last executing test programs: 27.599846213s ago: executing program 1 (id=680): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2208050, &(0x7f0000000140)=ANY=[], 0x1, 0x1516, &(0x7f0000001c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x61}, {}, {0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x6, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f000000}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 23.962153501s ago: executing program 1 (id=686): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r3, 0x1}, &(0x7f0000000080)=0x8) 23.739614621s ago: executing program 1 (id=689): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000006c0)={0x0, 0x2, 0x8}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x81, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000001c0), 0x8) 21.229020054s ago: executing program 1 (id=694): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000740)={[{@nodiscard}, {@whint_mode_fs}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5514, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) 20.411763529s ago: executing program 0 (id=695): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2208050, &(0x7f0000000140)=ANY=[], 0x1, 0x1516, &(0x7f0000001c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x61}, {}, {0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x6, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f000000}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 19.310407371s ago: executing program 0 (id=697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18.056670158s ago: executing program 1 (id=699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r5, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)) 17.888062923s ago: executing program 0 (id=701): r0 = socket$inet6(0xa, 0x6, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/208, 0xd0}, {0x0}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 15.247273508s ago: executing program 1 (id=706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r4, 0x0) r5 = dup2(0xffffffffffffffff, r4) read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0x2020) 14.241041081s ago: executing program 0 (id=708): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000740)={[{@nodiscard}, {@whint_mode_fs}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5514, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) 14.14118992s ago: executing program 3 (id=709): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) shutdown(r0, 0x1) 13.115959505s ago: executing program 3 (id=710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002340)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004005}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x321, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 12.727559911s ago: executing program 3 (id=711): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r2, @ANYBLOB="2000508004000500050002"], 0x3c}}, 0x0) 12.577297845s ago: executing program 3 (id=712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setuid(0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 12.469341085s ago: executing program 0 (id=713): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB="010000000000030000000f"], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) 11.611485375s ago: executing program 3 (id=714): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2020, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_pidfd_open(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') preadv(r1, &(0x7f0000001540)=[{&(0x7f0000000000)=""/100, 0x64}, {&(0x7f0000001600)=""/171, 0xab}], 0x2, 0x0, 0x0) 11.111417881s ago: executing program 3 (id=715): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f00000005c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.070405575s ago: executing program 0 (id=716): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2208050, &(0x7f0000000140)=ANY=[], 0x1, 0x1516, &(0x7f0000001c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x61}, {}, {0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x6, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f000000}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.549304371s ago: executing program 4 (id=728): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="e80000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b800128009000100766c616e00000000a80002800600010000000000040003800c00020004000000020000000c000200540a0000180000001c0004840c00010004000000000800000c0001000600000006000000640004800c00010000000100100001000c00010005000000680000000c00010005000000ee9500000c00010003000000018000000c00010008000000010000000c00010006000000020000000c0001007fae0000010000000c000100800000000600000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0xe8}, 0x1, 0xba01}, 0x0) 3.175221606s ago: executing program 4 (id=729): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028d80000bca30000000000003403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61144400000000001d430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.059231109s ago: executing program 4 (id=730): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000003, 0x0) 1.676032485s ago: executing program 2 (id=731): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x50}}, 0x0) 1.61804429s ago: executing program 2 (id=732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x3, 0x0, 0xa00}, 0x14}}, 0x0) 1.558827916s ago: executing program 2 (id=733): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.375805053s ago: executing program 2 (id=734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) link(0x0, &(0x7f0000000080)='./bus\x00') socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000a0000000800050000000000400003801400020077673000000000000000000000000000060007000000000008000500ac1414bb0500080000000000050008000000000008000100000000001c0003800800010002000000"], 0x78}}, 0x0) 942.372882ms ago: executing program 4 (id=735): r0 = socket$inet6(0xa, 0x6, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmmsg(r5, &(0x7f0000002980), 0x400000000000239, 0x0) 440.904769ms ago: executing program 2 (id=736): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB="9c010000", @ANYRES16=r0, @ANYBLOB="0500000000cf000000002100000008000300", @ANYRES32=r2, @ANYBLOB="0600f7000403000008009e0040"], 0x19c}}, 0x0) 159.807645ms ago: executing program 4 (id=737): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021415090700000028bd7000ffdbdf2505001700ffa000000a"], 0x38}}, 0x8000) 131.154238ms ago: executing program 4 (id=738): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x303, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), r0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0103000000000000000005"], 0x34}}, 0x0) 0s ago: executing program 2 (id=739): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004085}, 0x1) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000400)=[0x5], &(0x7f0000000200), &(0x7f0000000040)}) kernel console output (not intermixed with test programs): errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 130.682846][ T4494] loop1: detected capacity change from 0 to 40427 [ 130.688208][ T4487] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038 (0x7fffffff) [ 130.751035][ T4494] F2FS-fs (loop1): invalid crc value [ 130.953599][ T4494] F2FS-fs (loop1): Found nat_bits in checkpoint [ 131.040753][ T4494] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 131.057239][ T4503] syz.0.170[4503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.057748][ T4503] syz.0.170[4503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.296336][ T4494] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 131.338491][ T4505] Zero length message leads to an empty skb [ 132.190848][ T3914] attempt to access beyond end of device [ 132.190848][ T3914] loop1: rw=2049, want=45104, limit=40427 [ 132.218413][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 132.496301][ T4520] netlink: 'syz.0.174': attribute type 4 has an invalid length. [ 132.652563][ T3615] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.705676][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.712040][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.892457][ T4522] loop1: detected capacity change from 0 to 256 [ 132.934411][ T3615] usb 4-1: Using ep0 maxpacket: 8 [ 133.533586][ T3615] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 133.604473][ T3615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.803721][ T3615] usb 4-1: Product: syz [ 133.812796][ T3615] usb 4-1: Manufacturer: syz [ 133.827893][ T3615] usb 4-1: SerialNumber: syz [ 133.867993][ T3615] usb 4-1: config 0 descriptor?? [ 134.223006][ T3615] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 135.243952][ T3613] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 135.615616][ T4545] capability: warning: `syz.1.182' uses 32-bit capabilities (legacy support in use) [ 135.779746][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 135.779762][ T26] audit: type=1326 audit(1727414773.276:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.2.181" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f94359efee7 code=0x0 [ 135.792847][ T3613] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 135.883974][ T3613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.930030][ T3613] usb 5-1: config 0 descriptor?? [ 135.985097][ T3613] pwc: Samsung MPC-C10 USB webcam detected. [ 136.202662][ T3613] pwc: send_video_command error -71 [ 136.208144][ T3613] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 136.233780][ T3613] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 136.292599][ T1966] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 136.309834][ T3613] usb 5-1: USB disconnect, device number 3 [ 136.452881][ T3615] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 136.662241][ T4553] loop2: detected capacity change from 0 to 40427 [ 136.679510][ T3615] usb 4-1: USB disconnect, device number 4 [ 136.722846][ T1966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.747502][ T1966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.812793][ T1966] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 136.831647][ T4553] F2FS-fs (loop2): invalid crc value [ 136.850922][ T1966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.863563][ T4553] F2FS-fs (loop2): Found nat_bits in checkpoint [ 136.896613][ T4553] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 136.946342][ T4553] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 136.962751][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #300!!! [ 136.971846][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #300!!! [ 136.980839][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 136.989931][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 136.998915][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 137.118133][ T1966] usb 2-1: config 0 descriptor?? [ 137.222298][ T3613] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.982963][ T1966] monterey 0003:0566:3004.0002: item fetching failed at offset 0/8 [ 137.993010][ T1966] monterey: probe of 0003:0566:3004.0002 failed with error -22 [ 138.172740][ T3613] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 138.186415][ T3613] usb 5-1: can't read configurations, error -71 [ 139.018250][ T3615] usb 2-1: USB disconnect, device number 2 [ 139.681800][ T4580] loop3: detected capacity change from 0 to 256 [ 140.355315][ T4548] syz.0.183 (4548): drop_caches: 2 [ 140.356294][ T4580] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 140.371064][ T3571] attempt to access beyond end of device [ 140.371064][ T3571] loop2: rw=2049, want=45104, limit=40427 [ 140.403544][ T4581] netlink: 'syz.4.193': attribute type 4 has an invalid length. [ 142.358954][ T4597] loop1: detected capacity change from 0 to 40427 [ 142.363315][ T4602] loop3: detected capacity change from 0 to 1024 [ 142.388993][ T4597] F2FS-fs (loop1): invalid crc value [ 142.465058][ T4597] F2FS-fs (loop1): Found nat_bits in checkpoint [ 142.510925][ T4597] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 142.522754][ T4602] EXT4-fs (loop3): Ignoring removed orlov option [ 142.529124][ T4602] EXT4-fs (loop3): Ignoring removed orlov option [ 142.535643][ T4597] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 142.544955][ T4602] EXT4-fs (loop3): Ignoring removed nobh option [ 142.694754][ T4602] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,data_err=abort,barrier=0x0000000000000002,discard,norecovery,orlov,orlov,bsdgroups,max_batch_time=0x0000000000000002,user_xattr,nobh,,errors=continue. Quota mode: none. [ 143.973401][ T3914] attempt to access beyond end of device [ 143.973401][ T3914] loop1: rw=2049, want=45104, limit=40427 [ 144.278266][ T4619] loop2: detected capacity change from 0 to 256 [ 144.620600][ T4619] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 144.635219][ T4619] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 145.807972][ T4635] loop2: detected capacity change from 0 to 128 [ 147.892704][ T3613] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 148.029940][ T4658] device dummy0 entered promiscuous mode [ 148.029994][ T4658] device vlan2 entered promiscuous mode [ 148.049937][ T4658] device dummy0 left promiscuous mode [ 148.242761][ T3616] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.534021][ T3613] usb 4-1: Using ep0 maxpacket: 16 [ 148.643530][ T3616] usb 1-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 148.653011][ T3613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.665827][ T3616] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 148.672528][ T3613] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 148.699088][ T3616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.722543][ T3613] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 148.731674][ T3613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.743054][ T4660] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 148.770465][ T3616] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 148.789353][ T3613] usb 4-1: config 0 descriptor?? [ 148.932644][ T4045] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 149.212627][ T4045] usb 5-1: Using ep0 maxpacket: 8 [ 149.286449][ T3613] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 149.307068][ T3613] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 149.322689][ T1076] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 149.333328][ T4045] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 149.352973][ T3613] microsoft 0003:045E:07DA.0003: no inputs found [ 149.359957][ T3613] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 149.492704][ T4045] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 149.512586][ T4045] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 149.520758][ T4045] usb 5-1: Product: syz [ 149.532574][ T4045] usb 5-1: Manufacturer: syz [ 149.542154][ T4045] usb 5-1: SerialNumber: syz [ 149.572555][ T1076] usb 2-1: Using ep0 maxpacket: 32 [ 149.583165][ T4679] udc-core: couldn't find an available UDC or it's busy [ 149.603116][ T4679] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 149.692631][ T1076] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 149.702659][ T1076] usb 2-1: config 0 has no interface number 0 [ 149.842736][ T4045] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 