last executing test programs: 5.135899976s ago: executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000100)='.\x00', 0x2f0101, 0x0) bpf$ITER_CREATE(0xa, &(0x7f0000000000)={r0}, 0x8) 4.990092719s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="00000700000007007673ed26b029a925ac675bd612d8ab87"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) 2.97750442s ago: executing program 1: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2ad, &(0x7f0000000280)="$eJzs3T9vI0UUAPC3jmMbKOyCCiGxEhRUUZKWxgElUoQrkAuggIgkEootpESKxB9hUtHSUPIJkJDoaPkANPcNTrr2pOsuRaQ9rb0bOznHOZ/i5P78fk0ms+/NvJmMHKXYyTfv9g9209g/+fl+NBpJVNrRjtMkWlGJ0q9xQfv3AABeZqdZFo+ykXnykohoLK4sAGCB5v79/8/CSwIAFuzzL778dKPT2fwsTRux1f/tuJv/ZZ9/HT3f2I/vohd7sRrNOIvIzo3aW1mWDapprhUf9AfH3Tyz//X/xfgbDyOG+WvRjNaw62L+dmdzLR2ZyB/kdbxZzN/O89ejGW9PmX+7s7k+JT+6tfjw/Yn6V6IZ976N76MXu8Mixvm/rKXpJ9kfj3/6Ki8vz08Gx936MG4sW7rlHw0AAAAAAAAAAAAAAAAAAAAAAK+wleLunHoM7+/Ju4r7d5bO8m+WIy21Lt7PM8pPyoEu3Q80yOLP8n6d1TRNsyJwnF+Nd6pRvZtVAwAAAAAAAAAAAAAAAAAAwIvl6IcfD3Z6vb3DG2mUtwGUr/U/7zjt857q4XsxO7g+nqtSNGeMHEtlTBIxs4x8ETe0Ldc13riq5r/+nnfAxvUxy+O5olVsxg2vqzxdBzvJ9D2sR9nTKA/Jv5MxtXjGuWpXPcrmOn61qY+ac6+99tawMZgRE8mswj56MNq5oie5vIracFenpi8XjYn0S2djrvP89GdFkiziEwgAAAAAAAAAAAAAAAAAACiNX/qd8vBkZmolqy+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4VeP//z9HY1Akj3r++3hGcC0Oj+54iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwGngQAAP//4gNebw==") syz_mount_image$fuse(&(0x7f0000000700), &(0x7f00000000c0)='./file0\x00', 0x30c407e, &(0x7f0000000780)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r2, 0xfffffffffffffffb, 0x2) getdents(r2, 0x0, 0x0) 2.938387576s ago: executing program 4: setuid(0xee00) setfsgid(0xee01) 2.828315373s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) keyctl$join(0x1, &(0x7f0000000700)={'syz', 0x3}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(r0, 0x7, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="050000000000000073117a000000000085ffeb0000000000950000", @ANYBLOB="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"], 0x0, 0x0, 0xc9, &(0x7f0000000580)=""/201, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000001940)=@newchain={0x2bdc, 0x64, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffff}, {0x0, 0x10}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x1700, 0x2, [@TCA_BASIC_POLICE={0x818, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xbddb029, 0x7ff, 0x9, 0x40, 0x2, 0xffffffff, 0x40, 0x0, 0x8, 0x5, 0x4, 0x8000, 0x1, 0x8, 0x8001, 0x2c, 0x13, 0x9, 0x80000001, 0x1, 0xfffffc00, 0x49, 0x8, 0x80000000, 0x3, 0xb37, 0x5, 0x8001, 0x6, 0x8000, 0xf77, 0xff, 0x9, 0x9, 0x3, 0x8bb9, 0xb6c, 0xb82, 0x1, 0x1, 0x2, 0x81, 0xfffffffa, 0x7e, 0x4, 0x0, 0x81, 0x707, 0xbcb6, 0x10000, 0x0, 0x7, 0x1, 0x69, 0x4, 0xea, 0x7f, 0xcf46, 0x8, 0x8, 0x100, 0x34, 0x24d0, 0x400, 0xfffffffc, 0x7, 0x9, 0xb6c5, 0x5, 0x77ed, 0x4, 0x4, 0x7fff, 0x7, 0x4, 0x4, 0x800, 0x10001, 0x0, 0x4a, 0xd1, 0x0, 0x1f, 0x8, 0x2, 0x9, 0x7, 0x1000, 0x401, 0x1, 0x800, 0x8a0, 0xff, 0x8, 0x10000, 0xdb0, 0x4, 0x80000001, 0x3, 0x3f, 0x3, 0xc410, 0x972b, 0x100, 0x380, 0x578, 0x778, 0x6, 0xffff8000, 0x7, 0x6, 0x770, 0x0, 0x2, 0xfffffff7, 0x1, 0xfff, 0xd8a, 0x200000, 0x401, 0x7f, 0x8, 0x60000000, 0x2, 0xff8, 0x1, 0x7, 0x3, 0x6, 0x4, 0x10001, 0x28bc, 0x7, 0x10, 0xc0d5, 0x6d0a, 0x1b, 0x3, 0x1f, 0xffff, 0x1ff, 0x2, 0x6, 0xaf6322e6, 0xffffffff, 0x0, 0x800008, 0x7fff, 0x0, 0x401, 0x29, 0xffffff7f, 0x8, 0x1ff, 0x80, 0x3, 0x80000001, 0x4, 0xfffffffa, 0x1, 0xad24, 0x0, 0x8, 0x4, 0x2, 0xffffffff, 0x100, 0x66, 0xfff, 0x80000000, 0x40, 0x1, 0x45, 0x0, 0x0, 0x200, 0x7fff, 0x6, 0x1, 0x883, 0x7, 0x7, 0x4, 0x0, 0x8000, 0xc70a, 0x6, 0x7, 0x5, 0x101, 0x6, 0xfe, 0xfffffff7, 0x20, 0x2, 0x9, 0x74, 0x81, 0x7fffffff, 0x6, 0x3, 0x1000, 0x6, 0x3ff, 0x8, 0xfffffffc, 0x401, 0x2f1, 0x80, 0x7fff, 0x80, 0x1, 0x80, 0x7a, 0x8, 0x7ff, 0x0, 0x3, 0x9, 0xfffffffd, 0x2000000, 0x8, 0x112, 0xd4, 0xffff, 0x0, 0x459b8b7f, 0xa4eb, 0x101, 0xffffffff, 0x7fffffff, 0x7fff, 0x1, 0x10000, 0x6, 0x7, 0x0, 0x80000000, 0x800, 0x3f, 0x7, 0x4, 0x5, 0x0, 0x1, 0x4f81, 0xff84, 0x9, 0xfffffffd, 0x2, 0x6, 0x3, 0xde, 0x8000, 0xffff, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x25e2, 0x3, 0x2, 0x0, 0xff, 0xffff, 0xd17, 0x0, 0x4, 0x3f, 0xfffffff9, 0x4, 0x96, 0x6, 0xfffffff9, 0x8, 0x3f, 0x101, 0x1, 0x1, 0x0, 0x2, 0xffffffff, 0x200, 0x7f, 0x4, 0xff, 0xffffff1b, 0x2, 0x7, 0x8, 0x101, 0x9, 0x8, 0x5, 0x1, 0x3f, 0x3, 0x200, 0x1ff, 0x28, 0xfffff000, 0x1, 0x1, 0x3, 0x1, 0x7, 0x5, 0x1, 0x0, 0xfff, 0x2, 0x6, 0x6, 0x4, 0x1, 0x2, 0x5, 0x5, 0x7, 0x1, 0x8, 0xe85, 0x3f, 0x1f, 0x67, 0x8, 0xd7, 0x6, 0xfd0, 0x101, 0x2f1f, 0x3, 0x1f, 0x7fff, 0x5, 0x5, 0x89, 0x7, 0x996, 0x1, 0x6, 0x6, 0x2, 0x9, 0x8, 0x6, 0xc0, 0x0, 0x7fff, 0x176495fb, 0x1, 0x8, 0x4, 0x4, 0x4, 0x8, 0x100, 0x6b8c, 0x1400000, 0x7, 0x7fff, 0xaf3, 0xfa5e, 0x3, 0x3, 0x0, 0x7fffffff, 0x9, 0x32, 0xf7, 0x1, 0x9, 0x101, 0x8, 0x1, 0x10000, 0x9, 0xbaf, 0x80, 0x6, 0x7, 0x4, 0x3, 0x7, 0x4, 0x2, 0xfffffffc, 0xd3, 0xfd, 0x98e3, 0x1ff, 0x8000000, 0x8, 0x1000, 0x1, 0x2, 0x9, 0x80000001, 0x9, 0x0, 0x8, 0x3, 0x1f, 0x2, 0x6, 0x9, 0x8cb0, 0xe7eb, 0x1, 0x9, 0xfffffff8, 0x9fe, 0x4552, 0x8, 0xcc97, 0x1, 0x10000, 0x7, 0x3, 0x9, 0xfffffffb, 0x8, 0x98, 0x8, 0x2, 0x7, 0x388, 0xbf, 0x7fff, 0xffffffff, 0x19a7, 0x7, 0x4c, 0xfffffff7, 0x7, 0x0, 0x9, 0x10000, 0x4, 0x3f, 0x1f, 0xba, 0x10000, 0xde, 0x9, 0x1, 0x9, 0x9, 0x8, 0x100, 0x9, 0x7, 0x3f, 0x3, 0xc893, 0x101, 0x0, 0x7fff, 0x0, 0x3, 0x401, 0x2, 0x67, 0x2, 0x5, 0x2, 0xfffffffe, 0x1, 0x7, 0x80000001, 0x10000, 0x5, 0x7, 0xf2, 0x2, 0x9, 0x6, 0x3, 0x16e1, 0x7d, 0x8, 0x9, 0xe97, 0xd807, 0x1, 0x6, 0xfff, 0x401, 0x40, 0x538000, 0x53, 0x6c9, 0xf763, 0x8001, 0x401, 0x9, 0x8, 0x4, 0x1f, 0x2db0, 0x66, 0x2, 0x96b8, 0xa35d, 0xff, 0x8, 0x1000, 0xffff, 0xc0000000, 0x4, 0x80000001, 0x2, 0x400]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x81}]}, @TCA_BASIC_ACT={0xdb0, 0x3, [@m_mpls={0x78, 0xa, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_LABEL={0x8, 0x5, 0xccbcc}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x7a6, 0x0, 0x8, 0x234c}, 0x4}}, @TCA_MPLS_TC={0x5}]}, {0x16, 0x6, "76e8eb3098443f875ea93a6e943c08fc7a39"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0x128, 0x14, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0xd4, 0x6, "e0108f3e2bd1ea04f57ef25d051f0b0e4f7fd78c4be26320971bf6310b1a7779b43663b6638e5c178af771506ed8d81698fa290c1ea1d55570eeea74ce6af4caf2e615228f636b35a4c2c6fb5c416976babc6a979c3352dabe278adfac80e1888adaca60e67bcadfd9f89ef2db1db136637f94f46bbe9af10ebbd2bd039156080d5d4be97bc07b81476d1d60935f57cb5259c9c1621ca3eb0c36cd226441aa7cb2fec3a7283f82803955920389c8fc94ae41515dc79763a6d04ffd0f1d474ac60639c7e3a74b852b7e7a805f6876441a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_police={0x8e8, 0x14, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fff, 0x7fff, 0x27, 0x7, 0x0, 0xb2, 0x9, 0x7, 0x20, 0x1, 0xfffffffe, 0x6f3, 0x4, 0x7fff, 0x5, 0x9, 0x9, 0x5, 0xffff8000, 0xd66, 0x6, 0x401, 0x7, 0x5, 0x19, 0x3, 0x1, 0x2, 0xffff5dd4, 0x3f, 0x8001, 0x81, 0x6, 0xffffffd5, 0x5, 0x9, 0x8, 0x0, 0x10000, 0x1, 0x100, 0x4, 0xae3, 0x5, 0x1, 0x9, 0x7fffffff, 0x200, 0x7, 0x400, 0x4, 0xff, 0x0, 0xfff, 0x9ffffffc, 0x9, 0x8, 0x200, 0x800, 0x7, 0x6, 0x81, 0x9, 0x9000, 0x0, 0x2, 0x5, 0x8, 0x401, 0x5, 0x2, 0x5, 0xffffff4d, 0x8, 0x5, 0x2, 0x3ff, 0x4, 0xd2, 0x5, 0x10001, 0x8, 0x81, 0xcb8a, 0x7, 0x5, 0xff, 0x1e, 0x8, 0x850b, 0x5568, 0x9, 0x7, 0x7, 0x6, 0x5, 0x6, 0x5, 0x101, 0xffffff7f, 0x8, 0x2, 0x800, 0x10001, 0xb6, 0x8, 0x2, 0x7f, 0x7ffffffd, 0x1, 0x80000000, 0x7fffffff, 0x2, 0x2, 0x4, 0x5, 0xee1b, 0x4, 0x101, 0x1, 0x81b, 0x80, 0x71, 0x1000, 0x1, 0xfffeffff, 0x1, 0xe660, 0x3ff, 0x1f, 0x3f, 0x8, 0x5, 0x82, 0x80000000, 0x6, 0x20, 0x3, 0x3f, 0xfc, 0x15c, 0x4, 0x3, 0x1f, 0x3, 0xfff, 0x2, 0x4, 0x1, 0xffffffff, 0xb965c3e, 0x8, 0x1, 0x5, 0x81, 0x9, 0x0, 0x4, 0x4, 0x80000000, 0xfffffffa, 0x80000001, 0x9f3a, 0x8, 0x4, 0x20, 0x5, 0x8, 0x7, 0x0, 0x6, 0x31, 0x4, 0x80000001, 0x2, 0x8001, 0x6, 0xa, 0x10001, 0xffffffff, 0x7186, 0x1, 0x9, 0x6, 0x20, 0xcda, 0xdac, 0x20, 0x10001, 0x8f9e, 0x1ff, 0x1, 0x5, 0x3, 0x1, 0x9c45, 0x0, 0x1, 0xfffffff9, 0x5, 0x0, 0x9, 0x16, 0x101, 0x0, 0xd5, 0x80000000, 0x10000, 0xd6, 0x3, 0x7, 0x9, 0x6, 0x7, 0x5, 0x9, 0x400, 0x80000001, 0x81, 0x0, 0x2, 0x7, 0x400, 0x3f, 0x4, 0x4, 0x3, 0x2, 0x0, 0x4ea56a72, 0x101, 0xf4, 0x5, 0xa22, 0x80000001, 0x4, 0x1ff, 0x6, 0x26c7, 0xffffffff, 0x8, 0x6, 0x6, 0x1, 0x0, 0x20, 0xfffff44b, 0x40, 0x5, 0x2, 0xae47, 0xfffff62b, 0x3825c9c3, 0x5000, 0x7fff, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x81, 0x5, 0x3, 0x20080000, 0x7ff, 0x1, 0x2, 0x7fff, 0x1, 0x3, 0x4, 0x2, 0xfc, 0x5, 0x0, 0x7fff, 0x4, 0x7f, 0x40, 0x7, 0xa59, 0x0, 0x5, 0x2, 0x101, 0x7, 0x78, 0x9, 0x3ff, 0x7f, 0x20, 0x8000, 0x0, 0x3, 0x101, 0x8c, 0x100, 0x31, 0x4, 0x2, 0x4, 0x0, 0x4, 0x1, 0x3, 0x6, 0xd87e, 0x80, 0x2, 0x7fff, 0x4, 0x100, 0x3, 0x401, 0x81, 0x0, 0x4, 0x1, 0x8001, 0xffffffff, 0xffff, 0xfffffffc, 0x10001, 0x2861, 0x3ff, 0x0, 0x1, 0x1, 0x0, 0x4, 0x80000001, 0x131, 0x7, 0x8, 0x3d00, 0x6, 0x44f6c22d, 0x7, 0x1, 0x2, 0x0, 0x9, 0x1, 0xb2c, 0x7fff, 0x8001, 0x400, 0xe1, 0x0, 0x7, 0x5, 0x8001, 0x2, 0x10000, 0x7, 0x8, 0x6, 0x3, 0x19e3, 0xfffffffa, 0x5, 0x7fffffff, 0x0, 0xffffffff, 0x5, 0x200, 0xe99, 0x470, 0x600000, 0x0, 0x4, 0x0, 0xffff, 0x9, 0x0, 0x3, 0x3, 0x80000000, 0xd88c, 0x2, 0x80000000, 0x9, 0x1, 0x9711, 0x8, 0x7ff, 0x5, 0x401, 0x5, 0x1, 0xfffffffb, 0x7, 0x9, 0x2, 0x4, 0x400, 0xffff, 0x1000, 0xff, 0x7, 0x3f, 0xe5, 0x66, 0x9, 0x10001, 0x1, 0x1000, 0x8, 0x6, 0x100, 0xeb1f, 0x1, 0x2, 0x5, 0x8001, 0x2, 0xffff, 0x1ff, 0x8000, 0x4, 0x1, 0xffffffff, 0x7fff, 0x0, 0x8, 0x3, 0x4, 0x6, 0x3f, 0x0, 0x8, 0x600000, 0x5, 0x1ff, 0x80000001, 0x7ff, 0x4, 0x15, 0xa6c, 0x7, 0x8000, 0x3, 0x100000, 0xdd, 0x0, 0x4, 0x9, 0x400, 0x4, 0xffff, 0x2, 0xffffffff, 0x9, 0x1, 0x7ff, 0x0, 0x4, 0x9, 0x471cd259, 0x7fff, 0x794, 0x3, 0x3f, 0x1, 0x7fff, 0x3, 0x26, 0x7f, 0xfffffffa, 0x686, 0x0, 0x1ff, 0x200, 0x2, 0x4cc818ad, 0x2, 0x8000, 0x9, 0x9, 0x8000, 0x800, 0x2, 0x40, 0x7, 0x2379, 0x401, 0x9, 0x6, 0x8, 0x4, 0xffffff37, 0xebb, 0x80000000, 0x54, 0x3ac, 0x3, 0x800, 0x3bed, 0x4, 0x7, 0x10000, 0x8, 0x1f, 0x98, 0x80000001, 0x2, 0x8, 0x8000, 0x1, 0x5, 0x6, 0x9, 0x547e, 0x0, 0x6, 0x1]}]]}, {0xb1, 0x6, "f09186d301406d2d11dc7fc3582e706bd94ad339c0bad765a4f439f7a4a35190b9cad7f9c6450d695fa053b180557d9256e34a5f4f6706f031d78e98ac6a41e89213d830b187c1fa18da89020e18216dd85c962a4aef301318a55ecfae9c6e881328ef07eb38a6cefa4bf2a06d5235bad6ae15f818e4bd3bca9d7e867871f14b0748bcb1961bb2d4596035f6e110f8b4a8188b781041a7f3aa50108297f9af4b901d3a201b6e1b171ff586c3c9"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x84, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x5a, 0x6, "2942d5594c00f9da1668cfe8432ed1a30b00b25e08cbef1052f9646817e478c5ee50a392a430a4bcd5c309e7bbc3de3cd1101342d0f5c6112acd023b189243d66468559e18eded489786c057daa51452ebfebd82a263"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0x158, 0x20, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x40, 0x5, 0x7, 0x2, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x0, 0x9, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x859, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x7, 0x0, 0x8, 0x401}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x408, 0x20000000}}]}, {0xcc, 0x6, "64f54e8360ae5d20d900a43ba300fb6f325c36a7fdfe63d0722472737c4e82f4433efa3c6aafde133b98acdb0c953d53eeddc49b24179cfa725376d3edf444b09ab8086da8c2e6c1b24f09eb06cf32c3e1e8326b4561520d12fb7b53d3d1f1ab8f3da6e9064620c7caa55a628cf7782a672f96d1e58d65bcf5b20d1fd3fbfb3f6e93fbbd5b8ed1f7bc572be66fd8291d3617079b4229a2ff22b68def9f282d29f428ecc884658919bec6da1381730db311df093d1466dd8d43055347bd6e463fb853e11e44b1222c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0xac, 0x9, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x7ff, 0x10000000, 0x5, 0x28a3}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x5, 0x10000000, 0x7fff}}, @TCA_ACT_BPF_FD={0x8}]}, {0x41, 0x6, "3ca17177ccb2089f8f5d4f5c3fb7c29033bfe54a16b1800bddc1cc6b4943bcc9d7a586c294a6ac22620b7e58214774f0802c0331a1a3633383a03718e7"}, {0xc}, {0xc}}}, @m_skbedit={0x9c, 0x3, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x3, 0x0, 0x2, 0x401}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7ff}]}, {0x3e, 0x6, "23cee6baadf7492fc35cb23f6f1430f90dc438ba79d15729c1c728587f90fc035a3c54ef031a8361f38240e71bd3e2c356d8a93392df007a8849"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x6}}}}]}, @TCA_BASIC_EMATCHES={0x134, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf4b3}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xffff, 0x3, 0x4889}, {0x40, 0xff, 0x7, 0x719}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9, 0x8, 0x4}, {0x2, 0x1, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x44, 0x1, 0x0, 0x0, {{0x9, 0x9, 0x859}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x8}, {{0x3, 0x0, 0x0, 0x1}, {0x3, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x100}, {0x5, 0x1000, 0x6, 0x5f}}}]}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x100, 0x8, 0x2a5}, {0xffffffffffffffff, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0xfff}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3}, {0xfffffffa, 0x5, 0x9, 0x9}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x2, 0xfff7}, {0x0, 0xa, 0x2, "74bfd117d0754fd521d7"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1f}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @filter_kind_options=@f_fw={{0x7}, {0x1440, 0x2, [@TCA_FW_INDEV={0x14}, @TCA_FW_POLICE={0x1428, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8f88}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x7, 0x8, 0xffffff04, 0x8000, 0x5, 0x80000000, 0x5d87, 0x0, 0x26, 0xfffffffb, 0x200, 0x9, 0x9, 0x7, 0x80000000, 0x4, 0x5, 0x80000001, 0x7fffffff, 0x2, 0x5365, 0x2, 0x10000, 0x5, 0x72, 0xffff, 0x7fff, 0x9, 0x6, 0x40, 0xffd, 0xcf, 0x1, 0x2, 0x9, 0x2, 0x7f, 0x2, 0x6f, 0x8, 0xff, 0x5, 0x6, 0x4, 0x7, 0x9, 0x89, 0x6, 0x2, 0x8, 0x5, 0xffff, 0xb7, 0x401, 0x80, 0x20, 0x9, 0x0, 0x400, 0x73, 0x7, 0x6, 0x1, 0x477b, 0x3ff, 0x94, 0x5, 0x3, 0x4, 0x0, 0x7, 0xfffffffc, 0x8, 0x3, 0x7f, 0x8, 0xfffffffc, 0x6560, 0x1, 0x1f, 0x800, 0x5, 0x5, 0x5, 0x2, 0x8, 0x8, 0x57e2, 0xffffffff, 0x4, 0x4, 0x1, 0x5, 0x552, 0x357, 0x3, 0x380000, 0x3, 0x1fffc000, 0x3b3d, 0x4, 0x8000, 0x0, 0x5, 0x80, 0x8001, 0xffffffff, 0xffff, 0x2, 0x9, 0x1f, 0x8, 0xffffffe0, 0xd35, 0x1, 0xe8dc, 0x6, 0xffffffff, 0x7fffffff, 0xffffffff, 0x3e, 0x3, 0x5, 0x2, 0x3f, 0x9, 0x9, 0x6, 0x8, 0xff, 0x0, 0x2, 0x1ff, 0x6, 0x7f, 0xfffffff8, 0x80000001, 0x1ff, 0x80000000, 0x1, 0x20, 0x4, 0x6e2, 0xeabc, 0xfffffffe, 0x6, 0x3, 0x1ff, 0x48, 0x2, 0x3, 0xffff0000, 0xffffffff, 0xffffffff, 0x8, 0x20, 0x8, 0x3, 0xffffffff, 0x9, 0x7, 0x5, 0x200, 0x0, 0x8, 0x8, 0x9, 0x2, 0x5, 0x7b, 0xff, 0x7ff, 0x3, 0x5, 0x7, 0x20, 0x8, 0x99e, 0x2, 0x1, 0xec7a, 0x8, 0x9, 0x2, 0x1f, 0x3fc00, 0x3, 0x3, 0x8, 0x9, 0x5, 0x4, 0x80000000, 0x3b75, 0x6, 0xfffffff7, 0x6, 0x3, 0x6, 0xffffff7f, 0x200, 0x9, 0x0, 0x0, 0x6, 0x0, 0x6, 0x1, 0x3, 0x927, 0x814f, 0x200, 0xd029, 0xfffffff7, 0x6, 0x2, 0x7fff, 0x5, 0x9, 0xc21e, 0x70000, 0x4, 0x9, 0x80000000, 0x1000, 0x81, 0x3, 0x8, 0xe329, 0x2, 0x3f, 0x5, 0x3, 0x22, 0x8, 0x8, 0x67b, 0x6, 0x1ff, 0x7, 0xfffffffe, 0x80, 0x0, 0x8, 0x9, 0x3ff, 0x9, 0x9, 0xfffffff8, 0x1d72, 0x2, 0x76d14fde, 0xac, 0xfffffff9, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x20, 0x6, 0x0, 0x3, 0x5, 0xffff, 0x1, 0x6, 0x101, 0x0, 0x20, 0xffff8001, 0xaa, 0x5, 0x10001, 0x2, 0x8, 0x3, 0x2, 0x80000001, 0x401, 0x2, 0x4, 0x3, 0x7b, 0xf4, 0x7840, 0xa94, 0xfffffbff, 0x29a, 0x6, 0x3, 0x1, 0xfffffffc, 0x10000, 0x6fa5, 0x1f, 0x1, 0xffff, 0x9, 0x6, 0x4, 0xcc6, 0x8, 0xce3, 0x2c38, 0x2, 0x3cdc58bd, 0x8, 0x3f, 0x4, 0x6, 0x81, 0x89f8, 0xffff8001, 0x480000, 0x9, 0x7, 0x40, 0x9, 0x8, 0x7ff, 0x8, 0x100, 0x9, 0x10000, 0x5, 0x6, 0x4e, 0x8, 0x8, 0x0, 0x9, 0x3, 0x1, 0x200, 0xd8, 0xffffffff, 0x3ce, 0x45e, 0x7fff, 0x0, 0xfff, 0x9, 0x7ff, 0x1d, 0x5, 0x80, 0x200, 0x401, 0x100, 0x5f74b734, 0x6, 0xfffffffe, 0x8000, 0x9, 0x6, 0x4, 0xfff, 0x6, 0x2, 0xd491, 0x101, 0xffff, 0x4, 0x1, 0x5, 0x0, 0x8, 0x5, 0xffff0000, 0x5, 0x5, 0x8000, 0x9, 0x14, 0x8001, 0x5a, 0x25, 0x7, 0x1, 0xc8, 0xffffffc1, 0x10000, 0x4, 0x1, 0x48, 0x3f, 0x0, 0xa8, 0x2, 0x9, 0x5, 0x2, 0x1000, 0xe7e5, 0x155afe87, 0x3, 0x5, 0x4, 0x6bd9, 0xeeb6, 0x1, 0x5, 0x7, 0xe494, 0x9d7, 0x3f, 0x8000, 0x87, 0x80, 0x4, 0x2, 0x10000, 0x7, 0x2, 0xfffffffa, 0x2, 0x2, 0x9, 0x400, 0x3, 0xfffffffa, 0x4, 0x400, 0xfffffff7, 0x4, 0xfffff001, 0x38, 0x3, 0x7ff, 0x4, 0x7, 0x3f, 0xfffffffa, 0x7f, 0x10000, 0xfff, 0xe908, 0xf, 0x8, 0x20, 0x10001, 0xd43, 0x3, 0x6, 0x1000, 0x8, 0x2, 0x2c52a457, 0x2, 0x7fff, 0x80000001, 0x7fffffff, 0x400, 0x40, 0x1, 0x3dc2, 0x4, 0x4, 0x6, 0x6, 0x10000, 0xedd1, 