last executing test programs: 5.872098129s ago: executing program 4 (id=746): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x46}]}, 0x10) dup2(r1, r0) close(r2) sendto$inet6(r0, &(0x7f0000000140)="4103092cc1f7480401020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b2f58f24286a57c3", 0x47, 0x40840, 0x0, 0x0) 5.62821381s ago: executing program 4 (id=748): close(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d83488080a1a0101211b0e0203010902"], 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f00000000c0)=ANY=[], 0x0) epoll_create1(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="4ba2000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC], 0x44}}, 0x0) 5.216582274s ago: executing program 1 (id=749): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a0000000000000000000000000000000000000000000001d000000000000000020001000000000000000a000000000005000500000000000a"], 0x70}, 0x1, 0x7}, 0x0) 4.422839211s ago: executing program 0 (id=753): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_tgsigqueueinfo(r0, r0, 0x10, 0x0) ptrace$peeksig(0x4209, r0, &(0x7f0000000340)={0x0, 0x0, 0x1}, &(0x7f0000000480)=[{}]) 4.31188272s ago: executing program 0 (id=754): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f00000000c0)='}', 0xffca, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) accept$inet(r0, 0x0, 0x0) 4.285159112s ago: executing program 1 (id=755): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x287, &(0x7f0000001d00)="$eJzs3U1rE0Ecx/HfbJIm2lK3DyKIp2rBk/ThIl4KknfgxZOoTYRiqKAV1FP1LL4A730LvgCPnsSz4K0nX0BukZmdmE2ym01Dt5uk3w8kbLrzn53Jznbmv6WsAFxaD+t/TnZP7ctIJZUkPZACSTWpLOm6btTeHh4dHLWajVEVlVyEfRlFkWaozP5hMynUxrkIL7SfylqK/wz5qP3WcdFtQPHc1Z8gkKr+6nT7axfesnxc9kFv2mrrnZaLbgcAoFh+/g/8PL/k1+9BIG36ab9//p/xCbRddANy9j1jf2z+d1lWx9jze83t6uV7LoUrq+KDTnZPJ2nLgqKR1bfANFlZpWtLcOXFQat5b/9VqxHok/a8Sq/YuntvREO3q5vT2u2Pw1Vv+Nx0zPwyXtvZLLo+VGwfduLtjxVZO98jZjM/zE/zxIT6qsb/9V+5Y+xpcmcqHDhTUfu30mt0vVyQK5XSyxV3kJv+CN7IXpaUkpGoO6JWBk5gmNVOF7U6EBX1bjsjai0xaicjan0wqjea0yPzZr6Yx2ZDf/VN9dj6P7Df9qbGuTJtGVfSj4yR/Sm7kqGbT/wdoeNbiSWDSXuECXzWc93X8pv3H14+a7War+d2w16JU9CMqdroDoJpac/cbtgvuZCjd+edyetJ/9XBbfn50TvpZwxkEMwLu+4yUf4Xy1e23GLNvoX96/RqPLaTVXmsxu2U3GDVvV9Nz+D6GHfrYTHhr4vDRxyZc92+K90Z54iR0Ldz+uxNEmTq+qWn3P8HAAAAAAAAAAAAAAAAAACYNef3Lwc1pe0quo8AAAAAAAAAAAAAAAAAAAAAAMy6hOf/Vgt9/u8jRZ94/i+Qu38BAAD//0lmcxY=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0x5e02) 4.211607768s ago: executing program 0 (id=756): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.95246255s ago: executing program 1 (id=759): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000004c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x20000000, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) 3.860387498s ago: executing program 2 (id=760): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffefa, 0x22}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xe61c6a5c983a3b82}]}}}]}, 0x58}}, 0x0) 3.683524292s ago: executing program 3 (id=761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) 3.652308895s ago: executing program 0 (id=762): r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000200)) pipe(0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_getoverrun(0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) prlimit64(r1, 0x0, &(0x7f0000000140)={0x0, 0x9}, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c040007031a00", 0x22) 3.604362019s ago: executing program 2 (id=763): syz_read_part_table(0x5e4, &(0x7f0000000600)="$eJzs3EFoU2cAB/AvmUtWQYo3bwZziHhJIceQgYb4KAETgkMPIrpTd8hFTz3ECAbEg5FBh7BLd1CEGiZDTyKCIKLxIOQ07Npd2lJ6GIVeAqVkdH0buxaSweD3gy/h+77/4/8+3vm9wP9aMvwxGo0SISz/lg5h+pBXf7NUOT+bqZ9tXAwh8eWVEMLML8W5/Z1EnBilD/5PxfPVeF54daR5fym62104duJFZvdjMt6/HY+N/o9Xx3E+Juv0zTNvTg4Hx19Ww08fvv5QPNq8PNfLldu9T/Xn5x5nnvz93PMT6n9Wejd9p3Mj6s6XpkLUWos2kzvb0YWHi/nUg3YjtzUT565NqL+5dyn19NHbcmd9qvC+WquFkAnZVuV159agn/08vHc9zq2kJ3QDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM1embZ96cHA6Ov6yGb78PoXi0eXmulyu3e5/qz889zjw5dRD7Ij+h/meld9N3Ojei7nzpu1+j1lq0mdzZji48XMynHrQbua2ZOHftr9/k2Pube5dSTx+9LXfWpwrvq7Xaws/LP2RbldedW4N+9vPw3vU4t5IeezUAAAAAAAAAAAAAAAAAAAD8o3J+NlM/27gYQiJcCSEUF2eX99dH8fvuiTgXfwcgrMbrhVdHmveXorvdhWMnXmR2P/4er9+Ox0b/q6v/qpn/zw7EofwZAAD//4a5haE=") 3.423915104s ago: executing program 1 (id=764): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x8, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x801, 0x9}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001000), 0x200800, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000001080)={0x6, &(0x7f0000001040)=[{}, {}, {}, {}, {}, {}]}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) 2.6384117s ago: executing program 2 (id=765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x40000) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x24}}, 0x0) 2.544222568s ago: executing program 3 (id=766): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14752424760608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) unshare(0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x1f, 0x4, 0x9, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4}) futex(0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0) r5 = add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "ddace934676a20b73b4ff0a602476c514c2ef48dc5605783e54ed2c6d579104073f9e4dc0e3fa0e5d4195f6d9729319a54dbe83c77c241c2e73629db620caeac", 0x11}, 0x48, 0xfffffffffffffffd) r6 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) keyctl$describe(0x6, r5, 0x0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0x40305652, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x9c) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000800)={{}, {}, [{0x2, 0x2, 0xffffffffffffffff}], {0x4, 0x2}, [], {0x10, 0x2}}, 0x2c, 0x3) keyctl$link(0x8, r5, 0xfffffffffffffff9) r7 = semget(0x0, 0x1, 0x1) semop(r7, 0x0, 0x0) 2.543974908s ago: executing program 0 (id=767): openat(0xffffffffffffff9c, 0x0, 0x20040, 0x0) pipe2(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x209}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) 2.540249528s ago: executing program 1 (id=768): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x30}}, 0x0) 2.356374053s ago: executing program 0 (id=769): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='asymmetric\x00', 0x0, &(0x7f0000000380)="1f20", 0x2, r1) keyctl$negate(0xd, r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22000406, &(0x7f0000000180)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@auto_da_alloc}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x485, &(0x7f0000000dc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f0000000540)='./file0\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 2.308339587s ago: executing program 2 (id=770): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x800}, @IFLA_GRE_LOCAL={0x8, 0x6, @private=0xa010101}]}}}]}, 0x40}}, 0x804) 2.308066797s ago: executing program 3 (id=771): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2008050, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRESDEC, @ANYRES32, @ANYRESHEX=0x0, @ANYRESHEX], 0x1, 0x1509, &(0x7f0000002d40)="$eJzs3Am4TmX3MPC17vveHDI8Sea97rV5kuEmSUJJMiRJEpI5IUmSJEkcMiUhCRlPkjlkTicd8zxkTjp5JUkSkinc33VUn7f3fft6p//n/b9n/a5rX+deZ++1nrXPup7z7L2v65xvuwyt1rB65XrMDP8M/esCf/6SCAAJADAAALIDQAAAZXKUyZG2P5PGxH/qRcT/kPrTr3YH4mqS+advMv/0Teafvsn80zeZf/om80/fZP7pm8xfiHRtZt5rZUu/mzz//19O/SvJ8vmfLuDv7ZD5/7fR/9DRMv/0Teafvsn80zeZf/pz5RYsuKp9iKtP3v/pm8xfiHTt3/5Mef3Zq/1MW7Z/YBNCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIf4/OOuvMADw6/pq9yWEEEIIIYQQQoh/H//+1e5ACCGEEEIIIYQQ//MQFGgwEEAGyAgJkAkywzWQBbJCNsgOMbgWcsB1kBOuh1yQG/JAXsgH+aEAhEBggSGCglAI4nADFIYboQgUhWJQHByUgJJwE5SCm6E03AJl4FYoC7dBOSh/+TXT3AmV4C6oDHdDFagK1aA63AM14F6oCfdBLbgfasMDUAcehLrwENSD+tAAHoaG8Ag0gsbQBJpCM2gOLf4gPyn738p/EbrDS9ADekIi9ILe8DL0gb7QD/rDAHgFBsKrMAheg8EwBIbC6zAM3oDh8CaMgJEwCt6C0TAGxsI4GA8TIAnehonwDkyCdx/JClNgKkyD6TADZsJ7MAtmwxx4H+bCPJgPSZkWwiJYDB/AEvgQkuEjWAofQwosg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK3wC22A77ICdsAt2wx74FPbCZ7APPodU/OIfzD/z23zoioCAChUaNJgBM2ACJmBmzIxZMAtmw2wYwxjmwByYE3NiLsyFeTAPJmI+LIAFkJCQkbEgFsQ4xrEwFsYiWASLYTF06LAklsRSeNF7XxrLYBksi2WxHJbH8ng73o4VsSJWwkpYGStjFayC1bAa3oP34L1YE2tiLayFtbE21sE6WBfrYj2shw2wATbEhtgIG2ETbILNsBm2wBbYEltiK2yFbbANtsW22A7bYXtsjx2wA3bEjtgJO2Fn7IxdsAt2xRfwBXwRX8SX8CXsiVVUL+yNvbEP9sF+2B/74ys4EF/FV/E1HIxDcCi+jq/jGzgcT+MIHImjcBRWVGNwLI5DVhMwCZMwI0zESTgJJ+MUnILTcDrOwJk4E2fhbJyN7+NcnIfzcAEuwEW4GBfjEvwQkzEZl+IZTMFluBxX4EpchStxDa7FNbgeN+B63ISbcAtuwU/wE9yO23En7sTduBs/xU/xM/wMB2MqpuJ+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8gSfxBJ7CU3gaz+BZADiP5/ECXsBLeCntza/SGGVUBpVBJagElVllVllUFpVNZVMxFVM5VA6VU+VUuVQulUflUflUPlVAFVCkSLGKVEFVUMVVXBVWhVURVUQVU8WUU06VVCVVKVVKlValVRl1qyqrblPlVHnV2t2ublcVVRtXSd2lKqvKqoqqqqqp6qq6qqFqqJqqpqqlaqnaqraqox5UdVUv7If1VdpkGqoh2EgNxSaqqWqmmqs38FHVUg3HVqq1aqMeVyNxBLZTLV179ZTqoMZiR/WMGofPqs5qAnZRz6uu6gXVTb2ouqtWrofqqSZjL9VbTcM+qq/qp/qrWVhVpU2smnpNvZhxiBqqXleL8A01XL2pRqiRapR6S41WY9RYNU6NVxNUknpbTVTvqEnqXTVZTVFT1TQ1Xc1QM9V7apaareao99VcNU+DWqAWqkVqsfpALVEfqmT1kVqqPlYpaplarlaolWqVWq3WqLVqnVqvNqiNapParLaoreoTtU1tVzvUTrVL7VZ71Kdqr/pM7VOfq1T1hdqv/qQOqC/VQfWVOqS+VofVN+qI+lYdVd+pY+p7dVydUCfVD+qU+lGdVmfUWXVOnVc/qQvqorqkvAKNWmmtjQ50Bp1RJ+hMOrO+RmfRWXU2nV3H9LU6h75O59TX61w6t85j8up8Or8uoENN2mrWkS6oC+m4vkEX1jfqIrqoLqaLa6dL6JL6Jl1K36xL61t0GX2rLqtv0+V0eV3Bg75DV9R36kr6Ll1Z362r6Kq6mq6u79E19L26pr5P19L369r6AV1HP6jr6od0PV1fN9AP64b6Ed1IN9ZNdFPdTDfXLfSjuqV+TLfSrXUb/bhuq5/Q7fSTur1+SnfQT+uO+hndST+rO+vndBf9vO6qX9Dd9EV9SXvdQ/fUibqX7q1f1n10X91P99cD9Ct6oH5VD9Kv6cF6iB6qX9fD9Bt6uH5Tj9Aj9Sj9lh6tx+ixepweryfoJP22nqjf0ZP0u3qynqKn6ml6up6h+/1Sac7fkf/O38gfdPnVt+it+hO9TW/XO/ROvUvv1nv0Hr1X79X79D6dqlP1fr1fH9AH9EF9UB/Sh/RhfVgf0Uf0UX1UH9PH9HF9Qp/TP+hT+kd9Wp/RZ/Q5fV6f1xd++RmAQaOMNsYEJoPJaBJMJpPZXGOymKwmm8luYuZak8NcZ3Ka600uk9vkMXlNPpPfFDChIWMNm8gUNIVM3NxgCpsbTRFT1BQzxY0zJUxJc9O/nP9H/bUwLUxL09K0Mq1MG9PGtDVtTTvTzrQ37U0H08F0NB1NJ9PJdDadTRfTxXQ1XU030810N91ND9PDJJpE09u8bPqYvqaf6W8GmFfMQDPQDDKDzGAz2Aw1Q80wM8wMN8PNCDPCjDKjzGgz2ow1Y814M94k+exmoploJplJZrKZbKYOyG6mm+lmpplpZplZZo6ZY+aauWa+mW8WmoVmsVlslpglJtkkm6VmqUkxy8wys8KsMKvMKrPGrDHrzDqzwWwwm8wmk2K2mq1mm9lmdpgdZpfZZfaYPWav2Wv2mX0m1aSa/Wa/OWAOmIPmoDlkDpnD5rA5Yo6Yo+aoOWaOmePmuDlpTppT5pQ5bU6bs+asOW/OmwvmgrlkLqVd9gUqUIEJTJAhyBAkBAlB5iBzkCXIEmQLsgWxIBbkCHIEOYPrg1xB7iBPkDfIF+QPCgRhQIENOIiCgkGhIB7cEBQObgyKBEWDYkHxwAUlgpLBTUGp4OagdHBLUCa4NSgb3BaUC8oHFYLbgzuCisGdQaXgrqBycHdQJagaVAuqB/cENYJ7g5rBfUGt4P6gdvBAUCd4MKgbPBTUC+oHDYKHg4bBI0GjoHHQJGgaNAuaBy3+rfW9P537Mdcj7Bkmhr3C3uHLYZ+wb9gv7B8OCF8JB4avhoPC18LB4ZBwaPh6OCx8IxwevhmOCEeGo8K3wtHhmHBsOC4cH04Ik8K3w4nhO+Gk8N1wcjglnBpMC6eHM8KZ4XvhrHB2OCd8P5wbzgvnhwvCheGiEH++JIbk8KNwafhxmBIuC5eHK8KV4apwdbgmXBuuC9eHG8KN4aYyA38+NNwWbg93hDvDXeHucE/4abg3/CzcF34epoZfhPvDP4UHwi/Dg+FX4aHw6/Bw+E14JPw2PBp+Fx4Lvw+PhyfCk+EP4anwx/B0eCY8G54Lz4c/hRfCi+Gl0Kdd3Kd9vJMhQxkoAyVQAmWmzJSFslA2ykYxilEOykE5KSflolyUh/JQPspHBagApWFiKkgFKU5xKkyFqQgVoWJUjBw5KkklqRSVotJUmspQGSpLZakclaMKVIHuoDvoTrqT7qK76G66m6pSVapO1akG1aCaVJNqUS2qTbWpDtWhulSX6lE9akANqCE1pEbUiJpQE2pGzagFtaCW1JJaUStqQ22oLbWldtSO2lN76kAdqCN1pE7UiTpTZ+pCXagrdaVu1I26U3fqQT0okRKpN/WmPtSH+lE/GkADaCANpEE0iAbTYBpKQ2kYDaPhNJxG0EgaRW/RaBpDY2kcjacJlERJNJEm0iSaRJNpMk2lqTSdptNMmkmzaBbNoTk0l+bSfJpPC2khLabFtISWUDIl01JaSimUQstpOa2klbSaVtNaWkvraT1tpI20mTbTVtpK22gb7aAdtIt20R7aQ3tpL+2jfZRKqbSf9tMBOkAH6SAdokN0mA7TETpCR+koHaNjdJyO00k6SafoFJ2m03SWztJ5+oku0EW6RJ4SbCab2V5js9isNpvNbv8yzmPz2nw2vy1gQ5vL5v5NTNbaIraoLWaLW2dL2JL2pr+Ky9nytoK93d5hK9o7bSVbzmaCP49r2HttTXufrWXvt9XtPb+Ja9sHbB37iK1rG9t6tqltYJvbhvYR28g2tk1sU9vMNrdt7RO2nX3StrdPJXSwT/95bNPiJfZDu9aus+vtBrvXfmbP2nP2iP3Wnrc/2R62px1gX7ED7at2kH3NDrZDfhsD2FH2LTvajrFj7Tg73k74q3iqnWan2xl2pn3PzrKz/ypebD+wc22ynW8X2IV20eU4radk+5Fdaj+2KXaZXW5X2JV2lV1t1/zfXlfYTXaz3WL32E/tNrvd7rA77S67+3Kcdh777Oc21X5hD9tv7AH7pT1oj9pD9uvLcdr5HbXf2WP2e3vcnrAn7Q/2lP3RnrZnLp9/2rn/YC/aS9ZbYGTFmg0HnIEzcgJn4sx8DWfhrJyNs3OMr+UcfB3n5Os5F+fmPJyX83F+LsAhE1tmjrggF+I438CF+UYuwkW5GBdnxyW4JN/EpfhmLs23cBm+lcvybVyOy3MFvp3v4Ip8J1fiu7gy381VuCpX4+p8D9fge7km38e1+H6uzQ9wHX6Q6/JDXI/rcwN+mBvyI9yIG3MTbsrNuDm34Ee5JT/Grbg1t+HHuS0/we34SW7PT3EHfpo78jPciZ/lzvwcd+HnuSu/wN34Re7OL3EP7smJ3It788vch/tyP+7PA/gVHsiv8iB+jQfzEB7Kr/MwfoOH85s8gkfyKH6LR/MYHsvjeDxP4CR+myfyOzyJ3+XJPIWn8jSezjN4Jr/Hs3g2z+H3eS7P4/m8gBfyIl7MH/AS/pCT+SNeyh9zCi/j5byCV/IqXs1reC2v4/W8gTfyJt7MW3grf8LbeDvv4J28i3fzHv6U9/JnvI8/51T+gvfzn/gAf8kH+Ss+xF/zYf6Gj/C3fJS/42P8PR/nE3ySf+BT/COf5jN8ls/xef6JL/BFvsSeIcJIRToyURBliDJGCVGmKHN0TZQlyhpli7JHsejaKEd0XZQzuj7KFeWO8kR5o3xR/qhAFEYU2YijKCoYFYri0Q1R4ejGqEhUNCoWFY9cVCIqGd0UlYpujkpHt0RlolujstFtUbmofFQhuj26I6oY3RlViu6KKkd3R1WiqlG1qHp0T1QjujeqGd0X1Yruj0pHD0R1ogejutFDUb2oftQgejhqGD0SNYoaR02iplGzqHnUIno0ahk9FrWKWkdtosejttETUbvoyah99FTUIXr6yv6iwc+fpn+xPzHqFelfnpDdpxfGF8UXxz+IL4l/GE+OfxRfGv84nhJfFl8eXxFfGV8VXx1fE18bXxdfH98Q3xjfFN8c3xL3vnpGcJh2IwzGBS6Dy+gSXCaX2V3jsrisLpvL7mLuWpfDXedyuutdLpfb5XF5XT6X3xVwoSNnHbvIFXSFXNzd4Aq7G10RV9QVc8WdcyVcSdfctXAtXEv3mGvlWrs27nH3uHvCPeGeTPilcdfRPeM6uWddZ/ece84977q6F1w396Lr7l5yPVxPl+gSXW/X2/VxfVw/188NcAPcQDfQDXKD3GA32A11Q90wN8wNd8PdCDfCjXKj3Gg32o11Y914N94luSQ30U10k9wkN9lNdlPdVDfdTXcz3Uw3y81yc9wcN9fNdfPdfLfQLXSL3WK3xC1xyS7ZLXVLXYpLccvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Da3w+1wu9wut8ftcXvdXrfP7XOpLtXtd/vdAXfAHXRfuUPua3fYfeOOuG/dUfedO+a+d8fdCXfSeX3K/ehOuzPurDvnzruf3AV30V1y3iXF3o5NjL0TmxR7NzY5NiU2NTYtNj02IzYz9l5sVmx2bE7s/djc2LzY/NiC2MLYotji2AexJbEPY8mxj2JLYx/HUmLLYstjK2IrY6ti3uffFvmCvpCP+xt8YX+jL+KL+mK+uHe+hC/pb/Kl/M2+tL/Fl/G3+rL+Nl/Ol/cVfGPfxDf1zXxz38I/6lv6x3wr39q38Y/7tv4J384/6dv7p3wH/7Tv6J/xnfyzvrN/znfxz8/7Zcq+u3/J9/A9faLv5Xv7l30f39f38/39AP+KH+hf9YP8a36wH+KH+tf9MP+GH+7f9CP8SD/Kv+VH+zF+rB/nx/sJPsm/7Sf6d/wk/66f7Kf4qX6an+5n+Jn+PT/Lz/Zz/Pt+rp/n5/sFfqFf5Bf7D/wS/6FP9h/5pf5jn+KX+eV+hV/pV/nVfo1f69f59X6D3+g3+c1+i9/qP/Hb/Ha/w+/0u/xuv8d/6vf6z/w+/7lP9V/4/f5P/oD/0h/0X/lD/mt/2H/jj/hv/VH/nT/mv/fH/Ql/0v/gT/kf/Wl/xp/15/x5/5O/4C/6S/I3a0IIIYQQfxf9B/t7/Y3vqV+2NL0BIOv2vIf+subGXD+v+6q9HWIA8FTPLvV/3erXT0xM/OXYFA1BoQUAELuSnwGuxMugDTwB7aE1lPqb/fVVFS5f9/2/6sdvBcgMkOnXnLTbo1/jK/Vv/p36jT/g362/7Of6CwCKFLqSk1b41/hK/dK/U39329+vf7n/TF8mAbT6s5wscCW+Ur8kPAZPQ/vfHCmEEEIIIYQQQvysrzrf9Q/uPy/fn+czv837Nf6j+/M/UOlf7V8IIYQQQgghhBB/7NkXuj35aPv2rTv9Ny8y/me08R+wQAD4D2hDFv/5i6v9m0kIIYQQQgjx73blov9qdyKEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqRf//x/CFN/98FX+xyFEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIq+3/BAAA//+0FVXr") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000100)='./file0/file0\x00', 0x408) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000380), 0x24, 0x0) 2.018257951s ago: executing program 2 (id=772): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000100), 0x1, 0x559d, &(0x7f0000005680)="$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") shutdown(0xffffffffffffffff, 0x1) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000140)='y', 0x1}], 0x1, 0x8008, 0x0, 0x0) 1.568176339s ago: executing program 4 (id=773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000080)={0x0, 0xffffffd9, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000a0a01"], 0x14}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2}}) 1.296413552s ago: executing program 4 (id=774): syz_open_dev$usbfs(0x0, 0x76, 0x101301) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) 1.217006968s ago: executing program 3 (id=775): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) getgroups(0x0, 0x0) 1.162240263s ago: executing program 4 (id=776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) 828.136301ms ago: executing program 3 (id=777): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5}}}]}, 0x48}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="91", 0x1, 0x20004044, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 702.692431ms ago: executing program 2 (id=778): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xfffff800}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x4, 0x20}, 0xc) 80.012263ms ago: executing program 4 (id=779): r0 = socket(0x23, 0x805, 0x0) write(r0, 0x0, 0x36) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x80000c, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001840)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 36.375877ms ago: executing program 3 (id=780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r1, @ANYBLOB="a18327bd7000fddbdf2505"], 