149.861267][ T4045] usb 5-1: Handspring Visor / Palm OS: port 2, is for unknown use [ 149.869883][ T1076] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 149.872712][ T21] usb 4-1: USB disconnect, device number 5 [ 149.886730][ T4045] usb 5-1: Handspring Visor / Palm OS: port 11, is for unknown use [ 149.895137][ T1076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.906743][ T4045] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 149.916851][ T1076] usb 2-1: Product: syz [ 149.925914][ T1076] usb 2-1: Manufacturer: syz [ 149.934928][ T1076] usb 2-1: SerialNumber: syz [ 149.950471][ T1076] usb 2-1: config 0 descriptor?? [ 150.003851][ T1076] smsc95xx v2.0.0 [ 150.062680][ T4045] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 150.108124][ T4045] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 150.131268][ T4045] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 150.153454][ T4045] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 150.199746][ T3615] usb 1-1: USB disconnect, device number 6 [ 150.212093][ T4045] usb 5-1: USB disconnect, device number 6 [ 150.245089][ T4045] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 150.460360][ T1076] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 150.473680][ T1076] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 150.505211][ T4045] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 151.807053][ T4045] visor 5-1:1.0: device disconnected [ 151.891467][ T4703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.226'. [ 152.080015][ T4710] loop0: detected capacity change from 0 to 128 [ 152.333970][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 152.608656][ T1076] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 152.621552][ T1076] smsc95xx: probe of 2-1:0.67 failed with error -32 [ 152.679506][ T4728] loop3: detected capacity change from 0 to 256 [ 152.749203][ T4728] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 152.762069][ T4728] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 152.762860][ T21] usb 3-1: config 1 has an invalid interface number: 3 but max is 2 [ 152.794971][ T21] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 152.816236][ T21] usb 3-1: config 1 has no interface number 1 [ 152.826399][ T21] usb 3-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 152.842904][ T21] usb 3-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 152.861807][ T21] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.064202][ T21] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.342982][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.361068][ T21] usb 3-1: Product: syz [ 154.700676][ T21] usb 3-1: Manufacturer: syz [ 154.777977][ T21] usb 3-1: SerialNumber: syz [ 155.096961][ T21] usb 3-1: can't set config #1, error -71 [ 155.112885][ T21] usb 3-1: USB disconnect, device number 6 [ 155.118761][ T1076] usb 2-1: USB disconnect, device number 3 [ 158.443187][ T4777] loop2: detected capacity change from 0 to 256 [ 158.540403][ T4475] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 158.617644][ T4475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.647756][ T4475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.749301][ T4779] ODEBUG: Out of memory. ODEBUG disabled [ 159.023540][ T4779] syz.1.245 (4779): drop_caches: 2 [ 159.043861][ T4777] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 159.065577][ T4777] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 161.983189][ T3616] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 162.102658][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 162.262748][ T3616] usb 2-1: Using ep0 maxpacket: 32 [ 162.296976][ T4830] loop0: detected capacity change from 0 to 128 [ 162.393955][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 162.402741][ T3616] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 162.417351][ T3616] usb 2-1: config 0 has no interface number 0 [ 162.523301][ T21] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 162.540024][ T21] usb 4-1: config 0 has no interface number 0 [ 162.623146][ T3616] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 162.642739][ T3616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.650769][ T3616] usb 2-1: Product: syz [ 162.664581][ T3616] usb 2-1: Manufacturer: syz [ 162.670065][ T3616] usb 2-1: SerialNumber: syz [ 162.694563][ T3616] usb 2-1: config 0 descriptor?? [ 162.752785][ T21] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 162.763054][ T3616] smsc95xx v2.0.0 [ 162.766930][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.775836][ T21] usb 4-1: Product: syz [ 162.780089][ T21] usb 4-1: Manufacturer: syz [ 162.962639][ T3613] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 163.085016][ T21] usb 4-1: SerialNumber: syz [ 163.095569][ T21] usb 4-1: config 0 descriptor?? [ 163.153667][ T21] smsc95xx v2.0.0 [ 163.176734][ T3616] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 163.202562][ T3616] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 163.212946][ T3613] usb 3-1: Using ep0 maxpacket: 32 [ 163.332665][ T3613] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 163.458780][ T4844] loop4: detected capacity change from 0 to 256 [ 163.500175][ T3616] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 163.503486][ T3613] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 163.511694][ T3616] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 163.528101][ T3613] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 163.530548][ T3616] usb 2-1: USB disconnect, device number 4 [ 163.559027][ T3613] usb 3-1: Product: syz [ 163.576868][ T4844] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 163.578843][ T3613] usb 3-1: Manufacturer: syz [ 163.596408][ T3613] usb 3-1: SerialNumber: syz [ 163.609095][ T3613] usb 3-1: config 0 descriptor?? [ 163.612643][ T4844] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 163.632940][ T4836] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 163.978689][ T4848] udc-core: couldn't find an available UDC or it's busy [ 164.009120][ T4848] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 164.081577][ T21] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 164.097794][ T21] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 164.105501][ T1076] usb 3-1: USB disconnect, device number 7 [ 164.709011][ T21] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 164.723186][ T21] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 164.738380][ T21] usb 4-1: USB disconnect, device number 6 [ 166.402579][ T3616] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 166.813665][ T3616] usb 5-1: config 0 has no interfaces? [ 166.824887][ T3616] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 166.849539][ T3616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.884527][ T3616] usb 5-1: config 0 descriptor?? [ 167.102411][ T4876] loop1: detected capacity change from 0 to 128 [ 167.149857][ T1076] usb 5-1: USB disconnect, device number 7 [ 168.161039][ T26] audit: type=1326 audit(1727414805.656:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409fa47f39 code=0x7ffc0000 [ 168.192874][ T26] audit: type=1326 audit(1727414805.656:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409fa47f39 code=0x7ffc0000 [ 168.262521][ T3617] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 168.357706][ T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 168.451793][ T4897] loop1: detected capacity change from 0 to 256 [ 168.496273][ T26] audit: type=1326 audit(1727414805.676:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f409fa47f39 code=0x7ffc0000 [ 168.519174][ T3617] usb 1-1: Using ep0 maxpacket: 32 [ 168.571662][ T26] audit: type=1326 audit(1727414805.676:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409fa47f39 code=0x7ffc0000 [ 168.628910][ T4897] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 168.674449][ T4897] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 168.722310][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 168.864310][ T21] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.932397][ T26] audit: type=1326 audit(1727414805.676:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409fa47f39 code=0x7ffc0000 [ 168.964739][ T3617] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 169.146301][ T3617] usb 1-1: config 0 has no interface number 0 [ 169.192608][ T21] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.203323][ T21] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.214156][ T21] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.228865][ T21] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.803146][ T3617] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 169.867319][ T3617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.036539][ T3617] usb 1-1: Product: syz [ 170.112733][ T3617] usb 1-1: Manufacturer: syz [ 170.159528][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.175178][ T3617] usb 1-1: SerialNumber: syz [ 170.215834][ T3617] usb 1-1: config 0 descriptor?? [ 170.992822][ T21] usb 5-1: usb_control_msg returned -32 [ 170.998437][ T21] usbtmc 5-1:16.0: can't read capabilities [ 171.103280][ T3617] usb 1-1: can't set config #0, error -71 [ 171.111778][ T3617] usb 1-1: USB disconnect, device number 7 [ 171.212271][ T21] usb 5-1: USB disconnect, device number 8 [ 171.736158][ T4924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 171.776420][ T4926] loop3: detected capacity change from 0 to 128 [ 171.984646][ T3617] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 172.022837][ T3617] Bluetooth: hci1: Injecting HCI hardware error event [ 172.050392][ T3582] Bluetooth: hci1: hardware error 0x00 [ 172.522839][ T3617] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 172.777283][ T3617] usb 2-1: Using ep0 maxpacket: 16 [ 173.072832][ T26] audit: type=1326 audit(1727414810.516:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4943 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac48daef39 code=0x7ffc0000 [ 173.142733][ T3617] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 173.151817][ T3617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.183026][ T3617] usb 2-1: Product: syz [ 173.187235][ T3617] usb 2-1: Manufacturer: syz [ 173.191862][ T3617] usb 2-1: SerialNumber: syz [ 173.195653][ T4947] loop4: detected capacity change from 0 to 256 [ 173.197847][ T26] audit: type=1326 audit(1727414810.516:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4943 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac48daef39 code=0x7ffc0000 [ 173.229192][ T3617] r8152-cfgselector 2-1: config 0 descriptor?? [ 173.245162][ T26] audit: type=1326 audit(1727414810.516:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4943 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fac48daef39 code=0x7ffc0000 [ 173.401341][ T4947] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 173.641485][ T4947] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 173.796796][ T26] audit: type=1326 audit(1727414810.516:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4943 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac48daef39 code=0x7ffc0000 [ 173.832795][ T3615] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 174.086481][ T26] audit: type=1326 audit(1727414810.516:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4943 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac48daef39 code=0x7ffc0000 [ 174.399406][ T3615] usb 3-1: Using ep0 maxpacket: 16 [ 175.247965][ T3617] r8152-cfgselector 2-1: Unknown version 0x0000 [ 175.254442][ T3617] r8152-cfgselector 2-1: bad CDC descriptors [ 175.282937][ T3617] r8152-cfgselector 2-1: Unknown version 0x0000 [ 175.862878][ T3617] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 176.167501][ T3614] Bluetooth: hci0: command 0x0406 tx timeout [ 176.410419][ T4964] loop1: detected capacity change from 0 to 512 [ 176.432601][ T3615] usb 3-1: unable to read config index 0 descriptor/all [ 176.452301][ T3615] usb 3-1: can't read configurations, error -71 [ 176.580901][ T4964] EXT4-fs (loop1): 1 orphan inode deleted [ 176.612612][ T4964] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 176.711350][ T4964] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038 (0x7fffffff) [ 176.839022][ T4975] loop4: detected capacity change from 0 to 512 [ 176.933093][ T4975] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 177.022032][ T4978] syz.1.308[4978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.022678][ T4978] syz.1.308[4978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.458814][ T4975] EXT4-fs (loop4): 1 truncate cleaned up [ 177.655278][ T4975] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.081955][ T4969] loop2: detected capacity change from 0 to 40427 [ 179.453769][ T4969] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1) [ 179.519560][ T4969] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 179.618571][ T4969] F2FS-fs (loop2): invalid crc value [ 179.642732][ T4969] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 179.649078][ T5001] loop0: detected capacity change from 0 to 256 [ 180.012032][ T5001] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 180.352354][ T5001] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 182.588036][ T5024] loop4: detected capacity change from 0 to 512 [ 182.659612][ T5024] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 182.843637][ T5024] EXT4-fs (loop4): 1 truncate cleaned up [ 182.849477][ T5024] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.851212][ T5052] loop3: detected capacity change from 0 to 256 [ 184.982628][ T4045] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 185.119683][ T5052] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 185.342708][ T4045] usb 2-1: Using ep0 maxpacket: 8 [ 185.386059][ T5052] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 185.502752][ T4045] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 185.783389][ T26] audit: type=1326 audit(1727414823.256:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5059 comm="syz.0.338" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d3b79cf39 code=0x0 [ 185.849054][ T4045] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 185.872557][ T4045] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.880596][ T4045] usb 2-1: Product: syz [ 185.886222][ T4045] usb 2-1: Manufacturer: syz [ 185.891216][ T4045] usb 2-1: SerialNumber: syz [ 185.898819][ T4045] usb 2-1: config 0 descriptor?? [ 185.917383][ T5069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.336'. [ 185.999621][ T4045] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 186.584556][ T4045] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 186.852856][ T4045] usb 3-1: Using ep0 maxpacket: 16 [ 186.973581][ T4045] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 187.056396][ T4045] usb 3-1: config 0 has no interface number 0 [ 187.217145][ T4045] usb 3-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 187.452833][ T4045] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 187.470254][ T4045] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 187.525205][ T4045] usb 3-1: Product: syz [ 187.929184][ T4045] usb 3-1: SerialNumber: syz [ 187.943495][ T4045] usb 3-1: config 0 descriptor?? [ 187.985552][ T4045] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 188.021436][ T21] usb 