0xe9fd, 0xffffffff, 0x1, 0x2, 0x8001, 0xff, 0x6, 0x8, 0x3, 0x7b, 0x5, 0x80, 0x10000, 0x6, 0x80, 0x5, 0x0, 0x4, 0x6, 0x80000001, 0xa3, 0x921e, 0x4, 0x5, 0x3, 0x101, 0x8, 0x2, 0x200, 0x3, 0x100, 0x4, 0x7f, 0x2, 0xfff00, 0x8001, 0x100, 0x2, 0xe8a0, 0x1000, 0x1, 0x0, 0x4, 0x4, 0x80000001, 0x7, 0xffffff01, 0xfffffffb, 0xd0a1, 0x9b, 0x6, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xff, 0x7ff, 0x5, 0x7, 0x2, 0x0, 0x0, 0x7fff, 0x800, 0x400, 0x0, 0x3, 0x4, 0x1, 0x7, 0x4, 0x9, 0x2, 0x6, 0x9, 0x4, 0x2, 0x1f, 0x1, 0x6, 0x400, 0x1b, 0x1ec2, 0x4, 0x8, 0xffffffff, 0x90, 0x8, 0x55, 0x5, 0x1ff, 0x5, 0x0, 0x2, 0x20, 0x1, 0x80000001, 0x1, 0x1, 0x5, 0x7, 0x0, 0x3, 0xad, 0x2, 0x0, 0x20000, 0x2, 0x8, 0x7f, 0x67380, 0x5, 0x10000, 0x2, 0x8000, 0x1, 0xfffffffe, 0x20, 0x6, 0x30, 0x0, 0x5, 0x80000000, 0x0, 0x5528, 0x5, 0xff, 0x2030, 0x6, 0xfffffffb, 0x974, 0x4, 0x4, 0x1ff, 0x4, 0x0, 0xfffffff7, 0x4, 0xfffffffe, 0x3, 0x9, 0x800, 0x0, 0x5757, 0xfff, 0x40002, 0xff, 0x8001, 0x6fa, 0x8, 0xfffffffb, 0x73, 0x1, 0x7, 0xeed1, 0xfffffb16, 0x1, 0x3, 0x2, 0xfffffff9, 0x10001, 0x4, 0x20, 0x6, 0x20, 0x2, 0x5, 0x8, 0xffff8000, 0x20000000, 0x8000, 0x2, 0x1, 0x3, 0x80000001, 0xffffffff, 0x2, 0x8, 0x0, 0xfffffffa, 0xa19, 0x31, 0xfffffffe, 0x20, 0x4, 0x0, 0x20, 0x7, 0x9, 0x8, 0x800, 0x6, 0x9, 0x8020, 0x80, 0x5, 0x8, 0x5, 0x40, 0x1, 0x2, 0xffff0001, 0x3ff, 0x70, 0x3ff, 0xffff4b90, 0x8, 0x1, 0x40, 0xff, 0x8, 0x5, 0x4, 0x2, 0x3, 0x5, 0x1000, 0x5, 0x7fff, 0x5, 0x6, 0x3, 0x9, 0x81, 0x80000001, 0x401, 0x3d9, 0x592, 0x400, 0xfffffc01, 0x100, 0x6, 0x2, 0x1ff, 0x2, 0x401, 0x4d0, 0x401, 0x0, 0x0, 0x9a33, 0x7, 0x200, 0xfffffffe, 0xfffffff8, 0x5, 0x7, 0x8, 0x1f, 0x0, 0x38fe, 0x800, 0x7ff, 0x3ff, 0x1, 0xffff, 0x5, 0x15, 0x15a, 0x80, 0xa8921e0, 0x8, 0x4, 0x8001, 0x8000, 0x0, 0x1, 0x20, 0xffa, 0x6, 0x0, 0xd6, 0x7, 0x5, 0x0, 0x0, 0x8000000, 0x5, 0x1000, 0x9, 0x7, 0x8, 0x3, 0xffff, 0x7ff, 0x89, 0x6, 0x6, 0x3f, 0xb2b1, 0xa69, 0x0, 0x80, 0x0, 0x5, 0x8, 0x8, 0x67d3, 0x3, 0x1, 0x0, 0x7, 0x1, 0xc7, 0x6, 0x8001, 0xff, 0x6, 0x4, 0x80000000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40000000, 0xffff, 0x4, 0x0, 0x4, 0x4, 0x7, 0x9, 0x7fffffff, 0x8, 0x80, 0x40, 0xd055, 0x40, 0x2, 0x9, 0x2, 0x0, 0x117, 0x0, 0x800, 0x1, 0x4, 0x595, 0x5, 0xb248, 0x40, 0x5, 0x1d46, 0x1, 0x4, 0x1, 0x5, 0x286f, 0xc10, 0xf58, 0x0, 0x7f, 0xfffffbff, 0x0, 0xfff, 0x9, 0x5, 0x200, 0x7, 0x1815, 0x17b628f2, 0x0, 0x0, 0x1a41, 0x6, 0x0, 0x6, 0x5, 0x5, 0x2, 0x672, 0x80000001, 0x4, 0x8001, 0x5, 0x8, 0x46e7, 0x9, 0x8000, 0x6, 0x8, 0x20, 0xffff, 0x6, 0x3, 0x7, 0x80000000, 0x8, 0x9, 0x1ff, 0x7, 0x4, 0x4, 0x4, 0x5, 0x2, 0x800000, 0x7, 0xffffffc0, 0x100, 0x7ff, 0x7, 0x1, 0x80, 0x6, 0xffffffff, 0x2, 0x8000, 0x6, 0x40, 0x7, 0x40, 0x80, 0x3, 0x9, 0x8, 0x6, 0x7, 0x4, 0x400, 0x3f, 0x9, 0xe5, 0x1ff, 0x9, 0x81, 0x8000, 0x7, 0x9, 0xec65, 0x4, 0x5, 0xdcd4, 0x200, 0x87, 0xffff, 0x6, 0xa38, 0x8, 0x1, 0x7ff, 0x1f, 0x4, 0x0, 0x0, 0x9, 0x5, 0x7, 0x2, 0x4, 0x7fffffff, 0x3ff, 0x7, 0x3, 0x6, 0x5a, 0x80, 0xdab, 0x1000, 0x41e, 0x6, 0x2, 0x1ff, 0x12bc, 0x1, 0x1, 0x0, 0x2, 0x0, 0x2, 0x7, 0x3f, 0x7, 0x5, 0x8, 0x5, 0x101, 0x80, 0x40c8, 0x64d, 0x1e, 0x3, 0xfffffffe, 0x1, 0x9, 0x2, 0x1, 0x3, 0x8, 0x6ce, 0x9, 0x8, 0x2, 0x8001, 0x800, 0x1, 0x0, 0x1, 0x0, 0x7, 0x401, 0x0, 0x35, 0x3, 0x4, 0x5, 0x20, 0xffffffff, 0x8, 0xffffff00, 0x1000, 0x5, 0xa3, 0x3, 0x80000001, 0xffff, 0x2, 0x7, 0xffff, 0x5, 0xffffffff, 0x4, 0x20, 0xff, 0x1f, 0x4, 0xed27, 0x7fff, 0xb97, 0x8, 0x6, 0x44000000, 0xfffffffc, 0x8c2, 0x10001, 0x1000, 0xffffffff, 0x100, 0x7, 0x7f, 0x3, 0x846, 0x1f, 0x5, 0x7f, 0x7fff, 0x0, 0x2, 0x101, 0x0, 0x9, 0x4, 0xcac, 0x0, 0xffff, 0x3, 0x800, 0x4, 0x60000000, 0xfffffffb, 0x3, 0x5, 0x3ff, 0x1, 0x8, 0x8001, 0x4d8, 0x1, 0x5, 0x8000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x17, 0xffffffff, 0x3, 0xe653, 0x3ff, 0xe000, 0x100000, 0x4, 0x5, 0xfff, 0x7, 0x4, 0x5, 0x3ff, 0x7, 0x5, 0x10001, 0x80000000, 0x8001, 0x1, 0x9, 0x7, 0x6, 0x0, 0xfde5, 0x3, 0x9, 0x5, 0x8001, 0x196, 0x10001, 0x8, 0xfffffff7, 0x80000001, 0x3, 0x6, 0x97, 0x0, 0x10000, 0x0, 0xfffffff8, 0x20, 0x7f, 0x2da714ba, 0x1, 0x3f, 0x7, 0x100, 0x100, 0xfff, 0xb8b3, 0x2, 0x1000, 0x5, 0x65, 0x6, 0x9, 0x100, 0x7, 0x4, 0x100, 0x1, 0x48, 0x7, 0x7fffffff, 0x5, 0x9, 0x3ff, 0x2, 0x2c7, 0x3ff, 0x1, 0x0, 0x3d5ca12d, 0x1cfb, 0x5, 0x4, 0x0, 0x7, 0x0, 0x2, 0x8, 0x1ff, 0xf32, 0x0, 0x9, 0xf9e4, 0x8, 0x10001, 0xfffffff9, 0x3, 0x9, 0x4, 0x0, 0x0, 0x6, 0x7, 0x10001, 0x0, 0x8000, 0x800, 0x8, 0x8001, 0x8, 0x0, 0x9, 0x1, 0x5d62, 0x2, 0x3, 0x5, 0x2, 0x7fffffff, 0x2, 0xffffff26, 0x40, 0x40000000, 0x3, 0x8, 0x400, 0x0, 0xffffffe1, 0x1, 0x3, 0x10001, 0x0, 0x1000, 0x5, 0x2, 0x345, 0x5, 0xc924, 0x5, 0x1fb, 0x1, 0x0, 0x7, 0xffffffff, 0x2, 0x8, 0x2, 0xfffffffc, 0x6, 0x1f, 0x81, 0x2, 0xe2, 0x5, 0x8000, 0x9, 0x6, 0x2, 0x800, 0x0, 0x2, 0x608, 0xffff7619, 0x9c1b, 0x6, 0x8000, 0x0, 0x100, 0x3, 0x81, 0x1, 0xff, 0x10001, 0x0, 0x3ce, 0x9008, 0x1ff, 0x50000000, 0xadc9, 0x4, 0x0, 0x6, 0x7, 0x6, 0x8000, 0x10000, 0x81, 0x2, 0x6, 0xe1c, 0x101, 0x20, 0x0, 0x3, 0x8, 0x80800, 0xffffff00, 0x2, 0xffff, 0xfffffff9, 0x6, 0x2, 0x10001, 0x401, 0x1ff, 0x6, 0x4, 0xfff, 0x8, 0xffffffff, 0x3f, 0x0, 0x0, 0x3, 0x10000, 0x8, 0x1, 0x3f, 0xfffffff8, 0xe89, 0x3f, 0xfec, 0x8, 0x101, 0x8001, 0x2, 0x5, 0x6, 0xfffff800, 0x4, 0x800, 0x4, 0x44a3, 0x0, 0x9, 0x7, 0x0, 0x9, 0x0, 0x5, 0x401, 0x401, 0x2, 0x8f, 0x2, 0x0, 0x0, 0x3, 0x0, 0x1, 0x49b, 0x9, 0x8, 0x52f7420c, 0x45, 0x5, 0xfffffffd, 0x0, 0x2, 0x0, 0x40, 0x40]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @TCA_RATE={0x6}, @filter_kind_options=@f_matchall={{0xd}, {0x2c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x3ff}]}, 0x2bdc}, 0x1, 0x0, 0x0, 0x28004}, 0x880) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001900)={'vcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001c00010000000000000000000a000000", @ANYRES32=r6, @ANYBLOB], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.812443375s ago: executing program 4: syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x85, 0x14ff, &(0x7f0000000980)="$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") openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x14, 0x20, 0x319, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 2.626169454s ago: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a30000000000800024000000000140000001100"], 0x104}}, 0x0) 2.580260711s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='ext4_es_find_extent_range_enter\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) 2.546450427s ago: executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x40, 0x2fa, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000080), &(0x7f00000004c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2000) 1.6859329s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x208000, &(0x7f00000002c0), 0xfc, 0x46d, &(0x7f0000000700)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) getdents(r0, 0x0, 0x58) 1.68475265s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = fcntl$dupfd(r2, 0x406, r3) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x1, 0x9, 0xb, 0x258, r4, 0x0, '\x00', 0x0, r4, 0x2, 0x2, 0x4}, 0x48) r6 = open(&(0x7f0000000180)='./bus\x00', 0x16937e, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) sendfile(r6, r6, 0x0, 0x8800000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000007c0)={r4, 0x401, 0x5, 0x7}) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x4080) r11 = open(&(0x7f0000000180)='./bus\x00', 0x16937e, 0x0) fcntl$setlease(r0, 0x400, 0x2) fallocate(r11, 0x0, 0x0, 0x1000f4) sendfile(r11, r11, 0x0, 0x8800000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x22, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@generic={0x1, 0x5, 0x5, 0x1aca, 0x491}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x8963, 0x1a, &(0x7f0000000480)=""/26, 0x0, 0x0, '\x00', r7, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x5, 0xa, 0x0, 0x401}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000840)=[r4, r4, r9, r4, r10, r11, r4], &(0x7f0000000880)=[{0x0, 0x3, 0x9, 0x1}, {0x4, 0x5, 0x1, 0x4}, {0x0, 0x2, 0x10, 0xa}, {0x1, 0x3, 0xe, 0x6}, {0x5, 0x2, 0xa}, {0x0, 0x5, 0x5, 0x3}, {0x2, 0x3, 0xc, 0x2}, {0x4, 0x2, 0xc, 0x1}], 0x10, 0x7}, 0x90) r12 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x40, r13, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x2c, 0xe, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x22, 0x1, "d96694c166097790bdc66b5940e197bb664533858014ca097870be918ed8"}}]}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) getsockname$packet(r12, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1.564100219s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x7, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x0, 0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180100001708000000000000a54b0000850000007500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) splice(r4, 0x0, r5, 0x0, 0x200, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r7}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 1.450038376s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000003200)=ANY=[@ANYBLOB="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"/3232], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xff07, 0x0, 0x0, 0x1ff, 0x0, "5f330000a90100f9"}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0xa) 1.404357293s ago: executing program 3: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) dup(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000000080)='m$M\xdc\x83\xc2\xf7\xb5\x9dU\xd2:3z>K\x84\x05\x00\x02\x00\x9c\x81\xed\xc2\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x7f, 0x0) 1.336131284s ago: executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x125d, 0x0) 1.290709751s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @void}}]}, 0x40}}, 0x0) 550.423766ms ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 474.794007ms ago: executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(r0, r0, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) 473.997617ms ago: executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x2}, 0x8) 467.691348ms ago: executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x40, 0x2fa, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000080), &(0x7f00000004c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2000) 406.447938ms ago: executing program 4: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ffe000), 0x0) syz_io_uring_submit(r0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 393.84896ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='ext4_es_find_extent_range_enter\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) 342.817007ms ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, 0x2, 0x6, 0x101, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) 330.84114ms ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="00000700000007007673ed26b029a925ac675bd612d8ab87"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) 325.33978ms ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = socket(0x848000000015, 0x805, 0x0) r3 = socket(0x18, 0x0, 0x0) r4 = socket(0x15, 0xa, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @mcast2={0xff, 0x3}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x7c, 0x65, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0xc, 0x10}, {0x5, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xad}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x1ffc}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff2, 0xc}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xc8}}, @filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xf}}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xdb}}, @TCA_RATE={0x6, 0x5, {0x9, 0x90}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x4008840) connect$inet6(r2, &(0x7f0000000500)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0xe00, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x8010, 0x20084}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x80000001}]}, 0x28}}, 0x8001) getsockname$packet(r2, 0x0, &(0x7f00000000c0)) setsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000000)="54375db808c2b4f44e6e9df1ea3ea6e8b1ce1675158acebf74fedaf22948d64e1d2cb4e3ec004a2901cc73a9b8019c6cadd7fa2954e06bbed0fce3ed620b28c10d46b13e25a4cc707c1c741424e38b50b713327bb9b5e543fa9110761b3b0ffa326f365ecdfd77a80a6cfd2b194b5121a9549c5f212de84568cd8361d082a20ec0c61ef42c862d5df8b72f5529071f9832fcc8630d17a1b6663cec12725a74d1c3ecf69a9d6450c54b1d103809118232ea43995a6c75160955ed9dfe711501bc5e86b86c2fdd4c64bb8bc2217d54a1aa1f86256da2c6f096162043c52d198375b05437d93de4788853e90e7c6ed352a44f", 0xf1) sendmsg$nl_route(r3, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001200080029bd7000fcdbdf2507000000", @ANYRES32=r5, @ANYBLOB="410000002000020008000500", @ANYRES32=r6, @ANYBLOB="08002c00985400000500000003000001"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x24008000) getsockname$packet(r4, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000880)=0x14) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x38, r8, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x38}}, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000006c0)={0x5c, {{0xa, 0x4e20, 0xb580, @private2={0xfc, 0x2, '\x00', 0x1}}}, {{0xa, 0x4e22, 0x7, @private0, 0x100}}}, 0x108) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000020) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) r10 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) writev(r9, &(0x7f0000001480)=[{&(0x7f00000001c0)='}', 0x1}], 0x1) splice(r9, 0x0, r10, 0x0, 0xffffffe1, 0x0) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000a80), 0x400081, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x0, 0x6, 0x2, 0x6, 0xfffffffffffffffc, 0x8}]}, &(0x7f0000000900)='GPL\x00', 0x1e, 0x67, &(0x7f0000000940)=""/103, 0x41000, 0x0, '\x00', r7, 0x13, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000a00)={0x5, 0x4, 0x2, 0x4e}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000ac0)=[0xffffffffffffffff, r10, 0xffffffffffffffff, r11, 0x1], &(0x7f0000000b00)=[{0x5, 0x1, 0x6, 0x2}, {0x0, 0x1, 0x5, 0xb}, {0x1, 0x5, 0xd, 0xc}, {0x3, 0x5, 0x0, 0x6}], 0x10, 0x1}, 0x90) r12 = syz_open_dev$loop(&(0x7f0000000100), 0x401, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000600), 0x800) ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f00000002c0)={r13, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "fee8a2ab78fcb8d60b7d24717a1b9fd1f8a0e91ddaaca7bd683e362c5cb86b950093b43b88a864c6a6b4e04d9683f7a10d83af1ea89de2ffffef004000", "2809e8dbe108598948224ad54afa251d69462daf544660a92520a1a93c5240f05f819e01177d3d4500c3441c45e35f54cd8b4a93261f3f152d2d8dd4992861ac", "90be8b1c1e96b85502655c6c7f306003b6df7701673074f648abe533d8a0f4bd"}}) getsockname$packet(r13, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000800)=0x14) 296.389625ms ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) dup(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000000080)='m$M\xdc\x83\xc2\xf7\xb5\x9dU\xd2:3z>K\x84\x05\x00\x02\x00\x9c\x81\xed\xc2\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x7f, 0x0) 251.796692ms ago: executing program 0: syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000380), 0x3, 0x465, &(0x7f0000000c00)="$eJzs3MtvG0UYAPBvN3FKXySU8ugLAgUR8UiatEAPXEAgcQAJiUs5hiStStMGNUGiVQQpQuWIKrgjjkj8BZzggoATEle4o0oV6oXCyWjj3cZx7TR1bC/g30/aemZ37JnPs2PP7tQJoG+NZv8kEbsi4teIGK5l1xcYrT3cuL4889f15ZkkqtU3/0hWy/15fXmmKFo8b2eeGUsj0o+TONCk3sULF89Mz8/Pnc/zE0tn351YvHDxmdNnp0/NnZo7N3X8+LGjk88/N/VsR+K8J2vr/g8WDu579a0rr8+cuPL2j18nRfwNcXTI6EYHH69WO1xduXbXpZPBEhvCHRmIiKy7KqvjfzgGYq3zhuOVj0ptHNBV1VyLwytV4H8rjSTKbgNQjuKLPrv+LbbezT7Kd+3F2gVQFveNfKsdGYw0L1NpuL7tpNGIOLHy9xfZFt25DwEAsM632fzn6WbzvzTuryt3d742NJKvpeyJiHsjYm9E3BexWvaBiHhwc9VeKhKNiyS3zn/Sq20HtwnZ/O+FfG1r/fyvmP3FyECe270afyU5eXp+7kj+noxFZVuWn9ygju9e/uXTVsfq53/ZltVfzAXzdlwd3Lb+ObPTS9NbibnetUsR+webxZ/cXAlIImJfROxvs47TT351sNWx28e/gQ6sM1W/jHii1v8r0RB/Idl4fXLirpifOzJRnBW3+unny2+0qr/N+JOVNuNtlPX/jqbn/834R5L69drFO6/j8m+ftLymGW/r/F/bMZQ/vj+9tHR+MmIoea3W6Pr9U2vPLfJF+Sz+scPNx/+eWHsnDkREdhIfioiHIuLhvO8eiYhHI+LwBvH/8NJj77Q6tqXzvwOy+Gcb+n9kfZGG/l9LDEXjnuaJgTPff7P+FdeSm/v8O7aaGsv3bObzbzPtau9sBgAAgP+eNCJ2RZKO30yn6fh47f/w740d6fzC4tJTJxfeOzdb+43ASFTS4k7XcN390Mn8sr7ITzXkj+b3jT8f2L6aH59ZmJ8tO3jocztbjP/M7wNltw7oOr/Xgv5l/EP/Mv6hfxn/0L+ajP/tLQt/tnz2UHebA/RQs+//D0toB9B7DePfsh/0Edf/0L+Mf+hf9eM/KbEdQE8tbo/b/0i+y4lKRJRXe/cSQ/GvaEaXEpF2rYpKfnL2Lpyky3Xt6mXvFH+5aGuvU+KHEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAf9EwAA//8F3N+o") socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 