last executing test programs: 12.813681408s ago: executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x239, &(0x7f0000000100)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r4, 0x0, 0x0) shutdown(r0, 0x0) 12.225554474s ago: executing program 3: listen(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x40000500}]}, 0x40}}, 0x0) 11.644357334s ago: executing program 3: timer_create(0x0, 0x0, &(0x7f0000000100)) io_setup(0x0, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 10.994690592s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000340)='GPL\x00'}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x50) 10.47864218s ago: executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x239, &(0x7f0000000100)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r4, 0x0, 0x0) shutdown(r0, 0x0) 9.759279182s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000340), 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='block_split\x00'}, 0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x84) 7.329233167s ago: executing program 2: ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080), 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040)=0x6, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000780)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d862b9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000002000002090666159e3ef5f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac1b3fca19fc0a9e346a78c12e5c3c6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027ec3d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af16aa9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e314f57d9507dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f06ac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdce943f895dd45045d4ec932366c67dfad087fa8dc104644828440bdf67dd97ebccb3bda8847e37f3c3d49018ecb97ce1a4a6cbd7c3ec5029d938b18a206f7f9bf678dfef1758d6a1ec0000000000000000000000000000003454686fbafb46bef43449725b85cfd3547fa97111e037819af7a0c21b15f4c3e3e4b64e130528d055cfc5fe1fe26307ea8e352cd098d8eac5d0ba0514556a9ca4534518f51bd41f43f21afe183a6233650514ca340a899a28d7784b747af027e7c986b1e66d0ea260b9a4bc4e6da64d984dc79646c6c61c4cd5458a0b8e14f9abc0ddb9cc164a22f6", 0x54e676f5, 0xc000, 0x0, 0xffffffffffffff59) r1 = dup(r0) write$P9_RSTATFS(r1, 0x0, 0x0) rt_sigreturn() r2 = memfd_create(&(0x7f0000000d00)='\xc0\x87:J\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x98\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd9h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17\x15lY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1\xc9\xd2\'\x13{\x1a\x7f\x00\x00\x1a\x00+$\xedX\xb7KV\x90\xc3D\x82`\x9eM\x9f\x9ef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9ad\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bt\x1d\xc6\a\xff\xee\xb9\x00 v\r\x1b\x1d\xbdTh~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xe4\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x86z\xca\xad\x827\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a\x00\x00\x00\x00\x00\x00\x11\x02b\xad\x0e\x9a\xf0\xf5\x1f\b\'\tLg[\x99\\\xd5\xde\x03q\xe4\xf2\xc72\xb9\x02\x9awNM-[\xddT\xd2e\n\xaa6>\x8ek\xfe\xea\xe8\xe6\x95i\xd3^s\xe5\xfb\x1bZ{\x8e\x9a%\xa6;a\b\xae\x0e\xf8\xc3\xedR\xa0XM4\xdc\x1a]\x83\xd4T\xd3\xa8\x87\xe8\x15\x19~Qq\xc0z@m\xca\xa0\xf6\xd4y&\xb6\xc5\xf4\xe0\xfd9t\x89$\xe9\xf2\x05\xbcZ\b`\xe1\x148\x1eg\b\r\x8bc\x91\xd4\xa0\xf7\x86\xae2\xd9\xa0\x1f~#\x81|\xf1)\xec-0\xe3\xe9\x13\xaf8\xda\x82E\x18\xd4\"\xb8\xca\xf4\x1f\x06\x9d\x8f\xc5\xe3A\xeaN\b\x9d_d(HA\x1a\x0f {\xc8\\\xb7F', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x800000b) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, 0x0, &(0x7f0000000140)) 4.638600957s ago: executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x239, &(0x7f0000000100)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r4, 0x0, &(0x7f0000000080)) shutdown(r0, 0x0) 4.490388064s ago: executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x50}) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/54, 0x36}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5, 0x9f, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x2) dup3(r6, r3, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r11, 0x27, 0x0, 0x0, 0x0, 0x0, 0xd50, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.39235174s ago: executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @random="b0c942034375", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0x62}, @lsrr={0x83, 0x7, 0x4e, [@loopback]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xffff}}}}}}, 0x0) r0 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x0, 0x0, 0x800000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001a00010000000000000000000a000000000000000000001e80000000"], 0x20}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f00000000c0)={"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"}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x6) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) pipe(&(0x7f0000000140)={0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x9a1) read$FUSE(r3, &(0x7f0000000700)={0x2020}, 0x2020) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.669248188s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000500)={{0x3, @bcast}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x3a) 3.629925894s ago: executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000880), 0x10, 0x1060, 0x0) 2.892935064s ago: executing program 4: r0 = socket$inet6(0xa, 0x0, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @local}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.760222965s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000340), 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @multicast1}}}, 0x84) 2.651862593s ago: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 2.261696593s ago: executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6c000}], 0x1, 0x28000, 0x0, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1000000, &(0x7f0000000280)={[{@noquota}, {@nombcache}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@nombcache}, {@noinit_itable}, {@nomblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@usrquota}, {@errors_continue}]}, 0xfe, 0x55d, &(0x7f0000000f00)="$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") r2 = open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) fallocate(r3, 0x0, 0x3, 0x5) pwritev2(r2, &(0x7f0000000240), 0x1, 0x0, 0x0, 0x0) 2.067304674s ago: executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000380)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.350424339s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000340)='GPL\x00'}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x50) 1.264734736s ago: executing program 2: syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f00000007c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc36, &(0x7f0000002540)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2SEmV9Pjb13Z19b/a9eeMZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr56+qz7PwA8Vq75/38AAAAAAAAAAAAAADjoUhTxZKSYvbKaxqr3HfXL7b7bd0aHhreudiRVNQ9V5cuf+pmz585/6YXBC9283J7+gPp77bPx2si1S42XZ27Nzk3Oz09ONEan2+MzE5M73sNu6292sjoAjVuv3564cWO+cfb5cxs+vjPwfv8TxwcuDj576plu2dGh4eGR9SL13vK1+25Ix3YzPA5HEacixXPf+2lqRUQRuz8W9Qc79psdqTpxsurE6NBw1ZGpdmt6ofzwavdAFBGNnkrN7jHaeiyi1vdA+7C9ZsRi2fyywSfL7o3MtuZa16cmG1dbcwvthfbM9NXUaW3Zn0YUcSFFLEXESv+9u+uLImqR4jvHVtP1iDjUPQ5frCYGb9+OYh/7uANlOxt9EUvFIzBmB1h/FPFqpPjZOydiPF9nqmvNFyJeLfMHEW+V+VJEKk+M8xHvbXEe8WiqRRF/WY7/xdU0UV0PuteVy19rfGX6xkxP2e515SPeH+65Ujyk+8ORTflgHPBrUz2KaFVX/NV0/7/ZAQAAAAAAAAAAAAAAAGCvHYkiPhMpXvmPP6nmFUc1L/3YxcE/HPjV3jnjT3/Ifsqyz0fEYrGzObmH88TAq+lqSg95LvHjrB5F/Gme//eth90YAAAAAAAAAAAAAAAAAACAx1oRP4kUL757Ii1F75ri7embjWut61OdVWG7a/9210xfW1tba6RONnOO5VzMuZRzOedKzihy/ZzNnGM5F3Mu5VzOuZIzDuX6OZs5x3Iu5lzKuZxzJWfUcv2czZxjORfLrK93dDlvX8kZB2TtXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAj5MiivhFpPj2N1ZTpIhoRoxFJ5f7H3brAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBSfyri+5Gi8UfNu9tqEZGqfztOlL+cj+bhMj8ZzcEyX4rmpZytKmvNbz2E9rM7famIH0eK/vrbdwc8j39f593d0yDe+ub6u8/WOnmo++HA+/1PHD92cXD4N57e7nXaqgEnL7enb99pjA4ND4/0bK7lb/9kz7aB/L3F3nSdiJh/483XW1NTk3P3/6I8BXZR/RF6kWqPS08f1ovFvTgh9+5F1A5EMx5O33kMlPf/9yLF7777n90bfuf+X49f6by7e4ePn//Z+v3/xc072uH9v7a5Xr7/l/f0re7/T/ZsezH/bqSvFlFfuDXbdzyiPv/Gm6fat1o3J29OTp8/ffrLg4NfPne673BE/UZ7arLn1Z4cLgAAAAAAAAAAAAAAAIAHJxXx+5Gi9ePV1IiIO9V8rYGLg8+eeuZQHKrmW22Yt/3ayLVLjZdnbs3OTc7PT040Rqfb4zMTkzv9uno13Wt0aHhfOvOhjuxz+4/UX56ZfWOuffOPF7b8/Gj90vX5hbnW+NYfx5EoIpq9W05WDR4dGq4aPdVuTVdVr245mf6j60tF/FekGD/fSJ/P2/L8/80z/DfM/1/cvKN9mv//iZ5t5XemVMTPI8Xv/NXT8fmqnUfjnmOWy/1dpDh54XO5XBwuy3Xb0HmuQGdmYFn2/yLFP/1iY9nufMgn18ue2fGBfUSU438sUnz/L74bv5m3bXz+w9bjf3TzjvZp/J/q2XZ0w/MKdt118vifihQvPfl2/Fbe9kHP/+g+e+NELnz3+Rz7NP6f6tk2kL/3t/em6wAAAAAAAAAAAI+0vlTE30eKHw7X0gt5207+/t/E5h3t09//+nTPtom9Wa/oQ1/s+qACAAAAwAHRl4r4SaS4ufD23TnUG+d/98z//L31+Z9DadOn1Z/z/Vr13IC9/PO/XgP5e8d2320AAAAAAAAAAAAAAAAAAAA4UFIq4oW8nvpYNZ9/Ytv11JcjxSv/81wul46X5brrwA9Uv9avzEyfujQ1NTPeWmhdn5psjMy2xifLuk9FitW//VyuW1Trq3fXm++s8b6+FvtcpBj+h27Zzlrs3bXJn1ove6Ys+4lI8d//uLFsdx3rT62XPVuW/ZtI8fV/2brs8fWy58qy340UP/p6o1v2aFm2+3zUT6+XfX58ptiHUQEAAAAAAAAAAAAAAAAAAOBx05eK+PNI8b+3lu7O5c/r//f1vK289c2e9f43uVOt8z9Qrf+/3ev7Wf+/eq7A4nbfCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH08pingzUsxeWU3L/eX7jvrl9vTtO6NDw1tXO5Kqmoeq8uVP/czZc+e/9MLghW5+cP299pl4beTapcbLM7dm5ybn5ycnGqPT7fGZickd72G39Tc7WR2Axq3Xb0/cuDHfOPv8uQ0f3xl4v/+J4wMXB5899Uy37OjQ8PBIT5la331/+z3SNtsPRxF/HSme+95P0w/7I4rY/bH4kHNnvx2pOnGy6sTo0HDVkal2a3qh/PBq90AUEY2eSs3uMXoAY7ErzYjFsvllg0+W3RuZbc21rk9NNq625hbaC+2Z6aup09qyP40o4kKKWIqIlf57d9cXRbweKb5zbDX9a3/Eoe5x+OKVka+ePrt9O4p97OMOlO1s9EUsFY/AmB1g/VHEP0eKn71zIv6tP6IWnZ/4QsSrZf4g4q3ojHcqT4zzEe9tcR7xaKpFEf9fjv/F1fROf3k96F5XLn+t8ZXpGzM9ZbvXlUf+/vAgHfBrUz2K+FF1xV9N/+6/awAAAAAAAAAAAAAAAIADpIhfjxQvvnsiVfOD784pbk/fbFxrXZ/qTOvrzv3rzpleW1tba6RONnOO5VzMuZRzOedKzihy/ZzNMutra2P5/WLOpZzLOVdyxqFcP2cz51jOxZxLOZdzruSMWq6fs5lzLOdizqWcyzlXcsYBmbsHAAAAAAAAAAAAAAAAAAB8vBTVPym+/Y3VtNbfWV96LDq5bD3Qj71fBgAA//8dq/O8") mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 898.026714ms ago: executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x239, &(0x7f0000000100)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r4, 0x0, &(0x7f0000000080)) shutdown(r0, 0x0) 555.449912ms ago: executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000007910000000000000db00000040000000950005000000000075e59bc2c3ab6c7da0d2c8a55ddf064bdadd43d7b6ba4f869ac1c597c8ee53ac94ff11307f9a8d86b624"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 237.417316ms ago: executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x60101) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x80045519, &(0x7f00000004c0)=ANY=[@ANYRES8=r0]) 0s ago: executing program 0: r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 277.932371][ T5073] EXT4-fs error (device loop4): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.4: path /root/syzkaller-testdir465181068/syzkaller.vtpkqz/3/file1/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 278.227856][ T5378] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 278.234710][ T5378] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 278.243233][ T5378] vhci_hcd vhci_hcd.0: Device attached [ 278.351665][ T5380] vhci_hcd: connection closed [ 278.397905][ T745] vhci_hcd: stop threads [ 278.407619][ T745] vhci_hcd: release socket [ 278.412483][ T745] vhci_hcd: disconnect device [ 278.932290][ T1035] team0 (unregistering): Port device team_slave_1 removed [ 279.016488][ T1035] team0 (unregistering): Port device team_slave_0 removed [ 279.067295][ T5387] loop0: detected capacity change from 0 to 256 [ 279.747456][ T5285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.755242][ T5285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.781688][ T5285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.004155][ T5392] loop1: detected capacity change from 0 to 256 [ 280.070500][ T5285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.078000][ T5285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.105489][ T5285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.184255][ T5394] loop0: detected capacity change from 0 to 16 [ 280.234907][ T5073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.282913][ T5394] erofs: (device loop0): mounted with root inode @ nid 36. [ 280.758303][ T5397] loop2: detected capacity change from 0 to 2048 [ 280.849224][ T5397] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 280.916199][ T5285] hsr_slave_0: entered promiscuous mode [ 280.993176][ T5285] hsr_slave_1: entered promiscuous mode [ 281.026873][ T5399] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 281.027845][ T5397] syz-executor.2: attempt to access beyond end of device [ 281.027845][ T5397] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 281.095432][ T5285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.103526][ T5285] Cannot create hsr debugfs directory [ 281.609238][ T5403] loop1: detected capacity change from 0 to 2048 [ 281.713151][ T5403] EXT4-fs: Ignoring removed nobh option [ 281.963492][ T5403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.554713][ T5072] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz-executor.1: bg 0: block 2: invalid block bitmap [ 282.664976][ T5072] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6537: Corrupt filesystem [ 282.809838][ T5418] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 282.816697][ T5418] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 282.825709][ T5418] vhci_hcd vhci_hcd.0: Device attached [ 282.843900][ T5072] EXT4-fs error (device loop1): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.1: path /root/syzkaller-testdir4045271313/syzkaller.aAApuY/11/file1/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 282.901795][ T5072] EXT4-fs error (device loop1): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.1: path /root/syzkaller-testdir4045271313/syzkaller.aAApuY/11/file1/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 283.051220][ T5419] vhci_hcd: connection closed [ 283.109274][ T5285] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 283.137246][ T5285] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 283.147516][ T745] vhci_hcd: stop threads [ 283.152265][ T745] vhci_hcd: release socket [ 283.156911][ T745] vhci_hcd: disconnect device [ 283.274305][ T5285] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 283.367652][ T5285] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 283.763518][ T5072] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.296673][ T5431] loop2: detected capacity change from 0 to 256 [ 284.880431][ T5081] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 