2-1: USB disconnect, device number 6 [ 188.063978][ T5097] loop1: detected capacity change from 0 to 512 [ 188.073052][ T26] audit: type=1800 audit(1727414825.566:46): pid=5094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.345" name="/" dev="fuse" ino=1 res=0 errno=0 [ 188.137709][ T5097] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 188.248033][ T5097] EXT4-fs (loop1): 1 truncate cleaned up [ 188.254135][ T5097] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.280116][ T21] usb 3-1: USB disconnect, device number 10 [ 189.351844][ T5113] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 189.732728][ T2987] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 189.818251][ T5125] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 190.450876][ T5144] loop1: detected capacity change from 0 to 512 [ 190.668839][ T5144] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 190.884313][ T2987] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.908595][ T2987] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 190.918532][ T5144] EXT4-fs (loop1): 1 truncate cleaned up [ 190.928261][ T2987] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 190.942325][ T5144] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.949656][ T2987] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 190.962183][ T2987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.992831][ T5100] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 191.053697][ T2987] hub 4-1:1.0: bad descriptor, ignoring hub [ 191.073406][ T2987] hub: probe of 4-1:1.0 failed with error -5 [ 191.093043][ T2987] cdc_wdm 4-1:1.0: skipping garbage [ 191.098286][ T2987] cdc_wdm 4-1:1.0: skipping garbage [ 191.173086][ T2987] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 191.184060][ T2987] cdc_wdm 4-1:1.0: Unknown control protocol [ 191.512609][ T2987] usb 4-1: USB disconnect, device number 7 [ 192.955768][ T5186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 192.992832][ T3617] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 193.192308][ T5192] loop2: detected capacity change from 0 to 256 [ 193.254747][ T3617] usb 2-1: Using ep0 maxpacket: 32 [ 193.307785][ T5192] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 193.380231][ T5192] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 193.391640][ T3617] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 193.409292][ T3617] usb 2-1: config 0 has no interface number 0 [ 193.642740][ T1966] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 193.682015][ T5199] loop4: detected capacity change from 0 to 512 [ 193.749437][ T5199] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 193.923848][ T5199] EXT4-fs (loop4): 1 truncate cleaned up [ 193.958495][ T5199] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.150602][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.161036][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.283059][ T3617] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 194.571837][ T3617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.588884][ T3617] usb 2-1: Product: syz [ 194.601768][ T3617] usb 2-1: Manufacturer: syz [ 194.606621][ T3617] usb 2-1: SerialNumber: syz [ 194.613192][ T3617] usb 2-1: config 0 descriptor?? [ 194.654917][ T3617] smsc95xx v2.0.0 [ 194.852632][ T1966] usb 4-1: Using ep0 maxpacket: 8 [ 195.219610][ T5218] tipc: Enabling of bearer rejected, already enabled [ 195.676322][ T3617] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 195.730846][ T1966] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 196.221558][ T3617] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 196.262565][ T3617] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 196.282528][ T2987] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 196.348544][ T5223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.386'. [ 196.362628][ T3617] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 196.403083][ T1966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.411484][ T1966] usb 4-1: Product: syz [ 196.416254][ T1966] usb 4-1: Manufacturer: syz [ 196.419211][ T3617] usb 2-1: USB disconnect, device number 7 [ 196.420882][ T1966] usb 4-1: SerialNumber: syz [ 196.436064][ T1966] usb 4-1: config 0 descriptor?? [ 196.500495][ T4905] Bluetooth: hci4: command 0x0406 tx timeout [ 196.542704][ T2987] usb 3-1: Using ep0 maxpacket: 16 [ 196.601132][ T1966] usb 4-1: can't set config #0, error -71 [ 196.608332][ T1966] usb 4-1: USB disconnect, device number 8 [ 196.669963][ T5230] loop4: detected capacity change from 0 to 128 [ 196.766577][ T5234] loop0: detected capacity change from 0 to 512 [ 196.886356][ T2987] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 196.907779][ T2987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.939396][ T2987] usb 3-1: Product: syz [ 196.965890][ T2987] usb 3-1: Manufacturer: syz [ 196.977408][ T2987] usb 3-1: SerialNumber: syz [ 197.008047][ T2987] usb 3-1: config 0 descriptor?? [ 197.077764][ T5234] EXT4-fs (loop0): 1 orphan inode deleted [ 197.098394][ T5234] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 197.152531][ T2987] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 197.176209][ T5234] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038 (0x7fffffff) [ 197.359056][ T1076] usb 3-1: USB disconnect, device number 11 [ 197.365467][ T3656] usb 3-1: Failed to submit usb control message: -71 [ 197.384374][ T3656] usb 3-1: unable to send the bmi data to the device: -71 [ 197.420362][ T3656] usb 3-1: unable to get target info from device [ 197.443034][ T3656] usb 3-1: could not get target info (-71) [ 197.451029][ T3656] usb 3-1: could not probe fw (-71) [ 197.566439][ T5250] syz.0.390[5250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.566932][ T5250] syz.0.390[5250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.910602][ T5252] loop1: detected capacity change from 0 to 512 [ 198.132687][ T5252] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 198.195015][ T5252] EXT4-fs (loop1): 1 truncate cleaned up [ 198.201329][ T5252] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 198.308526][ T5259] tipc: Enabling of bearer rejected, already enabled [ 199.402609][ T1076] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 199.712647][ T1076] usb 1-1: Using ep0 maxpacket: 16 [ 199.833296][ T1076] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.952609][ T1076] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.992578][ T1076] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 200.044865][ T1076] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 200.084795][ T1076] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.132802][ T1076] usb 1-1: config 0 descriptor?? [ 200.302693][ T1966] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 200.722750][ T1966] usb 2-1: Using ep0 maxpacket: 8 [ 201.092956][ T1966] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 201.210800][ T1966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.249922][ T1966] usb 2-1: Product: syz [ 201.269698][ T1966] usb 2-1: Manufacturer: syz [ 201.282567][ T1966] usb 2-1: SerialNumber: syz [ 201.341292][ T1076] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input8 [ 201.345394][ T1966] usb 2-1: config 0 descriptor?? [ 201.402777][ T5286] loop2: detected capacity change from 0 to 512 [ 201.445007][ T1076] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 201.480930][ T1076] usb 1-1: USB disconnect, device number 8 [ 201.501091][ T5291] syz.4.403 uses obsolete (PF_INET,SOCK_PACKET) [ 201.636923][ T5286] EXT4-fs (loop2): 1 orphan inode deleted [ 201.661202][ T5286] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 201.682066][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.689156][ T1966] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 201.731179][ T3585] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 201.802369][ T3585] Bluetooth: Unexpected continuation frame (len 18) [ 201.829303][ T5286] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038 (0x7fffffff) [ 201.909127][ T5300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 201.946108][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 201.948594][ T5300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.090747][ T5300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.106222][ T5300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.117233][ T5300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.838329][ T5316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 204.003829][ T5316] fuse: Bad value for 'fd' [ 204.322678][ T1966] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 204.341044][ T1966] usb 2-1: USB disconnect, device number 8 [ 204.626032][ T5334] loop2: detected capacity change from 0 to 256 [ 206.263369][ T5334] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 206.462611][ T1966] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 206.586888][ T5345] netlink: 'syz.3.421': attribute type 4 has an invalid length. [ 206.727478][ T1966] usb 2-1: Using ep0 maxpacket: 8 [ 207.165601][ T1966] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 207.219970][ T5354] loop4: detected capacity change from 0 to 256 [ 207.242620][ T1966] usb 2-1: string descriptor 0 read error: -71 [ 207.253986][ T1966] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 207.268716][ T1966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.289693][ T1966] usb 2-1: config 0 descriptor?? [ 207.295368][ T5354] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 207.327419][ T1966] usb 2-1: can't set config #0, error -71 [ 207.340941][ T1966] usb 2-1: USB disconnect, device number 9 [ 207.934014][ T1966] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 208.002732][ T3617] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 208.383286][ T3617] usb 3-1: Using ep0 maxpacket: 16 [ 208.392499][ T1076] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 208.519940][ T5370] loop0: detected capacity change from 0 to 1024 [ 208.630610][ T5370] EXT4-fs (loop0): Ignoring removed orlov option [ 208.637176][ T5370] EXT4-fs (loop0): Ignoring removed orlov option [ 208.644496][ T5370] EXT4-fs (loop0): Ignoring removed nobh option [ 208.655932][ T5370] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,data_err=abort,barrier=0x0000000000000002,discard,norecovery,orlov,orlov,bsdgroups,max_batch_time=0x0000000000000002,user_xattr,nobh,,errors=continue. Quota mode: none. [ 208.763154][ T1966] usb 2-1: Using ep0 maxpacket: 8 [ 209.063196][ T1966] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 209.089361][ T1966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.137775][ T1966] usb 2-1: Product: syz [ 209.166857][ T1966] usb 2-1: Manufacturer: syz [ 209.194315][ T1966] usb 2-1: SerialNumber: syz [ 209.254058][ T1966] usb 2-1: config 0 descriptor?? [ 209.455129][ T3617] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 209.465263][ T3617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.473426][ T3617] usb 3-1: Product: syz [ 209.477607][ T3617] usb 3-1: Manufacturer: syz [ 209.482205][ T3617] usb 3-1: SerialNumber: syz [ 209.509247][ T3617] usb 3-1: config 0 descriptor?? [ 209.554209][ T3617] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 209.569728][ T1076] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.601006][ T1076] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 209.630112][ T1076] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 209.722782][ T1966] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 209.779388][ T5360] netlink: 'syz.2.426': attribute type 10 has an invalid length. [ 209.804099][ T5360] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.811481][ T5360] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.826420][ T1076] usb 5-1: New USB device found, idVendor=0086, idProduct=0b5b, bcdDevice=e1.c5 [ 209.832139][ T5360] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.842622][ T5360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.850114][ T5360] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.857266][ T5360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.886417][ T5360] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 210.007256][ T1076] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.016320][ T1076] usb 5-1: Product: syz [ 210.020591][ T1076] usb 5-1: Manufacturer: syz [ 210.025489][ T3617] ssu100: probe of 3-1:0.0 failed with error -110 [ 210.032508][ T1076] usb 5-1: SerialNumber: syz [ 210.056199][ T1076] usb 5-1: config 0 descriptor?? [ 210.137994][ T5393] input: syz1 as /devices/virtual/input/input9 [ 210.258880][ T5394] netlink: 'syz.0.437': attribute type 10 has an invalid length. [ 210.280714][ T5394] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 210.326776][ T3617] usb 5-1: USB disconnect, device number 9 [ 210.932215][ T5399] loop3: detected capacity change from 0 to 256 [ 211.043873][ T5399] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 211.068698][ T21] usb 3-1: USB disconnect, device number 12 [ 211.708884][ T1076] Bluetooth: hci5: command 0x0406 tx timeout [ 211.849042][ T5415] loop4: detected capacity change from 0 to 1024 [ 211.980331][ T5415] EXT4-fs (loop4): Ignoring removed orlov option [ 211.990336][ T5415] EXT4-fs (loop4): Ignoring removed orlov option [ 212.037995][ T5415] EXT4-fs (loop4): Ignoring removed nobh option [ 212.099185][ T5415] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,data_err=abort,barrier=0x0000000000000002,discard,norecovery,orlov,orlov,bsdgroups,max_batch_time=0x0000000000000002,user_xattr,nobh,,errors=continue. Quota mode: none. [ 212.124778][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.254435][ T1966] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 212.289182][ T1966] usb 2-1: USB disconnect, device number 10 [ 213.012615][ T1076] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 213.162735][ T5433] device bond_slave_0 entered promiscuous mode [ 213.162859][ T5433] device bond_slave_1 entered promiscuous mode [ 213.163061][ T5433] device vlan2 entered promiscuous mode [ 213.163105][ T5433] device bond0 entered promiscuous mode [ 213.166409][ T5433] device bond0 left promiscuous mode [ 213.166786][ T5433] device bond_slave_0 left promiscuous mode [ 213.166825][ T5433] device bond_slave_1 left promiscuous mode [ 213.272560][ T3617] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 213.314118][ T1076] usb 4-1: Using ep0 maxpacket: 16 [ 213.396757][ T5437] sg_read: process 165 (syz.1.448) changed security contexts after opening file descriptor, this is not allowed. [ 213.532891][ T4045] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 213.592882][ T1076] usb 4-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 213.606113][ T1076] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.626797][ T1076] usb 4-1: Product: syz [ 213.631200][ T1076] usb 4-1: Manufacturer: syz [ 213.636798][ T1076] usb 4-1: SerialNumber: syz [ 213.652760][ T3617] usb 1-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 213.722829][ T3617] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 213.733470][ T1076] usb 4-1: config 0 descriptor?? [ 213.739721][ T3617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.774285][ T1076] usb 4-1: Found UVC 0.00 device syz (046d:0721) [ 213.782895][ T5431] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 