0xe8}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) 0s ago: executing program 1 (id=781): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./bus\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x14fe, &(0x7f0000001580)="$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") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000004c0)=[{&(0x7f0000000280)="b2e0acd4", 0x4}], 0x1, 0x15, 0x0) kernel console output (not intermixed with test programs): error at page 301 @ nid 36 [ 111.054796][ T4242] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1232895 of nid 36 [ 111.071914][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 300 @ nid 36 [ 111.094229][ T4242] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1228799 of nid 36 [ 111.135646][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 299 @ nid 36 [ 111.160960][ T4242] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1224703 of nid 36 [ 111.204184][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 298 @ nid 36 [ 111.230096][ T4242] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1220607 of nid 36 [ 111.278440][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 297 @ nid 36 [ 111.308044][ T4242] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1216511 of nid 36 [ 111.338377][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 296 @ nid 36 [ 111.355297][ T4246] loop2: detected capacity change from 0 to 32768 [ 111.362005][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 291 @ nid 36 [ 111.383802][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 290 @ nid 36 [ 111.393314][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 289 @ nid 36 [ 111.403261][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 288 @ nid 36 [ 111.455830][ T4259] loop1: detected capacity change from 0 to 4096 [ 111.489733][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 275 @ nid 36 [ 111.510137][ T4261] syz.0.128 sent an empty control message without MSG_MORE. [ 111.515166][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 274 @ nid 36 [ 111.544322][ T4259] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 111.548048][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 273 @ nid 36 [ 111.563040][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 272 @ nid 36 [ 111.573151][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 267 @ nid 36 [ 111.583742][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 266 @ nid 36 [ 111.593498][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 265 @ nid 36 [ 111.631554][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 264 @ nid 36 [ 111.655138][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 259 @ nid 36 [ 111.708376][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 258 @ nid 36 [ 111.747684][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 257 @ nid 36 [ 111.777469][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 256 @ nid 36 [ 111.795508][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 255 @ nid 36 [ 111.825456][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 254 @ nid 36 [ 111.873244][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 253 @ nid 36 [ 111.918964][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 252 @ nid 36 [ 111.962826][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 251 @ nid 36 [ 111.983089][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 250 @ nid 36 [ 112.005117][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 186 @ nid 36 [ 112.038423][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 185 @ nid 36 [ 112.070170][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 184 @ nid 36 [ 112.083515][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 183 @ nid 36 [ 112.093381][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 182 @ nid 36 [ 112.131418][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 181 @ nid 36 [ 112.168018][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 180 @ nid 36 [ 112.168053][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 179 @ nid 36 [ 112.168076][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 178 @ nid 36 [ 112.168098][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 177 @ nid 36 [ 112.168120][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 176 @ nid 36 [ 112.170752][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 155 @ nid 36 [ 112.170784][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 154 @ nid 36 [ 112.170808][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 153 @ nid 36 [ 112.170830][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 152 @ nid 36 [ 112.170853][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 151 @ nid 36 [ 112.170876][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 150 @ nid 36 [ 112.170899][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 149 @ nid 36 [ 112.170921][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 148 @ nid 36 [ 112.170945][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 147 @ nid 36 [ 112.170968][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 146 @ nid 36 [ 112.170990][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 145 @ nid 36 [ 112.171013][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 144 @ nid 36 [ 112.171032][ T4242] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 589823 of nid 36 [ 112.171054][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 143 @ nid 36 [ 112.171073][ T4242] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 585727 of nid 36 [ 112.171093][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 142 @ nid 36 [ 112.171112][ T4242] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 581631 of nid 36 [ 112.171134][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 141 @ nid 36 [ 112.171152][ T4242] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 577535 of nid 36 [ 112.171173][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 140 @ nid 36 [ 112.171191][ T4242] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 573439 of nid 36 [ 112.171213][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 139 @ nid 36 [ 112.171232][ T4242] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 569343 of nid 36 [ 112.171251][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 138 @ nid 36 [ 112.171267][ T4242] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 565247 of nid 36 [ 112.171287][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 137 @ nid 36 [ 112.171312][ T4242] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 561151 of nid 36 [ 112.171333][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 136 @ nid 36 [ 112.171502][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 115 @ nid 36 [ 112.171525][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 114 @ nid 36 [ 112.171547][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 113 @ nid 36 [ 112.171570][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 112 @ nid 36 [ 112.171594][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 111 @ nid 36 [ 112.171618][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 110 @ nid 36 [ 112.171640][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 109 @ nid 36 [ 112.171663][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 108 @ nid 36 [ 112.171686][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 107 @ nid 36 [ 112.171708][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 106 @ nid 36 [ 112.173181][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 112.173209][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 112.173232][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 112.173255][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 112.173278][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 112.173309][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 112.173332][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 112.173355][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 112.173378][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 112.173400][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 112.173422][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 112.173455][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 67 @ nid 36 [ 112.173479][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 66 @ nid 36 [ 112.173501][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 112.173524][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 112.173657][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 112.173682][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 112.173705][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 112.173727][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 112.173750][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 112.173768][ T4242] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 180223 of nid 36 [ 112.173790][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 112.173808][ T4242] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 176127 of nid 36 [ 112.173829][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 112.173848][ T4242] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 172031 of nid 36 [ 112.173868][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 112.173886][ T4242] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 167935 of nid 36 [ 112.173907][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 112.173926][ T4242] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 163839 of nid 36 [ 112.173946][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 112.175161][ T4242] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 159743 of nid 36 [ 112.175186][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 112.175205][ T4242] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 155647 of nid 36 [ 112.175226][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 37 @ nid 36 [ 112.175245][ T4242] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 151551 of nid 36 [ 112.175265][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 112.175389][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 112.175413][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 112.175435][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 112.175458][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 112.175480][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 112.175504][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 112.175527][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 112.175549][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 112.175571][ T4242] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 112.175857][ T4242] attempt to access beyond end of device [ 112.175857][ T4242] loop4: rw=524288, want=1049304, limit=16 [ 112.175961][ T4242] attempt to access beyond end of device [ 112.175961][ T4242] loop4: rw=524288, want=408, limit=16 [ 112.176072][ T4242] attempt to access beyond end of device [ 112.176072][ T4242] loop4: rw=524288, want=416, limit=16 [ 112.176135][ T4242] attempt to access beyond end of device [ 112.176135][ T4242] loop4: rw=524288, want=32, limit=16 [ 112.177419][ T4242] attempt to access beyond end of device [ 112.177419][ T4242] loop4: rw=524288, want=752, limit=16 [ 112.177486][ T4242] attempt to access beyond end of device [ 112.177486][ T4242] loop4: rw=524288, want=760, limit=16 [ 112.177545][ T4242] attempt to access beyond end of device [ 112.177545][ T4242] loop4: rw=524288, want=525176, limit=16 [ 112.177605][ T4242] attempt to access beyond end of device [ 112.177605][ T4242] loop4: rw=524288, want=525184, limit=16 [ 112.177664][ T4242] attempt to access beyond end of device [ 112.177664][ T4242] loop4: rw=524288, want=13478624064, limit=16 [ 112.177729][ T4242] attempt to access beyond end of device [ 112.177729][ T4242] loop4: rw=524288, want=13478624072, limit=16 [ 112.369372][ T4282] loop4: detected capacity change from 0 to 128 [ 113.366847][ T4282] EXT4-fs (loop4): Ignoring removed orlov option [ 113.410076][ T4301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 113.567263][ T4282] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,i_version,data_err=abort,noload,orlov,nobarrier,,errors=continue. Quota mode: none. [ 113.730676][ T4308] loop1: detected capacity change from 0 to 1764 [ 113.748031][ T4282] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 113.779401][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.451799][ T3587] udevd[3587]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 114.596864][ T3922] udevd[3922]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 114.658022][ T3922] udevd[3922]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 114.670845][ T4322] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 114.758207][ T4324] loop3: detected capacity change from 0 to 1024 [ 114.896559][ T4324] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.919113][ T4334] loop1: detected capacity change from 0 to 256 [ 114.957249][ T26] audit: type=1800 audit(1728868584.365:6): pid=4324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.153" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 115.045471][ T4342] Zero length message leads to an empty skb [ 115.071948][ T4324] loop_set_status: loop3 () has still dirty pages (nrpages=2) [ 115.094333][ T4334] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d16cac, utbl_chksum : 0xe619d30d) [ 115.147619][ T4343] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: none. [ 115.182802][ T4334] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 115.192325][ T4334] exFAT-fs (loop1): Filesystem has been set read-only [ 115.295653][ T3578] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /28/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 115.395290][ T3578] EXT4-fs error (device loop3): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 115.467343][ T3578] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 115.485851][ T4350] loop1: detected capacity change from 0 to 4096 [ 115.507347][ T3578] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /28/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 115.535749][ T3578] EXT4-fs error (device loop3): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 115.556639][ T3578] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 115.574871][ T3578] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /28/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 115.598521][ T4350] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 115.601370][ T3578] EXT4-fs error (device loop3): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 115.663273][ T4350] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 115.672993][ T4350] ntfs3: loop1: Failed to load $Extend. [ 115.716232][ T3578] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 115.762919][ T3578] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /28/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 115.784093][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.804132][ T3578] EXT4-fs error (device loop3): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 115.830882][ T3578] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 115.858847][ T3578] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /28/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 115.914753][ T3578] EXT4-fs error (device loop3): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 115.933911][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.987561][ T3578] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 115.995348][ T4361] netlink: 60 bytes leftover after parsing attributes in process `syz.1.167'. [ 116.007805][ T3578] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 116.037793][ T3578] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 116.067757][ T3578] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 116.089412][ T4365] loop2: detected capacity change from 0 to 1024 [ 116.097576][ T3578] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 116.098572][ T3614] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 116.124935][ T3578] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 116.174075][ T4365] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.200819][ T4365] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 116.209695][ T4365] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 116.219381][ T4365] EXT4-fs (loop2): can't enable nombcache during remount [ 116.498988][ T3614] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.512731][ T4376] device syzkaller0 entered promiscuous mode [ 116.519002][ T3614] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.529629][ T3614] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 116.547728][ T3614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.574980][ T3614] usb 1-1: config 0 descriptor?? [ 116.851338][ T3948] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.928784][ T3948] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.999479][ T4391] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 117.035495][ T3948] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.079352][ T4393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.082614][ T3614] hid-steam 0003:28DE:1142.0007: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 117.155308][ T3614] hid-steam 0003:28DE:1142.0008: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 117.162280][ T4396] loop1: detected capacity change from 0 to 128 [ 117.191732][ T3948] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.258593][ T3614] hid-steam 0003:28DE:1142.0007: Steam wireless receiver connected [ 117.319310][ T4396] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,inode_readahead_blks=0x0000000000000004,errors=continue,,errors=continue. Quota mode: none. [ 117.377982][ T4396] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038 (0x7fffffff) [ 117.568015][ T4397] chnl_net:caif_netlink_parms(): no params data found [ 117.652090][ T4406] loop1: detected capacity change from 0 to 256 [ 117.815203][ T26] audit: type=1800 audit(1728868587.225:7): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.185" name="file1" dev="loop1" ino=1048604 res=0 errno=0 [ 117.835922][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.890393][ T26] audit: type=1804 audit(1728868587.255:8): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.185" name="/newroot/55/file0/file1" dev="loop1" ino=1048604 res=1 errno=0 [ 117.928716][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.955310][ T4397] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.983480][ T4397] device bridge_slave_0 entered promiscuous mode [ 118.027517][ T4397] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.053123][ T4397] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.108317][ T4397] device bridge_slave_1 entered promiscuous mode [ 118.789016][ T3621] usb 1-1: USB disconnect, device number 15 [ 118.808402][ T4397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.874506][ T3621] hid-steam 0003:28DE:1142.0007: Steam wireless receiver disconnected [ 118.936085][ T4397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.099920][ T4439] EXT4-fs warning (device sda1): verify_group_input:176: Cannot read last block (262911) [ 119.202892][ T4397] team0: Port device team_slave_0 added [ 119.205106][ T4397] team0: Port device team_slave_1 added [ 119.288527][ T3614] Bluetooth: hci4: command 0x0409 tx timeout [ 119.331856][ T4397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.360613][ T4397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.386551][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.470073][ T4397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.501845][ T4397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.510995][ T4397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.536920][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.564737][ T4397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.648595][ T3621] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 119.737039][ T4397] device hsr_slave_0 entered promiscuous mode [ 119.760013][ T4397] device hsr_slave_1 entered promiscuous mode [ 119.782998][ T4397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.810658][ T4397] Cannot create hsr debugfs directory [ 120.018532][ T3621] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.058064][ T3948] device hsr_slave_0 left promiscuous mode [ 120.085097][ T3948] device hsr_slave_1 left promiscuous mode [ 120.107244][ T3948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.117057][ T3948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.133649][ T3948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.146959][ T3948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.163091][ T3948] device bridge_slave_1 left promiscuous mode [ 120.192181][ T3948] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.198778][ T3621] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.214460][ T3948] device bridge_slave_0 left promiscuous mode [ 120.221597][ T3621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.221624][ T3621] usb 2-1: Product: syz [ 120.221649][ T3621] usb 2-1: Manufacturer: syz [ 120.221664][ T3621] usb 2-1: SerialNumber: syz [ 120.268690][ T3948] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.302928][ T3948] device veth1_macvtap left promiscuous mode [ 120.329957][ T3948] device veth0_macvtap left promiscuous mode [ 120.336253][ T3948] device veth1_vlan left promiscuous mode [ 120.381283][ T3948] device veth0_vlan left promiscuous mode [ 120.751817][ T4456] syz.1.197 uses obsolete (PF_INET,SOCK_PACKET) [ 120.845546][ T4511] loop2: detected capacity change from 0 to 4096 [ 121.273542][ T3948] team0 (unregistering): Port device team_slave_1 removed [ 121.738723][ T3824] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 121.953807][ T3948] team0 (unregistering): Port device team_slave_0 removed [ 121.986592][ T3948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.001659][ T3621] cdc_ncm 2-1:1.0: bind() failure [ 122.029725][ T3621] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 122.038029][ T3948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.052093][ T3621] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 122.060732][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 122.098614][ T3621] usbtest: probe of 2-1:1.1 failed with error -71 [ 122.129002][ T3824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.151558][ T3824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.163719][ T3824] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 122.174476][ T3621] usb 2-1: USB disconnect, device number 6 [ 122.200027][ T3824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.219875][ T3824] usb 3-1: config 0 descriptor?? [ 122.232833][ T3948] bond0 (unregistering): Released all slaves [ 122.296960][ T4524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 122.988218][ T3824] hid-generic 0003:28BD:0933.0009: unknown main item tag 0x0 [ 122.997201][ T3824] hid-generic 0003:28BD:0933.0009: unknown main item tag 0x0 [ 123.005447][ T3824] hid-generic 0003:28BD:0933.0009: unknown main item tag 0x1 [ 123.013165][ T3824] hid-generic 0003:28BD:0933.0009: unknown main item tag 0x0 [ 123.021632][ T3824] hid-generic 0003:28BD:0933.0009: unknown main item tag 0x0 [ 123.029441][ T3824] hid-generic 0003:28BD:0933.0009: unknown main item tag 0x0 [ 123.036851][ T3824] hid-generic 0003:28BD:0933.0009: unknown main item tag 0x0 [ 123.077097][ T3824] hid-generic 0003:28BD:0933.0009: hidraw0: USB HID v5.50 Device [HID 28bd:0933] on usb-dummy_hcd.2-1/input0 [ 123.101204][ T3824] usb 3-1: USB disconnect, device number 8 [ 124.088534][ T3614] Bluetooth: hci4: command 0x040f tx timeout [ 125.588796][ T4554] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 125.590187][ T4397] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 125.689637][ T4397] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 125.703868][ T4559] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.745157][ T4397] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 125.784094][ T4397] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 125.795145][ T4561] crypto_alloc_aead failed rc=-4 [ 125.987896][ T4583] deleting an unspecified loop device is not supported. [ 126.169212][ T3614] Bluetooth: hci4: command 0x0419 tx timeout [ 126.193295][ T4397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.289018][ T4397] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.360746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.375545][ T4609] loop2: detected capacity change from 0 to 64 [ 126.385516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.462723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 126.514385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.547928][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.555136][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.572747][ T4619] loop0: detected capacity change from 0 to 128 [ 126.593643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.613063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.631570][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.638809][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.658773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.685412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.098398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.128003][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.195535][ T4619] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.218706][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.254170][ T4619] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038 (0x7fffffff) [ 127.260854][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.272922][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.287245][ T4631] loop2: detected capacity change from 0 to 512 [ 127.295528][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.315062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.355868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.386159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.407211][ T4631] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.252: casefold flag without casefold feature [ 127.415444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.435179][ T4631] EXT4-fs (loop2): Remounting filesystem read-only [ 127.441987][ T4631] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.252: couldn't read orphan inode 15 (err -117) [ 127.459688][ T4631] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 127.480127][ T4631] ext4 filesystem being mounted at /65/bus supports timestamps until 2038 (0x7fffffff) [ 127.880477][ T4644] loop0: detected capacity change from 0 to 32768 [ 127.901673][ T4649] loop1: detected capacity change from 0 to 256 [ 127.961516][ T4644] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.254 (4644) [ 127.972955][ T4649] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 128.017573][ T4644] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 128.027267][ T4644] BTRFS info (device loop0): using free space tree [ 128.034642][ T4644] BTRFS info (device loop0): has skinny extents [ 128.042990][ T4649] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 128.052829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.065468][ T4649] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 128.073777][ T4649] UDF-fs: Scanning with blocksize 512 failed [ 128.083205][ T4649] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 128.093046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.118362][ T4649] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.213526][ T4397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.256267][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.315928][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.417072][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.441093][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.654920][ T4681] loop2: detected capacity change from 0 to 40427 [ 128.698118][ T4397] device veth0_vlan entered promiscuous mode [ 128.713235][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.720857][ T4644] BTRFS info (device loop0): enabling ssd optimizations [ 128.744184][ T4681] F2FS-fs (loop2): invalid crc value [ 128.783093][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.844140][ T4397] device veth1_vlan entered promiscuous mode [ 128.886886][ T4681] F2FS-fs (loop2): Found nat_bits in checkpoint [ 128.985955][ T4681] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 129.245110][ T4696] handle_bad_sector: 32 callbacks suppressed [ 129.245128][ T4696] attempt to access beyond end of device [ 129.245128][ T4696] loop2: rw=2049, want=53504, limit=40427 [ 129.274475][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.300677][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.354708][ T4397] device veth0_macvtap entered promiscuous mode [ 129.396133][ T4397] device veth1_macvtap entered promiscuous mode [ 129.547109][ T3816] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 129.570392][ T4397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.599692][ T4397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.647865][ T4397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.698367][ T4397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.749167][ T4397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.778387][ T4397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.788458][ T3816] usb 5-1: Using ep0 maxpacket: 16 [ 129.794512][ T4397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.805472][ T4397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.836362][ T4397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.854901][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.878047][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.908513][ T3816] usb 5-1: config 0 has no interfaces? [ 129.909164][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.914032][ T3816] usb 5-1: New USB device found, idVendor=05ac, idProduct=1774, bcdDevice= 0.00 [ 129.979141][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.981968][ T3816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.024086][ T4397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.051452][ T3816] usb 5-1: config 0 descriptor?? [ 130.058590][ T4397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.078299][ T4397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.124665][ T4397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.186144][ T4397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.200930][ T4397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.210884][ T4397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.239617][ T4397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.288765][ T4397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.314781][ T3816] usb 5-1: USB disconnect, device number 4 [ 130.354126][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.389728][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.426103][ T4397] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.467948][ T4745] binder: 4742:4745 ioctl c0306201 0 returned -14 [ 130.490195][ T4745] binder: 4742:4745 ioctl 4b40 0 returned -22 [ 130.497074][ T4397] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.522141][ T4397] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.596842][ T4397] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.779743][ T3662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.803917][ T3662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.822176][ T4758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'. [ 130.832365][ T3657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.847583][ T3657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.856385][ T4758] netlink: 188 bytes leftover after parsing attributes in process `syz.0.272'. [ 130.899610][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.938701][ T4758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.272'. [ 