284.896678][ T5081] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 284.916590][ T5081] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 284.942666][ T5081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.034647][ T5081] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 285.048966][ T5081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.176489][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.186174][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.199013][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.257320][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.290720][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 285.301367][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.601974][ T5285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.657513][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.664376][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.186613][ T5285] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.287881][ T5443] loop0: detected capacity change from 0 to 2048 [ 286.325685][ T4512] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.333579][ T4512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.349459][ T5443] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 286.473252][ T4512] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.473798][ T5448] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.480965][ T4512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.503562][ T5443] syz-executor.0: attempt to access beyond end of device [ 286.503562][ T5443] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 287.272125][ T5285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.432815][ T5081] Bluetooth: hci0: command tx timeout [ 287.450180][ T1035] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.623581][ T5454] loop2: detected capacity change from 0 to 2048 [ 287.665145][ T1035] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.690935][ T5454] EXT4-fs: Ignoring removed nobh option [ 287.845505][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.856837][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.868140][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.898346][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.910561][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 287.920065][ T1035] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.920476][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.943016][ T5454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.257301][ T1035] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.303915][ T5077] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz-executor.2: bg 0: block 2: invalid block bitmap [ 288.386262][ T5077] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6537: Corrupt filesystem [ 288.483621][ T5437] chnl_net:caif_netlink_parms(): no params data found [ 288.513918][ T5077] EXT4-fs error (device loop2): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.2: path /root/syzkaller-testdir2431666480/syzkaller.emwS20/17/file1/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 288.798229][ T5077] EXT4-fs error (device loop2): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.2: path /root/syzkaller-testdir2431666480/syzkaller.emwS20/17/file1/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 289.025589][ T5472] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 289.032437][ T5472] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 289.041797][ T5472] vhci_hcd vhci_hcd.0: Device attached [ 289.049783][ T1035] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.151531][ T5473] vhci_hcd: connection closed [ 289.172013][ T1080] vhci_hcd: stop threads [ 289.181683][ T1080] vhci_hcd: release socket [ 289.186321][ T1080] vhci_hcd: disconnect device [ 289.243228][ T1035] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.511656][ T5081] Bluetooth: hci0: command tx timeout [ 289.628756][ T1035] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.658781][ T5077] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.795373][ T1035] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.092143][ T5081] Bluetooth: hci1: command tx timeout [ 290.349197][ T5285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.422954][ T1035] bridge_slave_1: left allmulticast mode [ 290.428960][ T1035] bridge_slave_1: left promiscuous mode [ 290.437086][ T1035] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.522304][ T1035] bridge_slave_0: left allmulticast mode [ 290.528259][ T1035] bridge_slave_0: left promiscuous mode [ 290.535297][ T1035] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.628250][ T1035] bridge_slave_1: left allmulticast mode [ 290.634471][ T1035] bridge_slave_1: left promiscuous mode [ 290.641252][ T1035] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.650887][ T5488] loop0: detected capacity change from 0 to 256 [ 290.739318][ T1035] bridge_slave_0: left allmulticast mode [ 290.747238][ T1035] bridge_slave_0: left promiscuous mode [ 290.754068][ T1035] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.592402][ T5081] Bluetooth: hci0: command tx timeout [ 292.026255][ T1035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.138601][ T1035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.201922][ T5081] Bluetooth: hci1: command tx timeout [ 292.229075][ T5495] loop0: detected capacity change from 0 to 16 [ 292.244892][ T5495] erofs: (device loop0): mounted with root inode @ nid 36. [ 292.334457][ T1035] bond0 (unregistering): Released all slaves [ 292.385602][ T1035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.420815][ T1035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.506917][ T1035] bond0 (unregistering): Released all slaves [ 293.040333][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 293.051723][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 293.063632][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 293.091975][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 293.127904][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 293.139434][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 293.165700][ T5285] veth0_vlan: entered promiscuous mode [ 293.481889][ T5458] chnl_net:caif_netlink_parms(): no params data found [ 293.501791][ T5437] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.509552][ T5437] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.518430][ T5437] bridge_slave_0: entered allmulticast mode [ 293.527861][ T5437] bridge_slave_0: entered promiscuous mode [ 293.625344][ T5437] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.633337][ T5437] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.641304][ T5437] bridge_slave_1: entered allmulticast mode [ 293.650689][ T5437] bridge_slave_1: entered promiscuous mode [ 293.685796][ T5081] Bluetooth: hci0: command tx timeout [ 293.925655][ T5507] loop0: detected capacity change from 0 to 2048 [ 293.979639][ T5507] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 294.080248][ T5510] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 294.096710][ T5507] syz-executor.0: attempt to access beyond end of device [ 294.096710][ T5507] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 294.205342][ T5285] veth1_vlan: entered promiscuous mode [ 294.242332][ T5081] Bluetooth: hci1: command tx timeout [ 294.275232][ T5437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.409539][ T5437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.635400][ T1035] hsr_slave_0: left promiscuous mode [ 294.657107][ T1035] hsr_slave_1: left promiscuous mode [ 294.687014][ T1035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.695830][ T1035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.731629][ T1035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.739354][ T1035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.802844][ T1035] hsr_slave_0: left promiscuous mode [ 294.836195][ T1035] hsr_slave_1: left promiscuous mode [ 294.859149][ T1035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.867129][ T1035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.893473][ T1035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.901306][ T1035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.000369][ T1035] veth1_macvtap: left promiscuous mode [ 295.006417][ T1035] veth0_macvtap: left promiscuous mode [ 295.013122][ T1035] veth1_vlan: left promiscuous mode [ 295.018750][ T1035] veth0_vlan: left promiscuous mode [ 295.027626][ T1035] veth1_macvtap: left promiscuous mode [ 295.033687][ T1035] veth0_macvtap: left promiscuous mode [ 295.039624][ T1035] veth1_vlan: left promiscuous mode [ 295.045313][ T1035] veth0_vlan: left promiscuous mode [ 295.271595][ T5081] Bluetooth: hci2: command tx timeout [ 295.612114][ T5523] loop0: detected capacity change from 0 to 2048 [ 295.658103][ T5523] EXT4-fs: Ignoring removed nobh option [ 295.871847][ T5523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.219274][ T5084] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz-executor.0: bg 0: block 2: invalid block bitmap [ 296.244754][ T5084] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6537: Corrupt filesystem [ 296.305151][ T5084] EXT4-fs error (device loop0): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.0: path /root/syzkaller-testdir473274423/syzkaller.c7kxbJ/21/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 296.381690][ T5081] Bluetooth: hci1: command tx timeout [ 296.389011][ T5084] EXT4-fs error (device loop0): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.0: path /root/syzkaller-testdir473274423/syzkaller.c7kxbJ/21/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 296.452979][ T5084] EXT4-fs error (device loop0): empty_inline_dir:1829: inode #12: block 5: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 296.507703][ T1035] team0 (unregistering): Port device team_slave_1 removed [ 296.621565][ T5084] EXT4-fs warning (device loop0): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 296.639158][ T1035] team0 (unregistering): Port device team_slave_0 removed [ 296.662536][ T5084] EXT4-fs error (device loop0): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.0: path /root/syzkaller-testdir473274423/syzkaller.c7kxbJ/21/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 296.737147][ T5084] EXT4-fs error (device loop0): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.0: path /root/syzkaller-testdir473274423/syzkaller.c7kxbJ/21/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 296.785265][ T5084] EXT4-fs error (device loop0): empty_inline_dir:1829: inode #12: block 5: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 296.807747][ T5084] EXT4-fs warning (device loop0): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 296.834566][ T5084] EXT4-fs error (device loop0): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.0: path /root/syzkaller-testdir473274423/syzkaller.c7kxbJ/21/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 296.880464][ T5084] EXT4-fs error (device loop0): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.0: path /root/syzkaller-testdir473274423/syzkaller.c7kxbJ/21/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 296.920641][ T5084] EXT4-fs warning (device loop0): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 296.956441][ T5084] EXT4-fs warning (device loop0): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 297.002375][ T5084] EXT4-fs warning (device loop0): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 297.037350][ T5084] EXT4-fs warning (device loop0): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 297.057692][ T5084] EXT4-fs warning (device loop0): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 297.079858][ T5084] EXT4-fs warning (device loop0): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 297.126103][ T5084] EXT4-fs warning (device loop0): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 297.147662][ T5084] EXT4-fs warning (device loop0): empty_inline_dir:1836: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 297.357982][ T5081] Bluetooth: hci2: command tx timeout [ 297.414312][ T1035] team0 (unregistering): Port device team_slave_1 removed [ 297.532459][ T1035] team0 (unregistering): Port device team_slave_0 removed [ 298.006011][ T5285] veth0_macvtap: entered promiscuous mode [ 298.330687][ T5437] team0: Port device team_slave_0 added [ 298.477900][ T5285] veth1_macvtap: entered promiscuous mode [ 298.538540][ T5437] team0: Port device team_slave_1 added [ 298.680019][ T5084] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.840029][ T5437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.847509][ T5437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.874027][ T5437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.075434][ T5437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.083685][ T5437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.110174][ T5437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.134615][ T5458] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.142730][ T5458] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.150582][ T5458] bridge_slave_0: entered allmulticast mode [ 299.160231][ T5458] bridge_slave_0: entered promiscuous mode [ 299.178852][ T5285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.189628][ T5285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.199799][ T5285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.210640][ T5285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.226156][ T5285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.294498][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.302906][ T5458] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.310771][ T5458] bridge_slave_1: entered allmulticast mode [ 299.320485][ T5458] bridge_slave_1: entered promiscuous mode [ 299.416130][ T5285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.428580][ T5285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.439323][ T5285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.450304][ T5285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.465719][ T5285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.479243][ T5081] Bluetooth: hci2: command tx timeout [ 299.657922][ T5458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.767609][ T5458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.908351][ T5437] hsr_slave_0: entered promiscuous mode [ 299.959508][ T5437] hsr_slave_1: entered promiscuous mode [ 299.988578][ T5437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.996659][ T5437] Cannot create hsr debugfs directory [ 300.011260][ T5285] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.020379][ T5285] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.029631][ T5285] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.039037][ T5285] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.144396][ T5502] chnl_net:caif_netlink_parms(): no params data found [ 300.280015][ T5458] team0: Port device team_slave_0 added [ 300.437746][ T5458] team0: Port device team_slave_1 added [ 300.934786][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.942166][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.970705][ T5458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.127440][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.134771][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.162343][ T5458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.554627][ T5081] Bluetooth: hci2: command tx timeout [ 302.013977][ T5458] hsr_slave_0: entered promiscuous mode [ 302.052820][ T5458] hsr_slave_1: entered promiscuous mode [ 302.076318][ T5458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.084224][ T5458] Cannot create hsr debugfs directory [ 302.837391][ T5502] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.845472][ T5502] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.853446][ T5502] bridge_slave_0: entered allmulticast mode [ 302.862963][ T5502] bridge_slave_0: entered promiscuous mode [ 302.978323][ T5502] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.986391][ T5502] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.994475][ T5502] bridge_slave_1: entered allmulticast mode [ 303.003947][ T5502] bridge_slave_1: entered promiscuous mode [ 303.487460][ T5502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.594419][ T5502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.790416][ T5437] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 303.852281][ T5437] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 303.899634][ T5502] team0: Port device team_slave_0 added [ 303.930780][ T5502] team0: Port device team_slave_1 added [ 303.978976][ T5437] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 304.162117][ T5437] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 304.328710][ T1035] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.613684][ T5502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.620897][ T5502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.648053][ T5502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.682732][ T5502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.689902][ T5502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.716632][ T5502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.763149][ T1035] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.014128][ T1035] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.295038][ T5502] hsr_slave_0: entered promiscuous mode [ 305.322210][ T5502] hsr_slave_1: entered promiscuous mode [ 305.339229][ T5502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.347850][ T5502] Cannot create hsr debugfs directory [ 305.398726][ T1035] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.746666][ T5458] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 305.968992][ T5458] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 306.103130][ T1035] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.163996][ T5458] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 306.302046][ T1035] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.318253][ T5458] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 306.463086][ T1035] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.606263][ T1035] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.263431][ T5437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.335977][ T1035] bridge_slave_1: left allmulticast mode [ 307.342129][ T1035] bridge_slave_1: left promiscuous mode [ 307.348775][ T1035] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.382670][ T1035] bridge_slave_0: left allmulticast mode [ 307.388667][ T1035] bridge_slave_0: left promiscuous mode [ 307.395684][ T1035] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.435964][ T1035] bridge_slave_1: left allmulticast mode [ 307.442433][ T1035] bridge_slave_1: left promiscuous mode [ 307.449086][ T1035] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.465824][ T1035] bridge_slave_0: left allmulticast mode [ 307.472390][ T1035] bridge_slave_0: left promiscuous mode [ 307.478963][ T1035] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.343463][ T1035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.360297][ T1035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.382319][ T1035] bond0 (unregistering): Released all slaves [ 308.410782][ T1035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.430213][ T1035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.458921][ T1035] bond0 (unregistering): Released all slaves [ 308.827082][ T5437] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.877459][ T5322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.880516][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.885571][ T5322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.893185][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.070464][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.078414][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.255972][ T5130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.264350][ T5130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.942862][ T5502] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 310.128330][ T1035] hsr_slave_0: left promiscuous mode [ 310.157059][ T1035] hsr_slave_1: left promiscuous mode [ 310.212003][ T1035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.219865][ T1035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.279802][ T1035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.288037][ T1035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.359338][ T1035] hsr_slave_0: left promiscuous mode [ 310.400757][ T1035] hsr_slave_1: left promiscuous mode [ 310.416350][ T1035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.424937][ T1035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.437877][ T1035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.446235][ T1035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.494611][ T1035] veth1_macvtap: left promiscuous mode [ 310.500416][ T1035] veth0_macvtap: left promiscuous mode [ 310.506750][ T1035] veth1_vlan: left promiscuous mode [ 310.512854][ T1035] veth0_vlan: left promiscuous mode [ 310.523577][ T1035] veth1_macvtap: left promiscuous mode [ 310.529349][ T1035] veth0_macvtap: left promiscuous mode [ 310.535577][ T1035] veth1_vlan: left promiscuous mode [ 310.541350][ T1035] veth0_vlan: left promiscuous mode [ 311.910375][ T1035] team0 (unregistering): Port device team_slave_1 removed [ 311.944760][ T1035] team0 (unregistering): Port device team_slave_0 removed [ 312.643821][ T1035] team0 (unregistering): Port device team_slave_1 removed [ 312.747326][ T1035] team0 (unregistering): Port device team_slave_0 removed [ 313.174835][ T5502] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 313.215513][ T5458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.246769][ T5502] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 313.313416][ T5502] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 313.595729][ T5458] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.770003][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.778042][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.873158][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.880925][ T5127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.831413][ T5502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.015055][ T5502] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.127175][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.135034][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.260546][ T5437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.292808][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.300582][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.522752][ T5458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.118092][ T5458] veth0_vlan: entered promiscuous mode [ 317.303747][ T5458] veth1_vlan: entered promiscuous mode [ 317.544891][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.582362][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.598565][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.657775][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.672985][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 317.716406][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.778873][ T5458] veth0_macvtap: entered promiscuous mode [ 317.862658][ T5458] veth1_macvtap: entered promiscuous mode [ 318.242518][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.253906][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.268978][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.318593][ T5642] loop3: detected capacity change from 0 to 4096 [ 318.440316][ T5642] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 318.532617][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.543428][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.560214][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.640314][ T5502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.821864][ T5458] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.832720][ T5458] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.841953][ T5458] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.851246][ T5458] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.972050][ T5642] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 319.264282][ T5437] veth0_vlan: entered promiscuous mode [ 319.500513][ T5437] veth1_vlan: entered promiscuous mode [ 319.709271][ T5502] veth0_vlan: entered promiscuous mode [ 319.782215][ T29] audit: type=1800 audit(1717572662.079:3): pid=5642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="loop3" ino=0 res=0 errno=0 [ 319.845951][ T5081] Bluetooth: hci3: command tx timeout [ 319.867723][ T5502] veth1_vlan: entered promiscuous mode [ 319.946873][ T5645] chnl_net:caif_netlink_parms(): no params data found [ 320.103953][ T5437] veth0_macvtap: entered promiscuous mode [ 320.253613][ T5437] veth1_macvtap: entered promiscuous mode [ 320.801763][ T5502] veth0_macvtap: entered promiscuous mode [ 320.840900][ T5502] veth1_macvtap: entered promiscuous mode [ 320.968888][ T5437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.979804][ T5437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.990462][ T5437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.001390][ T5437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.025466][ T5437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.048343][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.059161][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.069488][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.080356][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.090560][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.102261][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.119560][ T5502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.307759][ T5437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.321494][ T5437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.331734][ T5437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.342611][ T5437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.358141][ T5437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.496528][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.507793][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.520835][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.535317][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.546550][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.557294][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.573008][ T5502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.631702][ T5437] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.640808][ T5437] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.651259][ T5437] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.660297][ T5437] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.802005][ T1035] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.903866][ T5502] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.913387][ T5502] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.922671][ T5502] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.930746][ T5081] Bluetooth: hci3: command tx timeout [ 321.932910][ T5502] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.137545][ T1035] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.394640][ T1035] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.607782][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.617891][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.625905][ T5645] bridge_slave_0: entered allmulticast mode [ 322.635182][ T5645] bridge_slave_0: entered promiscuous mode [ 322.756998][ T1035] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.858731][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.866811][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.877485][ T5645] bridge_slave_1: entered allmulticast mode [ 322.886955][ T5645] bridge_slave_1: entered promiscuous mode [ 323.446371][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.642308][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.763224][ T1035] bridge_slave_1: left allmulticast mode [ 323.770437][ T1035] bridge_slave_1: left promiscuous mode [ 323.777599][ T1035] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.867457][ T1035] bridge_slave_0: left allmulticast mode [ 323.874773][ T1035] bridge_slave_0: left promiscuous mode [ 323.881664][ T1035] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.036362][ T5081] Bluetooth: hci3: command tx timeout [ 324.653339][ T1035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.706238][ T1035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.744470][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 324.754221][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 324.762570][ T1035] bond0 (unregistering): Released all slaves [ 324.785771][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 324.809706][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 324.849849][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 324.863674][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 