213.789943][ T4045] usb 5-1: Using ep0 maxpacket: 16 [ 213.797018][ T1076] usb 4-1: No valid video chain found. [ 213.826338][ T3617] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 213.902778][ T4905] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 213.912715][ T4045] usb 5-1: config 253 has an invalid interface number: 157 but max is 3 [ 213.922651][ T4045] usb 5-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 213.931735][ T4045] usb 5-1: config 253 has an invalid interface number: 213 but max is 3 [ 213.940273][ T4045] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 213.952486][ T4045] usb 5-1: config 253 has 2 interfaces, different from the descriptor's value: 4 [ 213.961735][ T4045] usb 5-1: config 253 has no interface number 0 [ 213.968713][ T4045] usb 5-1: config 253 has no interface number 1 [ 213.982705][ T4045] usb 5-1: config 253 interface 157 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 214.007180][ T4045] usb 5-1: config 253 interface 157 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 214.019454][ T4045] usb 5-1: config 253 interface 157 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 214.030402][ T4045] usb 5-1: config 253 interface 213 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 214.044276][ T4045] usb 5-1: config 253 interface 157 has no altsetting 0 [ 214.051278][ T4045] usb 5-1: config 253 interface 213 has no altsetting 0 [ 214.212746][ T4045] usb 5-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 214.225464][ T4045] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.233651][ T4045] usb 5-1: Product: syz [ 214.237969][ T4045] usb 5-1: Manufacturer: syz [ 214.245458][ T4045] usb 5-1: SerialNumber: syz [ 214.282793][ T4905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.297212][ T4905] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 214.306347][ T4905] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.315551][ T4905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.329574][ T4905] usb 2-1: config 0 descriptor?? [ 214.517755][ T4045] r8712u: register rtl8712_netdev_ops to netdev_ops [ 214.532900][ T4045] usb 5-1: r8712u: USB_SPEED_HIGH with 4 endpoints [ 214.586039][ T4045] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 214.600383][ T4045] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 214.610099][ T4045] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 214.697503][ T4045] usb 5-1: Found UVC 0.00 device syz (0b05:1791) [ 214.709886][ T4045] usb 5-1: No valid video chain found. [ 214.741101][ T4045] r8712u: register rtl8712_netdev_ops to netdev_ops [ 214.758851][ T4045] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 214.804536][ T4045] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 214.815472][ T4045] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 214.828540][ T4045] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 214.854787][ T4045] usb 5-1: USB disconnect, device number 10 [ 214.972679][ T4905] usb 2-1: string descriptor 0 read error: -71 [ 214.986410][ T4905] usb 2-1: USB disconnect, device number 11 [ 215.084568][ T3617] usb 4-1: USB disconnect, device number 9 [ 215.153111][ T1076] usb 1-1: USB disconnect, device number 9 [ 215.341698][ T5467] loop3: detected capacity change from 0 to 1024 [ 215.677731][ T5467] EXT4-fs (loop3): Ignoring removed orlov option [ 215.769107][ T5467] EXT4-fs (loop3): Ignoring removed orlov option [ 215.892283][ T5467] EXT4-fs (loop3): Ignoring removed nobh option [ 216.079699][ T5467] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,data_err=abort,barrier=0x0000000000000002,discard,norecovery,orlov,orlov,bsdgroups,max_batch_time=0x0000000000000002,user_xattr,nobh,,errors=continue. Quota mode: none. [ 216.252571][ T1076] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 216.843996][ T1076] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.05 [ 216.895896][ T1076] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 217.002684][ T1076] usb 1-1: SerialNumber: syz [ 217.139264][ T1076] usb 1-1: config 0 descriptor?? [ 217.503758][ T5509] netlink: 'syz.4.470': attribute type 10 has an invalid length. [ 217.524515][ T5509] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.531936][ T5509] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.574279][ T5509] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.581492][ T5509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.588983][ T5509] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.596126][ T5509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.638829][ T5509] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 217.658367][ T5511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.470'. [ 217.668522][ T5511] device bridge_slave_1 left promiscuous mode [ 217.682774][ T5511] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.739190][ T5511] device bridge_slave_0 left promiscuous mode [ 217.771863][ T5511] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.802223][ T5520] loop1: detected capacity change from 0 to 1024 [ 217.829401][ T5511] bond0: (slave bridge0): Releasing backup interface [ 217.877745][ T1076] usb 1-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1f, error -71 [ 217.892686][ T5520] EXT4-fs (loop1): Ignoring removed orlov option [ 217.895154][ T1076] usb 1-1: Firmware version (0.0) predates our first public release. [ 217.908082][ T5520] EXT4-fs (loop1): Ignoring removed orlov option [ 217.909122][ T1076] usb 1-1: Please update to version 0.2 or newer [ 217.929752][ T5520] EXT4-fs (loop1): Ignoring removed nobh option [ 217.936620][ T1076] usb 1-1: atusb_probe: initialization failed, error = -71 [ 217.944526][ T1076] atusb: probe of 1-1:0.0 failed with error -71 [ 217.995350][ T1076] usb 1-1: USB disconnect, device number 10 [ 218.000768][ T5520] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,data_err=abort,barrier=0x0000000000000002,discard,norecovery,orlov,orlov,bsdgroups,max_batch_time=0x0000000000000002,user_xattr,nobh,,errors=continue. Quota mode: none. [ 218.181251][ T5532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'. [ 218.207496][ T5532] device bridge_slave_1 left promiscuous mode [ 218.214975][ T5532] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.322614][ T2987] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 218.480848][ T5534] program syz.0.478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.737708][ T5532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.833411][ T2987] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.964789][ T2987] usb 4-1: config 0 has no interfaces? [ 218.970310][ T2987] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.082557][ T2987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.155222][ T2987] usb 4-1: config 0 descriptor?? [ 219.262737][ T26] audit: type=1800 audit(1727414856.706:47): pid=5547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.483" name="/" dev="fuse" ino=1 res=0 errno=0 [ 219.334152][ T26] audit: type=1800 audit(1727414856.706:48): pid=5547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.483" name="/" dev="fuse" ino=1 res=0 errno=0 [ 219.405002][ T4045] usb 4-1: USB disconnect, device number 10 [ 219.411440][ T5557] process 'syz.4.486' launched './file1' with NULL argv: empty string added [ 220.697595][ T5574] loop3: detected capacity change from 0 to 1024 [ 221.334317][ T5574] EXT4-fs (loop3): Ignoring removed orlov option [ 221.354309][ T5574] EXT4-fs (loop3): Ignoring removed orlov option [ 221.360724][ T5574] EXT4-fs (loop3): Ignoring removed nobh option [ 221.520702][ T5574] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,data_err=abort,barrier=0x0000000000000002,discard,norecovery,orlov,orlov,bsdgroups,max_batch_time=0x0000000000000002,user_xattr,nobh,,errors=continue. Quota mode: none. [ 222.036808][ T5603] loop8: detected capacity change from 0 to 7 [ 222.088398][ T5603] Dev loop8: unable to read RDB block 7 [ 222.117584][ T5603] loop8: unable to read partition table [ 222.141603][ T5603] loop8: partition table beyond EOD, truncated [ 222.141981][ T5603] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 222.141981][ T5603] ) failed (rc=-5) [ 222.563200][ T3559] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 222.873212][ T3559] usb 3-1: Using ep0 maxpacket: 8 [ 223.243772][ T3559] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 223.317898][ T3559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.438963][ T3559] usb 3-1: Product: syz [ 223.452471][ T3559] usb 3-1: Manufacturer: syz [ 223.457104][ T3559] usb 3-1: SerialNumber: syz [ 223.532713][ T3559] usb 3-1: config 0 descriptor?? [ 223.883814][ T3559] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 224.506863][ T5640] loop3: detected capacity change from 0 to 1024 [ 224.679753][ T5640] EXT4-fs (loop3): Ignoring removed orlov option [ 224.707098][ T5640] EXT4-fs (loop3): Ignoring removed orlov option [ 224.730851][ T5640] EXT4-fs (loop3): Ignoring removed nobh option [ 224.764296][ T5640] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,data_err=abort,barrier=0x0000000000000002,discard,norecovery,orlov,orlov,bsdgroups,max_batch_time=0x0000000000000002,user_xattr,nobh,,errors=continue. Quota mode: none. [ 225.113992][ T5649] sp0: Synchronizing with TNC [ 225.541547][ T5641] [U] è [ 225.867049][ T5652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.514'. [ 225.876584][ T5652] tipc: Started in network mode [ 225.881474][ T5652] tipc: Node identity 300000002d0001006e, cluster identity 8 [ 227.052891][ T3559] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 227.129333][ T3559] usb 3-1: USB disconnect, device number 13 [ 229.702760][ T3559] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 230.012588][ T3559] usb 2-1: Using ep0 maxpacket: 8 [ 230.333157][ T3559] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 230.342568][ T3559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.377654][ T3559] usb 2-1: Product: syz [ 230.382104][ T3559] usb 2-1: Manufacturer: syz [ 230.402603][ T3559] usb 2-1: SerialNumber: syz [ 230.425308][ T3559] usb 2-1: config 0 descriptor?? [ 230.830296][ T3559] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 232.902728][ T5762] input: syz0 as /devices/virtual/input/input11 [ 233.872988][ T3559] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 234.598086][ T3559] usb 2-1: USB disconnect, device number 12 [ 234.884074][ T5773] loop2: detected capacity change from 0 to 1024 [ 235.337654][ T5773] EXT4-fs (loop2): Ignoring removed orlov option [ 236.132569][ T5773] EXT4-fs (loop2): Ignoring removed orlov option [ 236.182676][ T5773] EXT4-fs (loop2): Ignoring removed nobh option [ 236.289720][ T5773] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,data_err=abort,barrier=0x0000000000000002,discard,norecovery,orlov,orlov,bsdgroups,max_batch_time=0x0000000000000002,user_xattr,nobh,,errors=continue. Quota mode: none. [ 236.366149][ T5800] loop1: detected capacity change from 0 to 512 [ 237.560964][ T5808] tipc: Enabled bearer , priority 10 [ 238.254579][ T5800] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.563: corrupted inode contents [ 238.277346][ T5800] EXT4-fs error (device loop1): ext4_dirty_inode:6007: inode #3: comm syz.1.563: mark_inode_dirty error [ 238.310506][ T5800] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.563: corrupted inode contents [ 238.492570][ T5800] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.563: mark_inode_dirty error [ 239.653032][ T4045] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 239.736956][ T5800] Quota error (device loop1): write_blk: dquota write failed [ 239.798906][ T5800] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 239.810095][ T1076] tipc: Node number set to 1929380096 [ 239.837474][ T5800] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.563: Failed to acquire dquot type 0 [ 240.162488][ T4045] usb 4-1: Using ep0 maxpacket: 8 [ 240.250928][ T5800] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.563: corrupted inode contents [ 240.269731][ T5800] EXT4-fs error (device loop1): ext4_dirty_inode:6007: inode #16: comm syz.1.563: mark_inode_dirty error [ 240.281805][ T5800] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.563: corrupted inode contents [ 240.298224][ T5800] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.563: mark_inode_dirty error [ 240.310795][ T5800] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.563: corrupted inode contents [ 240.336516][ T5800] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 240.348376][ T5800] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.563: corrupted inode contents [ 240.524769][ T5800] EXT4-fs error (device loop1): ext4_truncate:4272: inode #16: comm syz.1.563: mark_inode_dirty error [ 240.543831][ T5800] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 240.616948][ T4045] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 240.653518][ T5800] EXT4-fs (loop1): 1 truncate cleaned up [ 240.659412][ T5800] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.661188][ T4045] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.685342][ T4045] usb 4-1: Product: syz [ 240.689648][ T4045] usb 4-1: Manufacturer: syz [ 240.696695][ T4045] usb 4-1: SerialNumber: syz [ 240.697669][ T5800] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038 (0x7fffffff) [ 240.734619][ T4045] usb 4-1: config 0 descriptor?? [ 241.736238][ T4045] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 242.139246][ T5847] loop4: detected capacity change from 0 to 40427 [ 242.255995][ T5847] F2FS-fs (loop4): invalid crc value [ 242.397697][ T5847] F2FS-fs (loop4): Found nat_bits in checkpoint [ 242.470924][ T5847] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 242.513250][ T5847] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 244.002669][ T4045] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -110 [ 244.205399][ T1076] usb 4-1: USB disconnect, device number 11 [ 244.254902][ T3568] attempt to access beyond end of device [ 244.254902][ T3568] loop4: rw=2049, want=45104, limit=40427 [ 244.721834][ T5873] loop1: detected capacity change from 0 to 512 [ 245.285281][ T5873] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.583: corrupted inode contents [ 245.419167][ T5883] device wlan0 entered promiscuous mode [ 245.442808][ T5873] EXT4-fs error (device loop1): ext4_dirty_inode:6007: inode #3: comm syz.1.583: mark_inode_dirty error [ 245.465015][ T5883] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 245.495865][ T5873] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.583: corrupted inode contents [ 245.594075][ T5873] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.583: mark_inode_dirty error [ 245.703485][ T5873] Quota error (device loop1): write_blk: dquota write failed [ 245.724459][ T5884] device bond0 entered promiscuous mode [ 245.730044][ T5884] device bond_slave_0 entered promiscuous mode [ 245.742687][ T5873] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 246.247789][ T5873] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.583: Failed to acquire dquot type 0 [ 246.406791][ T5884] device bond_slave_1 entered promiscuous mode [ 246.430572][ T5873] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.583: corrupted inode contents [ 246.485521][ T5884] device bridge0 entered promiscuous