245.214633ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x2000c0, &(0x7f0000000ac0)={[{@fat=@uid}, {@fat=@tz_utc}, {@dots}, {@fat=@uid}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@dots}]}, 0x1, 0x1bf, &(0x7f0000000300)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x1000000) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xfc}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) creat(0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x34c}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x668}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xa0}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) openat2(0xffffffffffffffff, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)={0x80100, 0x144}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000080)=0x4, 0x4) setsockopt$sock_int(r6, 0x1, 0x5, &(0x7f0000000040)=0x40, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', 0x0}) sendmmsg$inet(r6, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @multicast2}}}], 0x20}}], 0x1, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x7e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_mballoc_alloc\x00', r8}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) 35.505885ms ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x7, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x0, 0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180100001708000000000000a54b0000850000007500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) splice(r4, 0x0, r5, 0x0, 0x200, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r7}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 0s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = fcntl$dupfd(r2, 0x406, r3) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x1, 0x9, 0xb, 0x258, r4, 0x0, '\x00', 0x0, r4, 0x2, 0x2, 0x4}, 0x48) r6 = open(&(0x7f0000000180)='./bus\x00', 0x16937e, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) sendfile(r6, r6, 0x0, 0x8800000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000007c0)={r4, 0x401, 0x5, 0x7}) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x4080) r11 = open(&(0x7f0000000180)='./bus\x00', 0x16937e, 0x0) fcntl$setlease(r0, 0x400, 0x2) fallocate(r11, 0x0, 0x0, 0x1000f4) sendfile(r11, r11, 0x0, 0x8800000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x22, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@generic={0x1, 0x5, 0x5, 0x1aca, 0x491}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x8963, 0x1a, &(0x7f0000000480)=""/26, 0x0, 0x0, '\x00', r7, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x5, 0xa, 0x0, 0x401}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000840)=[r4, r4, r9, r4, r10, r11, r4], &(0x7f0000000880)=[{0x0, 0x3, 0x9, 0x1}, {0x4, 0x5, 0x1, 0x4}, {0x0, 0x2, 0x10, 0xa}, {0x1, 0x3, 0xe, 0x6}, {0x5, 0x2, 0xa}, {0x0, 0x5, 0x5, 0x3}, {0x2, 0x3, 0xc, 0x2}, {0x4, 0x2, 0xc, 0x1}], 0x10, 0x7}, 0x90) r12 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x40, r13, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x2c, 0xe, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x22, 0x1, "d96694c166097790bdc66b5940e197bb664533858014ca097870be918ed8"}}]}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) getsockname$packet(r12, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) kernel console output (not intermixed with test programs): 122] device veth0_macvtap entered promiscuous mode [ 92.281155][ T4268] microsoft 0003:045E:07DA.0003: parse failed [ 92.356121][ T4268] microsoft: probe of 0003:045E:07DA.0003 failed with error -22 [ 92.365503][ T4469] affs: No valid root block on device nbd1 [ 92.402575][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.416998][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.417914][ T4268] usb 4-1: USB disconnect, device number 2 [ 92.439333][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.472148][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.504329][ T4122] device veth1_macvtap entered promiscuous mode [ 92.545003][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.610379][ T4122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.652530][ T4122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.679831][ T4122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.742436][ T4122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.789710][ T4122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.841627][ T4122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.870716][ T4122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.892652][ T4122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.936804][ T4122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.971081][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.993880][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.035879][ T4122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.067863][ T4490] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.088495][ T4122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.113620][ T4487] loop2: detected capacity change from 0 to 2048 [ 93.129939][ T4122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.157334][ T4122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.182334][ T4122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.202644][ T4122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.213968][ T4122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.225480][ T4122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.257524][ T4122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.269752][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.280129][ T4487] loop2: p1 < > p4 [ 93.286570][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.287591][ T26] audit: type=1800 audit(1718042806.912:5): pid=4500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1956 res=0 errno=0 [ 93.302488][ T4487] loop2: p4 size 8388608 extends beyond EOD, truncated [ 93.331249][ T4122] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.421926][ T4122] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.475452][ T4122] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.512176][ T4122] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.581503][ T2962] loop2: p1 < > p4 [ 93.600439][ T2962] loop2: p4 size 8388608 extends beyond EOD, truncated [ 93.754270][ T3691] udevd[3691]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 93.770949][ T3688] udevd[3688]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 93.794314][ T4514] loop2: detected capacity change from 0 to 1024 [ 93.826305][ T3662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.836947][ T4514] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 93.860095][ T4513] loop3: detected capacity change from 0 to 2048 [ 93.884182][ T3662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.914379][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.922432][ T4514] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42840!=20869) [ 93.935388][ T1393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.959128][ T1393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.976820][ T4514] EXT4-fs error (device loop2): ext4_get_journal_inode:5159: inode #5: comm syz-executor.2: casefold flag without casefold feature [ 94.017913][ T4521] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.041257][ T4514] EXT4-fs error (device loop2): ext4_get_journal_inode:5159: inode #5: comm syz-executor.2: unexpected EA_INODE flag [ 94.062782][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.126333][ T4514] EXT4-fs (loop2): no journal found [ 94.142135][ T4526] loop4: detected capacity change from 0 to 512 [ 94.362839][ T4537] loop2: detected capacity change from 0 to 47 [ 94.387856][ T4526] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 94.450386][ T4526] System zones: 1-12 [ 94.472283][ T4526] EXT4-fs error (device loop4): dx_probe:822: inode #2: comm syz-executor.4: Directory hole found for htree index block [ 94.494951][ T3691] udevd[3691]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 94.531594][ T4526] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 94.558509][ T3688] udevd[3688]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 94.569774][ T4526] EXT4-fs error (device loop4): dx_probe:822: inode #2: comm syz-executor.4: Directory hole found for htree index block [ 94.633408][ T4526] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 94.641671][ T4526] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota=",,errors=continue. Quota mode: writeback. [ 94.685125][ T4502] loop0: detected capacity change from 0 to 32768 [ 94.894920][ T4502] XFS (loop0): Mounting V5 Filesystem [ 95.059935][ T4502] XFS (loop0): Ending clean mount [ 95.139476][ T26] audit: type=1804 audit(1718042808.762:6): pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2968054016/syzkaller.OvxjQN/67/file0/file1" dev="loop0" ino=6150 res=1 errno=0 [ 95.201517][ T4563] loop1: detected capacity change from 0 to 2048 [ 95.379152][ T4575] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.411473][ T3538] XFS (loop0): Unmounting Filesystem [ 95.625190][ T4581] loop1: detected capacity change from 0 to 512 [ 95.715145][ T4584] CUSE: zero length info key specified [ 95.767513][ T4581] EXT4-fs (loop1): Ignoring removed oldalloc option [ 95.798293][ T4581] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 95.841504][ T4581] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c11c, mo2=0002] [ 95.870541][ T26] audit: type=1800 audit(1718042809.492:7): pid=4592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 95.933654][ T26] audit: type=1800 audit(1718042809.492:8): pid=4592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 95.936264][ T4581] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 96.083048][ T4581] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 96.121070][ T4581] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,oldalloc,acl,noblock_validity,norecovery,jqfmt=vfsold,jqfmt=vfsv0,barrier=0x000000000000d95a,debug,,errors=continue. Quota mode: none. [ 96.169080][ T4581] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 96.244193][ T4581] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 96.303285][ T3573] Bluetooth: hci0: command 0x0411 tx timeout [ 96.315349][ T4581] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 96.366564][ T4602] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 96.483116][ T4602] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 96.498543][ T4569] loop2: detected capacity change from 0 to 40427 [ 96.513054][ T4602] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 96.579706][ T4581] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 96.593398][ T4581] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 96.597760][ T4569] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 96.625524][ T4569] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 96.651522][ T4581] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 96.668732][ T4602] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 96.688549][ T4581] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor.1: path /root/syzkaller-testdir2474776253/syzkaller.MDjwu4/63/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 96.691151][ T4613] loop0: detected capacity change from 0 to 1024 [ 96.793992][ T4569] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.922346][ T4613] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 96.941339][ T4613] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42840!=20869) [ 96.968861][ T3534] syz-executor.3 (3534) used greatest stack depth: 19160 bytes left [ 97.018932][ T4613] EXT4-fs error (device loop0): ext4_get_journal_inode:5159: inode #5: comm syz-executor.0: casefold flag without casefold feature [ 97.058487][ T4569] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 97.059283][ T4613] EXT4-fs error (device loop0): ext4_get_journal_inode:5159: inode #5: comm syz-executor.0: unexpected EA_INODE flag [ 97.078639][ T4613] EXT4-fs (loop0): no journal found [ 97.098440][ T4569] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 97.109726][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.226850][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.285211][ T4626] loop1: detected capacity change from 0 to 2048 [ 97.347321][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.361687][ T4634] loop0: detected capacity change from 0 to 47 [ 97.444711][ T4636] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.505931][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.042022][ T4627] loop4: detected capacity change from 0 to 32768 [ 98.274588][ T4667] loop0: detected capacity change from 0 to 64 [ 98.291359][ T4627] XFS (loop4): Mounting V5 Filesystem [ 98.314157][ T4671] CUSE: zero length info key specified [ 98.480151][ T4678] loop2: detected capacity change from 0 to 1024 [ 98.524620][ T4678] hfsplus: unable to parse mount options [ 98.533050][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 98.542216][ T26] audit: type=1804 audit(1718042812.162:9): pid=4667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2968054016/syzkaller.OvxjQN/72/file0/file1" dev="loop0" ino=3 res=1 errno=0 [ 98.567920][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 98.619803][ T4627] XFS (loop4): Ending clean mount [ 98.761869][ T26] audit: type=1804 audit(1718042812.212:10): pid=4667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2968054016/syzkaller.OvxjQN/72/file0/file1" dev="loop0" ino=3 res=1 errno=0 [ 98.792306][ T4643] chnl_net:caif_netlink_parms(): no params data found [ 98.935515][ T4627] syz-executor.4 (4627) used greatest stack depth: 17400 bytes left [ 99.001974][ T4122] XFS (loop4): Unmounting Filesystem [ 99.216914][ T4643] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.245192][ T4643] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.283753][ T4643] device bridge_slave_0 entered promiscuous mode [ 99.317744][ T4643] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.338514][ T4643] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.386644][ T4643] device bridge_slave_1 entered promiscuous mode [ 99.422933][ T4698] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.591784][ T4708] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 99.653226][ T4710] libceph: resolve ' [ 99.653226][ T4710] -&fYǝa2i [ 99.653226][ T4710] .?