325.088087][ T5645] team0: Port device team_slave_0 added [ 325.399440][ T5645] team0: Port device team_slave_1 added [ 325.975261][ T1035] hsr_slave_0: left promiscuous mode [ 326.000106][ T1035] hsr_slave_1: left promiscuous mode [ 326.032347][ T1035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.040108][ T1035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.069514][ T1035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.077776][ T1035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.078727][ T51] Bluetooth: hci3: command tx timeout [ 326.114984][ T1035] veth1_macvtap: left promiscuous mode [ 326.120800][ T1035] veth0_macvtap: left promiscuous mode [ 326.127097][ T1035] veth1_vlan: left promiscuous mode [ 326.133735][ T1035] veth0_vlan: left promiscuous mode [ 326.678660][ T1035] team0 (unregistering): Port device team_slave_1 removed [ 326.771740][ T1035] team0 (unregistering): Port device team_slave_0 removed [ 327.037110][ T51] Bluetooth: hci4: command tx timeout [ 327.103916][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.114341][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.142438][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.215818][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.223195][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.249614][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.856600][ T5645] hsr_slave_0: entered promiscuous mode [ 327.927940][ T5645] hsr_slave_1: entered promiscuous mode [ 329.067881][ T5694] chnl_net:caif_netlink_parms(): no params data found [ 329.151468][ T51] Bluetooth: hci4: command tx timeout [ 330.401942][ T5645] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 330.502613][ T5645] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 330.602765][ T5645] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 330.703006][ T5645] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 331.111195][ T3917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.119264][ T3917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.192121][ T51] Bluetooth: hci4: command tx timeout [ 331.499296][ T5694] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.507152][ T5694] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.515218][ T5694] bridge_slave_0: entered allmulticast mode [ 331.524664][ T5694] bridge_slave_0: entered promiscuous mode [ 331.570500][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.578913][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.650751][ T5694] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.658831][ T5694] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.666753][ T5694] bridge_slave_1: entered allmulticast mode [ 331.680718][ T5694] bridge_slave_1: entered promiscuous mode [ 332.107596][ T5694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.191999][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.199987][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.342785][ T5694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.660650][ T5694] team0: Port device team_slave_0 added [ 332.675040][ T3917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.685071][ T3917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.701931][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.710086][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.790550][ T5694] team0: Port device team_slave_1 added [ 333.246229][ T5694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.253576][ T5694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.282242][ T5694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.295954][ T51] Bluetooth: hci4: command tx timeout [ 333.318139][ T3917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.326504][ T3917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.529368][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.547366][ T5694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.554715][ T5694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.581509][ T5694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.887655][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.243778][ T4512] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.251697][ T4512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.318791][ T5694] hsr_slave_0: entered promiscuous mode [ 334.409075][ T5694] hsr_slave_1: entered promiscuous mode [ 334.453375][ T5694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.461567][ T5694] Cannot create hsr debugfs directory [ 334.512426][ T4512] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.520265][ T4512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.334182][ T5784] loop1: detected capacity change from 0 to 2048 [ 335.636683][ T5784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.991912][ T29] audit: type=1804 audit(1717572678.169:4): pid=5787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2464993374/syzkaller.NszayD/1/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 337.093791][ T5458] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.508134][ T5694] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 337.653300][ T5694] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 337.795588][ T5694] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 337.958449][ T5694] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 338.226864][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.938031][ T5645] veth0_vlan: entered promiscuous mode [ 339.075414][ T5645] veth1_vlan: entered promiscuous mode [ 339.776298][ T5645] veth0_macvtap: entered promiscuous mode [ 339.826134][ T5645] veth1_macvtap: entered promiscuous mode [ 340.065925][ T5694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.118311][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.129252][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.139651][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.150712][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.165438][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.180292][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.196217][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.475114][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.485915][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.496307][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.507134][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.517229][ T5645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.528073][ T5645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.545328][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.594494][ T5694] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.807847][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.815922][ T5123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.912037][ T5645] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.922735][ T5645] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.933873][ T5645] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.944935][ T5645] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.999121][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.006980][ T5123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.666770][ T5841] loop4: detected capacity change from 0 to 2048 [ 341.985900][ T5841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.336332][ T5437] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.378324][ T29] audit: type=1804 audit(1717572685.719:5): pid=5857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1986269225/syzkaller.cyKMa4/8/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 344.667825][ T5694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.382492][ T5694] veth0_vlan: entered promiscuous mode [ 345.520294][ T5694] veth1_vlan: entered promiscuous mode [ 346.019272][ T5694] veth0_macvtap: entered promiscuous mode [ 346.158077][ T5694] veth1_macvtap: entered promiscuous mode [ 346.468552][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.482148][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.492443][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.505358][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.516170][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.527007][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.537148][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.548909][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.565121][ T5694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.773073][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.784134][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.794402][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.805179][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.817537][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.828955][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.839568][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.850277][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.865982][ T5694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.049310][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.056119][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.140559][ T5694] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.149893][ T5694] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.159662][ T5694] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.169116][ T5694] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.051360][ T5919] evm: overlay not supported [ 349.801009][ C1] sched: RT throttling activated [ 349.943899][ T5929] loop1: detected capacity change from 0 to 16 [ 350.083997][ T5929] erofs: (device loop1): mounted with root inode @ nid 36. [ 350.994796][ T29] audit: type=1804 audit(1717572693.289:6): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2464993374/syzkaller.NszayD/10/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 353.023871][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.032446][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.236111][ T1063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.244544][ T1063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.729034][ T5990] Bluetooth: MGMT ver 1.22 [ 354.734175][ T5990] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 355.171710][ T5992] loop1: detected capacity change from 0 to 512 [ 355.317473][ T5992] EXT4-fs: Ignoring removed i_version option [ 355.324047][ T5992] journal_path: Lookup failure for './file0' [ 355.330364][ T5992] EXT4-fs: error: could not find journal device path [ 355.419807][ T5999] loop2: detected capacity change from 0 to 16 [ 355.436891][ T5996] loop0: detected capacity change from 0 to 512 [ 355.518163][ T5999] erofs: (device loop2): mounted with root inode @ nid 36. [ 355.881406][ T5996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.894747][ T5996] ext4 filesystem being mounted at /root/syzkaller-testdir1427690970/syzkaller.LYYiJO/1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 357.177801][ T6016] loop1: detected capacity change from 0 to 256 [ 358.126848][ T6016] FAT-fs (loop1): Directory bread(block 64) failed [ 358.133942][ T6016] FAT-fs (loop1): Directory bread(block 65) failed [ 358.140921][ T6016] FAT-fs (loop1): Directory bread(block 66) failed [ 358.147853][ T6016] FAT-fs (loop1): Directory bread(block 67) failed [ 358.154926][ T6016] FAT-fs (loop1): Directory bread(block 68) failed [ 358.161801][ T6016] FAT-fs (loop1): Directory bread(block 69) failed [ 358.168752][ T6016] FAT-fs (loop1): Directory bread(block 70) failed [ 358.179016][ T6016] FAT-fs (loop1): Directory bread(block 71) failed [ 358.186965][ T6016] FAT-fs (loop1): Directory bread(block 72) failed [ 358.194100][ T6016] FAT-fs (loop1): Directory bread(block 73) failed [ 359.140555][ T5645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.521479][ T29] audit: type=1804 audit(1717572701.749:7): pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1986269225/syzkaller.cyKMa4/17/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 361.931421][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.939520][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.247109][ T1063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.256116][ T1063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.819603][ T6045] loop2: detected capacity change from 0 to 16 [ 362.905039][ T6045] erofs: Unknown parameter '˙˙˙˙0177777777777777777777718446744073709551615˙˙˙˙0xffffffffffffffff˙˙18446744073709551615' [ 363.113619][ T6045] loop2: detected capacity change from 0 to 256 [ 363.232283][ T6045] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 363.420324][ T6045] Bluetooth: MGMT ver 1.22 [ 363.707263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 364.150167][ T6054] loop4: detected capacity change from 0 to 2048 [ 364.434812][ T6054] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 364.641335][ T6063] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 364.659211][ T6054] syz-executor.4: attempt to access beyond end of device [ 364.659211][ T6054] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 364.961172][ C0] hrtimer: interrupt took 335283 ns [ 365.982398][ T6083] loop0: detected capacity change from 0 to 8 [ 366.581624][ T6085] loop4: detected capacity change from 0 to 2048 [ 366.715629][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 366.749523][ T6085] loop4: p1 < > p4 [ 366.812046][ T6085] loop4: p4 size 8388608 extends beyond EOD, truncated [ 367.348649][ T4488] loop4: p1 < > p4 [ 367.365778][ T6099] loop3: detected capacity change from 0 to 16 [ 367.402140][ T4488] loop4: p4 size 8388608 extends beyond EOD, truncated [ 367.439011][ T6099] erofs: Unknown parameter '˙˙˙˙0177777777777777777777718446744073709551615˙˙˙˙0xffffffffffffffff˙˙18446744073709551615' [ 367.729631][ T6099] loop3: detected capacity change from 0 to 256 [ 368.002776][ T6099] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 368.315255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 368.622026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!! [ 368.632129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 368.634659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 368.930642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 369.091183][ T5643] udevd[5643]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 369.130139][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 369.138029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 369.713748][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 369.784882][ T5643] udevd[5643]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 370.173060][ T6116] loop2: detected capacity change from 0 to 2048 [ 370.262313][ T6116] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 370.421593][ T6124] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 370.422138][ T6116] syz-executor.2: attempt to access beyond end of device [ 370.422138][ T6116] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 371.093247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 371.288313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 372.495931][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 372.576804][ T6141] loop1: detected capacity change from 0 to 2048 [ 372.804788][ T6141] loop1: p1 < > p4 [ 372.863144][ T6141] loop1: p4 size 8388608 extends beyond EOD, truncated [ 373.491820][ T6155] loop2: detected capacity change from 0 to 16 [ 373.509641][ T6155] erofs: Unknown parameter '˙˙˙˙0177777777777777777777718446744073709551615˙˙˙˙0xffffffffffffffff˙˙18446744073709551615' [ 373.806485][ T6153] loop2: detected capacity change from 0 to 256 [ 374.058395][ T6153] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 374.061636][ T780] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 374.502386][ T780] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 374.512062][ T780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.595678][ T6161] loop3: detected capacity change from 0 to 2048 [ 374.625129][ T780] usb 1-1: config 0 descriptor?? [ 374.667981][ T6161] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 374.780430][ T6169] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 374.784705][ T6161] syz-executor.3: attempt to access beyond end of device [ 374.784705][ T6161] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 375.111587][ T780] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0f [ 375.119144][ T780] hackrf 1-1:0.0: Could not detect board [ 375.126910][ T780] hackrf 1-1:0.0: probe with driver hackrf failed with error -71 [ 375.305359][ T780] usb 1-1: USB disconnect, device number 2 [ 377.483859][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 377.547338][ T6191] loop0: detected capacity change from 0 to 2048 [ 377.725983][ T6191] loop0: p1 < > p4 [ 377.864906][ T6191] loop0: p4 size 8388608 extends beyond EOD, truncated [ 378.834981][ T6205] loop3: detected capacity change from 0 to 16 [ 378.887451][ T6205] erofs: Unknown parameter '˙˙˙˙0177777777777777777777718446744073709551615˙˙˙˙0xffffffffffffffff˙˙18446744073709551615' [ 379.108036][ T6205] loop3: detected capacity change from 0 to 256 [ 379.420544][ T6207] loop1: detected capacity change from 0 to 2048 [ 379.471581][ T6205] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 379.509969][ T6207] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 379.571709][ T6210] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 379.586499][ T6207] syz-executor.1: attempt to access beyond end of device [ 379.586499][ T6207] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 379.872248][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 379.978218][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 380.149490][ T5643] udevd[5643]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 380.336511][ T10] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 380.346187][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.454862][ T10] usb 5-1: config 0 descriptor?? [ 381.067714][ T10] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 381.076217][ T10] hackrf 5-1:0.0: Could not detect board [ 381.082417][ T10] hackrf 5-1:0.0: probe with driver hackrf failed with error -71 [ 381.241533][ T10] usb 5-1: USB disconnect, device number 2 [ 383.071379][ T6234] loop4: detected capacity change from 0 to 2048 [ 383.145077][ T6234] loop4: p1 < > p4 [ 383.269974][ T6234] loop4: p4 size 8388608 extends beyond EOD, truncated [ 383.476731][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 384.606226][ T6261] loop4: detected capacity change from 0 to 16 [ 384.675494][ T6261] erofs: Unknown parameter '˙˙˙˙0177777777777777777777718446744073709551615˙˙˙˙0xffffffffffffffff˙˙18446744073709551615' [ 384.679815][ T6258] loop0: detected capacity change from 0 to 2048 [ 384.842254][ T6258] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 384.942302][ T6265] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 384.953847][ T6258] syz-executor.0: attempt to access beyond end of device [ 384.953847][ T6258] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 384.999093][ T6261] loop4: detected capacity change from 0 to 256 [ 385.218167][ T6261] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 385.835110][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 386.274453][ T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 386.284089][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.399433][ T10] usb 2-1: config 0 descriptor?? [ 386.918894][ T10] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0f [ 386.926535][ T10] hackrf 2-1:0.0: Could not detect board [ 386.934634][ T10] hackrf 2-1:0.0: probe with driver hackrf failed with error -71 [ 387.066782][ T10] usb 2-1: USB disconnect, device number 2 [ 387.991583][ T6290] loop0: detected capacity change from 0 to 2048 [ 388.252644][ T6290] loop0: p1 < > p4 [ 388.304149][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 388.368389][ T6290] loop0: p4 size 8388608 extends beyond EOD, truncated [ 388.456141][ T6305] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 390.137215][ T5643] udevd[5643]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 390.197069][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 390.381572][ T6312] loop4: detected capacity change from 0 to 2048 [ 390.516877][ T6312] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 390.690233][ T6315] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 390.702112][ T6312] syz-executor.4: attempt to access beyond end of device [ 390.702112][ T6312] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 391.370478][ T6317] loop0: detected capacity change from 0 to 16 [ 391.448825][ T6317] erofs: Unknown parameter '˙˙˙˙0177777777777777777777718446744073709551615˙˙˙˙0xffffffffffffffff˙˙18446744073709551615' [ 391.778970][ T6317] loop0: detected capacity change from 0 to 256 [ 392.022473][ T6317] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 393.332279][ T5130] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 393.393448][ T6341] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 393.732413][ T5130] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 393.741932][ T5130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.836979][ T5130] usb 3-1: config 0 descriptor?? [ 394.139373][ T5130] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0e [ 394.147268][ T5130] hackrf 3-1:0.0: Could not detect board [ 394.153657][ T5130] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 394.239989][ T5130] usb 3-1: USB disconnect, device number 2 [ 394.601409][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 394.727414][ T6349] loop3: detected capacity change from 0 to 2048 [ 394.982936][ T6349] loop3: p1 < > p4 [ 395.082800][ T6349] loop3: p4 size 8388608 extends beyond EOD, truncated [ 395.328070][ T6354] loop1: detected capacity change from 0 to 2048 [ 395.535381][ T6354] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 395.854481][ T6363] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 395.873336][ T6354] syz-executor.1: attempt to access beyond end of device [ 395.873336][ T6354] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 398.196957][ T6377] loop1: detected capacity change from 0 to 16 [ 398.308595][ T6377] erofs: Unknown parameter '˙˙˙˙0177777777777777777777718446744073709551615˙˙˙˙0xffffffffffffffff˙˙18446744073709551615' [ 398.584852][ T6377] loop1: detected capacity change from 0 to 256 [ 398.804903][ T6377] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 399.249747][ T6390] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 399.259703][ T6390] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 399.732030][ T6076] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 400.169763][ T5123] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 400.386512][ T6399] loop4: detected capacity change from 0 to 2048 [ 400.529107][ T6399] loop4: p1 < > p4 [ 400.580101][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 400.641885][ T5123] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 400.652424][ T5123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.714005][ T6399] loop4: p4 size 8388608 extends beyond EOD, truncated [ 400.744478][ T5123] usb 1-1: config 0 descriptor?? [ 401.044101][ T6407] loop3: detected capacity change from 0 to 2048 [ 401.058003][ T5123] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0e [ 401.067442][ T5123] hackrf 1-1:0.0: Could not detect board [ 401.074365][ T5123] hackrf 1-1:0.0: probe with driver hackrf failed with error -71 [ 401.152516][ T6407] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 401.221545][ T5123] usb 1-1: USB disconnect, device number 3 [ 401.326064][ T6418] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 401.329056][ T6407] syz-executor.3: attempt to access beyond end of device [ 401.329056][ T6407] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 401.915892][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 402.327500][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 402.447078][ T6429] loop1: detected capacity change from 0 to 16 [ 402.532671][ T6429] erofs: Unknown parameter '˙˙˙˙0177777777777777777777718446744073709551615˙˙˙˙0xffffffffffffffff˙˙18446744073709551615' [ 402.762578][ T6429] loop1: detected capacity change from 0 to 256 [ 402.955054][ T6429] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 403.420689][ T6213] udevd[6213]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 403.440349][ T5643] udevd[5643]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 405.292195][ T780] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 405.515077][ T6451] loop4: detected capacity change from 0 to 2048 [ 405.542825][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 405.683512][ T6451] loop4: p1 < > p4 [ 405.696509][ T780] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 405.706239][ T780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.772025][ T6451] loop4: p4 size 8388608 extends beyond EOD, truncated [ 405.783942][ T780] usb 1-1: config 0 descriptor?? [ 406.035320][ T4488] loop4: p1 < > p4 [ 406.103621][ T4488] loop4: p4 size 8388608 extends beyond EOD, truncated [ 406.189641][ T6461] loop3: detected capacity change from 0 to 2048 [ 406.209081][ T780] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0e [ 406.216872][ T780] hackrf 1-1:0.0: Could not detect board [ 406.223149][ T780] hackrf 1-1:0.0: probe with driver hackrf failed with error -71 [ 406.333274][ T780] usb 1-1: USB disconnect, device number 4 [ 406.560785][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 406.624929][ T5643] udevd[5643]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 406.910145][ T6472] loop2: detected capacity change from 0 to 16 [ 406.989889][ T6472] erofs: Unknown parameter '˙˙˙˙0177777777777777777777718446744073709551615˙˙˙˙0xffffffffffffffff˙˙18446744073709551615' [ 407.335888][ T6472] loop2: detected capacity change from 0 to 256 [ 407.746122][ T6472] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 408.506610][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.514230][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.173926][ T6498] loop3: detected capacity change from 0 to 2048 [ 409.293053][ T6498] loop3: p1 < > p4 [ 409.435833][ T6498] loop3: p4 size 8388608 extends beyond EOD, truncated [ 409.523825][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 410.146702][ T6514] loop4: detected capacity change from 0 to 2048 [ 410.256983][ T6514] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 410.333548][ T6522] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 410.338848][ T6514] syz-executor.4: attempt to access beyond end of device [ 410.338848][ T6514] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 410.554545][ T5075] Bluetooth: hci0: command 0x0406 tx timeout [ 410.554745][ T5076] Bluetooth: hci1: command 0x0406 tx timeout [ 412.188820][ T29] audit: type=1326 audit(1717572754.439:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e4a7cee9 code=0x7ffc0000 [ 412.212534][ T29] audit: type=1326 audit(1717572754.499:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5e4a7cee9 code=0x7ffc0000 [ 412.235339][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.434243][ T29] audit: type=1326 audit(1717572754.679:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e4a7cee9 code=0x7ffc0000 [ 412.461254][ T29] audit: type=1326 audit(1717572754.679:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e4a7cee9 code=0x7ffc0000 [ 412.484121][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.492130][ T29] audit: type=1326 audit(1717572754.679:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5e4a7cee9 code=0x7ffc0000 [ 412.515463][ T29] audit: type=1326 audit(1717572754.729:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e4a7cee9 code=0x7ffc0000 [ 412.538439][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.545067][ T29] audit: type=1326 audit(1717572754.729:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e4a7cee9 code=0x7ffc0000 [ 412.567949][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.579734][ T29] audit: type=1326 audit(1717572754.769:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e4a7cee9 code=0x7ffc0000 [ 412.602674][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.649030][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 414.098052][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 414.581398][ T6560] loop2: detected capacity change from 0 to 2048 [ 414.594900][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 414.825689][ T6560] loop2: p1 < > p4 [ 415.063658][ T6560] loop2: p4 size 8388608 extends beyond EOD, truncated [ 415.757188][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 415.908751][ T6582] loop2: detected capacity change from 0 to 16 [ 415.932105][ T6582] erofs: Unknown parameter '˙˙˙˙0177777777777777777777718446744073709551615˙˙˙˙0xffffffffffffffff˙˙18446744073709551615' [ 416.085819][ T6582] loop2: detected capacity change from 0 to 256 [ 416.304497][ T6582] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 416.377205][ T29] audit: type=1326 audit(1717572758.739:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aeea7cee9 code=0x7ffc0000 [ 416.401493][ T29] audit: type=1326 audit(1717572758.739:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aeea7cee9 