130.958903][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.297054][ T4775] loop3: detected capacity change from 0 to 2048 [ 131.402503][ T4777] loop1: detected capacity change from 0 to 256 [ 131.572173][ T4786] loop2: detected capacity change from 0 to 2048 [ 131.729537][ T4796] loop1: detected capacity change from 0 to 256 [ 131.746964][ T4786] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 131.760976][ T4786] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038 (0x7fffffff) [ 131.778832][ T4786] kvm: emulating exchange as write [ 131.820897][ T4796] exfat: Deprecated parameter 'namecase' [ 131.834868][ T4796] exfat: Unknown parameter 'keep_last_dots' [ 131.902085][ T4802] loop3: detected capacity change from 0 to 4096 [ 132.302708][ T4817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'. [ 132.429386][ T4822] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 132.473362][ T4822] overlayfs: missing 'lowerdir' [ 132.591797][ T4825] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.618239][ T4830] loop1: detected capacity change from 0 to 64 [ 132.659858][ T1395] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.666182][ T1395] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.738835][ T4830] hfs: unable to locate alternate MDB [ 132.744756][ T4830] hfs: continuing without an alternate MDB [ 132.746105][ T4837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 132.843707][ T4835] loop_set_status: loop3 () has still dirty pages (nrpages=2) [ 132.851949][ T26] audit: type=1800 audit(1728868858.251:9): pid=4830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.291" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 133.114531][ T4397] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 524288 [ 133.154809][ T4397] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 133.223812][ T4397] Remounting filesystem read-only [ 133.249904][ T4397] NILFS (loop3): error -5 truncating bmap (ino=15) [ 133.276790][ T4397] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 133.314687][ T4397] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 133.335526][ T4397] NILFS (loop3): discard dirty block: blocknr=14, size=4096 [ 133.397675][ T4397] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 133.422286][ T4397] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 133.440786][ T4397] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 133.447767][ T4397] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 133.485781][ T4397] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 133.506991][ T4397] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 133.718202][ T4878] device syzkaller0 entered promiscuous mode [ 133.814075][ T3617] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 134.076653][ T3617] usb 1-1: Using ep0 maxpacket: 16 [ 134.204420][ T3617] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.215033][ T3617] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 134.415288][ T3617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.429276][ T3617] usb 1-1: config 0 descriptor?? [ 134.471657][ T3617] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 134.578638][ T3816] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 134.675354][ T4871] capability: warning: `syz.0.305' uses deprecated v2 capabilities in a way that may be insecure [ 134.848544][ T3816] usb 3-1: Using ep0 maxpacket: 32 [ 135.006526][ T3816] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 135.133849][ T4925] input: syz0 as /devices/virtual/input/input17 [ 135.150509][ T3816] usb 3-1: config 0 has no interface number 0 [ 135.171965][ T4927] loop1: detected capacity change from 0 to 512 [ 135.263683][ T4928] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 135.318498][ T4927] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 135.331949][ T3816] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 135.372067][ T3816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.381568][ T4927] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 135.415464][ T3816] usb 3-1: Product: syz [ 135.437802][ T3816] usb 3-1: Manufacturer: syz [ 135.462822][ T3816] usb 3-1: SerialNumber: syz [ 135.469280][ T4927] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 135.487401][ T4927] EXT4-fs (loop1): 1 truncate cleaned up [ 135.490068][ T3816] usb 3-1: config 0 descriptor?? [ 135.496431][ T4927] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,init_itable,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 135.571126][ T3816] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 135.598557][ T3013] bcm5974 1-1:0.0: could not read from device [ 135.783427][ T3013] bcm5974 1-1:0.0: could not read from device [ 135.793411][ T3816] gspca_topro: reg_w err -71 [ 135.807589][ T3617] usb 1-1: USB disconnect, device number 16 [ 136.647697][ T3816] gspca_topro: Sensor soi763a [ 136.653267][ T3922] bcm5974 1-1:0.0: could not read from device [ 136.677481][ T3816] usb 3-1: USB disconnect, device number 9 [ 136.713857][ T3013] bcm5974 1-1:0.0: could not read from device [ 137.273185][ T4983] loop3: detected capacity change from 0 to 32768 [ 138.185099][ T4993] loop0: detected capacity change from 0 to 164 [ 138.233601][ T4997] loop1: detected capacity change from 0 to 256 [ 138.288135][ T4995] device vlan2 entered promiscuous mode [ 138.294485][ T4995] device vlan0 entered promiscuous mode [ 138.323293][ T4997] exfat: Unknown parameter 'keep_last_dots' [ 138.335672][ T4995] team0: Port device vlan2 added [ 138.419921][ T4997] loop1: detected capacity change from 0 to 256 [ 138.538406][ T4997] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe9e488b, utbl_chksum : 0xe619d30d) [ 138.578812][ T4997] exFAT-fs (loop1): error, invalid access to FAT bad cluster (entry 0x00000005) [ 138.606858][ T4997] exFAT-fs (loop1): failed to initialize root inode [ 138.619540][ T5008] loop3: detected capacity change from 0 to 512 [ 138.631439][ T5001] device vlan0 left promiscuous mode [ 138.793032][ T5008] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.873396][ T5001] team0: Port device vlan2 removed [ 138.884437][ T5008] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038 (0x7fffffff) [ 139.710408][ T5043] loop3: detected capacity change from 0 to 2048 [ 139.910265][ T5043] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.976214][ T5055] loop2: detected capacity change from 0 to 4096 [ 140.312566][ T5062] iou-wrk-5061 (5062): drop_caches: 2 [ 140.757915][ T5070] loop2: detected capacity change from 0 to 32768 [ 140.866898][ T5058] syz.0.360 (5058): drop_caches: 2 [ 141.087538][ T5077] Cannot find del_set index 286 as target [ 141.206809][ T5088] loop0: detected capacity change from 0 to 64 [ 141.372727][ T5098] loop3: detected capacity change from 0 to 1024 [ 141.610897][ T5098] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x000000000000007f,nolazytime,noload,nombcache,acl,,errors=continue. Quota mode: none. [ 141.962462][ T5114] loop3: detected capacity change from 0 to 256 [ 142.020120][ T5114] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 142.534601][ T5130] loop3: detected capacity change from 0 to 4096 [ 142.551560][ T5135] tmpfs: Bad value for 'mpol' [ 142.636626][ T5139] input: syz0 as /devices/virtual/input/input19 [ 142.683826][ T5130] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 142.894266][ T5143] netlink: 'syz.0.392': attribute type 4 has an invalid length. [ 143.194877][ T5154] loop0: detected capacity change from 0 to 512 [ 143.283804][ T5154] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 143.344223][ T5154] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.397: invalid indirect mapped block 83886080 (level 1) [ 143.404436][ T5154] EXT4-fs (loop0): Remounting filesystem read-only [ 143.428390][ T3617] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 143.444931][ T5154] EXT4-fs (loop0): 1 orphan inode deleted [ 143.494598][ T5154] EXT4-fs (loop0): 1 truncate cleaned up [ 143.530262][ T5154] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,grpquota,inode_readahead_blks=0x0000000000010000,minixdf,noinit_itable,. Quota mode: writeback. [ 143.688552][ T3617] usb 5-1: Using ep0 maxpacket: 8 [ 143.828470][ T3617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.849180][ T3617] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 143.868354][ T3617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.895609][ T3617] usb 5-1: config 0 descriptor?? [ 143.910326][ T5161] loop2: detected capacity change from 0 to 2048 [ 144.054874][ T5163] loop2: detected capacity change from 0 to 256 [ 144.078439][ T4724] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 144.143210][ T5163] FAT-fs (loop2): Directory bread(block 64) failed [ 144.156961][ T5163] FAT-fs (loop2): Directory bread(block 65) failed [ 144.164395][ T5163] FAT-fs (loop2): Directory bread(block 66) failed [ 144.183996][ T5163] FAT-fs (loop2): Directory bread(block 67) failed [ 144.195144][ T5163] FAT-fs (loop2): Directory bread(block 68) failed [ 144.195751][ T3617] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 144.202436][ T5163] FAT-fs (loop2): Directory bread(block 69) failed [ 144.230154][ T5163] FAT-fs (loop2): Directory bread(block 70) failed [ 144.236815][ T5163] FAT-fs (loop2): Directory bread(block 71) failed [ 144.252161][ T5163] FAT-fs (loop2): Directory bread(block 72) failed [ 144.264407][ T5163] FAT-fs (loop2): Directory bread(block 73) failed [ 144.358585][ T4724] usb 1-1: Using ep0 maxpacket: 16 [ 144.456093][ T5166] loop3: detected capacity change from 0 to 128 [ 144.514029][ T5166] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.661407][ T3617] usb 5-1: USB disconnect, device number 5 [ 144.684598][ T3617] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 144.698704][ T4724] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 144.708869][ T4724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.716956][ T4724] usb 1-1: Product: syz [ 144.722936][ T5173] loop3: detected capacity change from 0 to 512 [ 144.730121][ T4724] usb 1-1: Manufacturer: syz [ 144.734942][ T4724] usb 1-1: SerialNumber: syz [ 144.747003][ T4724] usb 1-1: config 0 descriptor?? [ 144.815918][ T5173] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 144.875925][ T5173] EXT4-fs (loop3): 1 truncate cleaned up [ 144.896505][ T5173] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.209454][ T4724] usb 1-1: MIDIStreaming interface descriptor not found [ 145.270665][ T4724] usb 1-1: USB disconnect, device number 17 [ 145.524422][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.636553][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.734591][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.877289][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.246859][ T5210] loop0: detected capacity change from 0 to 512 [ 146.356663][ T5198] chnl_net:caif_netlink_parms(): no params data found [ 146.360589][ T5210] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.375840][ T5210] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038 (0x7fffffff) [ 146.584033][ T5198] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.596029][ T5198] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.604753][ T5198] device bridge_slave_0 entered promiscuous mode [ 146.613753][ T5198] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.620918][ T5198] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.629428][ T5198] device bridge_slave_1 entered promiscuous mode [ 146.697772][ T5198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.742325][ T5198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.894331][ T5198] team0: Port device team_slave_0 added [ 146.910874][ T5198] team0: Port device team_slave_1 added [ 146.967003][ T5239] loop0: detected capacity change from 0 to 4096 [ 147.012163][ T5198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.026993][ T5198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.072220][ T5239] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 147.085301][ T5198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.115594][ T5198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.123182][ T5198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.192373][ T5239] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 147.220799][ T5198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.232340][ T5239] ntfs3: loop0: Failed to load $Extend. [ 147.440184][ T5198] device hsr_slave_0 entered promiscuous mode [ 147.461404][ T5198] device hsr_slave_1 entered promiscuous mode [ 147.479718][ T5198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.487425][ T5198] Cannot create hsr debugfs directory [ 147.666416][ T144] device hsr_slave_0 left promiscuous mode [ 147.692740][ T144] device hsr_slave_1 left promiscuous mode [ 147.721209][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.730234][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.745615][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.763395][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.792527][ T144] device bridge_slave_1 left promiscuous mode [ 147.810052][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.822434][ T144] device bridge_slave_0 left promiscuous mode [ 147.829104][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.898650][ T144] device veth1_macvtap left promiscuous mode [ 147.905288][ T144] device veth0_macvtap left promiscuous mode [ 147.933119][ T144] device veth1_vlan left promiscuous mode [ 147.942123][ T144] device veth0_vlan left promiscuous mode [ 147.948913][ T5272] loop0: detected capacity change from 0 to 2048 [ 148.003280][ T5272] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576 [ 148.008501][ T4720] Bluetooth: hci4: command 0x0409 tx timeout [ 148.063755][ T5272] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.248504][ T3570] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 148.282534][ T3570] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 148.436167][ T5299] loop2: detected capacity change from 0 to 512 [ 148.561726][ T5299] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 148.573722][ T5299] EXT4-fs error (device loop2): __ext4_iget:4872: inode #11: block 393240: comm syz.2.444: invalid block [ 148.607574][ T5299] EXT4-fs (loop2): Remounting filesystem read-only [ 148.617021][ T5299] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.444: couldn't read orphan inode 11 (err -117) [ 148.649212][ T5299] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,min_batch_time=0x0000000000000001,errors=remount-ro,inode_readahead_blks=0x0000000001000000,init_itable. Quota mode: none. [ 148.714683][ T144] team0 (unregistering): Port device team_slave_1 removed [ 148.752023][ T144] team0 (unregistering): Port device team_slave_0 removed [ 148.777478][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.795900][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.992696][ T144] bond0 (unregistering): Released all slaves [ 150.088418][ T4717] Bluetooth: hci4: command 0x041b tx timeout [ 150.107942][ T5319] netlink: 288 bytes leftover after parsing attributes in process `syz.2.451'. [ 150.487370][ T5332] loop1: detected capacity change from 0 to 2048 [ 150.578787][ T5332] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 150.738746][ T3621] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 151.048586][ T5198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 151.098956][ T5198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 151.178475][ T5198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 151.234930][ T5198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 151.237133][ T5354] loop1: detected capacity change from 0 to 32768 [ 151.292686][ T5354] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.461 (5354) [ 151.321210][ T3814] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 151.375890][ T5354] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 151.386017][ T5354] BTRFS info (device loop1): using free space tree [ 151.392833][ T5354] BTRFS info (device loop1): has skinny extents [ 151.399762][ T3621] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 151.429260][ T3621] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 151.429740][ T5198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.441237][ T3621] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.461193][ T3621] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 151.486940][ T3621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.515206][ T5341] chnl_net:caif_netlink_parms(): no params data found [ 151.559396][ T3621] usb 5-1: invalid MIDI out EP 0 [ 151.625664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.638407][ T3814] usb 3-1: Using ep0 maxpacket: 16 [ 151.645664][ T5354] BTRFS info (device loop1): enabling ssd optimizations [ 151.720261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.728542][ T3754] udevd[3754]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.778527][ T3814] usb 3-1: config 0 has no interfaces? [ 151.784390][ T5198] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.806031][ T3621] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 151.861924][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.870576][ T3814] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.880586][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.898492][ T3814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 151.912805][ T3814] usb 3-1: SerialNumber: syz [ 151.918956][ T3621] usb 5-1: USB disconnect, device number 6 [ 151.930556][ T3814] usb 3-1: config 0 descriptor?? [ 151.970247][ T3699] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.977353][ T3699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.025716][ T5341] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.032944][ T5341] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.043339][ T5341] device bridge_slave_0 entered promiscuous mode [ 152.061919][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.079361][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.098642][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.118680][ T3699] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.125804][ T3699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.154592][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.189426][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.199136][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.234702][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.253390][ T5341] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.269625][ T5341] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.298042][ T5341] device bridge_slave_1 entered promiscuous mode [ 152.360566][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.371534][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.445734][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.477648][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.505359][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.715891][ T3621] usb 3-1: USB disconnect, device number 10 [ 152.786283][ T4720] Bluetooth: hci4: command 0x040f tx timeout [ 152.801741][ T4720] Bluetooth: hci2: command 0x0409 tx timeout [ 152.879939][ T5198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.912187][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.952693][ T5341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.971330][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.001176][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.191405][ T5341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.241376][ T5341] team0: Port device team_slave_0 added [ 154.289559][ T5341] team0: Port device team_slave_1 added [ 154.437402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.454255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.461428][ T5424] loop1: detected capacity change from 0 to 64 [ 154.482611][ T5341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.490784][ T5341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.516885][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.648298][ T5341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.700448][ T5198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.719569][ T5341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.726547][ T5341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.752492][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.858644][ T3617] Bluetooth: hci2: command 0x041b tx timeout [ 154.866338][ T3617] Bluetooth: hci4: command 0x0419 tx timeout [ 154.907466][ T5341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.057492][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.086810][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.107837][ T5439] netlink: 76 bytes leftover after parsing attributes in process `syz.1.471'. [ 155.185475][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.206376][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.249419][ T5198] device veth0_vlan entered promiscuous mode [ 155.281581][ T5341] device hsr_slave_0 entered promiscuous mode [ 155.325578][ T5341] device hsr_slave_1 entered promiscuous mode [ 155.345393][ T5341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.371536][ T5341] Cannot create hsr debugfs directory [ 155.404728][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.427022][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.463592][ T5198] device veth1_vlan entered promiscuous mode [ 155.635863][ T5198] device veth0_macvtap entered promiscuous mode [ 155.666295][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.685095][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.719289][ T3699] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.764135][ T5198] device veth1_macvtap entered promiscuous mode [ 155.873320][ T5198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.054675][ T5198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.855393][ T5198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.888608][ T5198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.918293][ T5198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.935176][ T5198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.946259][ T5198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.984470][ T5198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.050301][ T5198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.067578][ T3824] Bluetooth: hci2: command 0x040f tx timeout [ 157.089879][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.115207][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.385718][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.585736][ T5198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.704447][ T5198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.806740][ T5198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.868302][ T5198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.878141][ T5198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.937391][ T5198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.951136][ T5198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.961656][ T5198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.980899][ T5198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.992040][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.019138][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.055587][ T5198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.097584][ T5198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.115111][ T5198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.134412][ T5198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.245410][ T5341] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.440715][ T5341] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.499535][ T5502] loop1: detected capacity change from 0 to 136 [ 158.520663][ T5341] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.607823][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.661930][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.769608][ T5513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.769918][ T3569] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 158.802973][ T5341] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.825601][ T3662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.851381][ T3569] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 158.874966][ T3662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.919052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.930099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.264731][ T5524] loop2: detected capacity change from 0 to 32768 [ 159.272947][ T3814] Bluetooth: hci2: command 0x0419 tx timeout [ 159.489050][ T5529] loop3: detected capacity change from 0 to 2048 [ 159.511142][ T5524] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 159.579340][ T5341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 159.606209][ T5529] Alternate GPT is invalid, using primary GPT. [ 159.635731][ T26] audit: type=1326 audit(1728868885.041:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff694ff9 code=0x7ffc0000 [ 159.664406][ T5341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 159.668956][ T5529] loop3: p1 p2 p3 [ 159.702269][ T5341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 159.737932][ T26] audit: type=1326 audit(1728868885.061:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff694ff9 code=0x7ffc0000 [ 159.737983][ T26] audit: type=1326 audit(1728868885.061:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f4eff694ff9 code=0x7ffc0000 [ 159.738026][ T26] audit: type=1326 audit(1728868885.071:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff694ff9 code=0x7ffc0000 [ 159.738069][ T26] audit: type=1326 audit(1728868885.071:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff694ff9 code=0x7ffc0000 [ 159.738111][ T26] audit: type=1326 audit(1728868885.071:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4eff694ff9 code=0x7ffc0000 [ 159.738174][ T26] audit: type=1326 audit(1728868885.071:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff694ff9 code=0x7ffc0000 [ 159.738216][ T26] audit: type=1326 audit(1728868885.071:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff694ff9 code=0x7ffc0000 [ 159.740138][ T26] audit: type=1326 audit(1728868885.071:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4eff694ff9 code=0x7ffc0000 [ 159.740185][ T26] audit: type=1326 audit(1728868885.071:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.1.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eff694ff9 code=0x7ffc0000 [ 159.763800][ T5341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 159.797902][ T3568] ocfs2: Unmounting device (7,2) on (node local) [ 159.799929][ T3028] Alternate GPT is invalid, using primary GPT. [ 159.800031][ T3028] loop3: p1 p2 p3 [ 159.863933][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.045684][ T5341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.056315][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.056968][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.206899][ T5341] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.250479][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.280239][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.315314][ T3681] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.322595][ T3681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.349286][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.390472][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.401152][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.434179][ T3681] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.441379][ T3681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.506007][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.523683][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.537484][ T3586] udevd[3586]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 160.547998][ T5557] loop1: detected capacity change from 0 to 512 [ 160.565226][ T3922] udevd[3922]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 160.571379][ T3587] udevd[3587]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 160.678772][ T5557] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.500: casefold flag without casefold feature [ 160.709135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.776137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.784875][ T5557] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.500: couldn't read orphan inode 15 (err -117) [ 160.807935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.822467][ T5557] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.872258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.880935][ T5571] process 'syz.3.505' launched './file0' with NULL argv: empty string added [ 160.935890][ T5341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.963958][ T5570] binder: 5568:5570 ioctl c0306201 20000380 returned -14 [ 160.974113][ T5341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.002967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.032191][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.073519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.074875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.076289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.095411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.162939][ T3948] device hsr_slave_0 left promiscuous mode [ 161.165303][ T3948] device hsr_slave_1 left promiscuous mode [ 161.171453][ T3948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.171506][ T3948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.172210][ T3948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.172240][ T3948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.172904][ T3948] device bridge_slave_1 left promiscuous mode [ 161.173023][ T3948] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.175044][ T3948] device bridge_slave_0 left promiscuous mode [ 161.175207][ T3948] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.225941][ T3948] device veth1_macvtap left promiscuous mode [ 161.226062][ T3948] device veth0_macvtap left promiscuous mode [ 161.226164][ T3948] device veth1_vlan left promiscuous mode [ 161.226243][ T3948] device veth0_vlan left promiscuous mode [ 162.451971][ T5598] loop1: detected capacity change from 0 to 4096 [ 162.522133][ T5598] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 162.733964][ T5598] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 162.761350][ T5598] ntfs3: loop1: Failed to load $Extend. [ 162.788359][ T5619] loop3: detected capacity change from 0 to 256 [ 163.146614][ T5601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.502585][ T3948] team0 (unregistering): Port device team_slave_1 removed [ 163.555815][ T3948] team0 (unregistering): Port device team_slave_0 removed [ 163.639832][ T3948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.683422][ T3948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.870809][ T3948] bond0 (unregistering): Released all slaves [ 163.921214][ T5632] loop3: detected capacity change from 0 to 2048 [ 164.016113][ T5632] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 164.032209][ T3922] udevd[3922]: incorrect nilfs2 checksum on /dev/loop3 [ 164.138056][ T5642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.529'. [ 164.151999][ T5641] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.167771][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.177911][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.203783][ T5341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.242482][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.267700][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.343264][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.373278][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.402884][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.477043][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.566874][ T5653] binder: 5652:5653 unknown command 0 [ 164.589704][ T5653] binder: 5652:5653 ioctl c0306201 20000a80 returned -22 [ 164.660711][ T5341] device veth0_vlan entered promiscuous mode [ 164.956236][ T5341] device veth1_vlan entered promiscuous mode [ 165.111868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.373489][ T5658] loop1: detected capacity change from 0 to 1024 [ 165.478780][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.508062][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.516911][ T5664] netlink: 52 bytes leftover after parsing attributes in process `syz.2.540'. [ 165.531310][ T5664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.540'. [ 165.565615][ T5341] device veth0_macvtap entered promiscuous mode [ 165.660824][ T5341] device veth1_macvtap entered promiscuous mode [ 165.759741][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.804192][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.838518][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.899737][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.947114][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.982411][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.995569][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.006543][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.028099][ T5341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.040661][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.068422][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.154131][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.188515][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.198714][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.209798][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.219910][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.234810][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.259383][ T5341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.513306][ T5341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.605691][ T5341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.665554][ T5341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.724988][ T5341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.053680][ T5683] netlink: 'syz.3.547': attribute type 4 has an invalid length. [ 167.144456][ T5694] netlink: 36 bytes leftover after parsing attributes in process `syz.1.552'. [ 167.157274][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.169414][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 167.186169][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.222315][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.242232][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.259176][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.311378][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.344463][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.396332][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 167.407201][ T5693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.435880][ T3681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.465116][ T3681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.496753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 168.821255][ T5731] loop0: detected capacity change from 0 to 2048 [ 168.905937][ T5731] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.011475][ T5744] tipc: Started in network mode [ 169.016847][ T5744] tipc: Node identity 665dc2489b24, cluster identity 4711 [ 169.047174][ T5744] tipc: Enabled bearer , priority 0 [ 169.054161][ T5745] loop2: detected capacity change from 0 to 512 [ 169.104033][ T5751] ªªªªªª: renamed from syzkaller0 [ 169.110478][ T5341] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 169.129418][ T5341] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 169.147538][ T5751] tipc: Disabling bearer [ 169.233815][ T5745] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 169.259005][ T5745] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 169.332741][ T5745] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.569: Corrupt directory, running e2fsck is recommended [ 169.387716][ T5745] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 169.396476][ T5745] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.569: corrupted in-inode xattr [ 169.420199][ T5745] EXT4-fs (loop2): Remounting filesystem read-only [ 169.426993][ T5745] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.569: couldn't read orphan inode 15 (err -117) [ 169.472642][ T5745] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,auto_da_alloc,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 171.036936][ T5777] loop2: detected capacity change from 0 to 512 [ 171.197449][ T5777] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.219360][ T5777] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038 (0x7fffffff) [ 171.618033][ T5783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.935226][ T5822] loop3: detected capacity change from 0 to 256 [ 173.096027][ T5822] FAT-fs (loop3): Directory bread(block 64) failed [ 173.143823][ T5822] FAT-fs (loop3): Directory bread(block 65) failed [ 173.178551][ T5822] FAT-fs (loop3): Directory bread(block 66) failed [ 173.185262][ T5822] FAT-fs (loop3): Directory bread(block 67) failed [ 173.195957][ T5822] FAT-fs (loop3): Directory bread(block 68) failed [ 173.202638][ T5822] FAT-fs (loop3): Directory bread(block 69) failed [ 173.209463][ T5822] FAT-fs (loop3): Directory bread(block 70) failed [ 173.214749][ T5834] loop2: detected capacity change from 0 to 512 [ 173.216104][ T5822] FAT-fs (loop3): Directory bread(block 71) failed [ 173.229285][ T5822] FAT-fs (loop3): Directory bread(block 72) failed [ 173.235827][ T5822] FAT-fs (loop3): Directory bread(block 73) failed [ 173.308518][ T5838] netlink: 16 bytes leftover after parsing attributes in process `syz.4.605'. [ 173.409307][ T5834] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 173.511077][ T5834] EXT4-fs (loop2): 1 truncate cleaned up [ 173.529437][ T5840] loop1: detected capacity change from 0 to 32768 [ 173.537223][ T5834] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.566926][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 173.621946][ T5840] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.606 (5840) [ 173.938498][ T5847] loop3: detected capacity change from 0 to 32768 [ 174.692487][ T5840] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 174.702827][ T5840] BTRFS info (device loop1): using free space tree [ 174.709499][ T5840] BTRFS info (device loop1): has skinny extents [ 174.734886][ T5847] (syz.3.607,5847,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "coherencresv_level=00000000000000000005" or missing value [ 174.749228][ T5847] (syz.3.607,5847,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 174.837248][ T3948] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.950223][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.960131][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.968841][ T2989] Bluetooth: hci2: command 0x0409 tx timeout [ 175.005168][ T5818] device bridge_slave_0 entered promiscuous mode [ 175.046451][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.058502][ T5840] BTRFS info (device loop1): enabling ssd optimizations [ 175.065980][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.075311][ T5818] device bridge_slave_1 entered promiscuous mode [ 175.118064][ T3948] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.238531][ T3568] syz-executor (3568) used greatest stack depth: 19480 bytes left [ 175.360680][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.689097][ T3948] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.721174][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.797573][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 175.797589][ T26] audit: type=1326 audit(1728868901.201:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.3.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d84598ff9 code=0x7fc00000 [ 175.841569][ T3948] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.005701][ T5818] team0: Port device team_slave_0 added [ 176.037482][ T5818] team0: Port device team_slave_1 added [ 176.122385][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.137201][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.182983][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.216283][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.224141][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.251113][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.426061][ T5818] device hsr_slave_0 entered promiscuous mode [ 176.447672][ T5818] device hsr_slave_1 entered promiscuous mode [ 176.455717][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.472895][ T5818] Cannot create hsr debugfs directory [ 176.536436][ T5924] nfs: Bad value for 'source' [ 176.842256][ T5893] chnl_net:caif_netlink_parms(): no params data found [ 177.022370][ T5946] loop1: detected capacity change from 0 to 256 [ 177.048572][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 177.079252][ T5946] exfat: Deprecated parameter 'namecase' [ 177.096489][ T5946] exfat: Unknown parameter 'keep_last_dots' [ 177.224870][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.238383][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.286210][ T5893] device bridge_slave_0 entered promiscuous mode [ 177.378910][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.391118][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.433100][ T5893] device bridge_slave_1 entered promiscuous mode [ 177.502477][ T5970] loop1: detected capacity change from 0 to 2048 [ 177.602704][ T5970] loop1: detected capacity change from 0 to 256 [ 177.668944][ T5970] exfat: Deprecated parameter 'utf8' [ 177.675147][ T5970] exfat: Deprecated parameter 'namecase' [ 177.686538][ T5970] exfat: Deprecated parameter 'utf8' [ 177.688616][ T4720] Bluetooth: hci0: command 0x0409 tx timeout [ 177.707028][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.739533][ T5970] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 177.756827][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.780721][ T5970] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 177.878624][ T5893] team0: Port device team_slave_0 added [ 177.913447][ T5893] team0: Port device team_slave_1 added [ 178.008015][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.644'. [ 178.038695][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.045702][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.073077][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.110990][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.118001][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.190284][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.247383][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.324988][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.345558][ T3948] device hsr_slave_0 left promiscuous mode [ 178.354403][ T3948] device hsr_slave_1 left promiscuous mode [ 178.369153][ T3948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.401953][ T3948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.426844][ T3948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.448916][ T3948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.495810][ T3948] device bridge_slave_1 left promiscuous mode [ 178.523540][ T3948] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.589321][ T3948] device bridge_slave_0 left promiscuous mode [ 178.595616][ T3948] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.625641][ T6012] loop1: detected capacity change from 0 to 256 [ 178.643984][ T3948] device veth1_macvtap left promiscuous mode [ 178.659317][ T3948] device veth0_macvtap left promiscuous mode [ 178.672261][ T3948] device veth1_vlan left promiscuous mode [ 178.684839][ T3948] device veth0_vlan left promiscuous mode [ 178.821255][ T6017] IPVS: wlc: TCP [::]:0 - no destination available [ 179.138480][ T3822] Bluetooth: hci2: command 0x040f tx timeout [ 179.246989][ T3948] team0 (unregistering): Port device team_slave_1 removed [ 179.275240][ T3948] team0 (unregistering): Port device team_slave_0 removed [ 179.330591][ T3948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.348396][ T3948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.608825][ T3948] bond0 (unregistering): Released all slaves [ 179.676661][ T6049] loop3: detected capacity change from 0 to 4096 [ 179.724114][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.742442][ T26] audit: type=1326 audit(1728868905.151:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2ae2bff9 code=0x7ffc0000 [ 179.748696][ T6049] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 179.764575][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.774691][ T4719] Bluetooth: hci0: command 0x041b tx timeout [ 179.792115][ T5893] device hsr_slave_0 entered promiscuous mode [ 179.809481][ T26] audit: type=1326 audit(1728868905.201:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7efe2ae2bff9 code=0x7ffc0000 [ 179.831481][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.838062][ T5893] device hsr_slave_1 entered promiscuous mode [ 179.845354][ T26] audit: type=1326 audit(1728868905.201:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2ae2bff9 code=0x7ffc0000 [ 179.872705][ T5893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.888399][ T5893] Cannot create hsr debugfs directory [ 179.909086][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 180.069412][ T6066] Non-string source [ 180.302933][ T5893] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.371787][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.396020][ T5893] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.427465][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.444375][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.458624][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.487500][ T4719] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 180.534510][ T5893] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.557025][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.570375][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.589445][ T3657] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.596572][ T3657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.616660][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.645656][ T5893] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.689306][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.698083][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.709975][ T3681] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.717107][ T3681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.725537][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.736223][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.753514][ T4719] usb 5-1: Using ep0 maxpacket: 8 [ 180.766639][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.797451][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.807119][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.808470][ T4718] Bluetooth: hci1: command 0x0406 tx timeout [ 180.818027][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.837934][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.847688][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.864913][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.878571][ T4719] usb 5-1: config 0 has no interfaces? [ 180.883722][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.927770][ T5818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.937248][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.946791][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.038695][ T4719] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=1b.21 [ 181.056443][ T4719] usb 5-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 181.068441][ T5893] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 181.088536][ T4719] usb 5-1: Product: syz [ 181.092916][ T4719] usb 5-1: Manufacturer: syz [ 181.097562][ T4719] usb 5-1: SerialNumber: syz [ 181.129538][ T4719] usb 5-1: config 0 descriptor?? [ 181.137456][ T5893] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 181.161391][ T5893] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 181.197222][ T5893] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 181.209027][ T4724] Bluetooth: hci2: command 0x0419 tx timeout [ 181.377862][ T6071] udc-core: couldn't find an available UDC or it's busy [ 181.405640][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.415801][ T6071] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 181.433138][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.440759][ T4718] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 181.451027][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.684'. [ 181.460260][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.472130][ T6071] device team_slave_0 entered promiscuous mode [ 181.478916][ T6071] device team_slave_1 entered promiscuous mode [ 181.485677][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.684'. [ 181.509934][ T6071] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 181.530355][ T6071] device team_slave_0 left promiscuous mode [ 181.536386][ T6071] device team_slave_1 left promiscuous mode [ 181.698797][ T4718] usb 2-1: Using ep0 maxpacket: 8 [ 181.716237][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.726361][ T4719] usb 5-1: USB disconnect, device number 7 [ 181.764598][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.819521][ T4718] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 181.841052][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.855865][ T4718] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.876242][ T5893] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.885308][ T6123] loop3: detected capacity change from 0 to 1024 [ 181.892377][ T4718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.904869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.912964][ T4724] Bluetooth: hci0: command 0x040f tx timeout [ 181.949743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.974105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.000556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.035110][ T5818] device veth0_vlan entered promiscuous mode [ 182.066493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.085977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.111720][ T5818] device veth1_vlan entered promiscuous mode [ 182.122262][ T3657] hfsplus: b-tree write err: -5, ino 4 [ 182.146959][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.178106][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.259917][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.287592][ T3662] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.294845][ T3662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.317221][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.346826][ T2989] usb 2-1: USB disconnect, device number 7 [ 182.381220][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 182.400912][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.439982][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.467778][ T3657] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.475006][ T3657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.536134][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.579469][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.602938][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.633596][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.666887][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.697290][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.727580][ T5818] device veth0_macvtap entered promiscuous mode [ 182.750559][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.765085][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.784445][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.825387][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.871136][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.929798][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.941854][ T6155] loop3: detected capacity change from 0 to 1024 [ 182.962039][ T5818] device veth1_macvtap entered promiscuous mode [ 182.993482][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.012451][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.057400][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.093854][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.169179][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.197920][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.217369][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.248284][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.267007][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.277875][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.291053][ T6155] hfsplus: request for non-existent node 1280 in B*Tree [ 183.297290][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.321466][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.323480][ T6155] hfsplus: request for non-existent node 1280 in B*Tree [ 183.340464][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.355691][ T6163] hfsplus: request for non-existent node 1280 in B*Tree [ 183.364075][ T6163] hfsplus: request for non-existent node 1280 in B*Tree [ 183.428428][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.452041][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.485827][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.496198][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.507150][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.517653][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.529645][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.572262][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.595137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.606870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.626966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.670005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.715636][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.734919][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.754941][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.771940][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.826006][ T6176] raw_sendmsg: syz.3.700 forgot to set AF_INET. Fix it! [ 183.969734][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.978100][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.009431][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 184.052791][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 184.100688][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.108207][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.123687][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.131257][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.163914][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 184.205764][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.213536][ T6187] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 184.299260][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.349170][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.412609][ T26] audit: type=1326 audit(1728868909.821:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.0.596" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fc8d9aff9 code=0x0 [ 184.647345][ T6193] loop1: detected capacity change from 0 to 40427 [ 184.674651][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.690869][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.961978][ T6193] F2FS-fs (loop1): invalid crc value [ 185.274860][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.314698][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.351531][ T6193] F2FS-fs (loop1): Found nat_bits in checkpoint [ 185.410530][ T6193] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 185.444195][ T5893] device veth0_vlan entered promiscuous mode [ 185.511905][ T3569] attempt to access beyond end of device [ 185.511905][ T3569] loop1: rw=2049, want=45104, limit=40427 [ 185.552926][ T5893] device veth1_vlan entered promiscuous mode [ 185.634021][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.664366][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.697484][ T5893] device veth0_macvtap entered promiscuous mode [ 185.719794][ T5893] device veth1_macvtap entered promiscuous mode [ 185.759711][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.798279][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.808218][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.831937][ T6212] loop3: detected capacity change from 0 to 4096 [ 185.848814][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.878329][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.892376][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.911435][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.928203][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.938276][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.949628][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.961322][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.971934][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.990270][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.009321][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.038449][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.067084][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.098925][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.124941][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.135985][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.154263][ T5893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.166482][ T5893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.184519][ T6218] loop0: detected capacity change from 0 to 32768 [ 186.186518][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.235424][ T6218] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.712 (6218) [ 186.236312][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.281085][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.288036][ T6212] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 186.291094][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.311062][ T6218] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 186.320555][ T6218] BTRFS info (device loop0): using free space tree [ 186.327195][ T6218] BTRFS info (device loop0): has skinny extents [ 186.336029][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.345470][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.354741][ T3944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.363495][ T6212] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 186.373759][ T5893] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.444992][ T5893] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.475280][ T5893] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.484588][ T5893] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.505101][ T6212] ntfs3: loop3: Failed to load $Extend. [ 186.636457][ T6218] BTRFS info (device loop0): enabling ssd optimizations [ 186.915372][ T3666] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 187.169885][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.197368][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.210911][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.220163][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.303825][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 187.350202][ T3662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.359063][ T3666] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.382805][ T3666] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.394934][ T3662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.420556][ T3666] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.441854][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 187.461106][ T3666] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.480856][ T3666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.499322][ T3666] usb 2-1: config 0 descriptor?? [ 187.525012][ T6272] fuse: Unknown parameter 'fd0x0000000000000004' [ 187.633981][ T6274] loop0: detected capacity change from 0 to 4096 [ 187.823959][ T6274] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 188.520664][ T6286] netlink: 32 bytes leftover after parsing attributes in process `syz.3.728'. [ 188.642683][ T3666] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 188.658041][ T3666] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 188.666458][ T3666] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 188.674825][ T3666] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 188.682838][ T3666] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 188.690678][ T3666] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 188.708739][ T3666] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 188.946385][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 189.006777][ T6298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.735'. [ 189.019192][ T6290] loop2: detected capacity change from 0 to 32768 [ 189.056352][ T3666] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 189.074643][ T3666] usb 2-1: USB disconnect, device number 8 [ 189.080693][ T6298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.735'. [ 189.137578][ T6292] loop3: detected capacity change from 0 to 4096 [ 189.148632][ T6290] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 189.245554][ T6307] loop0: detected capacity change from 0 to 2048 [ 189.266220][ T6292] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 189.280243][ T3948] device hsr_slave_0 left promiscuous mode [ 189.328874][ T3948] device hsr_slave_1 left promiscuous mode [ 189.345038][ T5893] ocfs2: Unmounting device (7,2) on (node local) [ 189.385927][ T3948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.410603][ T3948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.437812][ T3948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.523071][ T6307] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.534743][ T3948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.582660][ T3948] device bridge_slave_1 left promiscuous mode [ 189.610394][ T26] audit: type=1800 audit(1728868915.021:32): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.738" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 189.660272][ T3948] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.731409][ T3948] device bridge_slave_0 left promiscuous mode [ 189.737660][ T3948] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.879671][ T3948] device veth1_macvtap left promiscuous mode [ 189.904291][ T3948] device veth0_macvtap left promiscuous mode [ 189.931991][ T3948] device veth1_vlan left promiscuous mode [ 189.961640][ T3948] device veth0_vlan left promiscuous mode [ 190.926255][ T6339] loop0: detected capacity change from 0 to 256 [ 190.951656][ T6339] exfat: Deprecated parameter 'namecase' [ 190.957515][ T6339] exfat: Unknown parameter 'keep_last_dots' [ 191.058883][ T2989] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 191.147487][ T3948] team0 (unregistering): Port device veth3 removed [ 191.348590][ T2989] usb 5-1: Using ep0 maxpacket: 8 [ 191.392953][ T6351] loop1: detected capacity change from 0 to 64 [ 191.494666][ T2989] usb 5-1: config 0 has no interfaces? [ 191.560431][ T3948] team0 (unregistering): Port device team_slave_1 removed [ 191.609015][ T3948] team0 (unregistering): Port device team_slave_0 removed [ 191.635127][ T3948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.656261][ T3948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.690289][ T2989] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=1b.21 [ 191.706424][ T2989] usb 5-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 191.718191][ T2989] usb 5-1: Product: syz [ 191.739532][ T2989] usb 5-1: Manufacturer: syz [ 191.744338][ T2989] usb 5-1: SerialNumber: syz [ 191.776674][ T2989] usb 5-1: config 0 descriptor?? [ 191.831679][ T3948] bond0 (unregistering): Released all slaves [ 191.886173][ T6341] tipc: Started in network mode [ 191.891383][ T6341] tipc: Node identity fec0ffff00000000000000000000001, cluster