&*&' (ret=-3): failed [ 99.765603][ T4643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.819883][ T4720] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 99.821125][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 99.860672][ T4643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.897578][ T4724] loop2: detected capacity change from 0 to 8 [ 99.980228][ T4725] loop1: detected capacity change from 0 to 2048 [ 100.116412][ T4643] team0: Port device team_slave_0 added [ 100.126207][ T4691] loop0: detected capacity change from 0 to 40427 [ 100.183288][ T4643] team0: Port device team_slave_1 added [ 100.191945][ T4691] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 100.203117][ T4691] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 100.213430][ T4725] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.226175][ T4725] ext4 filesystem being mounted at /root/syzkaller-testdir2474776253/syzkaller.MDjwu4/72/file0 supports timestamps until 2038 (0x7fffffff) [ 100.285161][ T4725] fs-verity: sha512 using implementation "sha512-avx2" [ 100.307257][ T9] device hsr_slave_0 left promiscuous mode [ 100.364862][ T4691] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.394237][ T9] device hsr_slave_1 left promiscuous mode [ 100.433224][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.442855][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.493696][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.521657][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.600349][ T9] device bridge_slave_1 left promiscuous mode [ 100.609465][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.638501][ T4691] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 100.663008][ T4691] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.684511][ T9] device bridge_slave_0 left promiscuous mode [ 100.690865][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.740439][ T9] device veth1_macvtap left promiscuous mode [ 100.753222][ T4755] loop4: detected capacity change from 0 to 1024 [ 100.785987][ T4755] hfsplus: unable to parse mount options [ 100.795751][ T9] device veth0_macvtap left promiscuous mode [ 100.803961][ T9] device veth1_vlan left promiscuous mode [ 100.824405][ T9] device veth0_vlan left promiscuous mode [ 101.155208][ T4760] loop4: detected capacity change from 0 to 8 [ 101.221200][ T4760] unable to read inode lookup table [ 101.516145][ T9] team0 (unregistering): Port device team_slave_1 removed [ 101.542143][ T9] team0 (unregistering): Port device team_slave_0 removed [ 101.569696][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.632473][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.670559][ T4751] loop1: detected capacity change from 0 to 32768 [ 101.794627][ T9] bond0 (unregistering): Released all slaves [ 101.806562][ T4751] XFS (loop1): Mounting V5 Filesystem [ 101.851144][ T4770] loop2: detected capacity change from 0 to 1024 [ 101.893017][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 101.928467][ T4770] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 101.934228][ T4751] XFS (loop1): Ending clean mount [ 102.000347][ T4643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.044076][ T4643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.071928][ T4643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.217242][ T4643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.230302][ T4643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.250570][ T4784] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 102.274824][ T3535] XFS (loop1): Unmounting Filesystem [ 102.281155][ T4784] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 102.290685][ T4784] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.298214][ T4643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.627857][ T4643] device hsr_slave_0 entered promiscuous mode [ 102.715931][ T4643] device hsr_slave_1 entered promiscuous mode [ 104.218793][ T4787] loop4: detected capacity change from 0 to 262144 [ 104.227170][ T3576] Bluetooth: hci1: command 0x040f tx timeout [ 104.261126][ T4806] loop2: detected capacity change from 0 to 40427 [ 104.314358][ T4787] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4787) [ 104.327279][ T4806] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 104.357850][ T4787] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 104.367550][ T4787] BTRFS info (device loop4): using free space tree [ 104.374175][ T4787] BTRFS info (device loop4): has skinny extents [ 104.380444][ T4787] BTRFS info (device loop4): flagging fs with big metadata feature [ 104.386209][ T4806] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 104.504238][ T4806] F2FS-fs (loop2): Found nat_bits in checkpoint [ 104.780646][ T3657] BTRFS warning (device loop4): checksum verify failed on 22036480 wanted 0x23e101be1e001a29 found 0x98e2f59226e63d74 level 0 [ 104.804909][ T4806] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 104.812225][ T4806] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 104.840272][ T4787] repair_io_failure: 2 callbacks suppressed [ 104.840292][ T4787] BTRFS info (device loop4): read error corrected: ino 0 off 22036480 (dev /dev/loop4 sector 43040) [ 104.857997][ T4787] BTRFS info (device loop4): read error corrected: ino 0 off 22040576 (dev /dev/loop4 sector 43048) [ 104.870265][ T4787] BTRFS info (device loop4): read error corrected: ino 0 off 22044672 (dev /dev/loop4 sector 43056) [ 104.881467][ T4787] BTRFS info (device loop4): read error corrected: ino 0 off 22048768 (dev /dev/loop4 sector 43064) [ 104.895484][ T3662] BTRFS warning (device loop4): checksum verify failed on 30670848 wanted 0xe9f08ec94c425425 found 0x1a4a9216e61c07c8 level 0 [ 104.909682][ T4787] BTRFS info (device loop4): read error corrected: ino 0 off 30670848 (dev /dev/loop4 sector 76288) [ 104.929450][ T4787] BTRFS info (device loop4): read error corrected: ino 0 off 30674944 (dev /dev/loop4 sector 76296) [ 104.962521][ T4787] BTRFS info (device loop4): read error corrected: ino 0 off 30679040 (dev /dev/loop4 sector 76304) [ 104.973726][ T4787] BTRFS info (device loop4): read error corrected: ino 0 off 30683136 (dev /dev/loop4 sector 76312) [ 105.048120][ T4855] libceph: resolve ' [ 105.048120][ T4855] -&fYǝa2i [ 105.048120][ T4855] .?&*&' (ret=-3): failed [ 105.058081][ T4787] BTRFS info (device loop4): enabling ssd optimizations [ 105.119498][ T3657] BTRFS warning (device loop4): checksum verify failed on 30457856 wanted 0x402e75f1de9ccfe6 found 0x64dad595b87aeca8 level 0 [ 105.231096][ T4787] BTRFS info (device loop4): read error corrected: ino 0 off 30457856 (dev /dev/loop4 sector 75872) [ 105.242512][ T4787] BTRFS info (device loop4): read error corrected: ino 0 off 30461952 (dev /dev/loop4 sector 75880) [ 105.258445][ T4858] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.373913][ T4643] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.454908][ T4643] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.495397][ T4643] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.561700][ T4643] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.243228][ T4643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.302936][ T4871] Bluetooth: hci1: command 0x0419 tx timeout [ 106.343948][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.359199][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.379676][ T4896] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 106.407041][ T4643] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.448121][ T4896] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 106.489163][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.508587][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.518691][ T4896] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.573381][ T4872] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.580532][ T4872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.658238][ T4911] loop0: detected capacity change from 0 to 1024 [ 106.665875][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.707063][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.733997][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.782644][ T4871] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.789918][ T4871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.843111][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.867684][ T4915] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.872109][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.885400][ T4911] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 106.886877][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.924178][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.934027][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.953985][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.973198][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.052342][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.070292][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.126581][ T4643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.212902][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.262108][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.283664][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.588651][ T4951] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 107.632925][ T4951] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 107.682998][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.763339][ T4643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.796973][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.832948][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.852903][ T4872] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.915324][ T4965] TCP: TCP_TX_DELAY enabled [ 107.940933][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.966905][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.022609][ T4643] device veth0_vlan entered promiscuous mode [ 108.071644][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.084054][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.142893][ T4872] usb 1-1: Using ep0 maxpacket: 16 [ 108.151309][ T4643] device veth1_vlan entered promiscuous mode [ 108.208688][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.217971][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.243358][ T4973] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.288905][ T4872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.320883][ T4872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.324228][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.369709][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.390269][ T4872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 108.425599][ T4872] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 108.445571][ T4643] device veth0_macvtap entered promiscuous mode [ 108.478145][ T4872] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.485289][ T4643] device veth1_macvtap entered promiscuous mode [ 108.561219][ T4980] loop2: detected capacity change from 0 to 8 [ 108.620156][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.639077][ T4872] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 108.645588][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.653366][ T4872] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 108.674765][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.675577][ T4872] usb 1-1: Manufacturer: syz [ 108.699249][ T4872] usb 1-1: config 0 descriptor?? [ 108.703241][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.717093][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.732524][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.749063][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.759913][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.778595][ T4643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.794813][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.806556][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.817869][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.834579][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.848773][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.868642][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.878840][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.898327][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.918840][ T4643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.941424][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.973570][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.000594][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.027839][ T4985] loop4: detected capacity change from 0 to 8 [ 109.038764][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.060852][ T4985] unable to read inode lookup table [ 109.069617][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.086311][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.103720][ T4643] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.119908][ T4987] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 109.122210][ T4643] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.140389][ T4872] rc_core: IR keymap rc-hauppauge not found [ 109.149396][ T4872] Registered IR keymap rc-empty [ 109.162713][ T4872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.183893][ T4643] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.202737][ T4643] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.213058][ T4872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.245110][ T4872] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 109.303884][ T4872] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 109.381890][ T4872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.463160][ T4872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.503033][ T4872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.529895][ T4996] loop1: detected capacity change from 0 to 256 [ 109.562993][ T4872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.612874][ T4872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.654045][ T4872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.663511][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.679209][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.694674][ T4872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.722762][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.733058][ T4872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.771405][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.787116][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.794899][ T4872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.819355][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.827454][ T4872] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 109.900438][ T4872] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 109.941583][ T4872] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 109.976408][ T4872] usb 1-1: USB disconnect, device number 4 [ 110.190558][ T5008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.274358][ T5010] loop3: detected capacity change from 0 to 8 [ 110.622049][ T5024] loop3: detected capacity change from 0 to 256 [ 110.655585][ T5000] loop4: detected capacity change from 0 to 32768 [ 110.862627][ T5000] XFS (loop4): Mounting V5 Filesystem [ 111.011392][ T5000] XFS (loop4): Ending clean mount [ 111.109410][ T4122] XFS (loop4): Unmounting Filesystem [ 111.162756][ T4277] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.402847][ T4277] usb 2-1: Using ep0 maxpacket: 16 [ 111.444491][ T5034] loop2: detected capacity change from 0 to 40427 [ 111.525419][ T4277] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.551817][ T5034] F2FS-fs (loop2): invalid crc value [ 111.558872][ T4277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.589812][ T4277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 111.614713][ T5034] F2FS-fs (loop2): Found nat_bits in checkpoint [ 111.647795][ T4277] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 111.669306][ T4277] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.767288][ T5034] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 111.777751][ T5034] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 111.806644][ T4277] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 111.826584][ T4277] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 111.844289][ T4277] usb 2-1: Manufacturer: syz [ 111.863547][ T4277] usb 2-1: config 0 descriptor?? [ 111.897845][ T3746] attempt to access beyond end of device [ 111.897845][ T3746] loop2: rw=2049, want=45104, limit=40427 [ 112.065481][ T5051] loop0: detected capacity change from 0 to 32768 [ 112.213834][ T4277] rc_core: IR keymap rc-hauppauge not found [ 112.220076][ T4277] Registered IR keymap rc-empty [ 112.250870][ T5070] loop3: detected capacity change from 0 to 256 [ 112.253181][ T4277] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.304765][ T4277] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.354211][ T4277] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 112.411716][ T4277] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 112.488446][ T4277] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.523544][ T4277] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.554067][ T4277] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.582915][ T4277] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.613356][ T4277] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.642858][ T4277] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.665812][ T5076] loop3: detected capacity change from 0 to 1024 [ 112.672967][ T4277] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.702888][ T4277] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.742805][ T4277] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.782997][ T4277] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.790954][ T5084] loop2: detected capacity change from 0 to 8 [ 112.824049][ T4277] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 112.838490][ T4277] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 112.895643][ T4277] usb 2-1: USB disconnect, device number 2 [ 113.053409][ T154] hfsplus: b-tree write err: -5, ino 4 [ 113.056618][ T5087] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 113.093379][ T5087] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 113.390013][ T5080] loop0: detected capacity change from 0 to 32768 [ 113.506469][ T5080] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5080) [ 113.583361][ T5080] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 113.630102][ T5080] BTRFS info (device loop0): using free space tree [ 113.659767][ T5080] BTRFS info (device loop0): has skinny extents [ 113.984436][ T4871] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.992374][ T5080] BTRFS info (device loop0): enabling ssd optimizations [ 114.126918][ T5107] loop4: detected capacity change from 0 to 32768 [ 114.174929][ T5094] loop2: detected capacity change from 0 to 40427 [ 114.251843][ T5094] F2FS-fs (loop2): invalid crc value [ 114.285186][ T5094] F2FS-fs (loop2): Found nat_bits in checkpoint [ 114.384379][ T4871] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 114.392505][ T4871] usb 2-1: config 0 has no interface number 0 [ 114.418381][ T4871] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.432437][ T5094] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 114.461030][ T5094] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 114.470471][ T4871] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.593199][ T4871] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 114.608039][ T4871] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 114.617402][ T5145] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 114.627780][ T4871] usb 2-1: Manufacturer: syz [ 114.651234][ T3746] attempt to access beyond end of device [ 114.651234][ T3746] loop2: rw=2049, want=45104, limit=40427 [ 114.662893][ T5145] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.668221][ T4871] usb 2-1: config 0 descriptor?? [ 114.827633][ T5152] loop0: detected capacity change from 0 to 8 [ 115.242949][ T3576] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.278729][ T4871] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.18/0003:054C:03D5.0004/input/input7 [ 115.410311][ T4871] sony 0003:054C:03D5.0004: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.1-1/input18 [ 115.503116][ T3576] usb 5-1: Using ep0 maxpacket: 16 [ 115.527915][ T4269] usb 2-1: USB disconnect, device number 3 [ 115.634839][ T3576] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 115.664869][ T3576] usb 5-1: New USB device found, idVendor=13d3, idProduct=3334, bcdDevice=40.6f [ 115.676514][ T5170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.687410][ T3576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.748637][ T3576] usb 5-1: config 0 descriptor?? [ 115.825422][ T3576] r8712u: register rtl8712_netdev_ops to netdev_ops [ 115.832167][ T3576] usb 5-1: r8712u: USB_SPEED_HIGH with 1 endpoints [ 115.844641][ T5172] loop2: detected capacity change from 0 to 1024 [ 115.976820][ T5165] loop3: detected capacity change from 0 to 32768 [ 116.063516][ T3576] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 116.082055][ T3576] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 116.116761][ T3576] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 116.137644][ T3576] usb 5-1: USB disconnect, device number 2 [ 116.210311][ T3622] hfsplus: b-tree write err: -5, ino 4 [ 116.571973][ T5180] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 116.600863][ T5180] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.827928][ T5188] loop0: detected capacity change from 0 to 512 [ 116.848813][ T5182] loop4: detected capacity change from 0 to 8192 [ 116.919988][ T5182] loop4: p1 p2 p3 [ 116.928083][ T5192] loop3: detected capacity change from 0 to 1024 [ 116.952403][ T5188] EXT4-fs (loop0): Invalid want_extra_isize 1048622 [ 116.954656][ T5175] loop1: detected capacity change from 0 to 40427 [ 117.043765][ T5175] F2FS-fs (loop1): invalid crc value [ 117.089989][ T5175] F2FS-fs (loop1): Found nat_bits in checkpoint [ 117.145150][ T144] hfsplus: b-tree write err: -5, ino 4 [ 117.235338][ T3691] udevd[3691]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 117.249467][ T3692] udevd[3692]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 117.290879][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 117.372910][ T5175] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 117.581189][ T3535] attempt to access beyond end of device [ 117.581189][ T3535] loop1: rw=2049, want=45128, limit=40427 [ 117.614390][ T4871] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 117.763627][ T5224] loop2: detected capacity change from 0 to 512 [ 117.781315][ T5226] loop0: detected capacity change from 0 to 1024 [ 117.820548][ T5224] EXT4-fs (loop2): Invalid want_extra_isize 1048622 [ 118.011314][ T4048] hfsplus: b-tree write err: -5, ino 4 [ 118.053093][ T4871] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 118.061320][ T4871] usb 5-1: config 0 has no interface number 0 [ 118.090249][ T4871] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.114150][ T4871] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.223037][ T4871] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 118.242220][ T4871] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 118.250957][ T4871] usb 5-1: Manufacturer: syz [ 118.261923][ T4871] usb 5-1: config 0 descriptor?? [ 118.573103][ T3573] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.686855][ T5246] loop0: detected capacity change from 0 to 256 [ 118.992309][ T26] audit: type=1800 audit(1718042832.592:11): pid=5246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048618 res=0 errno=0 [ 119.181985][ T4871] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.18/0003:054C:03D5.0005/input/input8 [ 119.233056][ T3573] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.269553][ T3573] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.362866][ T4871] sony 0003:054C:03D5.0005: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.4-1/input18 [ 119.394056][ T3573] usb 2-1: New USB device found, idVendor=44b7, idProduct=0000, bcdDevice= 0.00 [ 119.424719][ T4871] usb 5-1: USB disconnect, device number 3 [ 119.436417][ T3573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 119.475823][ T3573] usb 2-1: SerialNumber: syz [ 119.811126][ T5260] loop4: detected capacity change from 0 to 1024 [ 119.891308][ T3573] usb 2-1: USB disconnect, device number 4 [ 120.726209][ T5251] loop2: detected capacity change from 0 to 40427 [ 120.786554][ T154] hfsplus: b-tree write err: -5, ino 4 [ 120.804750][ T5251] F2FS-fs (loop2): invalid crc value [ 120.824479][ T5251] F2FS-fs (loop2): Found nat_bits in checkpoint [ 120.874237][ T3691] udevd[3691]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.999311][ T5251] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 121.115815][ T3746] attempt to access beyond end of device [ 121.115815][ T3746] loop2: rw=2049, want=45128, limit=40427 [ 121.222868][ T4269] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 122.222962][ T3572] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.314452][ T5297] loop0: detected capacity change from 0 to 1024 [ 122.353055][ T4269] usb 5-1: Using ep0 maxpacket: 16 [ 122.448687][ T4048] hfsplus: b-tree write err: -5, ino 4 [ 122.473372][ T4269] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.506522][ T4269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.542592][ T4269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 122.579879][ T4269] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 122.592743][ T4269] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.607718][ T3572] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 122.627600][ T3572] usb 4-1: config 0 has no interface number 0 [ 122.634350][ T3572] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.646551][ T3572] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.723057][ T4269] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 122.739958][ T3572] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 122.759414][ T4269] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 122.769536][ T3572] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 122.785169][ T5307] loop2: detected capacity change from 0 to 512 [ 122.789093][ T4269] usb 5-1: Manufacturer: syz [ 122.809939][ T3572] usb 4-1: Manufacturer: syz [ 122.819779][ T3572] usb 4-1: config 0 descriptor?? [ 122.840340][ T4269] usb 5-1: config 0 descriptor?? [ 122.843614][ T5307] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 122.863726][ T5307] UDF-fs: Scanning with blocksize 512 failed [ 122.892922][ T5307] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 122.920149][ T5307] UDF-fs: Scanning with blocksize 1024 failed [ 122.962834][ T5307] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 122.971000][ T5307] UDF-fs: Scanning with blocksize 2048 failed [ 122.980547][ T5307] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 122.996424][ T5307] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.193140][ T4269] rc_core: IR keymap rc-hauppauge not found [ 123.199122][ T4269] Registered IR keymap rc-empty [ 123.227203][ T4269] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.237258][ T5319] loop0: detected capacity change from 0 to 256 [ 123.272827][ T4269] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.300788][ T5319] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a37, chksum : 0xd675b107, utbl_chksum : 0xe619d30d) [ 123.322933][ T4269] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 123.337191][ T3572] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.0006/input/input10 [ 123.381710][ T4269] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 123.441471][ T4269] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.457141][ T3572] sony 0003:054C:03D5.0006: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18 [ 123.492924][ T4269] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.533967][ T4269] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.571121][ T4269] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.621697][ T3572] usb 4-1: USB disconnect, device number 3 [ 123.632935][ T4269] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.672956][ T4269] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.682459][ T5330] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 123.712830][ T4269] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.752796][ T4269] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.778974][ T5334] loop0: detected capacity change from 0 to 256 [ 123.795023][ T4269] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.814806][ T5337] loop1: detected capacity change from 0 to 512 [ 123.832531][ T5334] exfat: Deprecated parameter 'utf8' [ 123.832885][ T4269] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 123.848163][ T5334] exfat: Bad value for 'errors' [ 123.893969][ T4269] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 123.909925][ T5337] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 123.912329][ T4269] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 123.936068][ T4269] usb 5-1: USB disconnect, device number 4 [ 123.941271][ T5321] loop2: detected capacity change from 0 to 32768 [ 123.953817][ T5337] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz-executor.1: attempt to clear invalid blocks 1024 len 1 [ 123.990388][ T5337] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 0) [ 124.016967][ T5337] EXT4-fs (loop1): 1 truncate cleaned up [ 124.023340][ T5337] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nodelalloc,abort,noblock_validity,,errors=continue. Quota mode: writeback. [ 124.066680][ T5321] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5321) [ 124.460836][ T5321] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 124.494155][ T5321] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 125.488028][ T5321] BTRFS error (device loop2): open_ctree failed [ 126.002859][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.252859][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 126.291614][ T5368] loop4: detected capacity change from 0 to 512 [ 126.373170][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 126.379011][ T5350] loop1: detected capacity change from 0 to 40427 [ 126.398310][ T7] usb 4-1: New USB device found, idVendor=13d3, idProduct=3334, bcdDevice=40.6f [ 126.421169][ T5368] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 126.455537][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.470146][ T5368] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz-executor.4: attempt to clear invalid blocks 1024 len 1 [ 126.509760][ T5368] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 1819239214 (level 0) [ 126.534999][ T5350] F2FS-fs (loop1): invalid crc value [ 126.553784][ T7] usb 4-1: config 0 descriptor?? [ 126.581639][ T5350] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.590291][ T5368] EXT4-fs (loop4): 1 truncate cleaned up [ 126.596230][ T5368] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,bsdgroups,nodelalloc,abort,noblock_validity,,errors=continue. Quota mode: writeback. [ 126.635647][ T7] r8712u: register rtl8712_netdev_ops to netdev_ops [ 126.672955][ T7] usb 4-1: r8712u: USB_SPEED_HIGH with 1 endpoints [ 126.707677][ T5359] loop2: detected capacity change from 0 to 40427 [ 126.747785][ T5350] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 126.756000][ T5378] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.758279][ T5350] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 126.809137][ T5359] F2FS-fs (loop2): invalid crc value [ 126.853656][ T3535] attempt to access beyond end of device [ 126.853656][ T3535] loop1: rw=2049, want=45104, limit=40427 [ 126.873045][ T7] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 126.879782][ T7] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 126.889159][ T7] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 126.897192][ T5359] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.899420][ T7] usb 4-1: USB disconnect, device number 4 [ 127.049510][ T5359] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 127.166607][ T3746] attempt to access beyond end of device [ 127.166607][ T3746] loop2: rw=2049, want=45128, limit=40427 [ 127.403322][ T4874] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.783119][ T4874] usb 5-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=6e.aa [ 128.805610][ T4874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.837135][ T4874] usb 5-1: config 0 descriptor?? [ 128.875448][ T5410] loop2: detected capacity change from 0 to 512 [ 128.877500][ T4874] gspca_main: ov534_9-2.14.0 probing 06f8:3003 [ 128.979451][ T5416] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 129.033272][ T5410] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 129.054804][ T5388] loop3: detected capacity change from 0 to 32768 [ 129.062350][ T5410] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz-executor.2: attempt to clear invalid blocks 1024 len 1 [ 129.076416][ T5416] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 129.090482][ T5410] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 1819239214 (level 0) [ 129.117332][ T5388] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5388) [ 129.172888][ T5410] EXT4-fs (loop2): 1 truncate cleaned up [ 129.178583][ T5410] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,nodelalloc,abort,noblock_validity,,errors=continue. Quota mode: writeback. [ 129.198859][ T5388] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 129.228471][ T5388] BTRFS error (device loop3): support for check_integrity* not compiled in! [ 129.276680][ T5388] BTRFS error (device loop3): open_ctree failed [ 129.640028][ T5406] loop1: detected capacity change from 0 to 32768 [ 129.662495][ T5424] loop3: detected capacity change from 0 to 8 [ 129.888133][ T5425] loop2: detected capacity change from 0 to 256 [ 130.136272][ T4874] gspca_ov534_9: reg_w failed -110 [ 130.189899][ T26] audit: type=1800 audit(1718042843.782:12): pid=5425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048623 res=0 errno=0 [ 130.593778][ T5406] XFS (loop1): Mounting V5 Filesystem [ 130.774424][ T4874] gspca_ov534_9: Unknown sensor 0000 [ 130.774504][ T4874] ov534_9: probe of 5-1:0.0 failed with error -22 [ 130.812738][ T4874] usb 5-1: USB disconnect, device number 5 [ 131.759471][ T5406] XFS (loop1): Ending clean mount [ 131.984668][ T3535] XFS (loop1): Unmounting Filesystem [ 132.115437][ T5457] loop0: detected capacity change from 0 to 512 [ 132.132424][ T5456] loop4: detected capacity change from 0 to 256 [ 132.225721][ T5456] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a37, chksum : 0xd675b107, utbl_chksum : 0xe619d30d) [ 132.235136][ T5457] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 132.300293][ T5457] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz-executor.0: attempt to clear invalid blocks 1024 len 1 [ 132.388007][ T5437] loop3: detected capacity change from 0 to 32768 [ 132.410122][ T5457] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 0) [ 132.463017][ T5437] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5437) [ 132.512271][ T5457] EXT4-fs (loop0): 1 truncate cleaned up [ 132.529891][ T5461] loop4: detected capacity change from 0 to 8 [ 132.542165][ T5457] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,bsdgroups,nodelalloc,abort,noblock_validity,,errors=continue. Quota mode: writeback. [ 132.572832][ T5437] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 132.602080][ T5437] BTRFS info (device loop3): setting nodatacow, compression disabled [ 132.652413][ T5437] BTRFS info (device loop3): doing ref verification [ 132.682794][ T5437] BTRFS info (device loop3): enabling auto defrag [ 132.694453][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.700793][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.710597][ T5437] BTRFS info (device loop3): max_inline at 0 [ 132.732467][ T5437] BTRFS info (device loop3): using free space tree [ 132.750973][ T5437] BTRFS info (device loop3): has skinny extents [ 132.753086][ T5455] loop2: detected capacity change from 0 to 32768 [ 132.840408][ T5471] loop4: detected capacity change from 0 to 256 [ 132.917489][ T5455] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5455) [ 132.942064][ T5466] loop1: detected capacity change from 0 to 4096 [ 132.955560][ T5471] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.966356][ T5471] FAT-fs (loop4): Filesystem has been set read-only [ 132.978457][ T5471] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.998978][ T5466] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 133.021893][ T5471] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 133.038666][ T5471] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 133.051253][ T26] audit: type=1326 audit(1718042846.682:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5469 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63fe72f69 code=0x7ffc0000 [ 133.091442][ T5471] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 133.120209][ T26] audit: type=1326 audit(1718042846.712:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5469 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa63fe72f69 code=0x7ffc0000 [ 133.166235][ T5471] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 133.169658][ T5466] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 133.188666][ T5471] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 133.198841][ T5471] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 133.207739][ T5471] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 133.217009][ T5471] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 134.493346][ T26] audit: type=1326 audit(1718042846.712:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5469 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63fe72f69 code=0x7ffc0000 [ 134.840210][ T5455] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 134.879696][ T5477] loop0: detected capacity change from 0 to 256 [ 134.887613][ T5455] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 134.947237][ T5455] BTRFS error (device loop2): open_ctree failed [ 135.004313][ T5466] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 135.019709][ T26] audit: type=1326 audit(1718042846.712:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5469 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa63fe72f69 code=0x7ffc0000 [ 135.081672][ T26] audit: type=1326 audit(1718042846.712:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5469 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63fe72f69 code=0x7ffc0000 [ 135.131878][ T26] audit: type=1326 audit(1718042846.712:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5469 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa63fe706e7 code=0x7ffc0000 [ 135.210084][ T26] audit: type=1326 audit(1718042846.712:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5469 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa63fe363d9 code=0x7ffc0000 [ 135.255021][ T26] audit: type=1326 audit(1718042846.712:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5469 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fa63fe72f69 code=0x7ffc0000 [ 135.387182][ T26] audit: type=1326 audit(1718042846.712:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5469 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa63fe706e7 code=0x7ffc0000 [ 135.412975][ T5437] BTRFS error (device loop3): open_ctree failed [ 135.425231][ T26] audit: type=1326 audit(1718042846.712:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5469 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa63fe363d9 code=0x7ffc0000 [ 135.469002][ T26] audit: type=1326 audit(1718042846.712:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5469 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63fe72f69 code=0x7ffc0000 [ 135.501564][ T26] audit: type=1326 audit(1718042846.742:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5469 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa63fe706e7 code=0x7ffc0000 [ 135.540348][ T26] audit: type=1326 audit(1718042846.742:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5469 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa63fe363d9 code=0x7ffc0000 [ 135.564373][ T26] audit: type=1326 audit(1718042846.742:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5469 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fa63fe72f69 code=0x7ffc0000 [ 135.587949][ T26] audit: type=1326 audit(1718042846.742:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5469 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa63fe706e7 code=0x7ffc0000 [ 135.603487][ T5494] loop1: detected capacity change from 0 to 4096 [ 135.612763][ T26] audit: type=1326 audit(1718042846.742:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5469 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa63fe363d9 code=0x7ffc0000 [ 135.740116][ T5494] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 135.866995][ T5504] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 136.033746][ T5506] hub 9-0:1.0: USB hub found [ 136.042881][ T5506] hub 9-0:1.0: 8 ports detected [ 136.647635][ T5511] loop4: detected capacity change from 0 to 8 [ 136.713227][ T3572] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.728718][ T5512] loop0: detected capacity change from 0 to 4096 [ 136.817505][ T5512] ntfs: volume version 3.1. [ 136.959271][ T5522] loop4: detected capacity change from 0 to 4096 [ 137.012354][ T5522] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 137.081256][ T5522] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 137.113085][ T3572] usb 4-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=6e.aa [ 137.131436][ T3572] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.169457][ T5522] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 137.185144][ T3572] usb 4-1: config 0 descriptor?? [ 137.206768][ T5527] loop0: detected capacity change from 0 to 8 [ 137.251178][ T3572] gspca_main: ov534_9-2.14.0 probing 06f8:3003 [ 137.301433][ T5527] SQUASHFS error: Failed to read block 0x4e8: -5 [ 137.308628][ T5527] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 137.369955][ T5527] SQUASHFS error: Failed to read block 0xed04f5: -5 [ 137.378626][ T5527] SQUASHFS error: Failed to read block 0xed09dd: -5 [ 137.386108][ T5528] SQUASHFS error: Failed to read block 0x4e8: -5 [ 137.386167][ T5527] SQUASHFS error: Failed to read block 0xed2d05: -5 [ 137.393423][ T5527] SQUASHFS error: Failed to read block 0xed3605: -5 [ 137.410937][ T5518] loop2: detected capacity change from 0 to 40427 [ 137.419386][ T5527] SQUASHFS error: Failed to read block 0x4e8: -5 [ 137.427436][ T5527] SQUASHFS error: Failed to read block 0x4e8: -5 [ 137.434316][ T5527] SQUASHFS error: Failed to read block 0x4e8: -5 [ 137.440779][ T5527] SQUASHFS error: Failed to read block 0x4e8: -5 [ 137.464223][ T5528] SQUASHFS error: Failed to read block 0x4e8: -5 [ 137.546485][ T5524] loop1: detected capacity change from 0 to 32768 [ 137.554685][ T5518] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.595707][ T5524] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5524) [ 137.623469][ T5518] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 137.811808][ T5524] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 137.833006][ T5524] BTRFS info (device loop1): setting nodatacow, compression disabled [ 137.841131][ T5524] BTRFS info (device loop1): doing ref verification [ 137.852889][ T5524] BTRFS info (device loop1): enabling auto defrag [ 137.859462][ T5524] BTRFS info (device loop1): max_inline at 0 [ 137.891397][ T5524] BTRFS info (device loop1): using free space tree [ 138.023253][ T5546] hub 9-0:1.0: USB hub found [ 138.030554][ T5546] hub 9-0:1.0: 8 ports detected [ 138.209057][ T5524] BTRFS info (device loop1): has skinny extents [ 138.702819][ T3572] gspca_ov534_9: reg_w failed -110 [ 138.781953][ T3746] attempt to access beyond end of device [ 138.781953][ T3746] loop2: rw=2049, want=45104, limit=40427 [ 138.837446][ T5559] loop4: detected capacity change from 0 to 8 [ 138.918592][ T5524] BTRFS info (device loop1): enabling ssd optimizations [ 139.058848][ T5574] loop4: detected capacity change from 0 to 256 [ 139.093353][ T3572] gspca_ov534_9: Unknown sensor 0000 [ 139.093417][ T3572] ov534_9: probe of 4-1:0.0 failed with error -22 [ 139.114239][ T3572] usb 4-1: USB disconnect, device number 5 [ 139.201999][ T5574] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 139.249271][ T5574] FAT-fs (loop4): Filesystem has been set read-only [ 139.294364][ T5574] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 139.368068][ T5574] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 139.392809][ T5574] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 139.511733][ T5585] loop3: detected capacity change from 0 to 8 [ 139.539263][ T5574] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 139.634162][ T5585] SQUASHFS error: Failed to read block 0x4e8: -5 [ 139.641369][ T5585] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 139.685095][ T5574] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 139.696852][ T5585] SQUASHFS error: Failed to read block 0xed04f5: -5 [ 139.703850][ T5585] SQUASHFS error: Failed to read block 0xed09dd: -5 [ 139.704161][ T5589] SQUASHFS error: Failed to read block 0x4e8: -5 [ 139.713457][ T5585] SQUASHFS error: Failed to read block 0xed2d05: -5 [ 139.725252][ T5585] SQUASHFS error: Failed to read block 0xed3605: -5 [ 139.740013][ T5574] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 139.776972][ T5589] SQUASHFS error: Failed to read block 0x4e8: -5 [ 139.786475][ T5574] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 139.804226][ T5574] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 139.819615][ T5585] SQUASHFS error: Failed to read block 0x4e8: -5 [ 139.828605][ T5585] SQUASHFS error: Failed to read block 0x4e8: -5 [ 139.837842][ T5585] SQUASHFS error: Failed to read block 0x4e8: -5 [ 139.845583][ T5585] SQUASHFS error: Failed to read block 0x4e8: -5 [ 139.853277][ T5589] SQUASHFS error: Failed to read block 0x4e8: -5 [ 139.880983][ T5589] SQUASHFS error: Failed to read block 0x4e8: -5 [ 139.889007][ T5574] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 140.390237][ T5599] hub 9-0:1.0: USB hub found [ 140.396244][ T5599] hub 9-0:1.0: 8 ports detected [ 141.270183][ T5606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.689568][ T5594] loop2: detected capacity change from 0 to 40427 [ 141.769435][ T5594] F2FS-fs (loop2): Found nat_bits in checkpoint [ 141.809056][ T5605] loop0: detected capacity change from 0 to 32768 [ 141.839121][ T5594] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 141.867869][ T5605] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5605) [ 141.912828][ T3576] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 141.936775][ T5605] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 141.946610][ T5605] BTRFS info (device loop0): using free space tree [ 141.956216][ T5605] BTRFS info (device loop0): has skinny extents [ 141.988874][ T5650] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 142.008236][ T5605] BTRFS info (device loop0): enabling ssd optimizations [ 142.274424][ T5676] loop4: detected capacity change from 0 to 512 [ 142.327492][ T5676] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 142.354537][ T3576] usb 2-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=6e.aa [ 142.386980][ T5676] EXT4-fs (loop4): orphan cleanup on readonly fs [ 142.398153][ T3576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.429013][ T5676] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #3: comm syz-executor.4: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 142.457316][ T3576] usb 2-1: config 0 descriptor?? [ 142.465029][ T3746] attempt to access beyond end of device [ 142.465029][ T3746] loop2: rw=2049, want=45104, limit=40427 [ 142.494835][ T3576] gspca_main: ov534_9-2.14.0 probing 06f8:3003 [ 142.543236][ T5678] loop3: detected capacity change from 0 to 32768 [ 142.569875][ T5676] EXT4-fs error (device loop4): ext4_quota_enable:6390: comm syz-executor.4: Bad quota inode: 3, type: 0 [ 142.631255][ T5678] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5678) [ 142.668638][ T5676] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 142.693896][ T5676] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 142.731708][ T5676] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 142.751652][ T5678] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 142.768253][ T5678] BTRFS info (device loop3): using free space tree [ 142.775249][ T5678] BTRFS info (device loop3): has skinny extents [ 143.018172][ T5678] BTRFS info (device loop3): enabling ssd optimizations [ 143.463004][ T3576] gspca_ov534_9: reg_w failed -71 [ 143.603144][ T5738] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 143.627172][ T5725] loop2: detected capacity change from 0 to 32768 [ 143.689727][ T5725] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5725) [ 143.754835][ T5725] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 143.765621][ T5725] BTRFS info (device loop2): using free space tree [ 143.772937][ T5725] BTRFS info (device loop2): has skinny extents [ 143.835472][ T5725] BTRFS info (device loop2): enabling ssd optimizations [ 143.892931][ T3576] gspca_ov534_9: Unknown sensor 0000 [ 143.892998][ T3576] ov534_9: probe of 2-1:0.0 failed with error -22 [ 143.921206][ T3576] usb 2-1: USB disconnect, device number 5 [ 144.197465][ T5780] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.323210][ T4269] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 145.772912][ T4269] usb 4-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=6e.aa [ 145.792372][ T5778] loop1: detected capacity change from 0 to 32768 [ 145.802818][ T4269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.823171][ T4269] usb 4-1: config 0 descriptor?? [ 145.864728][ T4269] gspca_main: ov534_9-2.14.0 probing 06f8:3003 [ 145.888224][ T5778] XFS (loop1): Mounting V5 Filesystem [ 145.942897][ T3540] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 145.971597][ T5778] XFS (loop1): Ending clean mount [ 145.989440][ T5809] loop2: detected capacity change from 0 to 32768 [ 145.990369][ T5778] XFS (loop1): Quotacheck needed: Please wait. [ 146.030644][ T5778] XFS (loop1): Quotacheck: Done. [ 146.042978][ T5809] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5809) [ 146.055919][ T26] kauditd_printk_skb: 214 callbacks suppressed [ 146.055935][ T26] audit: type=1800 audit(1718042859.672:241): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=9292 res=0 errno=0 [ 146.085213][ T26] audit: type=1800 audit(1718042859.692:242): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=9292 res=0 errno=0 [ 146.195743][ T26] audit: type=1804 audit(1718042859.802:243): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2474776253/syzkaller.MDjwu4/118/file0/bus" dev="loop1" ino=9292 res=1 errno=0 [ 146.222148][ T26] audit: type=1800 audit(1718042859.802:244): pid=5778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=9292 res=0 errno=0 [ 146.235781][ T3535] XFS (loop1): Unmounting Filesystem [ 146.269800][ T5809] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 146.302964][ T5809] BTRFS info (device loop2): using free space tree [ 146.309634][ T5809] BTRFS info (device loop2): has skinny extents [ 146.392929][ T3540] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.420114][ T3540] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.420129][ T5809] BTRFS info (device loop2): enabling ssd optimizations [ 