last executing test programs: 35.065682905s ago: executing program 2 (id=516): socket$packet(0x11, 0xa, 0x300) syz_open_dev$vim2m(&(0x7f0000000080), 0x80005e3d27a6, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x45e101, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x400c330d, 0x0) 32.707883107s ago: executing program 0 (id=520): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x40000, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1, 0x5}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd1fc}, {@private=0xfffffffd, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast2, 0x3}, {@private=0xa010101}, {@empty}, {@broadcast}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 32.620888621s ago: executing program 3 (id=521): bind$l2tp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{}, "24eaf7a2ee66e95b", "0f5df92929c020e387dc98fde2ee85b3", "f79be396", "4e6946614403abe5"}, 0x28) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80803, 0x87) 31.883897826s ago: executing program 2 (id=523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x0) dup3(r1, r2, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000300), 0x4) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000800)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000001500)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 31.230033818s ago: executing program 3 (id=524): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) 31.229185178s ago: executing program 0 (id=534): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f00000002c0), 0x4, 0x76f, &(0x7f0000000b00)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x24, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000140)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000040)="19", 0x0, 0x0, 0x0}) 31.220086129s ago: executing program 2 (id=526): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000000210001000000000000", @ANYRES16=r1, @ANYRES64=r0], 0x24}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r3, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0, @ANYRESHEX=r2], 0x48}}, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000006b00)=ANY=[@ANYBLOB="ffffffffffff0000000000000003424203"], 0x0) 30.823732103s ago: executing program 2 (id=527): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close(r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000003080)='./file0\x00', &(0x7f00000030c0), 0x10, &(0x7f00000031c0)={[{@name}, {}, {@noprefix}, {@release_agent={'release_agent', 0x3d, './file0'}}], [{@smackfsdef={'smackfsdef', 0x3d, '!!$'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@dont_measure}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}], [{@dont_hash}]}}) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0xa1ca2524ed8fb647, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}]}, 0xa0}}, 0x0) sendto$inet6(r0, 0x0, 0x4, 0x0, 0x0, 0x0) 30.73664784s ago: executing program 2 (id=530): syz_io_uring_setup(0x110, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0x0, 0x79, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x800, 0xa, 0x1, {0x22, 0x55f}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x5, 0x2}}}}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010002104000099e5a000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c0002800600010000000000080004002707000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 30.20934193s ago: executing program 3 (id=532): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x9362, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x108) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r2) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 30.200733226s ago: executing program 0 (id=533): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 30.122842079s ago: executing program 3 (id=535): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x15, 0x0, &(0x7f0000000140)="69015438a420bbea40bb7d94bc9db57325f4528ae6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff00000502", @ANYRES8=r1, @ANYBLOB="05"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x1000, 0x40, 0x2, 0x10, 0x1, 0x7fff, '\x00', 0x0, r0, 0x2, 0x4, 0x1, 0xf, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5, r3}, 0x38) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$P9_RSYMLINK(r0, &(0x7f0000000200)={0x14, 0x11, 0x1, {0x1, 0x0, 0x7}}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) connect$inet6(r5, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1={0x0}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_usb_control_io$uac1(r2, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00032a0000002a03"]}, 0x0) 29.956199699s ago: executing program 2 (id=536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r4 = socket(0x1, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r4}, 0x20) recvmsg(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r4, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) bind$can_j1939(r2, &(0x7f0000001780)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)="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", 0x6fa}, 0x1, 0x0, 0x0, 0x800}, 0x0) 28.909403929s ago: executing program 0 (id=538): socket$netlink(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 27.775589328s ago: executing program 0 (id=543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0xca800, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "71aebd58"}, 0x0, 0x1, {0x0}}) close(r3) 27.154183057s ago: executing program 3 (id=554): inotify_init() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000400)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0x40000], [], [0x0, 0x6]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000001c0)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) 27.068198814s ago: executing program 3 (id=546): socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ocfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x2a00403, &(0x7f00000003c0)=ANY=[@ANYBLOB="6c6f63616c616c6c6f633d31383434363734343037333730393535313630382c726573765f6c6576656c3d30303030303030303030303030303030303030322c6865617274626561743d6e6f6e652c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c6e6f696e74722c636f686572656e63793d66756c6c2c6e6f61636c2c636f686572656e63793d66756c6c2c646174613d6f7264657265642c00a6bbbf4f1c4504306b696ca03fb375edc4c5f0f579bf2195c3cc88165b8c279abaa84a848971253cb6e898fee96fa6", @ANYRES16=0x0, @ANYRESDEC=0x0], 0x8, 0x446f, &(0x7f0000004500)="$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") syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='.