324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.121" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 123.185218][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 123.196216][ T23] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 123.213768][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.231064][ T23] usb 1-1: config 0 descriptor?? [ 123.246960][ T6325] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 123.368061][ T6330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.126'. [ 123.391268][ T6330] bond0: entered promiscuous mode [ 123.396766][ T6330] bond_slave_0: entered promiscuous mode [ 123.406479][ T6330] bond_slave_1: entered promiscuous mode [ 123.416584][ T6330] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 123.426315][ T6330] batman_adv: batadv0: Adding interface: macvlan2 [ 123.433357][ T6330] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.459298][ T6330] batman_adv: batadv0: Interface activated: macvlan2 [ 124.967117][ T23] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 125.378264][ T5872] usb 1-1: USB disconnect, device number 2 [ 126.206835][ T6359] dccp_close: ABORT with 214 bytes unread [ 127.034671][ T6373] dns_resolver: Unsupported server list version (0) [ 128.204948][ T23] IPVS: starting estimator thread 0... [ 128.286300][ T6381] loop0: detected capacity change from 0 to 2048 [ 128.353468][ T6389] IPVS: using max 17 ests per chain, 40800 per kthread [ 128.376723][ T6381] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.958981][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.340702][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.765809][ T27] audit: type=1326 audit(1751322471.465:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228578e929 code=0x7ffc0000 [ 134.788734][ T27] audit: type=1326 audit(1751322471.465:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f228578e929 code=0x7ffc0000 [ 134.830022][ T27] audit: type=1326 audit(1751322471.465:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228578e929 code=0x7ffc0000 [ 134.928716][ T27] audit: type=1326 audit(1751322471.465:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f228578e929 code=0x7ffc0000 [ 135.037955][ T27] audit: type=1326 audit(1751322471.465:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228578e929 code=0x7ffc0000 [ 135.136189][ T27] audit: type=1326 audit(1751322471.465:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228578e929 code=0x7ffc0000 [ 135.246728][ T27] audit: type=1326 audit(1751322471.465:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f228578e929 code=0x7ffc0000 [ 135.394575][ T27] audit: type=1326 audit(1751322471.465:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228578e929 code=0x7ffc0000 [ 135.489220][ T27] audit: type=1326 audit(1751322471.465:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228578e929 code=0x7ffc0000 [ 135.614293][ T27] audit: type=1326 audit(1751322471.465:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f228578e929 code=0x7ffc0000 [ 135.644585][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'. [ 137.884273][ T6463] loop2: detected capacity change from 0 to 128 [ 138.767134][ T6463] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.853533][ T6463] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.208706][ T5872] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 140.002299][ T6473] mmap: syz.1.162 (6473) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.123693][ T5772] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.235310][ T5872] usb 1-1: config 0 has no interfaces? [ 140.376629][ T5872] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 140.416684][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.449468][ T5872] usb 1-1: config 0 descriptor?? [ 141.287563][ T5872] usb 1-1: can't set config #0, error -71 [ 141.316150][ T6483] netlink: 576 bytes leftover after parsing attributes in process `syz.2.166'. [ 141.318390][ T5872] usb 1-1: USB disconnect, device number 3 [ 141.536096][ T6484] delete_channel: no stack [ 141.660895][ T6495] loop2: detected capacity change from 0 to 1024 [ 141.674136][ T6495] EXT4-fs: Ignoring removed orlov option [ 141.691232][ T6495] EXT4-fs: Invalid want_extra_isize 0 [ 142.847349][ T5872] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 143.038927][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 143.051231][ T5872] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 143.434787][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.474314][ T5872] usb 4-1: config 0 descriptor?? [ 143.657935][ T6497] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.320450][ T6516] loop2: detected capacity change from 0 to 128 [ 144.940430][ T5872] usbhid 4-1:0.0: can't add hid device: -71 [ 145.003537][ T5872] usbhid: probe of 4-1:0.0 failed with error -71 [ 145.066242][ T5872] usb 4-1: USB disconnect, device number 2 [ 146.864618][ T6535] vivid-002: disconnect [ 147.116498][ T6538] lo: entered promiscuous mode [ 147.139595][ T6538] lo: entered allmulticast mode [ 147.233923][ T6538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.144861][ T6527] vivid-002: reconnect [ 148.349938][ T6538] loop2: detected capacity change from 0 to 1024 [ 149.458844][ T2970] hfsplus: b-tree write err: -5, ino 4 [ 150.691760][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 150.879303][ T6565] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 150.895429][ T48] bond0: (slave bond_slave_0): interface is now down [ 150.922290][ T48] bond0: (slave bond_slave_1): interface is now down [ 151.001820][ T1143] bond0: (slave bond_slave_0): interface is now down [ 151.020411][ T1143] bond0: (slave bond_slave_1): interface is now down [ 151.055663][ T48] bond0: (slave bond_slave_0): interface is now down [ 151.062443][ T48] bond0: (slave bond_slave_1): interface is now down [ 151.140502][ T48] bond0: (slave bond_slave_0): interface is now down [ 151.190087][ T48] bond0: (slave bond_slave_1): interface is now down [ 151.375673][ T48] bond0: (slave bond_slave_0): interface is now down [ 151.536181][ T48] bond0: (slave bond_slave_1): interface is now down [ 151.643209][ T48] bond0: (slave bond_slave_0): interface is now down [ 151.649942][ T48] bond0: (slave bond_slave_1): interface is now down [ 151.775915][ T48] bond0: now running without any active interface! [ 152.287599][ T6590] ptrace attach of ""[6591] was attempted by "./syz-executor exec"[6590] [ 154.747061][ T6605] xt_TPROXY: Can be used only with -p tcp or -p udp [ 156.200649][ T6611] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 157.460481][ T6625] loop3: detected capacity change from 0 to 256 [ 157.552668][ T6625] loop3: detected capacity change from 0 to 512 [ 157.570287][ T6625] ext4: Unknown parameter 'smackfsroot' [ 157.754247][ T6611] loop0: detected capacity change from 0 to 40427 [ 157.777953][ T6611] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 157.789068][ T6611] F2FS-fs (loop0): Unrecognized mount option "whint_mode=f-based" or missing value [ 159.008785][ T6637] netlink: 'syz.1.208': attribute type 1 has an invalid length. [ 159.093035][ T6637] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.338330][ T6639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.350091][ T6639] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 159.747638][ T6639] bond1: (slave ipip0): Error -95 calling set_mac_address [ 161.452656][ T6669] netlink: 'syz.2.217': attribute type 10 has an invalid length. [ 161.828960][ T6669] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 161.857504][ T6669] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 161.886733][ T6671] loop3: detected capacity change from 0 to 4096 [ 162.101667][ T6671] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 162.114900][ T6671] EXT4-fs (loop3): Test dummy encryption mode enabled [ 162.202914][ T6671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.237629][ T6686] netlink: 'syz.2.221': attribute type 1 has an invalid length. [ 162.240787][ T6671] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #15: comm syz.3.218: corrupted inode contents [ 162.297601][ T6671] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #15: comm syz.3.218: mark_inode_dirty error [ 162.354462][ T6686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.375943][ T6671] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #15: comm syz.3.218: corrupted inode contents [ 162.392160][ T6671] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.218: mark_inode_dirty error [ 162.421753][ T6671] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #15: comm syz.3.218: corrupted inode contents [ 162.483560][ T6690] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.512237][ T6671] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.218: mark_inode_dirty error [ 162.534478][ T6690] bond1: (slave ipip1): The slave device specified does not support setting the MAC address [ 162.567216][ T6671] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #15: comm syz.3.218: corrupted inode contents [ 162.592056][ T6690] bond1: (slave ipip1): Error -95 calling set_mac_address [ 162.613614][ T6688] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 162.637899][ T6697] loop0: detected capacity change from 0 to 2048 [ 162.648323][ T6671] EXT4-fs error (device loop3): ext4_truncate:4288: inode #15: comm syz.3.218: mark_inode_dirty error [ 162.682150][ T6671] EXT4-fs error (device loop3): ext4_evict_inode:263: comm syz.3.218: couldn't truncate inode 15 (err -117) [ 162.692810][ T6686] bond1: (slave ip6erspan0): making interface the new active one [ 162.722140][ T6697] loop0: p1 < > p3 [ 162.877250][ T6686] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 163.017096][ T6697] loop0: p3 size 134217728 extends beyond EOD, truncated [ 163.517744][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.645567][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 163.645580][ T27] audit: type=1326 audit(1751322500.445:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8990d8e929 code=0x7ffc0000 [ 163.708344][ T5778] udevd[5778]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 163.725185][ T27] audit: type=1326 audit(1751322500.445:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8990d8e929 code=0x7ffc0000 [ 163.737475][ T5771] udevd[5771]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 163.762242][ T27] audit: type=1326 audit(1751322500.495:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8990d8e929 code=0x7ffc0000 [ 163.842900][ T27] audit: type=1326 audit(1751322500.505:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8990d8e929 code=0x7ffc0000 [ 163.877004][ T27] audit: type=1326 audit(1751322500.505:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8990d8e929 code=0x7ffc0000 [ 163.901417][ T27] audit: type=1326 audit(1751322500.525:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f8990d8e929 code=0x7ffc0000 [ 163.928542][ T27] audit: type=1326 audit(1751322500.525:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8990d8e929 code=0x7ffc0000 [ 164.011479][ T27] audit: type=1326 audit(1751322500.575:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8990d8e929 code=0x7ffc0000 [ 164.040387][ T27] audit: type=1326 audit(1751322500.575:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8990d8e929 code=0x7ffc0000 [ 164.070479][ T27] audit: type=1326 audit(1751322500.575:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.1.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8990d8e929 code=0x7ffc0000 [ 165.523026][ T6720] ptrace attach of ""[6721] was attempted by "./syz-executor exec"[6720] [ 166.407073][ T6729] Zero length message leads to an empty skb [ 166.410985][ T6733] netlink: 'syz.0.230': attribute type 10 has an invalid length. [ 166.449679][ T6733] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 166.629843][ T6739] loop1: detected capacity change from 0 to 128 [ 166.669657][ T6739] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.698820][ T6739] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.000793][ T6755] netlink: 'syz.3.235': attribute type 1 has an invalid length. [ 168.041619][ T6755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.132821][ T6755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.143879][ T6755] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 168.154920][ T6755] bond1: (slave ipip0): Error -95 calling set_mac_address [ 168.194305][ T6759] bond1: (slave ip6erspan0): making interface the new active one [ 168.203500][ T6759] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 168.607412][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.653487][ T6757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.934482][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.942499][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.042376][ T6783] loop3: detected capacity change from 0 to 1024 [ 170.197130][ T6787] loop0: detected capacity change from 0 to 128 [ 170.322923][ T6787] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.343723][ T6787] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.466487][ T5765] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.563841][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 171.563853][ T27] audit: type=1326 audit(1751322508.375:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5477d8e929 code=0x7ffc0000 [ 171.597957][ T6799] ======================================================= [ 171.597957][ T6799] WARNING: The mand mount option has been deprecated and [ 171.597957][ T6799] and is ignored by this kernel. Remove the mand [ 171.597957][ T6799] option from the mount to silence this warning. [ 171.597957][ T6799] ======================================================= [ 171.608221][ T27] audit: type=1326 audit(1751322508.375:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5477d8e929 code=0x7ffc0000 [ 171.667828][ T6800] netlink: 'syz.0.248': attribute type 1 has an invalid length. [ 171.677961][ T27] audit: type=1326 audit(1751322508.375:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5477d8e929 code=0x7ffc0000 [ 171.744823][ T27] audit: type=1326 audit(1751322508.375:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5477d8e929 code=0x7ffc0000 [ 171.784717][ T6800] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.807080][ T27] audit: type=1326 audit(1751322508.375:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f5477d8e929 code=0x7ffc0000 [ 171.900070][ T27] audit: type=1326 audit(1751322508.375:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5477d8e929 code=0x7ffc0000 [ 171.926805][ T6801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.958737][ T27] audit: type=1326 audit(1751322508.375:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5477d8e929 code=0x7ffc0000 [ 171.976572][ T6801] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 171.983399][ T27] audit: type=1326 audit(1751322508.375:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5477d8e929 code=0x7ffc0000 [ 172.038922][ T6801] bond1: (slave ipip0): Error -95 calling set_mac_address [ 172.092608][ T6803] bond1: (slave ip6erspan0): making interface the new active one [ 172.102404][ T6803] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 172.111513][ T27] audit: type=1326 audit(1751322508.375:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5477d8e929 code=0x7ffc0000 [ 172.111558][ T27] audit: type=1326 audit(1751322508.375:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5477d8e929 code=0x7ffc0000 [ 174.295098][ T6827] loop3: detected capacity change from 0 to 16 [ 174.327298][ T6827] erofs: (device loop3): mounted with root inode @ nid 36. [ 174.365772][ T5780] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 174.397776][ T6827] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 174.437228][ T6827] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 174.452399][ T6827] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 174.464553][ T6827] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 174.476275][ T6827] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 174.643122][ T6827] syz.3.258 (6827) used greatest stack depth: 18440 bytes left [ 174.890135][ T6830] loop3: detected capacity change from 0 to 128 [ 174.922640][ T6832] loop1: detected capacity change from 0 to 128 [ 175.050375][ T6830] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.416068][ T6830] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.095827][ T6842] syz.1.261: attempt to access beyond end of device [ 176.095827][ T6842] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 178.821484][ T5766] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.136209][ T6861] loop1: detected capacity change from 0 to 128 [ 180.018791][ T6864] Bluetooth: MGMT ver 1.22 [ 180.080455][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 180.080468][ T27] audit: type=1326 audit(1751322516.875:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8990d8e929 code=0x7ffc0000 [ 180.253550][ T27] audit: type=1326 audit(1751322516.875:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8990d8e929 code=0x7ffc0000 [ 180.361854][ T6872] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 180.407073][ T27] audit: type=1326 audit(1751322516.885:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f8990d8e929 code=0x7ffc0000 [ 180.455179][ T27] audit: type=1326 audit(1751322516.885:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8990d8e929 code=0x7ffc0000 [ 181.153287][ T27] audit: type=1326 audit(1751322516.885:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8990d8e929 code=0x7ffc0000 [ 181.175598][ T27] audit: type=1326 audit(1751322516.885:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8990d8e929 code=0x7ffc0000 [ 181.197863][ T27] audit: type=1326 audit(1751322516.885:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8990d8e929 code=0x7ffc0000 [ 181.220320][ T27] audit: type=1326 audit(1751322516.885:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8990d8e929 code=0x7ffc0000 [ 181.256807][ T27] audit: type=1326 audit(1751322516.885:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f8990d8e929 code=0x7ffc0000 [ 181.319153][ T27] audit: type=1326 audit(1751322516.885:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8990d8e929 code=0x7ffc0000 [ 184.163843][ T6902] loop0: detected capacity change from 0 to 128 [ 186.463335][ T5773] Bluetooth: hci0: command 0x0406 tx timeout [ 186.470267][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 186.896422][ T6934] loop3: detected capacity change from 0 to 512 [ 186.931855][ T6934] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 187.723531][ T6941] ptrace attach of ""[6942] was attempted by "./syz-executor exec"[6941] [ 191.671162][ T6960] No such timeout policy "syz1" [ 192.243768][ T6990] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 192.751460][ T6998] loop1: detected capacity change from 0 to 2048 [ 192.771808][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 192.816130][ T6998] loop1: p1 < > p4 [ 192.873903][ T6998] loop1: p4 size 8388608 extends beyond EOD, truncated [ 192.977057][ T6998] pimreg: entered allmulticast mode [ 193.079102][ T6998] pimreg: left allmulticast mode [ 193.237452][ T7003] isofs_fill_super: bread failed, dev=loop1p1, iso_blknum=16, block=32 [ 193.690900][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 193.734169][ T7013] macvtap1: entered promiscuous mode [ 193.750651][ T7013] bridge0: entered promiscuous mode [ 193.761326][ T7013] macvtap1: entered allmulticast mode [ 193.800156][ T7014] bridge0: left promiscuous mode [ 193.970942][ T7018] netlink: 96 bytes leftover after parsing attributes in process `syz.1.311'. [ 193.979978][ T7018] netlink: 120 bytes leftover after parsing attributes in process `syz.1.311'. [ 193.995472][ T7018] vlan2: entered allmulticast mode [ 194.387856][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.395360][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.084837][ T7031] netlink: 'syz.0.314': attribute type 1 has an invalid length. [ 195.123478][ T7031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.164689][ T7031] bond2: (slave veth3): Enslaving as an active interface with a down link [ 195.187193][ T7031] vlan2: entered allmulticast mode [ 195.192417][ T7031] veth1: entered allmulticast mode [ 195.199138][ T7031] veth1: entered promiscuous mode [ 195.213656][ T7031] veth1: left promiscuous mode [ 195.226571][ T7031] bond2: (slave vlan2): making interface the new active one [ 195.245801][ T7031] veth1: entered promiscuous mode [ 195.253011][ T7031] vlan2: entered promiscuous mode [ 195.259763][ T7031] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 196.345936][ T7045] loop9: detected capacity change from 0 to 8 [ 196.402282][ T7045] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 196.462896][ T7045] loop9: partition table partially beyond EOD, truncated [ 196.470628][ T7045] loop9: p1 size 81768186 extends beyond EOD, truncated [ 196.646121][ T5778] udevd[5778]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 199.647434][ T7074] loop0: detected capacity change from 0 to 1024 [ 200.791002][ T7084] netlink: 32 bytes leftover after parsing attributes in process `syz.0.330'. [ 200.825292][ T7084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.330'. [ 200.857658][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 203.594999][ T7102] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 205.604684][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 205.942958][ T7125] loop1: detected capacity change from 0 to 16 [ 205.975276][ T7125] erofs: (device loop1): mounted with root inode @ nid 36. [ 206.064490][ T5773] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 206.133728][ T7125] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 206.165096][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 206.165132][ T27] audit: type=1800 audit(1751322542.955:163): pid=7125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.338" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 206.644772][ T7119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.071080][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 210.493912][ T27] audit: type=1326 audit(1751322546.585:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451b98e929 code=0x7ffc0000 [ 210.703255][ T27] audit: type=1326 audit(1751322546.585:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451b98e929 code=0x7ffc0000 [ 211.239525][ T27] audit: type=1326 audit(1751322546.685:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f451b98e929 code=0x7ffc0000 [ 211.301289][ T27] audit: type=1326 audit(1751322546.685:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451b98e929 code=0x7ffc0000 [ 211.485753][ T27] audit: type=1326 audit(1751322546.685:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.0.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451b98e929 code=0x7ffc0000 [ 214.131994][ T5809] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 214.263231][ T5808] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 214.364343][ T5809] usb 1-1: Using ep0 maxpacket: 16 [ 214.378680][ T5809] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.392543][ T5809] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.410031][ T5809] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.420594][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.438280][ T5809] usb 1-1: Product: syz [ 214.442812][ T5809] usb 1-1: Manufacturer: syz [ 214.632064][ T5809] usb 1-1: SerialNumber: syz [ 216.383455][ T5808] usb 3-1: device descriptor read/all, error -71 [ 216.413482][ T2970] vlan2: left promiscuous mode [ 216.578777][ T5809] usb 1-1: 0:2 : does not exist [ 216.597005][ T5809] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 216.707539][ T5809] usb 1-1: USB disconnect, device number 4 [ 217.438970][ T7196] loop1: detected capacity change from 0 to 512 [ 217.446343][ T7196] EXT4-fs: Ignoring removed orlov option [ 217.463229][ T7196] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 217.474284][ T7196] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 217.484401][ T7196] EXT4-fs (loop1): group descriptors corrupted! [ 218.506082][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.417723][ T7216] loop1: detected capacity change from 0 to 4096 [ 219.445446][ T7216] NILFS (loop1): unrecognized mount option "CdHޮ.-ȁ" [ 220.492481][ T7229] netlink: 20 bytes leftover after parsing attributes in process `syz.1.367'. [ 221.132708][ T7227] syz.2.369 (7227) used greatest stack depth: 17960 bytes left [ 223.293276][ T5809] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 223.606807][ T5809] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 223.621567][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.643134][ T5809] usb 1-1: Product: syz [ 223.647335][ T5809] usb 1-1: Manufacturer: syz [ 223.658881][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 223.663546][ T5809] usb 1-1: SerialNumber: syz [ 224.280786][ T5809] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 224.359930][ T5872] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 225.293412][ T7274] loop2: detected capacity change from 0 to 40427 [ 225.440703][ T7274] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 225.449346][ T7274] F2FS-fs (loop2): Image doesn't support compression [ 225.456236][ T7274] F2FS-fs (loop2): Image doesn't support compression [ 225.462978][ T7274] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 225.481483][ T7274] F2FS-fs (loop2): invalid crc value [ 225.573296][ T5872] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 225.581247][ T5872] ath9k_htc: Failed to initialize the device [ 225.640213][ T7274] F2FS-fs (loop2): Found nat_bits in checkpoint [ 225.710372][ T7274] F2FS-fs (loop2): Start checkpoint disabled! [ 225.741744][ T7274] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 226.004882][ T5872] usb 1-1: ath9k_htc: USB layer deinitialized [ 226.047656][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 226.060512][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 226.992508][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.002084][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.020886][ T5773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 227.036924][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.113266][ T787] usb 1-1: USB disconnect, device number 5 [ 227.364723][ T58] kworker/u4:4: attempt to access beyond end of device [ 227.364723][ T58] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 227.427955][ T58] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 227.481774][ T58] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 227.519075][ T58] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 227.992508][ T7281] chnl_net:caif_netlink_parms(): no params data found [ 228.331090][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'. [ 228.519134][ T7329] loop2: detected capacity change from 0 to 1024 [ 228.622284][ T7329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.747866][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'. [ 228.785159][ T7281] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.792316][ T7281] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.837592][ T7281] bridge_slave_0: entered allmulticast mode [ 228.866006][ T7281] bridge_slave_0: entered promiscuous mode [ 228.880555][ T7281] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.932123][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.949521][ T7281] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.957406][ T7281] bridge_slave_1: entered allmulticast mode [ 228.964656][ T7281] bridge_slave_1: entered promiscuous mode [ 228.997191][ T11] dummy0: left promiscuous mode [ 229.235596][ T5773] Bluetooth: hci1: command tx timeout [ 229.484612][ T11] hsr_slave_0: left promiscuous mode [ 229.805392][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.824348][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.838414][ T11] bridge_slave_1: left promiscuous mode [ 229.851707][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.869280][ T11] bridge_slave_0: left promiscuous mode [ 229.912536][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.263336][ T5773] Bluetooth: hci1: command tx timeout [ 233.295370][ T11] bond1 (unregistering): Released all slaves [ 233.363834][ T7387] loop3: detected capacity change from 0 to 512 [ 233.375041][ T7387] EXT4-fs: Ignoring removed orlov option [ 233.387287][ T5773] Bluetooth: hci1: command tx timeout [ 233.422479][ T7387] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 233.433525][ T7387] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 233.443611][ T7387] EXT4-fs (loop3): group descriptors corrupted! [ 235.423276][ T5773] Bluetooth: hci1: command tx timeout [ 235.580417][ T11] team0 (unregistering): Port device team_slave_1 removed [ 235.624982][ T11] team0 (unregistering): Port device team_slave_0 removed [ 235.666736][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.709718][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.177132][ T7406] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 