146.438408][ T3540] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 146.452898][ T3540] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.468635][ T3540] usb 5-1: config 0 descriptor?? [ 146.902815][ T4269] gspca_ov534_9: reg_w failed -71 [ 146.943480][ T5847] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 146.965793][ T3540] redragon 0003:0C45:760B.0007: unknown main item tag 0x0 [ 146.991791][ T3540] redragon 0003:0C45:760B.0007: unknown main item tag 0x0 [ 147.019507][ T3540] redragon 0003:0C45:760B.0007: hidraw0: USB HID v0.00 Device [HID 0c45:760b] on usb-dummy_hcd.4-1/input0 [ 147.280731][ T3540] usb 5-1: USB disconnect, device number 6 [ 147.292750][ T4269] gspca_ov534_9: Unknown sensor 0000 [ 147.292811][ T4269] ov534_9: probe of 4-1:0.0 failed with error -22 [ 147.313309][ T5857] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 147.320473][ T4269] usb 4-1: USB disconnect, device number 6 [ 147.337929][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 147.347011][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 147.356014][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 147.364908][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 147.374115][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 147.383016][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 147.495460][ T5858] hub 9-0:1.0: USB hub found [ 147.501071][ T5858] hub 9-0:1.0: 8 ports detected [ 148.479156][ T5877] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.519216][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.547012][ T5874] loop0: detected capacity change from 0 to 4096 [ 148.593498][ T5886] loop2: detected capacity change from 0 to 2048 [ 148.610925][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 148.647110][ T5886] loop2: p1 < > p4 [ 148.660755][ T5886] loop2: p4 size 8388608 extends beyond EOD, truncated [ 148.690420][ T5877] nftables ruleset with unbound set [ 148.895755][ T5886] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 148.896851][ T150] blk_update_request: I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 148.915108][ T150] Buffer I/O error on dev loop2p4, logical block 0, lost async page write [ 148.924214][ T150] blk_update_request: I/O error, dev loop2, sector 8 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 148.935408][ T150] Buffer I/O error on dev loop2p4, logical block 1, lost async page write [ 148.946650][ T150] blk_update_request: I/O error, dev loop2, sector 16 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 148.958600][ T150] Buffer I/O error on dev loop2p4, logical block 2, lost async page write [ 148.970269][ T150] blk_update_request: I/O error, dev loop2, sector 24 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 148.984068][ T150] Buffer I/O error on dev loop2p4, logical block 3, lost async page write [ 148.992940][ T150] blk_update_request: I/O error, dev loop2, sector 32 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 149.005880][ T150] Buffer I/O error on dev loop2p4, logical block 4, lost async page write [ 149.091424][ T5897] hub 9-0:1.0: USB hub found [ 149.105496][ T5897] hub 9-0:1.0: 8 ports detected [ 149.235329][ T150] blk_update_request: I/O error, dev loop2, sector 40 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 149.247462][ T150] Buffer I/O error on dev loop2p4, logical block 5, lost async page write [ 149.256743][ T150] blk_update_request: I/O error, dev loop2, sector 48 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 149.269940][ T150] Buffer I/O error on dev loop2p4, logical block 6, lost async page write [ 149.278914][ T150] blk_update_request: I/O error, dev loop2, sector 56 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 149.295452][ T150] Buffer I/O error on dev loop2p4, logical block 7, lost async page write [ 149.305024][ T150] blk_update_request: I/O error, dev loop2, sector 64 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 149.317733][ T150] Buffer I/O error on dev loop2p4, logical block 8, lost async page write [ 149.327401][ T150] blk_update_request: I/O error, dev loop2, sector 72 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 149.340955][ T150] Buffer I/O error on dev loop2p4, logical block 9, lost async page write [ 149.732904][ T4269] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 149.780808][ T5875] loop3: detected capacity change from 0 to 32768 [ 149.930530][ T5875] XFS (loop3): Mounting V5 Filesystem [ 149.972401][ T5907] loop1: detected capacity change from 0 to 4096 [ 150.092964][ T4269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.105800][ T4269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.112519][ T5875] XFS (loop3): Ending clean mount [ 150.121981][ T5683] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 150.134455][ T4269] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 150.141437][ T5875] XFS (loop3): Quotacheck needed: Please wait. [ 150.154648][ T4269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.186765][ T4269] usb 1-1: config 0 descriptor?? [ 150.239331][ T5875] XFS (loop3): Quotacheck: Done. [ 150.318842][ T26] audit: type=1800 audit(1718042863.942:245): pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=9292 res=0 errno=0 [ 150.342674][ T26] audit: type=1800 audit(1718042863.942:246): pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=9292 res=0 errno=0 [ 150.365888][ T5928] xt_nat: multiple ranges no longer supported [ 150.414299][ T26] audit: type=1804 audit(1718042864.042:247): pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3863146909/syzkaller.YGqs6T/63/file0/bus" dev="loop3" ino=9292 res=1 errno=0 [ 150.492457][ T26] audit: type=1800 audit(1718042864.072:248): pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=9292 res=0 errno=0 [ 150.521967][ T4643] XFS (loop3): Unmounting Filesystem [ 150.577264][ T5683] usb 5-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=6e.aa [ 150.596563][ T5683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.621589][ T5683] usb 5-1: config 0 descriptor?? [ 150.666473][ T5683] gspca_main: ov534_9-2.14.0 probing 06f8:3003 [ 150.698011][ T4269] redragon 0003:0C45:760B.0008: unknown main item tag 0x0 [ 150.706762][ T4269] redragon 0003:0C45:760B.0008: unknown main item tag 0x0 [ 150.721338][ T4269] redragon 0003:0C45:760B.0008: hidraw0: USB HID v0.00 Device [HID 0c45:760b] on usb-dummy_hcd.0-1/input0 [ 150.993888][ T5940] loop3: detected capacity change from 0 to 4096 [ 151.000607][ T3576] usb 1-1: USB disconnect, device number 5 [ 151.027725][ T5940] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 151.175317][ T5942] hub 9-0:1.0: USB hub found [ 151.183603][ T5942] hub 9-0:1.0: 8 ports detected [ 152.008557][ T5946] loop2: detected capacity change from 0 to 128 [ 152.046267][ T4643] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 152.061262][ T4643] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 152.073899][ T5946] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 152.091003][ T4643] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 152.343190][ T5967] xt_nat: multiple ranges no longer supported [ 152.383147][ T5683] gspca_ov534_9: reg_w failed -71 [ 152.449668][ T5968] loop1: detected capacity change from 0 to 4096 [ 152.568337][ T5973] loop3: detected capacity change from 0 to 164 [ 152.757471][ T5958] loop0: detected capacity change from 0 to 32768 [ 152.832833][ T5683] gspca_ov534_9: Unknown sensor 0000 [ 152.832896][ T5683] ov534_9: probe of 5-1:0.0 failed with error -22 [ 152.850302][ T5683] usb 5-1: USB disconnect, device number 7 [ 152.879222][ T5958] XFS (loop0): Mounting V5 Filesystem [ 153.092771][ T4269] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 153.262609][ T5987] hub 9-0:1.0: USB hub found [ 153.268410][ T5987] hub 9-0:1.0: 8 ports detected [ 153.570886][ T5958] XFS (loop0): Ending clean mount [ 153.677397][ T5958] XFS (loop0): Quotacheck needed: Please wait. [ 153.972154][ T5958] XFS (loop0): Quotacheck: Done. [ 154.008084][ T26] audit: type=1800 audit(1718042867.632:249): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=9292 res=0 errno=0 [ 154.038952][ T26] audit: type=1800 audit(1718042867.662:250): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=9292 res=0 errno=0 [ 154.152994][ T4269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.190015][ T26] audit: type=1804 audit(1718042867.812:251): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2968054016/syzkaller.OvxjQN/168/file0/bus" dev="loop0" ino=9292 res=1 errno=0 [ 154.222712][ T4269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.237014][ T5996] loop1: detected capacity change from 0 to 4096 [ 154.701858][ T3538] XFS (loop0): Unmounting Filesystem [ 154.728587][ T5996] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 154.783711][ T26] audit: type=1800 audit(1718042867.812:252): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=9292 res=0 errno=0 [ 154.965269][ T4269] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 154.974586][ T4269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.988295][ T4269] usb 4-1: config 0 descriptor?? [ 155.072150][ T3535] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 155.079253][ T3535] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 155.089861][ T3535] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 155.481396][ T4269] redragon 0003:0C45:760B.0009: unknown main item tag 0x0 [ 155.489505][ T4269] redragon 0003:0C45:760B.0009: unknown main item tag 0x0 [ 155.722805][ T6019] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 156.453459][ T4269] redragon 0003:0C45:760B.0009: hidraw0: USB HID v0.00 Device [HID 0c45:760b] on usb-dummy_hcd.3-1/input0 [ 156.503124][ T4269] usb 4-1: USB disconnect, device number 7 [ 156.620562][ T6029] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.639213][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.827439][ T6034] loop4: detected capacity change from 0 to 4096 [ 156.883459][ T6034] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 157.058476][ T4122] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 157.067950][ T4122] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 157.099354][ T6031] loop1: detected capacity change from 0 to 32768 [ 157.110915][ T4122] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 157.345833][ T6040] chnl_net:caif_netlink_parms(): no params data found [ 157.733964][ T6031] XFS (loop1): Mounting V5 Filesystem [ 158.227362][ T6059] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 158.235785][ T6059] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.245319][ T6059] device team0 entered promiscuous mode [ 158.250898][ T6059] device team_slave_0 entered promiscuous mode [ 158.257459][ T6059] device team_slave_1 entered promiscuous mode [ 158.261372][ T6031] XFS (loop1): Ending clean mount [ 158.263987][ T6059] bridge0: port 3(team0) entered blocking state [ 158.277914][ T6059] bridge0: port 3(team0) entered disabled state [ 158.287702][ T6059] bridge0: port 3(team0) entered blocking state [ 158.291227][ T6031] XFS (loop1): Quotacheck needed: Please wait. [ 158.294468][ T6059] bridge0: port 3(team0) entered forwarding state [ 158.317426][ T26] audit: type=1326 audit(1718042871.942:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa63fe72f69 code=0x0 [ 158.340978][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.348229][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.356836][ T6040] device bridge_slave_0 entered promiscuous mode [ 158.365942][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.373238][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.382602][ T6040] device bridge_slave_1 entered promiscuous mode [ 158.423556][ T6040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.435521][ T6040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.444780][ T6031] XFS (loop1): Quotacheck: Done. [ 158.447219][ T6059] loop4: detected capacity change from 0 to 2048 [ 158.480430][ T6040] team0: Port device team_slave_0 added [ 158.486577][ T26] audit: type=1800 audit(1718042872.102:254): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=9292 res=0 errno=0 [ 158.513052][ T6040] team0: Port device team_slave_1 added [ 158.518840][ T26] audit: type=1800 audit(1718042872.102:255): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=9292 res=0 errno=0 [ 158.554268][ T26] audit: type=1804 audit(1718042872.182:256): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2474776253/syzkaller.MDjwu4/139/file0/bus" dev="loop1" ino=9292 res=1 errno=0 [ 158.584312][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.588419][ T26] audit: type=1800 audit(1718042872.182:257): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=9292 res=0 errno=0 [ 158.592416][ T6059] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.634541][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.644549][ T3535] XFS (loop1): Unmounting Filesystem [ 158.661834][ T6040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.725086][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.760699][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.808704][ T6040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.856326][ T4122] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 158.941653][ T3657] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.006260][ T6040] device hsr_slave_0 entered promiscuous mode [ 159.021709][ T6040] device hsr_slave_1 entered promiscuous mode [ 159.037216][ T6040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.052983][ T6040] Cannot create hsr debugfs directory [ 159.108959][ T3657] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.286351][ T3657] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.320451][ T3576] Bluetooth: hci3: command 0x0409 tx timeout [ 159.390911][ T3657] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.510072][ T6082] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 160.209523][ T13] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 160.578224][ T6080] loop4: detected capacity change from 0 to 40427 [ 160.593018][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.618708][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.631096][ T13] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 160.634863][ T6080] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 160.640199][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.655819][ T6080] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 160.658156][ T13] usb 4-1: config 0 descriptor?? [ 161.118411][ T6080] F2FS-fs (loop4): invalid crc value [ 161.207164][ T6080] F2FS-fs (loop4): Found nat_bits in checkpoint [ 161.488274][ T5683] Bluetooth: hci3: command 0x041b tx timeout [ 161.568354][ T6080] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 161.572867][ T6096] loop2: detected capacity change from 0 to 164 [ 161.576080][ T6080] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 161.620921][ T26] audit: type=1804 audit(1718042875.242:258): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2189434371/syzkaller.0dlgug/90/bus/cgroup.controllers" dev="loop4" ino=10 res=1 errno=0 [ 161.660114][ T6080] attempt to access beyond end of device [ 161.660114][ T6080] loop4: rw=2049, want=45224, limit=40427 [ 161.806359][ T6098] tipc: Enabling of bearer rejected, failed to enable media [ 161.956388][ T6106] loop2: detected capacity change from 0 to 164 [ 161.985507][ T13] redragon 0003:0C45:760B.000A: unknown main item tag 0x0 [ 162.105767][ T13] redragon 0003:0C45:760B.000A: unknown main item tag 0x0 [ 162.114741][ T13] redragon 0003:0C45:760B.000A: hidraw0: USB HID v0.00 Device [HID 0c45:760b] on usb-dummy_hcd.3-1/input0 [ 162.201398][ T13] usb 4-1: USB disconnect, device number 8 [ 162.310234][ T3657] device hsr_slave_0 left promiscuous mode [ 162.317596][ T3657] device hsr_slave_1 left promiscuous mode [ 162.324723][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.332155][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.449351][ T6116] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 162.593843][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.716810][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.116411][ T3657] device bridge_slave_1 left promiscuous mode [ 163.147886][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.200111][ T3657] device bridge_slave_0 left promiscuous mode [ 163.209048][ T3657] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.233802][ T3657] device veth1_macvtap left promiscuous mode [ 163.250168][ T3657] device veth0_macvtap left promiscuous