identity 4711 [ 191.900366][ T6341] tipc: Enabling of bearer rejected, failed to enable media [ 191.909031][ T6353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.756'. [ 191.925370][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'. [ 192.116931][ T6332] udc-core: couldn't find an available UDC or it's busy [ 192.212485][ T6332] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 192.217691][ T6369] loop2: detected capacity change from 0 to 2048 [ 192.235032][ T6332] device bond_slave_0 entered promiscuous mode [ 192.241961][ T6332] device bond_slave_1 entered promiscuous mode [ 192.251081][ T6332] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.464400][ T6372] loop1: detected capacity change from 0 to 1024 [ 192.896322][ T6372] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 193.042052][ T6332] device bond_slave_0 left promiscuous mode [ 193.048072][ T6332] device bond_slave_1 left promiscuous mode [ 193.131309][ T3569] EXT4-fs error (device loop1): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 193.193505][ T3569] EXT4-fs error (device loop1): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 193.238514][ T3824] usb 5-1: USB disconnect, device number 8 [ 193.247733][ T3569] EXT4-fs error (device loop1): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 193.278185][ T3569] EXT4-fs error (device loop1): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 193.299876][ T3569] EXT4-fs error (device loop1): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 193.333262][ T3569] EXT4-fs error (device loop1): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 193.337476][ T6389] loop3: detected capacity change from 0 to 256 [ 193.355106][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'. [ 193.365605][ T3569] EXT4-fs error (device loop1): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 193.425613][ T3569] EXT4-fs error (device loop1): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 193.445006][ T3569] EXT4-fs error (device loop1): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 193.466717][ T3569] EXT4-fs error (device loop1): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size [ 193.583483][ T6391] loop0: detected capacity change from 0 to 512 [ 193.620622][ T6389] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 193.885674][ T6394] loop2: detected capacity change from 0 to 32768 [ 193.913268][ T6391] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 193.923692][ T6394] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.772 (6394) [ 193.924947][ T6391] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 193.947129][ T6391] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.769: Corrupt directory, running e2fsck is recommended [ 193.983308][ T6391] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 193.992461][ T6391] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.769: corrupted in-inode xattr [ 194.005284][ T6391] EXT4-fs (loop0): Remounting filesystem read-only [ 194.012297][ T6391] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.769: couldn't read orphan inode 15 (err -117) [ 194.024776][ T6391] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,auto_da_alloc,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 194.052019][ T6391] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 194.064520][ T6391] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 194.074795][ T6391] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.769: Corrupt directory, running e2fsck is recommended [ 194.080677][ T6396] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 194.101761][ T1395] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.108075][ T1395] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.116445][ T6391] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 194.128064][ T6391] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 194.138335][ T6391] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.769: Corrupt directory, running e2fsck is recommended [ 194.151299][ T6391] EXT4-fs error (device loop0): ext4_find_dest_de:2113: inode #2: block 3: comm syz.0.769: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 194.174601][ T6391] EXT4-fs (loop0): Remounting filesystem read-only [ 194.186166][ T6394] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 194.186174][ T6396] exFAT-fs (loop3): Filesystem has been set read-only [ 194.186228][ T6394] BTRFS info (device loop2): using free space tree [ 194.209173][ T6394] BTRFS info (device loop2): has skinny extents [ 194.637582][ T6394] BTRFS info (device loop2): enabling ssd optimizations [ 195.667919][ T6433] netlink: 212 bytes leftover after parsing attributes in process `syz.3.780'. [ 195.741021][ T6433] ------------[ cut here ]------------ [ 195.762944][ T6433] WARNING: CPU: 0 PID: 6433 at net/wireless/core.h:220 wdev_lock+0x96/0xc0 [ 195.808321][ T6433] Modules linked in: [ 195.818361][ T6433] CPU: 1 PID: 6433 Comm: syz.3.780 Not tainted 5.15.167-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 195.925741][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 195.975089][ T6433] RIP: 0010:wdev_lock+0x96/0xc0 [ 195.982000][ T6433] Code: a4 d2 f7 85 ed 74 1e e8 f8 a0 d2 f7 eb 05 e8 f1 a0 d2 f7 48 83 c3 48 48 89 df 31 f6 5b 41 5e 5d e9 9f 21 8f 00 e8 da a0 d2 f7 <0f> 0b eb e5 48 c7 c1 44 94 e9 8d 80 e1 07 80 c1 03 38 c1 0f 8c 7b [ 196.007808][ T6433] RSP: 0018:ffffc90002ce6ee0 EFLAGS: 00010283 [ 196.018422][ T6433] RAX: ffffffff89adb996 RBX: ffff88805d790c90 RCX: 0000000000040000 [ 196.026617][ T6433] RDX: ffffc9000a70b000 RSI: 000000000000345d RDI: 000000000000345e [ 196.046326][ T6433] RBP: 0000000000000000 R08: ffffffff89adb96f R09: ffffed100e957c0d [ 196.062872][ T6433] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88802897a8c0 [ 196.073304][ T6433] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff888074abe014 [ 196.081372][ T6433] FS: 00007f9d82a116c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 196.108582][ T6433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.115317][ T6433] CR2: 00007f444760eff8 CR3: 00000000625ca000 CR4: 00000000003506e0 [ 196.138429][ T6433] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 196.146476][ T6433] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 196.168316][ T6433] Call Trace: [ 196.171657][ T6433] [ 196.174613][ T6433] ? __warn+0x15b/0x300 [ 196.193580][ T6433] ? wdev_lock+0x96/0xc0 [ 196.197870][ T6433] ? report_bug+0x1b7/0x2e0 [ 196.214834][ T6433] ? handle_bug+0x3d/0x70 [ 196.219307][ T6433] ? exc_invalid_op+0x16/0x40 [ 196.224008][ T6433] ? asm_exc_invalid_op+0x16/0x20 [ 196.268802][ T6433] ? wdev_lock+0x6f/0xc0 [ 196.273107][ T6433] ? wdev_lock+0x96/0xc0 [ 196.277382][ T6433] ? wdev_lock+0x96/0xc0 [ 196.333628][ T6433] nl80211_send_iface+0x763/0xe10 [ 196.339659][ T6433] ? nl80211_notify_iface+0x160/0x160 [ 196.345108][ T6433] ? slab_free_freelist_hook+0xdd/0x160 [ 196.351186][ T6433] ? nl80211_dump_wiphy_parse+0x19c/0x580 [ 196.356942][ T6433] ? kfree+0xf1/0x270 [ 196.361455][ T6433] ? nl80211_dump_wiphy_parse+0x19c/0x580 [ 196.367221][ T6433] ? nl80211_dump_wiphy_done+0x40/0x40 [ 196.374343][ T6433] nl80211_dump_interface+0x490/0x6a0 [ 196.381005][ T6433] ? nl80211_get_interface+0x1f0/0x1f0 [ 196.386750][ T6433] ? __alloc_skb+0x397/0x590 [ 196.391765][ T6433] netlink_dump+0x5a4/0xca0 [ 196.396385][ T6433] ? netlink_lookup+0x1d0/0x1d0 [ 196.401745][ T6433] ? genl_start+0x144/0x490 [ 196.406282][ T6433] ? genl_start+0x2e1/0x490 [ 196.411307][ T6433] __netlink_dump_start+0x50f/0x6d0 [ 196.416559][ T6433] genl_rcv_msg+0xd89/0x14a0 [ 196.421705][ T6433] ? genl_bind+0x420/0x420 [ 196.426187][ T6433] ? local_bh_enable+0x5/0x20 [ 196.432355][ T6433] ? _local_bh_enable+0xa0/0xa0 [ 196.437299][ T6433] ? __lock_acquire+0x1295/0x1ff0 [ 196.445208][ T6433] ? genl_rcv_msg+0x14a0/0x14a0 [ 196.450377][ T6433] ? nl80211_get_interface+0x1f0/0x1f0 [ 196.456073][ T6433] ? genl_lock_done+0xd0/0xd0 [ 196.461322][ T6433] ? nl80211_set_wiphy+0x28c0/0x28c0 [ 196.466642][ T6433] ? nl80211_get_interface+0x1f0/0x1f0 [ 196.496493][ T6433] netlink_rcv_skb+0x1cf/0x410 [ 196.503904][ T6433] ? genl_bind+0x420/0x420 [ 196.518279][ T6433] ? netlink_ack+0xb10/0xb10 [ 196.522963][ T6433] ? down_read+0x1b3/0x2e0 [ 196.527436][ T6433] ? genl_rcv+0x9/0x40 [ 196.538976][ T6433] genl_rcv+0x24/0x40 [ 196.543341][ T6433] netlink_unicast+0x7b6/0x980 [ 196.548193][ T6433] ? netlink_detachskb+0x90/0x90 [ 196.563280][ T6433] ? __virt_addr_valid+0x3bb/0x460 [ 196.598292][ T6433] ? 0xffffffff81000000 [ 196.602583][ T6433] ? __check_object_size+0x300/0x410 [ 196.607926][ T6433] ? bpf_lsm_netlink_send+0x5/0x10 [ 196.638352][ T6433] netlink_sendmsg+0xa30/0xd60 [ 196.649985][ T6433] ? netlink_getsockopt+0x5b0/0x5b0 [ 196.655314][ T6433] ? futex_wait+0x634/0x740 [ 196.675228][ T6433] ? aa_sock_msg_perm+0x91/0x150 [ 196.683915][ T6433] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 196.690476][ T6433] ? security_socket_sendmsg+0x7d/0xa0 [ 196.696042][ T6433] ? netlink_getsockopt+0x5b0/0x5b0 [ 196.701767][ T6433] ____sys_sendmsg+0x59e/0x8f0 [ 196.706570][ T6433] ? iovec_from_user+0x300/0x390 [ 196.712131][ T6433] ? __sys_sendmsg_sock+0x30/0x30 [ 196.717217][ T6433] ___sys_sendmsg+0x252/0x2e0 [ 196.722373][ T6433] ? __sys_sendmsg+0x260/0x260 [ 196.727264][ T6433] ? __fdget+0x191/0x220 [ 196.738725][ T6433] __se_sys_sendmsg+0x19a/0x260 [ 196.743669][ T6433] ? __x64_sys_sendmsg+0x80/0x80 [ 196.768445][ T6433] ? syscall_enter_from_user_mode+0x2e/0x240 [ 196.774552][ T6433] ? lockdep_hardirqs_on+0x94/0x130 [ 196.780372][ T6433] ? syscall_enter_from_user_mode+0x2e/0x240 [ 196.786401][ T6433] do_syscall_64+0x3b/0xb0 [ 196.809979][ T6433] ? clear_bhb_loop+0x15/0x70 [ 196.814749][ T6433] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 196.838282][ T6433] RIP: 0033:0x7f9d84598ff9 [ 196.842758][ T6433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.862394][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.869720][ T6433] RSP: 002b:00007f9d82a11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.878898][ T6433] RAX: ffffffffffffffda RBX: 00007f9d84750f80 RCX: 00007f9d84598ff9 [ 196.886932][ T6433] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 196.895440][ T6433] RBP: 00007f9d8460b296 R08: 0000000000000000 R09: 0000000000000000 [ 196.906314][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.914700][ T6433] R13: 0000000000000000 R14: 00007f9d84750f80 R15: 00007ffc64f065c8 [ 196.923998][ T6433] [ 196.929904][ T6433] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 196.937208][ T6433] CPU: 0 PID: 6433 Comm: syz.3.780 Not tainted 5.15.167-syzkaller #0 [ 196.945308][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 196.955383][ T6433] Call Trace: [ 196.958682][ T6433] [ 196.961629][ T6433] dump_stack_lvl+0x1e3/0x2d0 [ 196.966344][ T6433] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 196.972004][ T6433] ? panic+0x860/0x860 [ 196.976114][ T6433] ? rdev_set_ap_chanwidth+0x260/0x260 [ 196.981602][ T6433] ? rdev_set_ap_chanwidth+0x260/0x260 [ 196.987082][ T6433] panic+0x318/0x860 [ 196.991002][ T6433] ? __warn+0x16a/0x300 [ 196.995178][ T6433] ? fb_is_primary_device+0xd0/0xd0 [ 197.000414][ T6433] ? wdev_lock+0x96/0xc0 [ 197.004777][ T6433] __warn+0x2b2/0x300 [ 197.008778][ T6433] ? wdev_lock+0x96/0xc0 [ 197.013035][ T6433] report_bug+0x1b7/0x2e0 [ 197.017389][ T6433] handle_bug+0x3d/0x70 [ 197.021564][ T6433] exc_invalid_op+0x16/0x40 [ 197.026078][ T6433] asm_exc_invalid_op+0x16/0x20 [ 197.030957][ T6433] RIP: 0010:wdev_lock+0x96/0xc0 [ 197.035913][ T6433] Code: a4 d2 f7 85 ed 74 1e e8 f8 a0 d2 f7 eb 05 e8 f1 a0 d2 f7 48 83 c3 48 48 89 df 31 f6 5b 41 5e 5d e9 9f 21 8f 00 e8 da a0 d2 f7 <0f> 0b eb e5 48 c7 c1 44 94 e9 8d 80 e1 07 80 c1 03 38 c1 0f 8c 7b [ 197.055708][ T6433] RSP: 0018:ffffc90002ce6ee0 EFLAGS: 00010283 [ 197.061799][ T6433] RAX: ffffffff89adb996 RBX: ffff88805d790c90 RCX: 0000000000040000 [ 197.069783][ T6433] RDX: ffffc9000a70b000 RSI: 000000000000345d RDI: 000000000000345e [ 197.077761][ T6433] RBP: 0000000000000000 R08: ffffffff89adb96f R09: ffffed100e957c0d [ 197.085741][ T6433] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88802897a8c0 [ 197.093752][ T6433] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff888074abe014 [ 197.101757][ T6433] ? wdev_lock+0x6f/0xc0 [ 197.106033][ T6433] ? wdev_lock+0x96/0xc0 [ 197.110305][ T6433] nl80211_send_iface+0x763/0xe10 [ 197.115360][ T6433] ? nl80211_notify_iface+0x160/0x160 [ 197.120753][ T6433] ? slab_free_freelist_hook+0xdd/0x160 [ 197.126314][ T6433] ? nl80211_dump_wiphy_parse+0x19c/0x580 [ 197.132102][ T6433] ? kfree+0xf1/0x270 [ 197.136104][ T6433] ? nl80211_dump_wiphy_parse+0x19c/0x580 [ 197.141845][ T6433] ? nl80211_dump_wiphy_done+0x40/0x40 [ 197.147340][ T6433] nl80211_dump_interface+0x490/0x6a0 [ 197.152749][ T6433] ? nl80211_get_interface+0x1f0/0x1f0 [ 197.158236][ T6433] ? __alloc_skb+0x397/0x590 [ 197.162855][ T6433] netlink_dump+0x5a4/0xca0 [ 197.167393][ T6433] ? netlink_lookup+0x1d0/0x1d0 [ 197.172437][ T6433] ? genl_start+0x144/0x490 [ 197.176956][ T6433] ? genl_start+0x2e1/0x490 [ 197.181477][ T6433] __netlink_dump_start+0x50f/0x6d0 [ 197.186705][ T6433] genl_rcv_msg+0xd89/0x14a0 [ 197.191323][ T6433] ? genl_bind+0x420/0x420 [ 197.195751][ T6433] ? local_bh_enable+0x5/0x20 [ 197.200442][ T6433] ? _local_bh_enable+0xa0/0xa0 [ 197.205318][ T6433] ? __lock_acquire+0x1295/0x1ff0 [ 197.210359][ T6433] ? genl_rcv_msg+0x14a0/0x14a0 [ 197.215225][ T6433] ? nl80211_get_interface+0x1f0/0x1f0 [ 197.220695][ T6433] ? genl_lock_done+0xd0/0xd0 [ 197.225388][ T6433] ? nl80211_set_wiphy+0x28c0/0x28c0 [ 197.230696][ T6433] ? nl80211_get_interface+0x1f0/0x1f0 [ 197.236182][ T6433] netlink_rcv_skb+0x1cf/0x410 [ 197.240969][ T6433] ? genl_bind+0x420/0x420 [ 197.245408][ T6433] ? netlink_ack+0xb10/0xb10 [ 197.250116][ T6433] ? down_read+0x1b3/0x2e0 [ 197.254542][ T6433] ? genl_rcv+0x9/0x40 [ 197.258627][ T6433] genl_rcv+0x24/0x40 [ 197.262633][ T6433] netlink_unicast+0x7b6/0x980 [ 197.267423][ T6433] ? netlink_detachskb+0x90/0x90 [ 197.272376][ T6433] ? __virt_addr_valid+0x3bb/0x460 [ 197.277507][ T6433] ? 0xffffffff81000000 [ 197.281670][ T6433] ? __check_object_size+0x300/0x410 [ 197.286973][ T6433] ? bpf_lsm_netlink_send+0x5/0x10 [ 197.292102][ T6433] netlink_sendmsg+0xa30/0xd60 [ 197.296904][ T6433] ? netlink_getsockopt+0x5b0/0x5b0 [ 197.302120][ T6433] ? futex_wait+0x634/0x740 [ 197.306651][ T6433] ? aa_sock_msg_perm+0x91/0x150 [ 197.311605][ T6433] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 197.316901][ T6433] ? security_socket_sendmsg+0x7d/0xa0 [ 197.322381][ T6433] ? netlink_getsockopt+0x5b0/0x5b0 [ 197.328905][ T6433] ____sys_sendmsg+0x59e/0x8f0 [ 197.333682][ T6433] ? iovec_from_user+0x300/0x390 [ 197.338644][ T6433] ? __sys_sendmsg_sock+0x30/0x30 [ 197.343705][ T6433] ___sys_sendmsg+0x252/0x2e0 [ 197.348408][ T6433] ? __sys_sendmsg+0x260/0x260 [ 197.353237][ T6433] ? __fdget+0x191/0x220 [ 197.357527][ T6433] __se_sys_sendmsg+0x19a/0x260 [ 197.362400][ T6433] ? __x64_sys_sendmsg+0x80/0x80 [ 197.367356][ T6433] ? syscall_enter_from_user_mode+0x2e/0x240 [ 197.373349][ T6433] ? lockdep_hardirqs_on+0x94/0x130 [ 197.378568][ T6433] ? syscall_enter_from_user_mode+0x2e/0x240 [ 197.384727][ T6433] do_syscall_64+0x3b/0xb0 [ 197.389158][ T6433] ? clear_bhb_loop+0x15/0x70 [ 197.393851][ T6433] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.399755][ T6433] RIP: 0033:0x7f9d84598ff9 [ 197.404254][ T6433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.423856][ T6433] RSP: 002b:00007f9d82a11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.432261][ T6433] RAX: ffffffffffffffda RBX: 00007f9d84750f80 RCX: 00007f9d84598ff9 [ 197.440367][ T6433] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 197.448359][ T6433] RBP: 00007f9d8460b296 R08: 0000000000000000 R09: 0000000000000000 [ 197.456337][ T6433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.464309][ T6433] R13: 0000000000000000 R14: 00007f9d84750f80 R15: 00007ffc64f065c8 [ 197.472332][ T6433] [ 197.475626][ T6433] Kernel Offset: disabled [ 197.480237][ T6433] Rebooting in 86400 seconds..