mode [ 246.491420][ T5884] device syz_tun entered promiscuous mode [ 246.509183][ T5873] EXT4-fs error (device loop1): ext4_dirty_inode:6007: inode #16: comm syz.1.583: mark_inode_dirty error [ 246.572270][ T5884] device macvlan2 entered promiscuous mode [ 246.579980][ T5873] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.583: corrupted inode contents [ 246.642758][ T5873] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.583: mark_inode_dirty error [ 246.675084][ T5873] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.583: corrupted inode contents [ 246.781308][ T5873] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 247.013427][ T5873] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.583: corrupted inode contents [ 247.221195][ T5873] EXT4-fs error (device loop1): ext4_truncate:4272: inode #16: comm syz.1.583: mark_inode_dirty error [ 247.611977][ T2987] Bluetooth: hci2: command 0x0409 tx timeout [ 247.676025][ T5873] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 247.691693][ T5873] EXT4-fs (loop1): 1 truncate cleaned up [ 247.712630][ T5873] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 247.919394][ T5900] loop3: detected capacity change from 0 to 1024 [ 247.926073][ T5873] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038 (0x7fffffff) [ 248.067271][ T5900] EXT4-fs (loop3): Ignoring removed orlov option [ 248.110257][ T5900] EXT4-fs (loop3): Ignoring removed orlov option [ 248.309511][ T5900] EXT4-fs (loop3): Ignoring removed nobh option [ 248.398814][ T5910] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 248.504850][ T5900] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,data_err=abort,barrier=0x0000000000000002,discard,norecovery,orlov,orlov,bsdgroups,max_batch_time=0x0000000000000002,user_xattr,nobh,,errors=continue. Quota mode: none. [ 248.644355][ T5908] loop4: detected capacity change from 0 to 40427 [ 248.690835][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 248.727390][ T5908] F2FS-fs (loop4): invalid crc value [ 248.903639][ T5915] tipc: Started in network mode [ 248.908554][ T5915] tipc: Node identity ac1414aa, cluster identity 4711 [ 248.915966][ T5915] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 248.923380][ T5915] tipc: Enabled bearer , priority 10 [ 249.062700][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 249.065438][ T5908] F2FS-fs (loop4): Found nat_bits in checkpoint [ 249.202594][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 249.223405][ T5908] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 249.237678][ T5908] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 249.352625][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 249.492776][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 249.632663][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 249.662899][ T2987] Bluetooth: hci2: command 0x041b tx timeout [ 249.772585][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 249.865403][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.892966][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.922912][ T5877] device bridge_slave_0 entered promiscuous mode [ 249.963916][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.010362][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.050050][ T5877] device bridge_slave_1 entered promiscuous mode [ 250.102625][ T3568] attempt to access beyond end of device [ 250.102625][ T3568] loop4: rw=2049, want=45104, limit=40427 [ 250.106081][ T1966] tipc: Node number set to 2886997162 [ 250.114080][ T3617] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 250.202594][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 250.215512][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.271667][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.471889][ T5877] team0: Port device team_slave_0 added [ 250.478221][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 250.541015][ T5877] team0: Port device team_slave_1 added [ 250.659057][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.691648][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.724156][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.737122][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.744265][ T3617] usb 2-1: Using ep0 maxpacket: 8 [ 250.749499][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.775959][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.838300][ T5877] device hsr_slave_0 entered promiscuous mode [ 250.863721][ T5877] device hsr_slave_1 entered promiscuous mode [ 250.882708][ T5877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.890314][ T5877] Cannot create hsr debugfs directory [ 251.002764][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 251.162610][ T3617] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 251.171687][ T3617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.987344][ T3617] usb 2-1: Product: syz [ 251.991960][ T3617] usb 2-1: Manufacturer: syz [ 252.001095][ T3617] usb 2-1: SerialNumber: syz [ 252.013422][ T2987] Bluetooth: hci2: command 0x040f tx timeout [ 252.020489][ T3617] usb 2-1: config 0 descriptor?? [ 252.025398][ T5877] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.376249][ T5877] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.432989][ T3617] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 252.812584][ T5955] loop0: detected capacity change from 0 to 128 [ 254.152117][ T4045] Bluetooth: hci2: command 0x0419 tx timeout [ 254.152610][ C1] net_ratelimit: 2 callbacks suppressed [ 254.152626][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 254.184804][ T5877] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.256923][ T5877] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.322625][ T3614] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 254.382886][ T5963] tipc: Enabling of bearer rejected, already enabled [ 254.582847][ T3614] usb 4-1: device descriptor read/64, error -71 [ 254.862806][ T3614] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 255.166144][ T3614] usb 4-1: device descriptor read/64, error -71 [ 255.182566][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 255.308795][ T3614] usb usb4-port1: attempt power cycle [ 255.358566][ T5877] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 255.368366][ T5877] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 255.391518][ T5877] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 255.439260][ T5877] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 255.518945][ T5968] loop0: detected capacity change from 0 to 40427 [ 255.594811][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.605473][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.654460][ T5968] F2FS-fs (loop0): invalid crc value [ 255.719579][ T5968] F2FS-fs (loop0): Found nat_bits in checkpoint [ 255.768268][ T5968] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 255.791400][ T5968] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 255.922603][ T3617] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 255.938594][ T3617] usb 2-1: USB disconnect, device number 13 [ 256.000197][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.071918][ T3614] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 256.232654][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 256.303989][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.313119][ T3614] usb 4-1: device descriptor read/8, error -71 [ 256.342746][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.377961][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.386419][ T26] audit: type=1326 audit(1727414893.886:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.4.606" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac48daef39 code=0x0 [ 256.523578][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 256.540508][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.572658][ T26] audit: type=1326 audit(1727414894.036:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.3.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62491eef39 code=0x7ffc0000 [ 256.625823][ T3662] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.633055][ T3662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.641748][ T3569] attempt to access beyond end of device [ 256.641748][ T3569] loop0: rw=2049, want=45104, limit=40427 [ 256.652691][ T26] audit: type=1326 audit(1727414894.036:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.3.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f62491eef39 code=0x7ffc0000 [ 256.703122][ T26] audit: type=1326 audit(1727414894.036:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.3.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62491eef39 code=0x7ffc0000 [ 256.753213][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.778040][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.797838][ T26] audit: type=1326 audit(1727414894.036:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.3.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62491eef39 code=0x7ffc0000 [ 256.843212][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.862759][ T3662] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.869883][ T3662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.892567][ T26] audit: type=1326 audit(1727414894.056:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.3.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62491eef39 code=0x7ffc0000 [ 256.930391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.953280][ T26] audit: type=1326 audit(1727414894.056:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.3.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62491eef39 code=0x7ffc0000 [ 256.980238][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.005571][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.055749][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.067137][ T26] audit: type=1326 audit(1727414894.066:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.3.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f62491eef39 code=0x7ffc0000 [ 257.103392][ T26] audit: type=1326 audit(1727414894.096:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.3.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62491eef39 code=0x7ffc0000 [ 257.168996][ T26] audit: type=1326 audit(1727414894.096:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.3.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62491eef39 code=0x7ffc0000 [ 257.208387][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.225839][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.238945][ T5994] loop1: detected capacity change from 0 to 128 [ 257.246477][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.262597][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 257.265829][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.350895][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.366646][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.378330][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.536101][ T4461] tipc: Disabling bearer [ 257.577867][ T4461] tipc: Left network mode [ 257.666442][ T6001] loop0: detected capacity change from 0 to 512 [ 258.037420][ T6001] EXT4-fs (loop0): 1 orphan inode deleted [ 258.052708][ T6001] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 258.126037][ T6001] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038 (0x7fffffff) [ 258.302577][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 258.485590][ T6013] tipc: Started in network mode [ 258.490610][ T6013] tipc: Node identity ac1414aa, cluster identity 4711 [ 258.501717][ T6013] tipc: Enabled bearer , priority 10 [ 258.904203][ T6015] syz.0.608[6015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.904299][ T6015] syz.0.608[6015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.456147][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 259.713839][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.754428][ T5877] device veth0_vlan entered promiscuous mode [ 259.768129][ T5877] device veth1_vlan entered promiscuous mode [ 259.798499][ T5877] device veth0_macvtap entered promiscuous mode [ 259.806886][ T6023] loop3: detected capacity change from 0 to 40427 [ 259.811588][ T5877] device veth1_macvtap entered promiscuous mode [ 259.824303][ T3576] tipc: Node number set to 2886997162 [ 259.844590][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.855569][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.869968][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.892069][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.901101][ T6023] F2FS-fs (loop3): invalid crc value [ 259.910241][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.939786][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.944935][ T6023] F2FS-fs (loop3): Found nat_bits in checkpoint [ 259.996520][ T6023] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 260.073985][ T6023] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 260.137347][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 260.472568][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 260.625899][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 260.758039][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.823260][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.831982][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 260.906560][ T5877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.382474][ T5877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.442518][ T5877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.475343][ T5877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.485692][ T5877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.496157][ T5877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.506146][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 261.513691][ T5877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.544192][ T5877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.580285][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.752375][ T3728] attempt to access beyond end of device [ 261.752375][ T3728] loop3: rw=2049, want=45104, limit=40427 [ 262.401383][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 262.438568][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.457869][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 262.473735][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 262.488912][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 262.501564][ T5877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.528144][ T5877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.542579][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 262.568365][ T5877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.578942][ T5877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.612550][ T5877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.633038][ T5877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.652535][ T5877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.672498][ T5877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.694005][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.707509][ T6053] netlink: 'syz.1.624': attribute type 4 has an invalid length. [ 264.094031][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 264.462869][ T6062] xt_socket: unknown flags 0x50 [ 