code=0x7ffc0000 [ 418.728209][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 418.785332][ T6608] loop3: detected capacity change from 0 to 2048 [ 418.973720][ T6608] loop3: p1 < > p4 [ 419.032436][ T6608] loop3: p4 size 8388608 extends beyond EOD, truncated [ 419.695070][ T6632] loop1: detected capacity change from 0 to 16 [ 419.788366][ T6632] erofs: Unknown parameter '˙˙˙˙0177777777777777777777718446744073709551615˙˙˙˙0xffffffffffffffff˙˙18446744073709551615' [ 420.006253][ T6632] loop1: detected capacity change from 0 to 256 [ 420.138909][ T6632] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 421.845511][ T5666] udevd[5666]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 421.849620][ T6021] udevd[6021]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 422.907246][ T6665] loop3: detected capacity change from 0 to 2048 [ 423.136976][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 423.283458][ T6665] loop3: p1 < > p4 [ 423.322566][ T6665] loop3: p4 size 8388608 extends beyond EOD, truncated [ 423.872773][ T5666] udevd[5666]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 423.937955][ T6176] udevd[6176]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 424.582636][ T6689] loop1: detected capacity change from 0 to 16 [ 424.669481][ T6689] erofs: Unknown parameter '˙˙˙˙0177777777777777777777718446744073709551615˙˙˙˙0xffffffffffffffff˙˙18446744073709551615' [ 424.908028][ T6689] loop1: detected capacity change from 0 to 256 [ 425.235848][ T6689] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 425.892979][ T5666] udevd[5666]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 425.907876][ T5643] udevd[5643]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 427.349519][ T6718] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 427.674241][ T5643] udevd[5643]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 427.680382][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 427.888042][ T6720] loop2: detected capacity change from 0 to 2048 [ 428.039138][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 428.223674][ T6720] loop2: p1 < > p4 [ 428.305724][ T6720] loop2: p4 size 8388608 extends beyond EOD, truncated [ 429.073205][ T5502] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 429.115209][ T5643] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 429.126085][ T5643] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.135715][ T5643] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 429.247855][ T5666] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 429.257992][ T5666] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.267800][ T5666] Buffer I/O error on dev loop2p4, logical block 1, async page read [ 429.311343][ T5643] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.321666][ T5643] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 429.366530][ T5643] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.376416][ T5643] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 429.492071][ T5643] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.502441][ T5643] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 429.563835][ T5643] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.573592][ T5643] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 429.726406][ T6744] loop1: detected capacity change from 0 to 16 [ 429.824955][ T6744] erofs: Unknown parameter '˙˙˙˙0177777777777777777777718446744073709551615˙˙˙˙0xffffffffffffffff˙˙18446744073709551615' [ 430.039708][ T6744] loop1: detected capacity change from 0 to 256 [ 430.239592][ T6744] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 430.569393][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 430.625591][ T5643] udevd[5643]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 431.197278][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 431.197358][ T29] audit: type=1326 audit(1717572773.539:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6761 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f588c87cee9 code=0x0 [ 431.982734][ T6774] loop3: detected capacity change from 0 to 2048 [ 432.167759][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 432.339779][ T6774] loop3: p1 < > p4 [ 432.463733][ T6774] loop3: p4 size 8388608 extends beyond EOD, truncated [ 432.691341][ T6021] udevd[6021]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 432.745641][ T5666] udevd[5666]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 433.788254][ T5666] udevd[5666]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 433.810743][ T5643] udevd[5643]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 434.060317][ T6803] loop0: detected capacity change from 0 to 16 [ 434.207402][ T6803] erofs: Unknown parameter '˙˙˙˙0177777777777777777777718446744073709551615˙˙˙˙0xffffffffffffffff˙˙18446744073709551615' [ 434.561040][ T6803] loop0: detected capacity change from 0 to 256 [ 434.849800][ T6803] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 434.904386][ T6811] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 436.400599][ T6828] loop1: detected capacity change from 0 to 2048 [ 436.567308][ T6828] loop1: p1 < > p4 [ 436.676779][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 436.784207][ T6828] loop1: p4 size 8388608 extends beyond EOD, truncated [ 437.402623][ T6854] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 437.875393][ T6863] loop1: detected capacity change from 0 to 16 [ 437.955162][ T6863] erofs: Unknown parameter '˙˙˙˙0177777777777777777777718446744073709551615˙˙˙˙0xffffffffffffffff˙˙18446744073709551615' [ 438.247348][ T6863] loop1: detected capacity change from 0 to 256 [ 438.494082][ T6863] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 440.190405][ T6896] loop4: detected capacity change from 0 to 2048 [ 440.292039][ T6901] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 440.343728][ T6896] loop4: p1 < > p4 [ 440.423487][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 440.452936][ T6896] loop4: p4 size 8388608 extends beyond EOD, truncated [ 441.271613][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 441.310796][ T4488] loop4: p1 < > p4 [ 441.333783][ T4488] loop4: p4 size 8388608 extends beyond EOD, truncated [ 441.956184][ T6929] loop4: detected capacity change from 0 to 16 [ 442.016892][ T6929] erofs: Unknown parameter '˙˙˙˙0177777777777777777777718446744073709551615˙˙˙˙0xffffffffffffffff˙˙18446744073709551615' [ 442.334239][ T6929] loop4: detected capacity change from 0 to 256 [ 442.698722][ T6929] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 443.348588][ T6946] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 443.720435][ T5643] udevd[5643]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 444.064084][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 444.082698][ T6948] loop3: detected capacity change from 0 to 2048 [ 444.285114][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 444.441376][ T6948] loop3: p1 < > p4 [ 444.534185][ T6948] loop3: p4 size 8388608 extends beyond EOD, truncated [ 445.097874][ T5666] udevd[5666]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 445.180448][ T6213] udevd[6213]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 446.012731][ T5643] udevd[5643]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 446.032421][ T5666] udevd[5666]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 446.495730][ T6978] pim6reg1: entered promiscuous mode [ 446.501456][ T6978] pim6reg1: entered allmulticast mode [ 446.708340][ T5666] udevd[5666]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 446.823093][ T6176] udevd[6176]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 447.520088][ T6987] loop2: detected capacity change from 0 to 16 [ 447.583249][ T6987] erofs: Unknown parameter '˙˙˙˙0177777777777777777777718446744073709551615˙˙˙˙0xffffffffffffffff˙˙18446744073709551615' [ 447.743253][ T6991] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 447.914313][ T6987] loop2: detected capacity change from 0 to 256 [ 448.094681][ T6987] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 448.657929][ T7000] loop4: detected capacity change from 0 to 2048 [ 448.835465][ T7000] loop4: p1 < > p4 [ 449.030545][ T7000] loop4: p4 size 8388608 extends beyond EOD, truncated [ 449.166206][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 449.420503][ T4488] loop4: p1 < > p4 [ 449.505748][ T4488] loop4: p4 size 8388608 extends beyond EOD, truncated [ 450.995214][ T7039] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 451.511629][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 451.634861][ T7047] loop0: detected capacity change from 0 to 16 [ 451.815877][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 451.914754][ T7047] erofs: Unknown parameter '˙˙˙˙0177777777777777777777718446744073709551615˙˙˙˙0xffffffffffffffff˙˙18446744073709551615' [ 452.096151][ T7050] loop4: detected capacity change from 0 to 2048 [ 452.135204][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 452.226693][ T7047] loop0: detected capacity change from 0 to 256 [ 452.271612][ T7050] loop4: p1 < > p4 [ 452.333828][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 452.365198][ T7050] loop4: p4 size 8388608 extends beyond EOD, truncated [ 452.432463][ T7047] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 454.340412][ T5643] udevd[5643]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 454.510412][ T5666] udevd[5666]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 454.899947][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 456.509220][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 456.538599][ T5643] udevd[5643]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 456.645402][ T7105] loop4: detected capacity change from 0 to 256 [ 457.085523][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 457.204581][ T7104] loop2: detected capacity change from 0 to 2048 [ 457.320479][ T7104] loop2: p1 < > p4 [ 457.377802][ T7115] loop3: detected capacity change from 0 to 764 [ 457.385822][ T7104] loop2: p4 size 8388608 extends beyond EOD, truncated [ 457.625123][ T7115] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 458.972018][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 460.150175][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 460.217169][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 460.237704][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 460.296639][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 460.312436][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 460.339004][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 461.254291][ T7147] loop0: detected capacity change from 0 to 256 [ 462.079597][ T3995] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.188218][ T7151] loop2: detected capacity change from 0 to 2048 [ 462.325148][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 462.474232][ T5081] Bluetooth: hci5: command tx timeout [ 462.608879][ T3995] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.639823][ T7151] loop2: p1 < > p4 [ 462.680496][ T7138] chnl_net:caif_netlink_parms(): no params data found [ 462.853693][ T3995] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.920159][ T7151] loop2: p4 size 8388608 extends beyond EOD, truncated [ 463.076676][ T3995] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.559649][ T3995] bridge_slave_1: left allmulticast mode [ 463.565756][ T3995] bridge_slave_1: left promiscuous mode [ 463.572714][ T3995] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.592393][ T3995] bridge_slave_0: left allmulticast mode [ 463.598291][ T3995] bridge_slave_0: left promiscuous mode [ 463.605023][ T3995] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.875139][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 463.890724][ T4488] loop2: p1 < > p4 [ 463.916673][ T4488] loop2: p4 size 8388608 extends beyond EOD, truncated [ 464.534354][ T3995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.556478][ T5081] Bluetooth: hci5: command tx timeout [ 464.610174][ T3995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.706485][ T3995] bond0 (unregistering): Released all slaves [ 465.278665][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 465.406920][ T5664] udevd[5664]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 465.982978][ T3995] hsr_slave_0: left promiscuous mode [ 466.066156][ T3995] hsr_slave_1: left promiscuous mode [ 466.109429][ T3995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.117599][ T3995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.145727][ T3995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.153740][ T3995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.262629][ T3995] veth1_macvtap: left promiscuous mode [ 466.268706][ T3995] veth0_macvtap: left promiscuous mode [ 466.274901][ T3995] veth1_vlan: left promiscuous mode [ 466.280494][ T3995] veth0_vlan: left promiscuous mode [ 466.641550][ T5081] Bluetooth: hci5: command tx timeout [ 467.097137][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 467.143234][ T7181] udevd[7181]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 468.207684][ T7201] loop0: detected capacity change from 0 to 2048 [ 468.216706][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 468.317814][ T3995] team0 (unregistering): Port device team_slave_1 removed [ 468.383825][ T7201] loop0: p1 < > p4 [ 468.412705][ T7201] loop0: p4 size 8388608 extends beyond EOD, truncated [ 468.453954][ T3995] team0 (unregistering): Port device team_slave_0 removed [ 468.722286][ T5081] Bluetooth: hci5: command tx timeout [ 469.363289][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 469.559504][ T7138] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.567775][ T7138] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.575737][ T7138] bridge_slave_0: entered allmulticast mode [ 469.591217][ T7138] bridge_slave_0: entered promiscuous mode [ 469.797534][ T7138] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.805764][ T7138] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.813776][ T7138] bridge_slave_1: entered allmulticast mode [ 469.824832][ T7138] bridge_slave_1: entered promiscuous mode [ 469.945529][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 469.953246][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.392240][ T7138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.554832][ T7138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.885697][ T7138] team0: Port device team_slave_0 added [ 471.033220][ T7138] team0: Port device team_slave_1 added [ 471.408387][ T7138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.415684][ T7138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.445739][ T7138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.627743][ T7138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.638462][ T7138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.666275][ T7138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.084200][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 472.309410][ T7138] hsr_slave_0: entered promiscuous mode [ 472.413487][ T7138] hsr_slave_1: entered promiscuous mode [ 472.471591][ T7138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.479428][ T7138] Cannot create hsr debugfs directory [ 473.306035][ T7256] loop2: detected capacity change from 0 to 2048 [ 473.457248][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 473.613226][ T7256] loop2: p1 < > p4 [ 473.662662][ T7256] loop2: p4 size 8388608 extends beyond EOD, truncated [ 474.084705][ T4488] loop2: p1 < > p4 [ 474.204605][ T4488] loop2: p4 size 8388608 extends beyond EOD, truncated [ 475.193834][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 475.232894][ T7181] udevd[7181]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 475.639099][ T7138] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 475.740262][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 475.782413][ T7138] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 475.839242][ T7293] loop0: detected capacity change from 0 to 256 [ 475.886197][ T7138] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 475.994695][ T7138] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 476.470536][ T7293] FAT-fs (loop0): Directory bread(block 64) failed [ 476.477691][ T7293] FAT-fs (loop0): Directory bread(block 65) failed [ 476.485454][ T7293] FAT-fs (loop0): Directory bread(block 66) failed [ 476.492510][ T7293] FAT-fs (loop0): Directory bread(block 67) failed [ 476.499487][ T7293] FAT-fs (loop0): Directory bread(block 68) failed [ 476.506537][ T7293] FAT-fs (loop0): Directory bread(block 69) failed [ 476.513737][ T7293] FAT-fs (loop0): Directory bread(block 70) failed [ 476.520515][ T7293] FAT-fs (loop0): Directory bread(block 71) failed [ 476.527612][ T7293] FAT-fs (loop0): Directory bread(block 72) failed [ 476.535116][ T7293] FAT-fs (loop0): Directory bread(block 73) failed [ 476.688141][ T7304] loop4: detected capacity change from 0 to 256 [ 477.149440][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 477.696795][ T7308] loop2: detected capacity change from 0 to 2048 [ 477.853113][ T7138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.923098][ T7308] loop2: p1 < > p4 [ 478.050472][ T7308] loop2: p4 size 8388608 extends beyond EOD, truncated [ 478.146926][ T7138] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.272332][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 478.407655][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.415621][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.622826][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.630529][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.096875][ T7347] Zero length message leads to an empty skb [ 480.694949][ T7355] loop4: detected capacity change from 0 to 256 [ 482.207902][ T7138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.230297][ T7138] veth0_vlan: entered promiscuous mode [ 483.532206][ T7138] veth1_vlan: entered promiscuous mode [ 483.681719][ T780] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 484.141580][ T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.153869][ T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.164378][ T780] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 484.173887][ T780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.190604][ T7138] veth0_macvtap: entered promiscuous mode [ 484.312840][ T780] usb 3-1: config 0 descriptor?? [ 484.399193][ T7138] veth1_macvtap: entered promiscuous mode [ 484.659480][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 484.704480][ T5664] udevd[5664]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 484.793409][ T7138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.804520][ T7138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.814865][ T7138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.825716][ T7138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.836044][ T7138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.851127][ T7138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.862356][ T7138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.873301][ T7138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.889802][ T7138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.123448][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 485.172281][ T5666] udevd[5666]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 485.248869][ T7372] net_ratelimit: 2 callbacks suppressed [ 485.248932][ T7372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 485.403348][ T7138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.414174][ T7138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.424471][ T7138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.435559][ T7138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.445786][ T7138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.456527][ T7138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.470086][ T7138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.481870][ T7138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.497497][ T7138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.524588][ T780] usbhid 3-1:0.0: can't add hid device: -71 [ 485.531549][ T780] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 485.712689][ T780] usb 3-1: USB disconnect, device number 3 [ 486.049343][ T7400] loop1: detected capacity change from 0 to 256 [ 486.060795][ T7138] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.070163][ T7138] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.084381][ T7138] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.094643][ T7138] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.426036][ T5123] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 489.903198][ T5123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.914726][ T5123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.925529][ T5123] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 489.935019][ T5123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.064140][ T5123] usb 1-1: config 0 descriptor?? [ 490.892785][ T780] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 491.343108][ T780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.355345][ T780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.365669][ T780] usb 5-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 491.375151][ T780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.503068][ T780] usb 5-1: config 0 descriptor?? [ 492.098714][ T5123] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input5 [ 492.304980][ T5123] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input6 [ 492.334663][ T7443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 492.529760][ T5123] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 492.637049][ T5123] usb 1-1: USB disconnect, device number 5 [ 492.722244][ T780] usbhid 5-1:0.0: can't add hid device: -71 [ 492.734102][ T780] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 493.122081][ T780] usb 5-1: USB disconnect, device number 3 [ 497.142063][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 497.539455][ T745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.550583][ T745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.559964][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.571410][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.581724][ T43] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 497.593055][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.705035][ T43] usb 2-1: config 0 descriptor?? [ 497.878230][ T745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.886619][ T745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.912125][ T43] usb 2-1: string descriptor 0 read error: -71 [ 499.006773][ T43] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 499.017768][ T43] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 499.026314][ T43] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 499.035184][ T43] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 499.043583][ T43] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 499.272091][ T43] usb 2-1: USB disconnect, device number 3 [ 499.301258][ T5321] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 499.712252][ T5321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.723645][ T5321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.734018][ T5321] usb 1-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 499.743635][ T5321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.843935][ T5321] usb 1-1: config 0 descriptor?? [ 500.691834][ T7510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 500.961663][ T5321] usbhid 1-1:0.0: can't add hid device: -71 [ 500.971529][ T5321] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 501.111462][ T5321] usb 1-1: USB disconnect, device number 6 [ 501.162191][ T7537] syz-executor.4[7537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 501.162905][ T7537] syz-executor.4[7537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 502.211275][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 502.673798][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.685321][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.695640][ T10] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 502.705170][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.767924][ T10] usb 5-1: config 0 descriptor?? [ 503.717289][ T7554] overlayfs: failed to resolve './file0': -2 [ 508.066435][ T10] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 508.079467][ T10] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 508.099934][ T10] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 508.110163][ T10] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 508.118428][ T10] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 508.225098][ T10] usb 5-1: USB disconnect, device number 4 [ 508.580287][ T7568] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 508.951980][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 509.411694][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 509.425599][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.454694][ T10] usb 1-1: config 0 descriptor?? [ 509.504780][ T10] cp210x 1-1:0.0: cp210x converter detected [ 510.008657][ T10] usb 1-1: cp210x converter now attached to ttyUSB0 [ 510.052191][ T5321] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 510.250282][ T10] usb 1-1: USB disconnect, device number 7 [ 510.321785][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 510.333015][ T10] cp210x 1-1:0.0: device disconnected [ 510.471985][ T5321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.484241][ T5321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.494561][ T5321] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 510.503997][ T5321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.627380][ T5321] usb 3-1: config 0 descriptor?? [ 511.130057][ T7575] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 511.412040][ T5321] usbhid 3-1:0.0: can't add hid device: -71 [ 511.418956][ T5321] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 511.552100][ T5321] usb 3-1: USB disconnect, device number 4 [ 516.146604][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 516.530234][ T5321] kernel write not supported for file /dsp (pid: 5321 comm: kworker/1:7) [ 516.621495][ T43] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 516.631277][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.723939][ T43] usb 2-1: config 0 descriptor?? [ 516.816814][ T43] cp210x 2-1:0.0: cp210x converter detected [ 517.355289][ T43] usb 2-1: cp210x converter now attached to ttyUSB0 [ 517.581525][ T43] usb 2-1: USB disconnect, device number 4 [ 517.664200][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 517.675165][ T43] cp210x 2-1:0.0: device disconnected [ 517.982353][ T780] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 518.371515][ T780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.383273][ T780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.393653][ T780] usb 5-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 518.403194][ T780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.484214][ T780] usb 5-1: config 0 descriptor?? [ 518.992299][ T7633] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 519.360412][ T780] usbhid 5-1:0.0: can't add hid device: -71 [ 519.367462][ T780] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 519.483428][ T780] usb 5-1: USB disconnect, device number 5 [ 519.602177][ T7651] loop0: detected capacity change from 0 to 256 [ 519.663441][ T43] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 520.081859][ T43] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 520.091450][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.182042][ T43] usb 4-1: config 0 descriptor?? [ 520.288714][ T43] cp210x 4-1:0.0: cp210x converter detected [ 521.153352][ T43] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 522.025943][ T43] usb 4-1: cp210x converter now attached to ttyUSB0 [ 522.231418][ T43] usb 4-1: USB disconnect, device number 2 [ 522.336921][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 523.833227][ T29] audit: type=1326 audit(1717572866.089:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe6c07cee9 code=0x0 [ 523.996420][ T43] cp210x 4-1:0.0: device disconnected [ 524.873583][ T43] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 525.244667][ T7691] loop0: detected capacity change from 0 to 256 [ 525.313072][ T43] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 525.323682][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.430101][ T43] usb 3-1: config 0 descriptor?? [ 525.492520][ T43] cp210x 3-1:0.0: cp210x converter detected [ 525.941398][ T7691] FAT-fs (loop0): Directory bread(block 64) failed [ 525.948243][ T7691] FAT-fs (loop0): Directory bread(block 65) failed [ 525.955498][ T7691] FAT-fs (loop0): Directory bread(block 66) failed [ 525.962475][ T7691] FAT-fs (loop0): Directory bread(block 67) failed [ 525.969431][ T7691] FAT-fs (loop0): Directory bread(block 68) failed [ 525.976346][ T7691] FAT-fs (loop0): Directory bread(block 69) failed [ 525.983500][ T7691] FAT-fs (loop0): Directory bread(block 70) failed [ 525.990282][ T7691] FAT-fs (loop0): Directory