236.866194][ T11] bond0 (unregistering): Released all slaves [ 236.961277][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'. [ 236.974593][ T7400] netlink: 'syz.2.405': attribute type 1 has an invalid length. [ 237.110274][ T7401] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 237.136667][ T7402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.405'. [ 237.295679][ T7402] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 237.314115][ T7402] bond2 (unregistering): Released all slaves [ 238.166979][ T7281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.272864][ T7415] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 238.299861][ T7281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.511552][ T7281] team0: Port device team_slave_0 added [ 238.549718][ T7281] team0: Port device team_slave_1 added [ 239.180846][ T7422] netlink: 'syz.0.409': attribute type 7 has an invalid length. [ 239.190858][ T7422] netlink: 'syz.0.409': attribute type 8 has an invalid length. [ 239.207362][ T7281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.219637][ T7281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.283473][ T7281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.325276][ T7281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.332241][ T7281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.390440][ T7281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.549393][ T7281] hsr_slave_0: entered promiscuous mode [ 239.570629][ T7281] hsr_slave_1: entered promiscuous mode [ 240.111551][ T7281] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 240.136072][ T7281] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 240.186288][ T7281] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 240.242259][ T7281] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 241.223672][ T11] IPVS: stop unused estimator thread 0... [ 241.482852][ T7281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.581329][ T7281] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.754172][ T7281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 242.764983][ T7281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.831704][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.839000][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.919113][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.926307][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.357951][ T7281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.173840][ T7281] veth0_vlan: entered promiscuous mode [ 246.214864][ T7281] veth1_vlan: entered promiscuous mode [ 246.445864][ T7281] veth0_macvtap: entered promiscuous mode [ 246.494585][ T5773] Bluetooth: hci3: unexpected event for opcode 0x0c47 [ 246.516628][ T7281] veth1_macvtap: entered promiscuous mode [ 246.570970][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.597164][ T5773] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 246.782672][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.074496][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.259561][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.331214][ T7281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.375447][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.415950][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.452117][ T7281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.483283][ T7281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.512721][ T7281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.557709][ T7281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.587938][ T7281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.610751][ T7281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.637514][ T7281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.893564][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.902174][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.976950][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.004591][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.544928][ T5773] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 250.555321][ T5773] Bluetooth: hci3: Injecting HCI hardware error event [ 250.605464][ T5780] Bluetooth: hci3: hardware error 0x00 [ 252.739248][ T5780] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 253.330675][ T7597] Error parsing options; rc = [-22] [ 255.826228][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.832705][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.586229][ T7612] loop4: detected capacity change from 0 to 4096 [ 256.647326][ T7612] ntfs3: Unknown parameter '01777777777777777777777' [ 256.699022][ T7627] loop2: detected capacity change from 0 to 512 [ 256.730050][ T7627] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 257.029046][ T7625] netlink: 104 bytes leftover after parsing attributes in process `syz.3.443'. [ 258.052403][ T27] audit: type=1326 audit(1751322594.855:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7638 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5477d8e929 code=0x7ffc0000 [ 258.074612][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.197261][ T27] audit: type=1326 audit(1751322594.885:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7638 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5477d8e929 code=0x7ffc0000 [ 258.219671][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.845394][ T27] audit: type=1326 audit(1751322594.895:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7638 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5477d8e929 code=0x7ffc0000 [ 259.062516][ T27] audit: type=1326 audit(1751322594.895:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7638 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5477d8e929 code=0x7ffc0000 [ 259.136130][ T27] audit: type=1326 audit(1751322594.895:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7638 comm="syz.2.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5477d8e929 code=0x7ffc0000 [ 259.158291][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.390365][ T7662] loop3: detected capacity change from 0 to 128 [ 259.401843][ T7662] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 259.424348][ T7662] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 262.303463][ T7683] netlink: 'syz.4.454': attribute type 12 has an invalid length. [ 264.310295][ T7707] netlink: 'syz.2.460': attribute type 1 has an invalid length. [ 266.048356][ T7715] loop2: detected capacity change from 0 to 16 [ 266.102292][ T7715] erofs: (device loop2): mounted with root inode @ nid 36. [ 267.405931][ T5766] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 278.183509][ T28] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 278.445041][ T28] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 278.463162][ T28] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.479425][ T28] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 278.489928][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.098250][ T28] usb 5-1: usb_control_msg returned -32 [ 280.111655][ T28] usbtmc 5-1:16.0: can't read capabilities [ 280.293328][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 280.752925][ T7853] loop3: detected capacity change from 0 to 256 [ 281.637768][ T5809] usb 5-1: USB disconnect, device number 2 [ 282.906083][ T7865] loop0: detected capacity change from 0 to 2048 [ 283.308241][ T7879] xt_socket: unknown flags 0x50 [ 283.450411][ T5780] Bluetooth: Unexpected continuation frame (len 10) [ 283.631905][ T7865] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 283.652578][ T7510] udevd[7510]: incorrect nilfs2 checksum on /dev/loop0 [ 283.781661][ T7889] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.510213][ T7892] loop4: detected capacity change from 0 to 4096 [ 285.542956][ T7892] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 285.597842][ T7892] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 285.630798][ T7892] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 285.740137][ T7892] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 285.846696][ T7892] ntfs: volume version 3.1. [ 292.438842][ T7973] random: crng reseeded on system resumption [ 293.709975][ T7984] netlink: 184 bytes leftover after parsing attributes in process `syz.0.515'. [ 293.827953][ T7984] bond0: entered allmulticast mode [ 293.854217][ T7984] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 294.828822][ T8000] loop2: detected capacity change from 0 to 128 [ 294.838701][ T8000] EXT4-fs: Ignoring removed nobh option [ 295.072775][ T8000] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.088165][ T8000] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 295.651592][ T5772] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.152844][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 298.554725][ T8043] loop0: detected capacity change from 0 to 40427 [ 298.608860][ T8043] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 298.617389][ T8043] F2FS-fs (loop0): Image doesn't support compression [ 298.624390][ T8043] F2FS-fs (loop0): Image doesn't support compression [ 298.631114][ T8043] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 298.643663][ T8043] F2FS-fs (loop0): invalid crc value [ 298.675341][ T8] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 298.767739][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.869949][ T8050] virtio-fs: tag not found [ 298.892977][ T8] usb 4-1: config 0 descriptor?? [ 298.915489][ T8043] F2FS-fs (loop0): Found nat_bits in checkpoint [ 298.967406][ T8043] F2FS-fs (loop0): Start checkpoint disabled! [ 298.986409][ T8043] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 300.811603][ T58] kworker/u4:4: attempt to access beyond end of device [ 300.811603][ T58] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 300.826071][ T58] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 300.835541][ T58] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 300.844088][ T58] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 301.859295][ T8075] syz.4.531[8075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.859424][ T8075] syz.4.531[8075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.923561][ T8] pegasus 4-1:0.0: setup Pegasus II specific registers [ 301.955614][ T8078] loop0: detected capacity change from 0 to 16 [ 301.974886][ T8078] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26222) [ 302.766031][ T8] pegasus 4-1:0.0: can't locate MII phy, using default [ 302.976633][ T8] pegasus 4-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, a2:90:77:54:9e:6d [ 302.998328][ T8] usb 4-1: USB disconnect, device number 3 [ 303.131472][ T8090] loop0: detected capacity change from 0 to 2048 [ 303.150973][ T8090] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 303.941456][ T8096] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.996913][ T5771] udevd[5771]: incorrect nilfs2 checksum on /dev/loop0 [ 304.533528][ T8103] loop3: detected capacity change from 0 to 40427 [ 304.560582][ T8103] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 304.569297][ T8103] F2FS-fs (loop3): Image doesn't support compression [ 304.576094][ T8103] F2FS-fs (loop3): Image doesn't support compression [ 304.582831][ T8103] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 304.607239][ T8103] F2FS-fs (loop3): invalid crc value [ 304.643397][ T8103] F2FS-fs (loop3): Found nat_bits in checkpoint [ 304.771351][ T8103] F2FS-fs (loop3): Start checkpoint disabled! [ 306.430207][ T8103] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 307.483327][ T28] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 308.108012][ T1143] kworker/u4:7: attempt to access beyond end of device [ 308.108012][ T1143] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 308.145461][ T1143] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 308.161860][ T1143] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 308.199329][ T1143] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 308.451120][ T8145] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 309.163494][ T28] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.196854][ T28] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.234588][ T28] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 309.254687][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 309.388562][ T28] usb 5-1: SerialNumber: syz [ 310.320122][ T28] usb 5-1: 0:2 : does not exist [ 310.521358][ T28] usb 5-1: USB disconnect, device number 3 [ 311.411516][ T7510] udevd[7510]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.279520][ T8192] netlink: 68 bytes leftover after parsing attributes in process `syz.4.555'. [ 313.305192][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.555'. [ 314.560439][ T8209] xt_recent: hitcount (692) is larger than allowed maximum (255) [ 314.720771][ T8212] loop3: detected capacity change from 0 to 128 [ 315.885374][ T8218] loop3: detected capacity change from 0 to 40427 [ 315.904733][ T8218] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 315.913203][ T8218] F2FS-fs (loop3): Image doesn't support compression [ 315.919950][ T8218] F2FS-fs (loop3): Image doesn't support compression [ 315.927093][ T8218] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 315.937863][ T8218] F2FS-fs (loop3): invalid crc value [ 315.952649][ T8218] F2FS-fs (loop3): Found nat_bits in checkpoint [ 315.999933][ T8218] F2FS-fs (loop3): Start checkpoint disabled! [ 316.030838][ T8218] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 316.053208][ T5808] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 316.691239][ T5808] usb 1-1: Using ep0 maxpacket: 32 [ 316.799398][ T5808] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 316.938774][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.064157][ T5808] usb 1-1: Product: syz [ 317.149864][ T5808] usb 1-1: Manufacturer: syz [ 317.165326][ T5808] usb 1-1: SerialNumber: syz [ 317.180663][ T5808] usb 1-1: config 0 descriptor?? [ 317.258921][ T58] kworker/u4:4: attempt to access beyond end of device [ 317.258921][ T58] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 317.275662][ T58] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 317.283386][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.291227][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.302417][ T58] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 317.310980][ T58] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 317.421194][ T5808] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 317.626414][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 317.837097][ T8255] loop3: detected capacity change from 0 to 1024 [ 317.867624][ T8255] EXT4-fs (loop3): Test dummy encryption mode enabled [ 317.876613][ T8255] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 317.925415][ T8255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.722067][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.492752][ T5808] gspca_stk1135: reg_w 0x200 err -71 [ 319.510566][ T8268] loop4: detected capacity change from 0 to 4096 [ 319.515597][ T5808] gspca_stk1135: serial bus timeout: status=0x00 [ 319.524257][ T8268] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 319.535919][ T8268] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 319.549641][ T5808] gspca_stk1135: Sensor write failed [ 319.556092][ T8268] ntfs3: loop4: try to read out of volume at offset 0x1ff000 [ 319.563021][ T5808] gspca_stk1135: serial bus timeout: status=0x00 [ 319.563634][ T8268] ntfs3: loop4: Failed to load $MFT. [ 319.769903][ T5808] gspca_stk1135: Sensor write failed [ 319.779061][ T5808] gspca_stk1135: serial bus timeout: status=0x00 [ 319.792409][ T5808] gspca_stk1135: Sensor read failed [ 319.800397][ T5808] gspca_stk1135: serial bus timeout: status=0x00 [ 319.810525][ T5808] gspca_stk1135: Sensor read failed [ 321.103634][ T5808] gspca_stk1135: Detected sensor type unknown (0x0) [ 321.970484][ T5808] gspca_stk1135: serial bus timeout: status=0x00 [ 322.001578][ T8280] loop3: detected capacity change from 0 to 40427 [ 322.066599][ T5808] gspca_stk1135: Sensor read failed [ 322.071848][ T5808] gspca_stk1135: serial bus timeout: status=0x00 [ 322.078654][ T5808] gspca_stk1135: Sensor read failed [ 322.084148][ T5808] gspca_stk1135: serial bus timeout: status=0x00 [ 322.090481][ T5808] gspca_stk1135: Sensor write failed [ 322.095978][ T5808] gspca_stk1135: serial bus timeout: status=0x00 [ 322.102880][ T5808] gspca_stk1135: Sensor write failed [ 322.113978][ T8280] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 322.122377][ T8280] F2FS-fs (loop3): Image doesn't support compression [ 322.129163][ T8280] F2FS-fs (loop3): Image doesn't support compression [ 322.135919][ T8280] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 322.764578][ T8280] F2FS-fs (loop3): invalid crc value [ 322.797156][ T8280] F2FS-fs (loop3): Found nat_bits in checkpoint [ 322.844806][ T8280] F2FS-fs (loop3): Start checkpoint disabled! [ 322.860580][ T8280] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 323.818198][ T5808] stk1135: probe of 1-1:0.0 failed with error -71 [ 323.835478][ T5808] usb 1-1: USB disconnect, device number 6 [ 324.033789][ T8294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 324.042691][ T8294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 325.084231][ T58] kworker/u4:4: attempt to access beyond end of device [ 325.084231][ T58] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 325.503720][ T58] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 325.510645][ T58] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 325.583226][ T58] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 325.638603][ T8309] loop4: detected capacity change from 0 to 256 [ 325.956923][ T8313] loop4: detected capacity change from 0 to 512 [ 325.990791][ T8313] ext3: Unknown parameter 'smackfsroot' [ 326.104659][ T8312] loop2: detected capacity change from 0 to 40427 [ 326.113554][ T8312] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 326.121932][ T8312] F2FS-fs (loop2): Image doesn't support compression [ 326.128747][ T8312] F2FS-fs (loop2): Image doesn't support compression [ 326.135528][ T8312] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 326.158964][ T8312] F2FS-fs (loop2): invalid crc value [ 326.181635][ T8312] F2FS-fs (loop2): Found nat_bits in checkpoint [ 326.218008][ T5854] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 326.242355][ T8312] F2FS-fs (loop2): Start checkpoint disabled! [ 326.257599][ T8312] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 326.608635][ T5854] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 326.632521][ T5854] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 326.645247][ T5854] usb 1-1: config 0 has no interface number 0 [ 326.652509][ T5854] usb 1-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 327.306307][ T5854] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 327.328966][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.363383][ T5854] usb 1-1: config 0 descriptor?? [ 327.378514][ T5854] usb 1-1: can't set config #0, error -71 [ 327.404417][ T5854] usb 1-1: USB disconnect, device number 7 [ 327.602307][ T58] kworker/u4:4: attempt to access beyond end of device [ 327.602307][ T58] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 327.626823][ T58] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 327.688695][ T58] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 327.727723][ T58] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 327.778918][ T8326] loop0: detected capacity change from 0 to 40427 [ 327.794252][ T8326] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 327.802638][ T8326] F2FS-fs (loop0): Image doesn't support compression [ 327.809703][ T8326] F2FS-fs (loop0): Image doesn't support compression [ 327.816482][ T8326] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 327.855338][ T8326] F2FS-fs (loop0): invalid crc value [ 327.872601][ T8326] F2FS-fs (loop0): Found nat_bits in checkpoint [ 327.945317][ T8326] F2FS-fs (loop0): Start checkpoint disabled! [ 327.962926][ T8326] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 328.476865][ T11] kworker/u4:0: attempt to access beyond end of device [ 328.476865][ T11] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 328.655866][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 328.743344][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 328.863514][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 329.541921][ T8345] netlink: 80 bytes leftover after parsing attributes in process `syz.4.587'. [ 329.844492][ T8356] fuse: Bad value for 'fd' [ 331.511638][ T8367] loop2: detected capacity change from 0 to 4096 [ 331.885733][ T8371] loop4: detected capacity change from 0 to 40427 [ 331.894154][ T8371] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 331.902540][ T8371] F2FS-fs (loop4): Image doesn't support compression [ 331.909380][ T8371] F2FS-fs (loop4): Image doesn't support compression [ 331.916443][ T8371] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 331.951951][ T8371] F2FS-fs (loop4): invalid crc value [ 331.961728][ T8371] F2FS-fs (loop4): Found nat_bits in checkpoint [ 332.020416][ T8371] F2FS-fs (loop4): Start checkpoint disabled! [ 332.038083][ T8371] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 332.750570][ T42] kworker/u4:2: attempt to access beyond end of device [ 332.750570][ T42] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 332.796918][ T42] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 332.820546][ T42] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 332.840719][ T42] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 334.084680][ T8389] netlink: 'syz.3.600': attribute type 27 has an invalid length. [ 334.153985][ T27] audit: type=1326 audit(1751322670.965:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5477d8e929 code=0x7fc00000 [ 335.745924][ T27] audit: type=1326 audit(1751322672.555:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.2.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5477d8e929 code=0x7fc00000 [ 338.165795][ T8414] loop4: detected capacity change from 0 to 40427 [ 338.249376][ T8414] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 338.257928][ T8414] F2FS-fs (loop4): Image doesn't support compression [ 338.264737][ T8414] F2FS-fs (loop4): Image doesn't support compression [ 338.271425][ T8414] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 338.284940][ T8414] F2FS-fs (loop4): invalid crc value [ 338.302641][ T8414] F2FS-fs (loop4): Found nat_bits in checkpoint [ 338.338871][ T8414] F2FS-fs (loop4): Start checkpoint disabled! [ 338.354898][ T8414] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 339.094657][ T42] kworker/u4:2: attempt to access beyond end of device [ 339.094657][ T42] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 339.121100][ T42] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 339.140204][ T42] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 339.157193][ T42] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 340.090693][ T8432] loop2: detected capacity change from 0 to 512 [ 340.158364][ T8432] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.611: iget: bad i_size value: 38620345925642 [ 340.217958][ T8432] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.611: couldn't read orphan inode 15 (err -117) [ 340.272700][ T8432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.328862][ T27] audit: type=1326 audit(1751322677.135:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228578e929 code=0x7fc00000 [ 340.383244][ T27] audit: type=1326 audit(1751322677.135:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f228578e929 code=0x7fc00000 [ 340.550264][ T8439] loop4: detected capacity change from 0 to 256 [ 341.157473][ T27] audit: type=1326 audit(1751322677.945:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.3.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f228578e929 code=0x7fc00000 [ 341.183649][ T8434] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 341.219793][ T8442] xt_hashlimit: max too large, truncated to 1048576 [ 341.240413][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.600732][ T8444] loop0: detected capacity change from 0 to 32768 [ 342.647453][ T8444] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.615 (8444) [ 342.988466][ T8457] loop4: detected capacity change from 0 to 40427 [ 343.015218][ T8457] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 343.023823][ T8457] F2FS-fs (loop4): Image doesn't support compression [ 343.030559][ T8457] F2FS-fs (loop4): Image doesn't support compression [ 343.037369][ T8457] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 343.047308][ T8457] F2FS-fs (loop4): invalid crc value [ 343.070858][ T8457] F2FS-fs (loop4): Found nat_bits in checkpoint [ 343.121337][ T8457] F2FS-fs (loop4): Start checkpoint disabled! [ 343.130647][ T8457] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 343.596450][ T8444] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 343.615402][ T8444] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 343.625028][ T8444] BTRFS info (device loop0): using free space tree [ 343.966713][ T8444] BTRFS info (device loop0): enabling ssd optimizations [ 343.983018][ T8444] BTRFS info (device loop0): auto enabling async discard [ 343.992225][ T78] kworker/u4:5: attempt to access beyond end of device [ 343.992225][ T78] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 344.007011][ T8481] loop2: detected capacity change from 0 to 2048 [ 344.505587][ T78] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 344.512811][ T78] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 344.520449][ T78] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 344.617745][ T8481] loop2: p1 < > p3 [ 344.645942][ T8481] loop2: p3 size 134217728 extends beyond EOD, truncated [ 344.692597][ T5765] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 344.740096][ T5143] loop2: p1 < > p3 [ 344.762381][ T5143] loop2: p3 size 134217728 extends beyond EOD, truncated [ 344.869589][ T8491] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 344.877865][ T5778] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 344.887753][ T5778] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.909010][ T5778] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 344.921900][ T5771] I/O error, dev loop2, sector 9 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 344.934877][ T5778] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.959589][ T8491] loop2: detected capacity change from 0 to 1024 [ 344.967329][ T5780] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 344.993172][ T5778] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 345.033718][ T8491] ext2: Unknown parameter 'smackfstransmute' [ 345.455197][ T7510] udevd[7510]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 345.473492][ T5778] udevd[5778]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 345.546981][ T8496] loop3: detected capacity change from 0 to 40427 [ 345.578024][ T8496] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 345.586915][ T8496] F2FS-fs (loop3): Image doesn't support compression [ 345.593920][ T8496] F2FS-fs (loop3): Image doesn't support compression [ 345.600622][ T8496] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 345.627930][ T8496] F2FS-fs (loop3): invalid crc value [ 345.692607][ T5941] udevd[5941]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 345.696541][ T8498] loop2: detected capacity change from 0 to 512 [ 345.705916][ T7510] udevd[7510]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 345.723363][ T8496] F2FS-fs (loop3): Found nat_bits in checkpoint [ 345.772219][ T8496] F2FS-fs (loop3): Start checkpoint disabled! [ 345.798370][ T8498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.801322][ T8496] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 345.811003][ T8498] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.611583][ T7510] udevd[7510]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 346.679749][ T5778] udevd[5778]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 346.720132][ T1143] kworker/u4:7: attempt to access beyond end of device [ 346.720132][ T1143] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 346.726475][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.743803][ T1143] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 346.750884][ T1143] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 346.758326][ T1143] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 347.123283][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 347.189607][ T8518] loop2: detected capacity change from 0 to 40427 [ 347.215476][ T8518] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 347.224221][ T8518] F2FS-fs (loop2): Image doesn't support compression [ 347.230948][ T8518] F2FS-fs (loop2): Image doesn't support compression [ 347.237718][ T8518] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 347.276551][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.628'. [ 347.331302][ T8518] F2FS-fs (loop2): invalid crc value [ 347.380968][ T8518] F2FS-fs (loop2): Found nat_bits in checkpoint [ 347.414989][ T8518] F2FS-fs (loop2): Start checkpoint disabled! [ 347.432945][ T8518] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 347.457866][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 348.188098][ T3504] kworker/u4:12: attempt to access beyond end of device [ 348.188098][ T3504] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 348.191250][ T8526] loop4: detected capacity change from 0 to 256 [ 348.231479][ T3504] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 348.273628][ T3504] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 348.289098][ T3504] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 348.290130][ T8526] exfat: Unknown parameter '0xffffffffffffffff' [ 349.915204][ T5773] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 349.924465][ T5773] Bluetooth: hci2: Injecting HCI hardware error event [ 349.933466][ T50] Bluetooth: hci2: hardware error 0x00 [ 350.063219][ T5773] Bluetooth: hci1: command 0x0406 tx timeout [ 352.213563][ T50] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 352.352045][ T8548] sch_tbf: burst 7710 is lower than device lo mtu (65550) ! [ 352.552716][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 352.569434][ T8551] loop2: detected capacity change from 0 to 16 [ 352.576105][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 352.581677][ T8] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 352.603928][ T8551] erofs: (device loop2): mounted with root inode @ nid 36. [ 352.606121][ T8] usb 1-1: can't read configurations, error -71 [ 352.649196][ T8551] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 352.683244][ T8551] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 352.697624][ T8551] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 352.763451][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 352.772893][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.813447][ T23] usb 4-1: config 0 has no interfaces? [ 352.833153][ T23] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 352.867477][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.966141][ T8553] loop0: detected capacity change from 0 to 40427 [ 352.966850][ T23] usb 4-1: config 0 descriptor?? [ 352.983527][ T8553] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 352.991931][ T8553] F2FS-fs (loop0): Image doesn't support compression [ 352.998902][ T8553] F2FS-fs (loop0): Image doesn't support compression [ 353.005706][ T8553] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 353.966073][ T8553] F2FS-fs (loop0): invalid crc value [ 353.979923][ T8553] F2FS-fs (loop0): Found nat_bits in checkpoint [ 354.026561][ T8553] F2FS-fs (loop0): Start checkpoint disabled! [ 354.053917][ T8553] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 354.752895][ T3504] kworker/u4:12: attempt to access beyond end of device [ 354.752895][ T3504] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 354.784878][ T3504] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 354.816788][ T3504] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 354.847682][ T3504] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 356.557797][ T8578] mkiss: ax0: crc mode is auto. [ 358.484336][ T8589] loop0: detected capacity change from 0 to 40427 [ 358.514995][ T8589] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 358.523423][ T8589] F2FS-fs (loop0): Image doesn't support compression [ 358.530116][ T8589] F2FS-fs (loop0): Image doesn't support compression [ 358.536877][ T8589] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 358.546736][ T8589] F2FS-fs (loop0): invalid crc value [ 358.560415][ T8589] F2FS-fs (loop0): Found nat_bits in checkpoint [ 358.591023][ T8589] F2FS-fs (loop0): Start checkpoint disabled! [ 358.601538][ T8589] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 359.504089][ T5808] usb 4-1: USB disconnect, device number 4 [ 359.715722][ T11] kworker/u4:0: attempt to access beyond end of device [ 359.715722][ T11] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 359.809172][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 359.848699][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 359.874103][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 361.104467][ T5808] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 361.974579][ T8614] netlink: 'syz.2.650': attribute type 5 has an invalid length. [ 362.073182][ T5808] usb 4-1: Using ep0 maxpacket: 32 [ 362.080346][ T5808] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 362.097719][ T5808] usb 4-1: config 0 has no interface number 0 [ 362.113455][ T5808] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 362.142907][ T5808] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 362.173149][ T5808] usb 4-1: config 0 interface 126 has no altsetting 0 [ 362.369722][ T5808] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 362.379194][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.387296][ T5808] usb 4-1: Product: syz [ 362.391469][ T5808] usb 4-1: Manufacturer: syz [ 362.396110][ T5808] usb 4-1: SerialNumber: syz [ 362.405473][ T5808] usb 4-1: config 0 descriptor?? [ 362.411275][ T8605] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 362.433579][ T8605] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 364.156888][ T8633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.654'. [ 364.334998][ T5808] ir_usb 4-1:0.126: IR Dongle converter detected [ 364.369437][ T5808] usb 4-1: IRDA class descriptor not found, device not bound [ 364.413198][ T5808] usb 4-1: USB disconnect, device number 5 [ 365.478000][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'. [ 365.735451][ T8650] loop0: detected capacity change from 0 to 1024 [ 366.892391][ T8650] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 366.941024][ T8650] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.659: Invalid block bitmap block 0 in block_group 0 [ 367.054196][ T8650] Quota error (device loop0): write_blk: dquota write failed [ 367.061630][ T8650] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 367.071706][ T8650] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.659: Failed to acquire dquot type 0 [ 367.094237][ T8650] EXT4-fs error (device loop0): ext4_free_blocks:6681: comm syz.0.659: Freeing blocks not in datazone - block = 0, count = 4096 [ 367.110534][ T8650] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.659: Invalid inode bitmap blk 0 in block_group 0 [ 367.126955][ T11] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 367.746019][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:0: Failed to release dquot type 0 [ 367.766186][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'. [ 367.776137][ T8650] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 367.835958][ T8650] EXT4-fs (loop0): 1 orphan inode deleted [ 367.842371][ T8650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.577102][ T8] IPVS: starting estimator thread 0... [ 368.596235][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.683365][ T8659] IPVS: using max 34 ests per chain, 81600 per kthread [ 369.263287][ T8668] random: crng reseeded on system resumption [ 371.021336][ T8683] loop0: detected capacity change from 0 to 1024 [ 371.122170][ T8683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.411704][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.222307][ T8709] Device name cannot be null; rc = [-22] [ 373.791530][ T8711] loop2: detected capacity change from 0 to 1764 [ 373.943828][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 374.255127][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.284817][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.964422][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 375.050726][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 375.110458][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.113662][ T8728] loop3: detected capacity change from 0 to 2048 [ 375.152744][ T8728] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 375.216752][ T23] usb 4-1: config 0 descriptor?? [ 375.245503][ T23] usb 4-1: can't set config #0, error -71 [ 375.289640][ T23] usb 4-1: USB disconnect, device number 6 [ 376.148072][ T8736] loop4: detected capacity change from 0 to 16 [ 376.185733][ T8736] erofs: (device loop4): mounted with root inode @ nid 36. [ 378.502932][ T27] audit: type=1326 audit(1751322715.305:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451b98e929 code=0x7ffc0000 [ 378.526692][ T27] audit: type=1326 audit(1751322715.305:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f451b98e929 code=0x7ffc0000 [ 378.586164][ T27] audit: type=1326 audit(1751322715.305:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451b98e929 code=0x7ffc0000 [ 378.715387][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.721844][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.804382][ T27] audit: type=1326 audit(1751322715.305:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451b98e929 code=0x7ffc0000 [ 379.512491][ T27] audit: type=1326 audit(1751322715.305:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f451b98e929 code=0x7ffc0000 [ 379.573773][ T27] audit: type=1326 audit(1751322715.305:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451b98e929 code=0x7ffc0000 [ 379.615933][ T27] audit: type=1326 audit(1751322715.335:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451b98e929 code=0x7ffc0000 [ 379.639959][ T27] audit: type=1326 audit(1751322715.335:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f451b98e929 code=0x7ffc0000 [ 380.400551][ T27] audit: type=1326 audit(1751322716.415:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451b98e929 code=0x7ffc0000 [ 380.685762][ T27] audit: type=1326 audit(1751322716.415:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.0.