265.106283][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 265.543181][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.570653][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.994551][ T6071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.629'. [ 266.039845][ T5877] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.062625][ T5877] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.081664][ T5877] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.123324][ T5877] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.142744][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 267.041718][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.072007][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.159914][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 267.192858][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 268.375321][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 268.962466][ T3656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.971163][ T3656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.152566][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 269.432842][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 271.934845][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 271.948307][ T1966] Bluetooth: hci0: command 0x0409 tx timeout [ 272.211335][ T6115] loop3: detected capacity change from 0 to 40427 [ 272.256788][ T6124] loop2: detected capacity change from 0 to 256 [ 272.279167][ T6115] F2FS-fs (loop3): invalid crc value [ 272.330237][ T6124] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 272.358716][ T6115] F2FS-fs (loop3): Found nat_bits in checkpoint [ 272.380576][ T6124] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 272.403870][ T6115] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 272.411345][ T6115] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 273.920239][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 274.978384][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 274.987237][ T3728] attempt to access beyond end of device [ 274.987237][ T3728] loop3: rw=2049, want=45104, limit=40427 [ 275.001019][ T1966] Bluetooth: hci0: command 0x041b tx timeout [ 275.129831][ T4461] device hsr_slave_0 left promiscuous mode [ 275.160414][ T4461] device hsr_slave_1 left promiscuous mode [ 275.178896][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.187749][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.203704][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.211149][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.236971][ T4461] device bridge_slave_0 left promiscuous mode [ 275.257333][ T4461] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.328784][ T4461] device veth1_macvtap left promiscuous mode [ 275.344132][ T4461] device veth0_macvtap left promiscuous mode [ 275.350274][ T4461] device veth1_vlan left promiscuous mode [ 275.370849][ T4461] device veth0_vlan left promiscuous mode [ 275.982560][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 276.556518][ T4461] team0 (unregistering): Port device team_slave_1 removed [ 276.593126][ T4461] team0 (unregistering): Port device team_slave_0 removed [ 276.617781][ T4461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.641408][ T4461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.032596][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 277.040076][ T3615] Bluetooth: hci0: command 0x040f tx timeout [ 277.702083][ T4461] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 277.790509][ T4461] bond0 (unregistering): Released all slaves [ 278.062564][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 278.687839][ T6179] 9pnet: Could not find request transport: xen [ 279.020490][ T6095] chnl_net:caif_netlink_parms(): no params data found [ 279.112625][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 279.119861][ T1966] Bluetooth: hci0: command 0x0419 tx timeout [ 279.381925][ T6095] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.389919][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.142574][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 280.339666][ T6095] device bridge_slave_0 entered promiscuous mode [ 280.367565][ T6095] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.393261][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.414306][ T6095] device bridge_slave_1 entered promiscuous mode [ 281.351303][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 281.707333][ T6095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.742615][ T3559] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 281.767326][ T6095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.842220][ T6220] loop3: detected capacity change from 0 to 256 [ 281.907833][ T6095] team0: Port device team_slave_0 added [ 281.948587][ T6220] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 281.963997][ T6095] team0: Port device team_slave_1 added [ 281.981700][ T6220] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 282.112515][ T3559] usb 2-1: Using ep0 maxpacket: 8 [ 282.744312][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 283.032975][ T6095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.039943][ T6095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.042962][ T3559] usb 2-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 283.371898][ T6095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.392871][ T3559] usb 2-1: config 64 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 283.407214][ T6095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.456903][ T3559] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice=40.00 [ 283.468000][ T6095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.537261][ T3559] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.592667][ T3559] usb 2-1: can't set config #64, error -71 [ 283.611096][ T3559] usb 2-1: USB disconnect, device number 14 [ 283.645715][ T6095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.822706][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 284.680374][ T6095] device hsr_slave_0 entered promiscuous mode [ 284.718309][ T6095] device hsr_slave_1 entered promiscuous mode [ 284.793379][ T6095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.800981][ T6095] Cannot create hsr debugfs directory [ 284.862685][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 285.912692][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 285.990559][ T6095] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.036705][ T6257] batman_adv: batadv0: Adding interface: dummy0 [ 286.052751][ T6257] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.152182][ T6259] loop1: detected capacity change from 0 to 256 [ 286.163596][ T6257] batman_adv: batadv0: Interface activated: dummy0 [ 286.196137][ T6095] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.221840][ T6259] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 286.254425][ T6259] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 286.278564][ T6260] batadv0: mtu less than device minimum [ 286.304170][ T6260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 286.316506][ T6260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 286.328293][ T6260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 286.340053][ T6260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 286.351850][ T6260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 286.609655][ T6264] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 288.075232][ T6095] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.142657][ C1] net_ratelimit: 15 callbacks suppressed [ 288.142676][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 289.729390][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 289.897086][ T6095] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.782744][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 291.480895][ T6095] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 291.822814][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 291.825022][ T6095] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 291.859359][ T6095] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 291.883061][ T6095] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 293.165595][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 293.176947][ T6095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.361086][ T6306] loop0: detected capacity change from 0 to 256 [ 293.493696][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.529437][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.539216][ T6306] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 293.566013][ T6306] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 293.581784][ T6095] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.222871][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 294.491991][ T6302] loop1: detected capacity change from 0 to 40427 [ 294.517781][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.528724][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.586606][ T6302] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 1) [ 294.594576][ T6302] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 294.616441][ T4478] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.623574][ T4478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.631764][ T3576] Bluetooth: hci3: command 0x0409 tx timeout [ 294.640577][ T6302] F2FS-fs (loop1): invalid crc value [ 294.662096][ T6302] F2FS-fs (loop1): Found nat_bits in checkpoint [ 294.670373][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.703537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.719474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.755319][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.762502][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.791358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.809463][ T6302] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 294.820086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.835471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.835606][ T6302] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 294.866940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.886591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 295.039919][ T6295] chnl_net:caif_netlink_parms(): no params data found [ 295.068855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 295.262601][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 295.651632][ T3914] attempt to access beyond end of device [ 295.651632][ T3914] loop1: rw=524288, want=45072, limit=40427 [ 295.690203][ T3914] attempt to access beyond end of device [ 295.690203][ T3914] loop1: rw=0, want=45072, limit=40427 [ 295.714415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 295.759662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 295.784436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.988595][ T6095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.170550][ T6095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 296.312816][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 296.583130][ T3628] attempt to access beyond end of device [ 296.583130][ T3628] loop1: rw=2049, want=45112, limit=40427 [ 296.679030][ T4461] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.702871][ T1966] Bluetooth: hci3: command 0x041b tx timeout [ 296.729108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.739682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.938349][ T4461] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.012085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.029421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.058630][ T6095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.081469][ T4461] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.180665][ T4461] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.262287][ T6295] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.294579][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.304665][ T6295] device bridge_slave_0 entered promiscuous mode [ 297.318308][ T6295] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.325898][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.334575][ T6295] device bridge_slave_1 entered promiscuous mode [ 297.399877][ T6295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.451313][ T6295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.877883][ T6295] team0: Port device team_slave_0 added [ 298.248785][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 298.266986][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 298.294527][ T6295] team0: Port device team_slave_1 added [ 298.406074][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 298.427884][ T6358] loop3: detected capacity change from 0 to 256 [ 298.436310][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.482988][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.510508][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.558239][ T6095] device veth0_vlan entered promiscuous mode [ 298.559302][ T6358] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 298.584827][ T6358] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 298.604040][ T6295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.640163][ T6295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.748224][ T6295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.792606][ T3559] Bluetooth: hci3: command 0x040f tx timeout [ 298.792624][ T4461] tipc: Disabling bearer [ 298.812356][ T4461] tipc: Left network mode [ 298.815190][ T6295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.823884][ T6295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.850324][ T6295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.176026][ T6295] device hsr_slave_0 entered promiscuous mode [ 299.197984][ T6295] device hsr_slave_1 entered promiscuous mode [ 299.225467][ T6295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.257435][ T6295] Cannot create hsr debugfs directory [ 299.404811][ T6095] device veth1_vlan entered promiscuous mode [ 299.629028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 299.691168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.705248][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 299.705263][ T26] audit: type=1326 audit(1727414937.206:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.3.709" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62491eef39 code=0x0 [ 299.803113][ T6095] device veth0_macvtap entered promiscuous mode [ 299.856022][ T6095] device veth1_macvtap entered promiscuous mode [ 299.938674][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.969706][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.999659][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.030869][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.050685][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.056639][ T6379] loop0: detected capacity change from 0 to 40427 [ 300.061747][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.085745][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.107970][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.118752][ T6379] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 1) [ 300.126649][ T6379] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 300.144462][ T6095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.167557][ T6379] F2FS-fs (loop0): invalid crc value [ 300.181089][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 300.191975][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 300.202355][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 300.212113][ T6379] F2FS-fs (loop0): Found nat_bits in checkpoint [ 300.220007][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 300.262526][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.282500][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.304564][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.320087][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.332275][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.343366][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.353313][ T6379] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 300.360360][ T6379] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 300.368540][ T6095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.401966][ T6095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.473875][ T6095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.509546][ T6369] chnl_net:caif_netlink_parms(): no params data found [ 300.616433][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 300.636927][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 300.863417][ T3615] Bluetooth: hci3: command 0x0419 tx timeout [ 301.182760][ T3559] Bluetooth: hci2: command 0x0409 tx timeout [ 301.240109][ T3569] attempt to access beyond end of device [ 301.240109][ T3569] loop0: rw=524288, want=45072, limit=40427 [ 301.241343][ T6095] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.267570][ T6095] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.276444][ T6095] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.285338][ T6095] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.335329][ T3569] attempt to access beyond end of device [ 301.335329][ T3569] loop0: rw=0, want=45072, limit=40427 [ 302.094904][ T4478] attempt to access beyond end of device [ 302.094904][ T4478] loop0: rw=2049, want=45112, limit=40427 [ 302.222024][ T5205] bond0: (slave syz_tun): Releasing backup interface [ 302.233154][ T5205] device syz_tun left promiscuous mode [ 302.342822][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.349908][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.359110][ T6369] device bridge_slave_0 entered promiscuous mode [ 302.385950][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.396973][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.411420][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.412484][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.437129][ T6369] device bridge_slave_1 entered promiscuous mode [ 302.472895][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 302.555781][ T6295] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 302.569429][ T6295] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 302.585443][ T3728] syz-executor (3728) used greatest stack depth: 17496 bytes left [ 302.587989][ T6369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.659185][ T6295] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 302.674724][ T6295] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 302.674809][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.712059][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.713485][ T6369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.768800][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 302.928721][ T6369] team0: Port device team_slave_0 added [ 302.984581][ T6369] team0: Port device team_slave_1 added [ 303.122829][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.129801][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.220448][ T6369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.247091][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.262495][ T1966] Bluetooth: hci2: command 0x041b tx timeout [ 303.267222][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.313928][ T6369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.334785][ T6438] netlink: 'syz.4.635': attribute type 4 has an invalid length. [ 303.674714][ T6369] device hsr_slave_0 entered promiscuous mode [ 303.701633][ T6369] device hsr_slave_1 entered promiscuous mode [ 303.721217][ T6369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.730321][ T6369] Cannot create hsr debugfs directory [ 303.834192][ T6295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.958258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.967267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.028729][ T6295] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.133799][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 304.152710][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.168510][ T3656] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.175632][ T3656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.194018][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.209446][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.223579][ T3656] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.230656][ T3656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.252620][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 304.261442][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.328373][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 304.370603][ T6439] chnl_net:caif_netlink_parms(): no params data found [ 304.390848][ T6441] chnl_net:caif_netlink_parms(): no params data found [ 304.424998][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 304.440787][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 304.484112][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 304.492780][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 304.502911][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 304.511409][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 304.520978][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.531239][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 304.539834][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.551620][ T4461] device hsr_slave_0 left promiscuous mode [ 304.558315][ T4461] device hsr_slave_1 left promiscuous mode [ 304.565315][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.572911][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.580600][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.588253][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.596241][ T4461] device bridge_slave_1 left promiscuous mode [ 304.602568][ T4461] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.611234][ T4461] device bridge_slave_0 left promiscuous mode [ 304.617915][ T4461] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.630599][ T4461] device hsr_slave_0 left promiscuous mode [ 304.637787][ T4461] device hsr_slave_1 left promiscuous mode [ 304.644620][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.652064][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.660104][ T4461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.667810][ T4461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.681680][ T4461] device veth1_macvtap left promiscuous mode [ 304.687912][ T4461] device veth0_macvtap left promiscuous mode [ 304.694136][ T4461] device veth1_vlan left promiscuous mode [ 304.700119][ T4461] device veth0_vlan left promiscuous mode [ 304.707295][ T4461] device veth1_macvtap left promiscuous mode [ 304.713426][ T4461] device veth0_macvtap left promiscuous mode [ 304.719470][ T4461] device veth1_vlan left promiscuous mode [ 304.725455][ T4461] device veth0_vlan left promiscuous mode [ 305.180117][ T4461] team0 (unregistering): Port device team_slave_1 removed [ 305.496809][ T1966] Bluetooth: hci4: command 0x0409 tx timeout [ 305.518429][ T1966] Bluetooth: hci1: command 0x0409 tx timeout [ 305.546865][ T4461] team0 (unregistering): Port device team_slave_0 removed [ 305.572012][ T1966] Bluetooth: hci2: command 0x040f tx timeout [ 305.760094][ T4461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.990979][ T4461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.109629][ T4461] bond0 (unregistering): Released all slaves [ 306.255141][ T4461] team0 (unregistering): Port device team_slave_1 removed [ 306.271744][ T4461] team0 (unregistering): Port device team_slave_0 removed [ 306.286028][ T4461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.301960][ T4461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.373578][ T4461] bond0 (unregistering): Released all slaves [ 306.401575][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.449947][ T6472] team0 (unregistering): Port device team_slave_0 removed [ 306.485557][ T6472] team0 (unregistering): Port device team_slave_1 removed [ 306.527849][ T6369] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.837495][ T6441] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.845158][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.854527][ T6441] device bridge_slave_0 entered promiscuous mode [ 306.868181][ T6369] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.582723][ T1966] Bluetooth: hci1: command 0x041b tx timeout [ 307.589387][ T1966] Bluetooth: hci4: command 0x041b tx timeout [ 307.662548][ T1966] Bluetooth: hci2: command 0x0419 tx timeout [ 307.692719][ T6439] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.699808][ T6439] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.709423][ T6439] device bridge_slave_0 entered promiscuous mode [ 307.725508][ T6441] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.744247][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.748350][ T6488] loop4: detected capacity change from 0 to 256 [ 307.761320][ T6441] device bridge_slave_1 entered promiscuous mode [ 307.801335][ T6441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.834709][ T6439] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.841802][ T6439] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.845399][ T6488] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 307.853737][ T6439] device bridge_slave_1 entered promiscuous mode [ 307.872157][ T6488] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 307.884231][ T6369] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.912269][ T6441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.987402][ T6441] team0: Port device team_slave_0 added [ 308.006873][ T6441] team0: Port device team_slave_1 added [ 308.055053][ T6441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.062019][ T6441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.094462][ T6441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.121309][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 308.129005][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 308.143349][ T6441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.156507][ T6441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.419325][ T6441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.645895][ T6441] device hsr_slave_0 entered promiscuous mode [ 308.659087][ T6441] device hsr_slave_1 entered promiscuous mode [ 308.766993][ T6439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.780354][ T6369] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.806200][ T6439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.822124][ T6295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.905111][ T6439] team0: Port device team_slave_0 added [ 308.938753][ T6439] team0: Port device team_slave_1 added [ 308.954882][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 308.971582][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 309.039090][ T6441] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.055857][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 309.084108][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 309.096407][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 309.113998][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 309.135389][ T6295] device veth0_vlan entered promiscuous mode [ 309.181454][ T6441] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.225744][ T6439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.233681][ T6439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.264377][ T6439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.288635][ T6439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.296277][ T6439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.384452][ T6498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.726'. [ 309.483816][ T6439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.565690][ T6295] device veth1_vlan entered promiscuous mode [ 309.662740][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 309.674968][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 309.824955][ T6295] device veth0_macvtap entered promiscuous mode [ 309.901607][ T6295] device veth1_macvtap entered promiscuous mode [ 310.031093][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.048473][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.061598][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.073136][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.089211][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.100021][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.124059][ T6295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.146654][ T6441] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.175507][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 310.184172][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 310.192346][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 310.230325][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 310.240230][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 310.248908][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 310.257948][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 310.267397][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 310.278553][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.289389][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.299530][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.310339][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.320436][ T6295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.331192][ T6295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.343154][ T6295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.354959][ T6502] bridge0: port 3(vlan2) entered blocking state [ 310.361420][ T6502] bridge0: port 3(vlan2) entered disabled state [ 310.383168][ T6441] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.399549][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 310.409253][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 310.421648][ T6295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.432091][ T6295] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.441288][ T6295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.450385][ T6295] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.526677][ T6439] device hsr_slave_0 entered promiscuous mode [ 310.548907][ T6439] device hsr_slave_1 entered promiscuous mode [ 310.569935][ T6439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.581349][ T6439] Cannot create hsr debugfs directory [ 310.788368][ T4478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.797697][ T4478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.837574][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 311.666982][ T6369] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 311.691793][ T26] audit: type=1326 audit(1727414949.186:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6507 comm="syz.4.730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5c1e43f39 code=0x0 [ 311.719529][ T6369] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 311.732814][ T3656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.741086][ T6441] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 311.752178][ T6441] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 311.759401][ T1966] Bluetooth: hci1: command 0x0419 tx timeout [ 311.766509][ T1966] Bluetooth: hci4: command 0x0419 tx timeout [ 311.768505][ T3656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.782728][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 311.791615][ T6441] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 311.806655][ T6439] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.820125][ T6369] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 311.835859][ T6369] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 311.845836][ T6441] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 311.868471][ T6439] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.969132][ T6439] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.031682][ T6439] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.088607][ T6369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.156381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.165952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.201104][ T6369] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.259218][ T6441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.284733][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.296058][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.321839][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.329002][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.345517][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.358600][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.369638][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.376750][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.399494][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 312.428301][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.488960][ T6523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.734'. [ 312.524290][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 313.251552][ T6439] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 313.271219][ T6439] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 313.369424][ T6530] netlink: 368 bytes leftover after parsing attributes in process `syz.2.736'. [ 313.385420][ T6369] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 313.407588][ T6369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.525961][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 313.547239][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.569671][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 313.581270][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.591064][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.600837][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.626821][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.635791][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.645026][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.654521][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.663845][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.671931][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.681412][ T6439] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 313.692295][ T6439] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 313.704915][ T6538] netlink: 'syz.4.738': attribute type 1 has an invalid length. [ 313.720297][ T6538] ------------[ cut here ]------------ [ 313.771431][ T6538] WARNING: CPU: 0 PID: 6538 at net/wireless/core.h:220 wdev_lock+0x96/0xc0 [ 313.781120][ T6538] Modules linked in: [ 313.792677][ T6538] CPU: 0 PID: 6538 Comm: syz.4.738 Not tainted 5.15.167-syzkaller #0 [ 313.810190][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 313.822207][ T6538] RIP: 0010:wdev_lock+0x96/0xc0 [ 313.839098][ T6538] Code: a4 d2 f7 85 ed 74 1e e8 f8 a0 d2 f7 eb 05 e8 f1 a0 d2 f7 48 83 c3 48 48 89 df 31 f6 5b 41 5e 5d e9 9f 21 8f 00 e8 da a0 d2 f7 <0f> 0b eb e5 48 c7 c1 44 94 e9 8d 80 e1 07 80 c1 03 38 c1 0f 8c 7b [ 313.870981][ T6538] RSP: 0018:ffffc90002f56ee0 EFLAGS: 00010283 [ 313.877604][ T6538] RAX: ffffffff89adb996 RBX: ffff88801d977000 RCX: 0000000000040000 [ 313.892774][ T6538] RDX: ffffc90005361000 RSI: 00000000000040a0 RDI: 00000000000040a1 [ 313.909993][ T6538] RBP: 0000000000000000 R08: ffffffff89adb96f R09: ffffed100f43380d [ 313.928735][ T6538] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807d34a500 [ 313.936927][ T6538] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88807a19c014 [ 313.945326][ T6538] FS: 00007fa5c02bc6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 313.954436][ T6538] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.961060][ T6538] CR2: 000000110c38e2a2 CR3: 0000000075e3a000 CR4: 00000000003506f0 [ 313.969432][ T6538] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000 [ 313.978959][ T6538] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 313.988774][ T6538] Call Trace: [ 313.992143][ T6538] [ 313.998391][ T6538] ? __warn+0x15b/0x300 [ 314.006479][ T6538] ? wdev_lock+0x96/0xc0 [ 314.054056][ T6538] ? report_bug+0x1b7/0x2e0 [ 314.089713][ T6538] ? handle_bug+0x3d/0x70 [ 314.129617][ T6538] ? exc_invalid_op+0x16/0x40 [ 314.159205][ T6538] ? asm_exc_invalid_op+0x16/0x20 [ 314.190492][ T6538] ? wdev_lock+0x6f/0xc0 [ 314.217497][ T6538] ? wdev_lock+0x96/0xc0 [ 314.253493][ T6538] ? wdev_lock+0x96/0xc0 [ 314.279915][ T6538] nl80211_send_iface+0x763/0xe10 [ 314.311228][ T6538] ? nl80211_notify_iface+0x160/0x160 [ 314.347082][ T6538] ? slab_free_freelist_hook+0xdd/0x160 [ 314.381837][ T6538] ? nl80211_dump_wiphy_parse+0x19c/0x580 [ 314.415764][ T6538] ? kfree+0xf1/0x270 [ 314.443641][ T6538] ? nl80211_dump_wiphy_parse+0x19c/0x580 [ 314.530409][ T6538] ? nl80211_dump_wiphy_done+0x40/0x40 [ 314.604764][ T6538] nl80211_dump_interface+0x490/0x6a0 [ 314.616125][ T6538] ? nl80211_get_interface+0x1f0/0x1f0 [ 314.629283][ T6538] ? __alloc_skb+0x397/0x590 [ 314.641701][ T6538] netlink_dump+0x5a4/0xca0 [ 314.651064][ T6538] ? netlink_lookup+0x1d0/0x1d0 [ 314.661835][ T6538] ? genl_start+0x144/0x490 [ 314.669978][ T6538] ? genl_start+0x2e1/0x490 [ 314.682350][ T6538] __netlink_dump_start+0x50f/0x6d0 [ 314.691943][ T6538] genl_rcv_msg+0xd89/0x14a0 [ 314.702006][ T6538] ? genl_bind+0x420/0x420 [ 314.710925][ T6538] ? arch_stack_walk+0xf3/0x140 [ 314.732578][ T6538] ? mark_lock+0x98/0x340 [ 314.737201][ T6538] ? __lock_acquire+0x1295/0x1ff0 [ 314.742329][ T6538] ? genl_rcv_msg+0x14a0/0x14a0 [ 314.747471][ T6538] ? nl80211_get_interface+0x1f0/0x1f0 [ 314.753501][ T6538] ? genl_lock_done+0xd0/0xd0 [ 314.758340][ T6538] ? nl80211_set_wiphy+0x28c0/0x28c0 [ 314.763790][ T6538] ? nl80211_get_interface+0x1f0/0x1f0 [ 314.769392][ T6538] netlink_rcv_skb+0x1cf/0x410 [ 314.774383][ T6538] ? genl_bind+0x420/0x420 [ 314.778944][ T6538] ? netlink_ack+0xb10/0xb10 [ 314.783885][ T6538] ? down_read+0x1b3/0x2e0 [ 314.788351][ T6538] ? genl_rcv+0x9/0x40 [ 314.792595][ T6538] genl_rcv+0x24/0x40 [ 314.796679][ T6538] netlink_unicast+0x7b6/0x980 [ 314.801476][ T6538] ? netlink_detachskb+0x90/0x90 [ 314.806611][ T6538] ? __virt_addr_valid+0x3bb/0x460 [ 314.811768][ T6538] ? 0xffffffff81000000 [ 314.816030][ T6538] ? __check_object_size+0x300/0x410 [ 314.821341][ T6538] ? bpf_lsm_netlink_send+0x5/0x10 [ 314.826979][ T6538] netlink_sendmsg+0xa30/0xd60 [ 314.831838][ T6538] ? netlink_getsockopt+0x5b0/0x5b0 [ 314.837844][ T6538] ? plist_check_list+0x20d/0x220 [ 314.843019][ T6538] ? aa_sock_msg_perm+0x91/0x150 [ 314.848014][ T6538] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 314.853381][ T6538] ? security_socket_sendmsg+0x7d/0xa0 [ 314.858855][ T6538] ? netlink_getsockopt+0x5b0/0x5b0 [ 314.864737][ T6538] ____sys_sendmsg+0x59e/0x8f0 [ 314.869537][ T6538] ? iovec_from_user+0x300/0x390 [ 314.874605][ T6538] ? __sys_sendmsg_sock+0x30/0x30 [ 314.879674][ T6538] ___sys_sendmsg+0x252/0x2e0 [ 314.884601][ T6538] ? __sys_sendmsg+0x260/0x260 [ 314.889408][ T6538] ? __fdget+0x191/0x220 [ 314.893773][ T6538] __se_sys_sendmsg+0x19a/0x260 [ 314.898683][ T6538] ? __x64_sys_sendmsg+0x80/0x80 [ 314.903820][ T6538] ? syscall_enter_from_user_mode+0x2e/0x240 [ 314.909821][ T6538] ? lockdep_hardirqs_on+0x94/0x130 [ 314.915109][ T6538] ? syscall_enter_from_user_mode+0x2e/0x240 [ 314.921109][ T6538] do_syscall_64+0x3b/0xb0 [ 314.925596][ T6538] ? clear_bhb_loop+0x15/0x70 [ 314.930310][ T6538] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.936750][ T6538] RIP: 0033:0x7fa5c1e43f39 [ 314.941276][ T6538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.961593][ T6538] RSP: 002b:00007fa5c02bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.970216][ T6538] RAX: ffffffffffffffda RBX: 00007fa5c1ffbf80 RCX: 00007fa5c1e43f39 [ 314.978422][ T6538] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 [ 314.986505][ T6538] RBP: 00007fa5c1eb6216 R08: 0000000000000000 R09: 0000000000000000 [ 314.994562][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.002618][ T6538] R13: 0000000000000000 R14: 00007fa5c1ffbf80 R15: 00007ffd5900ebe8 [ 315.010635][ T6538] [ 315.013766][ T6538] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 315.021062][ T6538] CPU: 0 PID: 6538 Comm: syz.4.738 Not tainted 5.15.167-syzkaller #0 [ 315.029159][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 315.039211][ T6538] Call Trace: [ 315.042491][ T6538] [ 315.045607][ T6538] dump_stack_lvl+0x1e3/0x2d0 [ 315.050291][ T6538] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 315.055948][ T6538] ? panic+0x860/0x860 [ 315.060042][ T6538] ? rdev_set_ap_chanwidth+0x260/0x260 [ 315.065528][ T6538] ? rdev_set_ap_chanwidth+0x260/0x260 [ 315.071002][ T6538] panic+0x318/0x860 [ 315.074930][ T6538] ? __warn+0x16a/0x300 [ 315.079113][ T6538] ? fb_is_primary_device+0xd0/0xd0 [ 315.084358][ T6538] ? wdev_lock+0x96/0xc0 [ 315.088625][ T6538] __warn+0x2b2/0x300 [ 315.092626][ T6538] ? wdev_lock+0x96/0xc0 [ 315.096872][ T6538] report_bug+0x1b7/0x2e0 [ 315.101220][ T6538] handle_bug+0x3d/0x70 [ 315.105390][ T6538] exc_invalid_op+0x16/0x40 [ 315.109890][ T6538] asm_exc_invalid_op+0x16/0x20 [ 315.114738][ T6538] RIP: 0010:wdev_lock+0x96/0xc0 [ 315.119588][ T6538] Code: a4 d2 f7 85 ed 74 1e e8 f8 a0 d2 f7 eb 05 e8 f1 a0 d2 f7 48 83 c3 48 48 89 df 31 f6 5b 41 5e 5d e9 9f 21 8f 00 e8 da a0 d2 f7 <0f> 0b eb e5 48 c7 c1 44 94 e9 8d 80 e1 07 80 c1 03 38 c1 0f 8c 7b [ 315.139192][ T6538] RSP: 0018:ffffc90002f56ee0 EFLAGS: 00010283 [ 315.145264][ T6538] RAX: ffffffff89adb996 RBX: ffff88801d977000 RCX: 0000000000040000 [ 315.153338][ T6538] RDX: ffffc90005361000 RSI: 00000000000040a0 RDI: 00000000000040a1 [ 315.161304][ T6538] RBP: 0000000000000000 R08: ffffffff89adb96f R09: ffffed100f43380d [ 315.169272][ T6538] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807d34a500 [ 315.177254][ T6538] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88807a19c014 [ 315.185286][ T6538] ? wdev_lock+0x6f/0xc0 [ 315.189533][ T6538] ? wdev_lock+0x96/0xc0 [ 315.193795][ T6538] nl80211_send_iface+0x763/0xe10 [ 315.198839][ T6538] ? nl80211_notify_iface+0x160/0x160 [ 315.204234][ T6538] ? slab_free_freelist_hook+0xdd/0x160 [ 315.209799][ T6538] ? nl80211_dump_wiphy_parse+0x19c/0x580 [ 315.215525][ T6538] ? kfree+0xf1/0x270 [ 315.219506][ T6538] ? nl80211_dump_wiphy_parse+0x19c/0x580 [ 315.225232][ T6538] ? nl80211_dump_wiphy_done+0x40/0x40 [ 315.230818][ T6538] nl80211_dump_interface+0x490/0x6a0 [ 315.236224][ T6538] ? nl80211_get_interface+0x1f0/0x1f0 [ 315.241687][ T6538] ? __alloc_skb+0x397/0x590 [ 315.246297][ T6538] netlink_dump+0x5a4/0xca0 [ 315.250811][ T6538] ? netlink_lookup+0x1d0/0x1d0 [ 315.255664][ T6538] ? genl_start+0x144/0x490 [ 315.260186][ T6538] ? genl_start+0x2e1/0x490 [ 315.264698][ T6538] __netlink_dump_start+0x50f/0x6d0 [ 315.270032][ T6538] genl_rcv_msg+0xd89/0x14a0 [ 315.274642][ T6538] ? genl_bind+0x420/0x420 [ 315.279078][ T6538] ? arch_stack_walk+0xf3/0x140 [ 315.283946][ T6538] ? mark_lock+0x98/0x340 [ 315.288301][ T6538] ? __lock_acquire+0x1295/0x1ff0 [ 315.293345][ T6538] ? genl_rcv_msg+0x14a0/0x14a0 [ 315.298188][ T6538] ? nl80211_get_interface+0x1f0/0x1f0 [ 315.303644][ T6538] ? genl_lock_done+0xd0/0xd0 [ 315.308317][ T6538] ? nl80211_set_wiphy+0x28c0/0x28c0 [ 315.313593][ T6538] ? nl80211_get_interface+0x1f0/0x1f0 [ 315.319054][ T6538] netlink_rcv_skb+0x1cf/0x410 [ 315.323829][ T6538] ? genl_bind+0x420/0x420 [ 315.328266][ T6538] ? netlink_ack+0xb10/0xb10 [ 315.332894][ T6538] ? down_read+0x1b3/0x2e0 [ 315.337305][ T6538] ? genl_rcv+0x9/0x40 [ 315.341369][ T6538] genl_rcv+0x24/0x40 [ 315.345342][ T6538] netlink_unicast+0x7b6/0x980 [ 315.350119][ T6538] ? netlink_detachskb+0x90/0x90 [ 315.355053][ T6538] ? __virt_addr_valid+0x3bb/0x460 [ 315.360160][ T6538] ? 0xffffffff81000000 [ 315.364306][ T6538] ? __check_object_size+0x300/0x410 [ 315.369584][ T6538] ? bpf_lsm_netlink_send+0x5/0x10 [ 315.374709][ T6538] netlink_sendmsg+0xa30/0xd60 [ 315.379516][ T6538] ? netlink_getsockopt+0x5b0/0x5b0 [ 315.384735][ T6538] ? plist_check_list+0x20d/0x220 [ 315.389901][ T6538] ? aa_sock_msg_perm+0x91/0x150 [ 315.394851][ T6538] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 315.400131][ T6538] ? security_socket_sendmsg+0x7d/0xa0 [ 315.405610][ T6538] ? netlink_getsockopt+0x5b0/0x5b0 [ 315.410820][ T6538] ____sys_sendmsg+0x59e/0x8f0 [ 315.415583][ T6538] ? iovec_from_user+0x300/0x390 [ 315.420522][ T6538] ? __sys_sendmsg_sock+0x30/0x30 [ 315.425655][ T6538] ___sys_sendmsg+0x252/0x2e0 [ 315.430361][ T6538] ? __sys_sendmsg+0x260/0x260 [ 315.435185][ T6538] ? __fdget+0x191/0x220 [ 315.439439][ T6538] __se_sys_sendmsg+0x19a/0x260 [ 315.444304][ T6538] ? __x64_sys_sendmsg+0x80/0x80 [ 315.449248][ T6538] ? syscall_enter_from_user_mode+0x2e/0x240 [ 315.455227][ T6538] ? lockdep_hardirqs_on+0x94/0x130 [ 315.460449][ T6538] ? syscall_enter_from_user_mode+0x2e/0x240 [ 315.466435][ T6538] do_syscall_64+0x3b/0xb0 [ 315.470850][ T6538] ? clear_bhb_loop+0x15/0x70 [ 315.475528][ T6538] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 315.481698][ T6538] RIP: 0033:0x7fa5c1e43f39 [ 315.486112][ T6538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.505714][ T6538] RSP: 002b:00007fa5c02bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.514147][ T6538] RAX: ffffffffffffffda RBX: 00007fa5c1ffbf80 RCX: 00007fa5c1e43f39 [ 315.522121][ T6538] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 [ 315.530091][ T6538] RBP: 00007fa5c1eb6216 R08: 0000000000000000 R09: 0000000000000000 [ 315.538075][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.546164][ T6538] R13: 0000000000000000 R14: 00007fa5c1ffbf80 R15: 00007ffd5900ebe8 [ 315.554150][ T6538] [ 315.557481][ T6538] Kernel Offset: disabled [ 315.562127][ T6538] Rebooting in 86400 seconds..