bread(block 71) failed [ 525.997450][ T7691] FAT-fs (loop0): Directory bread(block 72) failed [ 526.004501][ T7691] FAT-fs (loop0): Directory bread(block 73) failed [ 526.015619][ T43] usb 3-1: cp210x converter now attached to ttyUSB0 [ 526.707562][ T43] usb 3-1: USB disconnect, device number 5 [ 526.740603][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 526.753332][ T43] cp210x 3-1:0.0: device disconnected [ 531.374424][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.381402][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.338300][ T7739] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 532.591448][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 532.962533][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 532.976789][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.053124][ T10] usb 3-1: config 0 descriptor?? [ 533.132455][ T10] cp210x 3-1:0.0: cp210x converter detected [ 533.606658][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 533.872975][ T10] usb 3-1: USB disconnect, device number 6 [ 533.886123][ T6076] udevd[6076]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 533.933786][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 533.945924][ T10] cp210x 3-1:0.0: device disconnected [ 535.423534][ T7771] trusted_key: encrypted_key: insufficient parameters specified [ 536.174317][ T780] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 536.613156][ T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 536.623346][ T780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 536.634776][ T780] usb 3-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=dd.34 [ 536.644508][ T780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.723856][ T780] usb 3-1: config 0 descriptor?? [ 536.855618][ T780] option 3-1:0.0: GSM modem (1-port) converter detected [ 536.999559][ T780] usb 3-1: USB disconnect, device number 7 [ 537.009290][ T780] option 3-1:0.0: device disconnected [ 537.781986][ T5123] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 538.211937][ T5123] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 538.221518][ T5123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.324864][ T5123] usb 2-1: config 0 descriptor?? [ 538.375678][ T5123] cp210x 2-1:0.0: cp210x converter detected [ 538.844040][ T5123] usb 2-1: cp210x converter now attached to ttyUSB0 [ 538.952388][ T5123] usb 2-1: USB disconnect, device number 5 [ 539.003906][ T5123] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 539.015738][ T5123] cp210x 2-1:0.0: device disconnected [ 539.459921][ T7818] trusted_key: encrypted_key: insufficient parameters specified [ 542.382785][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 542.781786][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 542.792568][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.890515][ T10] usb 2-1: config 0 descriptor?? [ 542.932045][ T7859] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 542.971501][ T10] cp210x 2-1:0.0: cp210x converter detected [ 543.459462][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 543.579597][ T10] usb 2-1: USB disconnect, device number 6 [ 543.661158][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 543.672393][ T10] cp210x 2-1:0.0: device disconnected [ 543.876505][ T7865] trusted_key: encrypted_key: insufficient parameters specified [ 545.532028][ T7887] loop1: detected capacity change from 0 to 512 [ 545.594036][ T7887] EXT4-fs: Ignoring removed nomblk_io_submit option [ 545.628859][ T7887] EXT4-fs: old and new quota format mixing [ 546.075270][ T7893] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 546.347419][ T7887] loop1: detected capacity change from 0 to 4096 [ 546.659093][ T7899] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 547.084370][ T5123] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 547.492934][ T5123] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 547.502960][ T5123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.608249][ T5123] usb 1-1: config 0 descriptor?? [ 547.715862][ T5123] cp210x 1-1:0.0: cp210x converter detected [ 548.108878][ T5123] usb 1-1: cp210x converter now attached to ttyUSB0 [ 548.181881][ T5123] usb 1-1: USB disconnect, device number 8 [ 548.262477][ T5123] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 548.273690][ T5123] cp210x 1-1:0.0: device disconnected [ 548.969206][ T7926] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de [ 549.641210][ T7936] input: syz0 as /devices/virtual/input/input7 [ 550.915862][ T7956] loop0: detected capacity change from 0 to 64 [ 551.462558][ T5321] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 551.871533][ T5321] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 551.881287][ T5321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.976964][ T5321] usb 3-1: config 0 descriptor?? [ 552.075763][ T5321] cp210x 3-1:0.0: cp210x converter detected [ 552.342929][ T5321] usb 3-1: cp210x converter now attached to ttyUSB0 [ 552.446067][ T7977] input: syz0 as /devices/virtual/input/input8 [ 552.498656][ T5321] usb 3-1: USB disconnect, device number 8 [ 552.566373][ T5321] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 552.577648][ T5321] cp210x 3-1:0.0: device disconnected [ 555.318055][ T8011] input: syz0 as /devices/virtual/input/input9 [ 555.630091][ T5321] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 556.081639][ T5321] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 556.091314][ T5321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.168783][ T5321] usb 1-1: config 0 descriptor?? [ 556.248395][ T5321] cp210x 1-1:0.0: cp210x converter detected [ 556.518612][ T5321] usb 1-1: cp210x converter now attached to ttyUSB0 [ 556.662934][ T5321] usb 1-1: USB disconnect, device number 9 [ 556.753865][ T5321] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 556.765504][ T5321] cp210x 1-1:0.0: device disconnected [ 559.064421][ T8062] input: syz0 as /devices/virtual/input/input10 [ 559.607681][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 559.617422][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 559.629441][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 559.668469][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 559.684297][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 559.704142][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 559.841751][ T8071] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de [ 560.302076][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 560.741897][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 560.751497][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.805319][ T10] usb 5-1: config 0 descriptor?? [ 560.864934][ T10] cp210x 5-1:0.0: cp210x converter detected [ 561.124200][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 561.315561][ T5123] usb 5-1: USB disconnect, device number 6 [ 561.434287][ T5123] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 561.450493][ T5123] cp210x 5-1:0.0: device disconnected [ 561.517187][ T1080] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.737993][ T1080] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.831748][ T51] Bluetooth: hci4: command tx timeout [ 562.009417][ T1080] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.139505][ T8067] chnl_net:caif_netlink_parms(): no params data found [ 562.288525][ T1080] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.634107][ T8101] input: syz1 as /devices/virtual/input/input11 [ 562.966396][ T1080] bridge_slave_1: left allmulticast mode [ 562.973110][ T1080] bridge_slave_1: left promiscuous mode [ 562.985507][ T1080] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.024774][ T8110] input: syz0 as /devices/virtual/input/input12 [ 563.099981][ T1080] bridge_slave_0: left allmulticast mode [ 563.106044][ T1080] bridge_slave_0: left promiscuous mode [ 563.115356][ T1080] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.156229][ T8101] syz-executor.1[8101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.156839][ T8101] syz-executor.1[8101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.331430][ T29] audit: type=1804 audit(1717572905.649:27): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3283237164/syzkaller.cr28OQ/162/file0" dev="sda1" ino=1940 res=1 errno=0 [ 563.609626][ T8116] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 563.911944][ T51] Bluetooth: hci4: command tx timeout [ 564.289768][ T1080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.444385][ T1080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.489842][ T1080] bond0 (unregistering): Released all slaves [ 565.450401][ T8133] loop1: detected capacity change from 0 to 1024 [ 565.567923][ T8133] EXT4-fs: Ignoring removed nomblk_io_submit option [ 565.708743][ T8133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.881278][ T1080] hsr_slave_0: left promiscuous mode [ 565.940217][ T1080] hsr_slave_1: left promiscuous mode [ 565.951577][ T29] audit: type=1800 audit(1717572908.279:28): pid=8131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 565.973155][ T29] audit: type=1804 audit(1717572908.329:29): pid=8131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3283237164/syzkaller.cr28OQ/163/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 566.002547][ T51] Bluetooth: hci4: command tx timeout [ 566.092574][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.100448][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.170751][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.178993][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.276447][ T1080] veth1_macvtap: left promiscuous mode [ 566.283086][ T1080] veth0_macvtap: left promiscuous mode [ 566.289062][ T1080] veth1_vlan: left promiscuous mode [ 566.294813][ T1080] veth0_vlan: left promiscuous mode [ 566.371254][ T8145] loop2: detected capacity change from 0 to 2048 [ 566.634429][ T8145] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 566.757737][ T5458] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.834429][ T8145] ===================================================== [ 566.841878][ T8145] BUG: KMSAN: uninit-value in crc_itu_t+0x287/0x2e0 [ 566.848702][ T8145] crc_itu_t+0x287/0x2e0 [ 566.853508][ T8145] udf_update_tag+0x5c/0x2a0 [ 566.858312][ T8145] udf_rename+0x1202/0x16d0 [ 566.863335][ T8145] vfs_rename+0x1d9a/0x2280 [ 566.871317][ T8145] do_renameat2+0x18cc/0x1d50 [ 566.877186][ T8145] __x64_sys_renameat2+0x153/0x200 [ 566.882654][ T8145] x64_sys_call+0x2993/0x3b50 [ 566.887592][ T8145] do_syscall_64+0xcf/0x1e0 [ 566.892540][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.898699][ T8145] [ 566.901287][ T8145] Local variable diriter created at: [ 566.906690][ T8145] udf_rename+0xbe/0x16d0 [ 566.911503][ T8145] vfs_rename+0x1d9a/0x2280 [ 566.916175][ T8145] [ 566.918617][ T8145] CPU: 1 PID: 8145 Comm: syz-executor.2 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 566.928944][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 566.940209][ T8145] ===================================================== [ 566.947436][ T8145] Disabling lock debugging due to kernel taint [ 566.953921][ T8145] Kernel panic - not syncing: kmsan.panic set ... [ 566.960483][ T8145] CPU: 1 PID: 8145 Comm: syz-executor.2 Tainted: G B 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 566.972185][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 2024/06/05 07:35:09 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 566.982439][ T8145] Call Trace: [ 566.985886][ T8145] [ 566.988969][ T8145] dump_stack_lvl+0x216/0x2d0 [ 566.993904][ T8145] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 566.999966][ T8145] dump_stack+0x1e/0x30 [ 567.004364][ T8145] panic+0x4e2/0xcd0 [ 567.008499][ T8145] ? kmsan_get_metadata+0xf1/0x1d0 [ 567.013875][ T8145] kmsan_report+0x2d5/0x2e0 [ 567.018601][ T8145] ? kmsan_internal_poison_memory+0x49/0x90 [ 567.024779][ T8145] ? kmsan_slab_free+0xd6/0x140 [ 567.029827][ T8145] ? kfree+0x20f/0xa60 [ 567.034087][ T8145] ? udf_fiiter_release+0x115/0x160 [ 567.039508][ T8145] ? __msan_warning+0x95/0x120 [ 567.044479][ T8145] ? crc_itu_t+0x287/0x2e0 [ 567.049108][ T8145] ? udf_update_tag+0x5c/0x2a0 [ 567.054080][ T8145] ? udf_rename+0x1202/0x16d0 [ 567.059000][ T8145] ? vfs_rename+0x1d9a/0x2280 [ 567.063876][ T8145] ? do_renameat2+0x18cc/0x1d50 [ 567.068922][ T8145] ? __x64_sys_renameat2+0x153/0x200 [ 567.074411][ T8145] ? x64_sys_call+0x2993/0x3b50 [ 567.079506][ T8145] ? do_syscall_64+0xcf/0x1e0 [ 567.084454][ T8145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.090789][ T8145] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 567.096826][ T8145] ? current_time+0x44/0x550 [ 567.101647][ T8145] ? filter_irq_stacks+0x60/0x1a0 [ 567.106931][ T8145] ? kmsan_get_metadata+0x146/0x1d0 [ 567.112336][ T8145] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 567.118383][ T8145] ? kmsan_get_metadata+0x146/0x1d0 [ 567.123798][ T8145] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 567.129830][ T8145] ? kmsan_get_metadata+0x146/0x1d0 [ 567.135212][ T8145] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 567.141222][ T8145] __msan_warning+0x95/0x120 [ 567.146017][ T8145] crc_itu_t+0x287/0x2e0 [ 567.150498][ T8145] udf_update_tag+0x5c/0x2a0 [ 567.155348][ T8145] udf_rename+0x1202/0x16d0 [ 567.160127][ T8145] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 567.166621][ T8145] ? kmsan_get_metadata+0x146/0x1d0 [ 567.172062][ T8145] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 567.178224][ T8145] ? __pfx_udf_rename+0x10/0x10 [ 567.183354][ T8145] vfs_rename+0x1d9a/0x2280 [ 567.188106][ T8145] do_renameat2+0x18cc/0x1d50 [ 567.193042][ T8145] __x64_sys_renameat2+0x153/0x200 [ 567.198371][ T8145] x64_sys_call+0x2993/0x3b50 [ 567.203324][ T8145] do_syscall_64+0xcf/0x1e0 [ 567.208093][ T8145] ? clear_bhb_loop+0x25/0x80 [ 567.213040][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.219187][ T8145] RIP: 0033:0x7f588c87cee9 [ 567.223802][ T8145] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 567.243662][ T8145] RSP: 002b:00007f588d69e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 567.252299][ T8145] RAX: ffffffffffffffda RBX: 00007f588c9b3f80 RCX: 00007f588c87cee9 [ 567.260465][ T8145] RDX: 0000000000000005 RSI: 0000000020000000 RDI: 0000000000000004 [ 567.268606][ T8145] RBP: 00007f588c8da6fe R08: 0000000000000000 R09: 0000000000000000 [ 567.276751][ T8145] R10: 00000000200004c0 R11: 0000000000000246 R12: 0000000000000000 [ 567.284976][ T8145] R13: 000000000000000b R14: 00007f588c9b3f80 R15: 00007fffc18bcf88 [ 567.293151][ T8145] [ 567.296620][ T8145] Kernel Offset: disabled [ 567.301043][ T8145] Rebooting in 86400 seconds..