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451b98e929 code=0x7ffc0000 [ 381.492985][ T23] IPVS: starting estimator thread 0... [ 381.599702][ T8783] IPVS: using max 19 ests per chain, 45600 per kthread [ 383.003847][ T8802] ptrace attach of "./syz-executor exec"[7281] was attempted by " [ 383.741089][ T8808] loop2: detected capacity change from 0 to 1024 [ 383.970252][ T8808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.564626][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.724919][ T8829] random: crng reseeded on system resumption [ 387.527038][ T8836] loop2: detected capacity change from 0 to 512 [ 387.637749][ T8836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.722528][ T8836] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 388.432983][ T8847] Quota error (device loop2): do_check_range: Getting block 134217728 out of range 0-5 [ 388.662356][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.010909][ T8855] capability: warning: `syz.2.711' uses deprecated v2 capabilities in a way that may be insecure [ 390.340003][ T8872] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 391.341531][ T8878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.429702][ T8] wlan1: authenticate with 08:02:11:00:00:00 [ 391.439710][ T8] wlan1: No basic rates, using min rate instead [ 391.471405][ T8] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 391.495640][ T8878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.544817][ T58] wlan1: authenticated [ 391.580032][ T8] mac80211_hwsim hwsim11 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 391.636534][ T8881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.672742][ T8] wlan1: associating to AP 08:02:11:00:00:00 with corrupt probe response [ 391.800516][ T58] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0xa004 status=0 aid=12) [ 391.900453][ T58] wlan1: No basic rates, using min rate instead [ 392.001326][ T58] wlan1: associated [ 392.546346][ T8891] netlink: 'syz.2.720': attribute type 4 has an invalid length. [ 393.576781][ T8899] random: crng reseeded on system resumption [ 394.957547][ T8912] loop0: detected capacity change from 0 to 164 [ 397.183960][ T8917] loop3: detected capacity change from 0 to 40427 [ 397.192572][ T8917] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 397.201057][ T8917] F2FS-fs (loop3): Image doesn't support compression [ 397.208096][ T8917] F2FS-fs (loop3): Image doesn't support compression [ 397.214844][ T8917] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 397.273012][ T8917] F2FS-fs (loop3): invalid crc value [ 397.303035][ T8917] F2FS-fs (loop3): Found nat_bits in checkpoint [ 397.355710][ T8917] F2FS-fs (loop3): Start checkpoint disabled! [ 397.376343][ T8917] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 398.225235][ T8932] loop0: detected capacity change from 0 to 1764 [ 398.552096][ T3504] kworker/u4:12: attempt to access beyond end of device [ 398.552096][ T3504] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 398.599500][ T3504] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 398.627335][ T3504] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 398.713438][ T3504] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 400.303614][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 402.895506][ T8968] loop3: detected capacity change from 0 to 40427 [ 402.925727][ T8968] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 402.934163][ T8968] F2FS-fs (loop3): Image doesn't support compression [ 402.940899][ T8968] F2FS-fs (loop3): Image doesn't support compression [ 402.947768][ T8968] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 402.965127][ T8968] F2FS-fs (loop3): invalid crc value [ 403.041413][ T8968] F2FS-fs (loop3): Found nat_bits in checkpoint [ 403.091881][ T8968] F2FS-fs (loop3): Start checkpoint disabled! [ 403.131968][ T8968] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 404.983177][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 405.913302][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 407.463298][ T9009] ptrace attach of "./syz-executor exec"[5772] was attempted by ""[9009] [ 408.141416][ T1310] ------------[ cut here ]------------ [ 408.147792][ T1310] WARNING: CPU: 0 PID: 1310 at net/mac80211/mlme.c:3206 ieee80211_mgd_probe_ap_send+0x44f/0x500 [ 408.158908][ T1310] Modules linked in: [ 408.162846][ T1310] CPU: 0 PID: 1310 Comm: kworker/u4:8 Not tainted 6.6.95-syzkaller #0 [ 408.171450][ T1310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.181814][ T1310] Workqueue: events_unbound cfg80211_wiphy_work [ 408.188358][ T1310] RIP: 0010:ieee80211_mgd_probe_ap_send+0x44f/0x500 [ 408.195176][ T1310] Code: 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ab 34 82 f7 e8 a6 b5 92 f7 0f 0b eb bc e8 9d b5 92 f7 0f 0b e9 4c ff ff ff e8 91 b5 92 f7 <0f> 0b 41 80 7c 2d 00 00 0f 85 e4 fc ff ff e9 e7 fc ff ff 44 89 f1 [ 408.215159][ T1310] RSP: 0018:ffffc90004a4fad8 EFLAGS: 00010293 [ 408.221237][ T1310] RAX: ffffffff89f2e0cf RBX: ffff888073e60c80 RCX: ffff888024579e00 [ 408.229938][ T1310] RDX: 0000000000000000 RSI: ffffffff8aaac440 RDI: ffffffff8afc6ac0 [ 408.238308][ T1310] RBP: dffffc0000000000 R08: ffffffff8e49ac2f R09: 1ffffffff1c93585 [ 408.246457][ T1310] R10: dffffc0000000000 R11: fffffbfff1c93586 R12: ffff888073e61598 [ 408.254776][ T1310] R13: 1ffff1100e7cc2b3 R14: ffff888073e61b60 R15: 0000000000000001 [ 408.262773][ T1310] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 408.272374][ T1310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.279368][ T1310] CR2: 000020000014e030 CR3: 000000001b25e000 CR4: 00000000003506f0 [ 408.287804][ T1310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 408.295929][ T1310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 408.303975][ T1310] Call Trace: [ 408.307307][ T1310] [ 408.310297][ T1310] ieee80211_mgd_probe_ap+0x325/0x3f0 [ 408.315798][ T1310] cfg80211_wiphy_work+0x225/0x260 [ 408.321592][ T1310] ? process_scheduled_works+0x957/0x15b0 [ 408.327511][ T1310] process_scheduled_works+0xa45/0x15b0 [ 408.333208][ T1310] ? assign_work+0x400/0x400 [ 408.337868][ T1310] ? assign_work+0x39e/0x400 [ 408.342606][ T1310] worker_thread+0xa55/0xfc0 [ 408.347342][ T1310] kthread+0x2fa/0x390 [ 408.351465][ T1310] ? pr_cont_work+0x560/0x560 [ 408.356268][ T1310] ? kthread_blkcg+0xd0/0xd0 [ 408.360911][ T1310] ret_from_fork+0x48/0x80 [ 408.365441][ T1310] ? kthread_blkcg+0xd0/0xd0 [ 408.368151][ T78] kworker/u4:5: attempt to access beyond end of device [ 408.368151][ T78] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 408.370064][ T1310] ret_from_fork_asm+0x11/0x20 [ 408.388941][ T1310] [ 408.392002][ T1310] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 408.399292][ T1310] CPU: 0 PID: 1310 Comm: kworker/u4:8 Not tainted 6.6.95-syzkaller #0 [ 408.407455][ T1310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.417521][ T1310] Workqueue: events_unbound cfg80211_wiphy_work [ 408.423850][ T1310] Call Trace: [ 408.427115][ T1310] [ 408.430034][ T1310] dump_stack_lvl+0x16c/0x230 [ 408.434707][ T1310] ? show_regs_print_info+0x20/0x20 [ 408.439895][ T1310] ? load_image+0x3b0/0x3b0 [ 408.444398][ T1310] panic+0x2c0/0x710 [ 408.448285][ T1310] ? bpf_jit_dump+0xd0/0xd0 [ 408.452781][ T1310] ? ret_from_fork_asm+0x11/0x20 [ 408.457711][ T1310] __warn+0x2e0/0x470 [ 408.461678][ T1310] ? ieee80211_mgd_probe_ap_send+0x44f/0x500 [ 408.467664][ T1310] ? ieee80211_mgd_probe_ap_send+0x44f/0x500 [ 408.473639][ T1310] report_bug+0x2be/0x4f0 [ 408.477970][ T1310] ? ieee80211_mgd_probe_ap_send+0x44f/0x500 [ 408.483947][ T1310] ? ieee80211_mgd_probe_ap_send+0x44f/0x500 [ 408.489917][ T1310] ? ieee80211_mgd_probe_ap_send+0x451/0x500 [ 408.495888][ T1310] handle_bug+0xcf/0x120 [ 408.500145][ T1310] exc_invalid_op+0x1a/0x50 [ 408.504654][ T1310] asm_exc_invalid_op+0x1a/0x20 [ 408.509506][ T1310] RIP: 0010:ieee80211_mgd_probe_ap_send+0x44f/0x500 [ 408.516100][ T1310] Code: 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ab 34 82 f7 e8 a6 b5 92 f7 0f 0b eb bc e8 9d b5 92 f7 0f 0b e9 4c ff ff ff e8 91 b5 92 f7 <0f> 0b 41 80 7c 2d 00 00 0f 85 e4 fc ff ff e9 e7 fc ff ff 44 89 f1 [ 408.535788][ T1310] RSP: 0018:ffffc90004a4fad8 EFLAGS: 00010293 [ 408.541843][ T1310] RAX: ffffffff89f2e0cf RBX: ffff888073e60c80 RCX: ffff888024579e00 [ 408.549799][ T1310] RDX: 0000000000000000 RSI: ffffffff8aaac440 RDI: ffffffff8afc6ac0 [ 408.557771][ T1310] RBP: dffffc0000000000 R08: ffffffff8e49ac2f R09: 1ffffffff1c93585 [ 408.565740][ T1310] R10: dffffc0000000000 R11: fffffbfff1c93586 R12: ffff888073e61598 [ 408.573696][ T1310] R13: 1ffff1100e7cc2b3 R14: ffff888073e61b60 R15: 0000000000000001 [ 408.581663][ T1310] ? ieee80211_mgd_probe_ap_send+0x44f/0x500 [ 408.587657][ T1310] ? ieee80211_mgd_probe_ap_send+0x44f/0x500 [ 408.593640][ T1310] ieee80211_mgd_probe_ap+0x325/0x3f0 [ 408.599000][ T1310] cfg80211_wiphy_work+0x225/0x260 [ 408.604100][ T1310] ? process_scheduled_works+0x957/0x15b0 [ 408.609828][ T1310] process_scheduled_works+0xa45/0x15b0 [ 408.615401][ T1310] ? assign_work+0x400/0x400 [ 408.619995][ T1310] ? assign_work+0x39e/0x400 [ 408.624593][ T1310] worker_thread+0xa55/0xfc0 [ 408.629199][ T1310] kthread+0x2fa/0x390 [ 408.633257][ T1310] ? pr_cont_work+0x560/0x560 [ 408.637928][ T1310] ? kthread_blkcg+0xd0/0xd0 [ 408.642532][ T1310] ret_from_fork+0x48/0x80 [ 408.646952][ T1310] ? kthread_blkcg+0xd0/0xd0 [ 408.651544][ T1310] ret_from_fork_asm+0x11/0x20 [ 408.656410][ T1310] [ 408.659652][ T1310] Kernel Offset: disabled [ 408.664078][ T1310] Rebooting in 86400 seconds..