mode [ 163.262771][ T3657] device veth1_vlan left promiscuous mode [ 163.270306][ T3657] device veth0_vlan left promiscuous mode [ 163.583238][ T5683] Bluetooth: hci3: command 0x040f tx timeout [ 163.615278][ T3657] team0 (unregistering): Port device team_slave_1 removed [ 163.633696][ T3657] team0 (unregistering): Port device team_slave_0 removed [ 163.647525][ T3657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.671939][ T6121] loop3: detected capacity change from 0 to 40427 [ 163.678888][ T3657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.717871][ T6121] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 163.726219][ T6121] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 163.740956][ T6121] F2FS-fs (loop3): invalid crc value [ 163.759331][ T6121] F2FS-fs (loop3): Found nat_bits in checkpoint [ 163.779079][ T3657] bond0 (unregistering): Released all slaves [ 163.820671][ T6121] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 163.827900][ T6121] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 163.846549][ T6125] tipc: Enabling of bearer rejected, failed to enable media [ 163.887352][ T26] audit: type=1804 audit(1718042877.512:259): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3863146909/syzkaller.YGqs6T/75/bus/cgroup.controllers" dev="loop3" ino=10 res=1 errno=0 [ 163.889748][ T6040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 163.923508][ T6121] attempt to access beyond end of device [ 163.923508][ T6121] loop3: rw=2049, want=45224, limit=40427 [ 163.955359][ T6138] loop1: detected capacity change from 0 to 164 [ 163.972624][ T6040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 164.000099][ T6040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 164.032622][ T6040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 164.656656][ T6040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.719673][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.735117][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.774670][ T6040] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.055223][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.066487][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.075039][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.082102][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.100605][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.108994][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.121537][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.136782][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.144167][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.152008][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.160956][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.186444][ T1279] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 165.221147][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.231319][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.240952][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.251749][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.273968][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.289911][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.298837][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.318757][ T6040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.350703][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.359521][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.378349][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.640225][ T1279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.662958][ T3540] Bluetooth: hci3: command 0x0419 tx timeout [ 165.666738][ T1279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.680084][ T1279] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 165.690811][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.702968][ T1279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.704130][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.720754][ T1279] usb 5-1: config 0 descriptor?? [ 165.848496][ T6161] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 165.910126][ T6040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.580561][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.604335][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.699282][ T6166] tipc: Enabling of bearer rejected, failed to enable media [ 166.734460][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 166.750186][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.775919][ T6040] device veth0_vlan entered promiscuous mode [ 166.798377][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.811283][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.839768][ T6171] loop2: detected capacity change from 0 to 1024 [ 166.855251][ T6040] device veth1_vlan entered promiscuous mode [ 166.866507][ T6177] loop3: detected capacity change from 0 to 164 [ 166.890612][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 166.922132][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 166.943731][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.952529][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.970828][ T6040] device veth0_macvtap entered promiscuous mode [ 166.982371][ T9] hfsplus: b-tree write err: -5, ino 4 [ 166.999728][ T6040] device veth1_macvtap entered promiscuous mode [ 167.025895][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.030689][ T1279] redragon 0003:0C45:760B.000B: unknown main item tag 0x0 [ 167.052753][ T1279] redragon 0003:0C45:760B.000B: unknown main item tag 0x0 [ 167.071547][ T1279] redragon 0003:0C45:760B.000B: hidraw0: USB HID v0.00 Device [HID 0c45:760b] on usb-dummy_hcd.4-1/input0 [ 167.083961][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.114273][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.151340][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.171589][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.211713][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.253418][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.271413][ T1279] usb 5-1: USB disconnect, device number 8 [ 167.305385][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.322048][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.332451][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.243436][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.261835][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.438421][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.456131][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.487260][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.530530][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.619868][ T6192] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 168.701350][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.847805][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.912711][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.032760][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.414853][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.426504][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.442834][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.452205][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.477939][ T6040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.494097][ T6040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.525880][ T6040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.545444][ T6040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.568297][ T6201] tipc: Enabling of bearer rejected, failed to enable media [ 169.726484][ T6175] loop1: detected capacity change from 0 to 40427 [ 169.747599][ T6207] loop2: detected capacity change from 0 to 164 [ 169.750303][ T1393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.754106][ T4269] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 169.775724][ T1393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.792262][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.798224][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 169.809042][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.837356][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 169.968778][ T6211] loop4: detected capacity change from 0 to 1024 [ 170.042850][ T4269] usb 4-1: Using ep0 maxpacket: 32 [ 170.128000][ T3662] hfsplus: b-tree write err: -5, ino 4 [ 170.173085][ T4269] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 172.252938][ T4269] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 172.392802][ T4269] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 172.406305][ T6232] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 172.415789][ T4269] usb 4-1: Product: syz [ 172.419965][ T4269] usb 4-1: Manufacturer: syz [ 172.548073][ T6235] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 173.234877][ T6236] Zero length message leads to an empty skb [ 173.270498][ T6230] loop2: detected capacity change from 0 to 16 [ 173.326839][ T4269] usb 4-1: SerialNumber: syz [ 173.343993][ T4269] usb 4-1: config 0 descriptor?? [ 173.346933][ T6230] erofs: Unknown parameter 't5;} 7_cN"L'6~' [ 173.363141][ T6199] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 173.533570][ T6250] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 173.541463][ T6246] loop0: detected capacity change from 0 to 1024 [ 173.597418][ T3576] usb 4-1: USB disconnect, device number 9 [ 173.672284][ T3660] hfsplus: b-tree write err: -5, ino 4 [ 174.104212][ T6242] loop1: detected capacity change from 0 to 40427 [ 174.503301][ T6260] loop0: detected capacity change from 0 to 32768 [ 174.671649][ T6274] hub 9-0:1.0: USB hub found [ 174.677663][ T6274] hub 9-0:1.0: 8 ports detected [ 175.723203][ T6296] loop1: detected capacity change from 0 to 164 [ 175.734885][ T4872] Bluetooth: hci2: command 0x0406 tx timeout [ 175.754055][ T6260] XFS (loop0): Mounting V5 Filesystem [ 176.706427][ T6260] XFS (loop0): Ending clean mount [ 176.724560][ T6260] XFS (loop0): Quotacheck needed: Please wait. [ 176.780194][ T6260] XFS (loop0): Quotacheck: Done. [ 176.820596][ T6040] XFS (loop0): Unmounting Filesystem [ 177.280006][ T6321] hub 9-0:1.0: USB hub found [ 177.286214][ T6321] hub 9-0:1.0: 8 ports detected [ 178.304135][ T6338] loop4: detected capacity change from 0 to 164 [ 178.954373][ T6355] hub 9-0:1.0: USB hub found [ 178.961612][ T6355] hub 9-0:1.0: 8 ports detected [ 179.891871][ T6325] loop3: detected capacity change from 0 to 40427 [ 179.935253][ T6365] loop2: detected capacity change from 0 to 256 [ 180.243278][ T6348] loop0: detected capacity change from 0 to 32768 [ 180.249796][ T26] audit: type=1804 audit(1718042893.872:260): pid=6325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3863146909/syzkaller.YGqs6T/88/cgroup.controllers" dev="sda1" ino=1932 res=1 errno=0 [ 180.466028][ T26] audit: type=1800 audit(1718042894.072:261): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 180.704041][ T6399] hub 9-0:1.0: USB hub found [ 180.711655][ T6399] hub 9-0:1.0: 8 ports detected [ 181.454856][ T6405] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 181.601177][ T6414] loop4: detected capacity change from 0 to 1 [ 181.684531][ T6414] attempt to access beyond end of device [ 181.684531][ T6414] loop4: rw=2048, want=8, limit=1 [ 181.712966][ T6414] SQUASHFS error: Failed to read block 0x0: -5 [ 181.719299][ T6414] unable to read squashfs_super_block [ 181.840175][ T6414] [U] BI4~6#|GR [ 181.854027][ T6414] [U] ˝/U(IQ_VG\YW}6~I6,\k) failed (rc=-5) [ 194.136396][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.149185][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.157396][ T6735] ext4_test_bit(bit=15, block=4) = 0 [ 194.163018][ T6735] EXT4-fs (loop0): 1 orphan inode deleted [ 194.168962][ T6735] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.186035][ T4643] ================================================================== [ 194.194543][ T4643] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0 [ 194.202575][ T4643] Read of size 4 at addr ffff88805277c000 by task syz-executor.3/4643 [ 194.210746][ T4643] [ 194.213082][ T4643] CPU: 1 PID: 4643 Comm: syz-executor.3 Not tainted 5.15.160-syzkaller #0 [ 194.221593][ T4643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 194.231701][ T4643] Call Trace: [ 194.235013][ T4643] [ 194.237939][ T4643] dump_stack_lvl+0x1e3/0x2d0 [ 194.242638][ T4643] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 194.248292][ T4643] ? _printk+0xd1/0x120 [ 194.252472][ T4643] ? __wake_up_klogd+0xcc/0x100 [ 194.257349][ T4643] ? panic+0x860/0x860 [ 194.261434][ T4643] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 194.266935][ T4643] print_address_description+0x63/0x3b0 [ 194.272512][ T4643] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 194.278160][ T4643] kasan_report+0x16b/0x1c0 [ 194.282685][ T4643] ? ext4_xattr_delete_inode+0xcd0/0xce0 2024/06/10 18:08:27 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 194.288338][ T4643] ext4_xattr_delete_inode+0xcd0/0xce0 [ 194.293821][ T4643] ? ext4_blocks_for_truncate+0x270/0x270 [ 194.299563][ T4643] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 194.305650][ T4643] ? rcu_read_lock_any_held+0xb3/0x160 [ 194.311142][ T4643] ? ext4_inode_is_fast_symlink+0x262/0x390 [ 194.317061][ T4643] ext4_evict_inode+0xcb7/0x1100 [ 194.322019][ T4643] ? _raw_spin_unlock+0x24/0x40 [ 194.326902][ T4643] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 194.332820][ T4643] ? do_raw_spin_unlock+0x137/0x8b0 [ 194.338172][ T4643] ? _raw_spin_unlock+0x24/0x40 [ 194.343148][ T4643] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 194.349063][ T4643] evict+0x2a4/0x620 [ 194.353033][ T4643] vfs_rmdir+0x33c/0x460 [ 194.357309][ T4643] do_rmdir+0x368/0x670 [ 194.361483][ T4643] ? d_delete_notify+0x150/0x150 [ 194.366434][ T4643] ? strncpy_from_user+0x209/0x370 [ 194.371574][ T4643] ? syscall_enter_from_user_mode+0x2e/0x240 [ 194.377578][ T4643] __x64_sys_unlinkat+0xdc/0xf0 [ 194.383315][ T4643] do_syscall_64+0x3b/0xb0 [ 194.387751][ T4643] ? clear_bhb_loop+0x15/0x70 [ 194.392446][ T4643] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.398353][ T4643] RIP: 0033:0x7f606e727747 [ 194.402782][ T4643] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 194.422536][ T4643] RSP: 002b:00007ffdbacc24f8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 194.430975][ T4643] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f606e727747 [ 194.439051][ T4643] RDX: 0000000000000200 RSI: 00007ffdbacc36a0 RDI: 00000000ffffff9c [ 194.447041][ T4643] RBP: 00007f606e784636 R08: 0000000000000000 R09: 0000000000000000 [ 194.455045][ T4643] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffdbacc36a0 [ 194.463032][ T4643] R13: 00007f606e784636 R14: 000000000002f471 R15: 0000000000000008 [ 194.471037][ T4643] [ 194.474069][ T4643] [ 194.476396][ T4643] The buggy address belongs to the page: [ 194.482037][ T4643] page:ffffea000149df00 refcount:0 mapcount:-128 mapping:0000000000000000 index:0x100 pfn:0x5277c [ 194.492642][ T4643] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 194.499776][ T4643] raw: 00fff00000000000 ffffea00015ab688 ffffea000165d108 0000000000000000 [ 194.508458][ T4643] raw: 0000000000000100 0000000000000001 00000000ffffff7f 0000000000000000 [ 194.517046][ T4643] page dumped because: kasan: bad access detected [ 194.523474][ T4643] page_owner tracks the page as freed [ 194.528859][ T4643] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 6697, ts 192734296473, free_ts 193691069302 [ 194.543628][ T4643] get_page_from_freelist+0x322a/0x33c0 [ 194.549194][ T4643] __alloc_pages+0x272/0x700 [ 194.553808][ T4643] alloc_pages_vma+0x39a/0x800 [ 194.558586][ T4643] shmem_alloc_and_acct_page+0x4d1/0xd10 [ 194.564339][ T4643] shmem_getpage_gfp+0x17b1/0x3190 [ 194.569468][ T4643] shmem_fault+0x1d7/0x700 [ 194.573897][ T4643] __do_fault+0x139/0x340 [ 194.578242][ T4643] handle_mm_fault+0x376f/0x5950 [ 194.583300][ T4643] __get_user_pages+0x4ed/0x11d0 [ 194.588252][ T4643] populate_vma_page_range+0x215/0x2a0 [ 194.593727][ T4643] __mm_populate+0x2a5/0x4a0 [ 194.598619][ T4643] vm_mmap_pgoff+0x22b/0x2d0 [ 194.603227][ T4643] ksys_mmap_pgoff+0x13e/0x780 [ 194.608012][ T4643] do_syscall_64+0x3b/0xb0 [ 194.612437][ T4643] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.618426][ T4643] page last free stack trace: [ 194.623102][ T4643] free_unref_page_prepare+0xc34/0xcf0 [ 194.628576][ T4643] free_unref_page_list+0x1f7/0x8e0 [ 194.633792][ T4643] release_pages+0x1bb9/0x1f40 [ 194.638569][ T4643] __