\x00', 0x108020, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001340)=""/102378, 0x7706c522012798af) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18}, '\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 26.59866823s ago: executing program 0 (id=547): bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f00000001c0)={[{@fat=@sys_immutable}, {@uni_xlate}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@shortname_mixed}, {@uni_xlateno}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@uni_xlate}, {@rodir}, {@shortname_lower}, {@utf8no}]}, 0x3, 0x351, &(0x7f00000002c0)="$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") prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000001280)=""/4089, 0xff9) 24.355333038s ago: executing program 1 (id=551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000800)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @random="371633aaf7ef"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 21.595253155s ago: executing program 1 (id=552): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)={0x2, 'pimreg0\x00', {0x6}, 0xfffb}) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000140)={@multicast1, @remote, 0x1, "37bf48dd99c99e8a2218bb6098c5a9693e2310e5b9b997457020b2b6148e3dce", 0x0, 0x30000, 0x0, 0x1f}, 0x3c) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000002c0)={0x6, 'xfrm0\x00', {0x5}}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000500)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r2) ioprio_get$uid(0x3, r2) 20.508483439s ago: executing program 4 (id=553): syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xa6, 0xd6, 0xb7, 0x40, 0x6cd, 0x10c, 0xaf0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb6, 0x7e, 0xbb}}]}}]}}, 0x0) epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 20.015874838s ago: executing program 1 (id=555): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000002140)={{0xa, 0x0, 0x0, @mcast1, 0x2}, {0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x400, 0x9]}}, 0x5c) syz_io_uring_setup(0x2ddc, &(0x7f00000006c0), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="020d0300100000000000000000000000080012000200000000000000000000000600320003000000000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006"], 0x80}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718"], 0x398}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x4000) shutdown(0xffffffffffffffff, 0x0) 13.700248357s ago: executing program 1 (id=559): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f00000002c0), 0x4, 0x76f, &(0x7f0000000b00)="$eJzs3M1rXOUaAPDnnGaSfuTeyYULfixEaKGF0knSbNpV48ZdoVBwW0MyCSEnmZCZ1E4stHUt1GajIIi6dulWKPUPcCcFBfeCaI0LcTNyJpOUxMxkmsRMm/5+cHqe93w97zNzeDsH8p4AXlpv5v8kEYMRcS0iiq3taUT0N6PjEXfXj1t7cnsyX5JoNK7/muSnxVqjuHmtpLU+Fc1T4tWIeFSIOP/BP/NW6ytzE1lWXmq1h2vzi8PV+sqF2fmJmfJMeWF07PLIpbGxSyNju9bwSpe1nnnn8okH3729uvr917X7b/RdSGK8WXe0asvXx7q8VrfWP5NCjG/bvnDAeXot6bDv+CH2AwCAztLWb96+5q/UYhxrRgAAAMBR0hho7CrdOBYAAAB4QSWe6wEAAOCI2/g7gI25vRvzYA/LL29FxNBO+fuac4gjjkchIk6uJVtmJiTrp8G+3L0XEQ/Ht99/X+Z32N19XntkW3vrHOn+fV6dg/AwH3/Gdxp/0s3xJ3YYf/o23p2wT+3Hv6f5j7UZ/651meObz14rtM1/L+L1vp3yJ5v5kzb5321Gu38K91c/fNBuX+OLiLM7/v+TbMnV4f0Q49OzWafXD8Sjv8497lT/yXb5k871L+5a+br3136fazeW5PnPnW7z/d9pnz+/Jz5q9SONiAetdd5e3Zbj9PwP33aqfyqisZfv//Mu6//pq4FbXR4KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATWlEDEaSljbjNC2VIk5FxP/jZJpVqrXz05Xlhal8X8RQFNLp2aw8EhHF9XaSt0eb8dP2xW3tsYj4348n1pPOZuXSZCWb6nXxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbDoVEYORpKWISCPij2KalkoRfV2cO3AI/QMAAAAOyFCvOwAAAAD86zz/AwAAwNG31+f/5ID7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABxp165ezZfG2pPbk3l76mZ9ea5y88JUuTpXml+eLE1WlhZLM5XKTFYuTVbmd7teVqksjl6O5VvDtXK1Nlytr9yYrywv1G7Mzk/MlG+UC4dSFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM9qsLkkaSki0macpqVSxH8iYigKyfRsVh6JiP9GxONiYSBvj/a60wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABy4an1lbiLLyksCwQsR9Lfu3OelP3sL7kTEc9CNDsGWYaKvJ4MTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACHrlpfmZvIsvJStdc9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoLfSn5OIyJezxTOD2/f2J38Wm+uIeO/T6x/fmqjVlkbz7b9tbq990tp+sRf9BwAAgJfClWc5eOM5feM5HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoFvV+srcRJaVl/YXXIn6SiNpc0yvawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbm7wAAAP//5Fm8gQ==") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x24, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000140)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000040)="19", 0x0, 0x0, 0x0}) 13.679561594s ago: executing program 4 (id=560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0xca800, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "71aebd58"}, 0x0, 0x1, {0x0}}) close(r3) 11.142677406s ago: executing program 4 (id=561): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) 8.058164459s ago: executing program 1 (id=562): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_GET_KEEPCAPS(0x7) r5 = socket(0x1e, 0x5, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r5, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1}}], 0x1, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 5.726625671s ago: executing program 4 (id=563): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206010800000000000000000000080005000100070000000900020073797a3000000000140007800500150008000000080012400000000010000300686173683a69702c6d616300050005000a000000050004"], 0x5c}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000121401000000000000000000080015000000000008004f0000000000080008"], 0x38}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="cf702e8cf671", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ni={0x193}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES32, @ANYBLOB="01000000f000e4f8de402a4c43977142ebb600000000e9e44cc31c3bb4546a7985722219e2e70001410000001876bf0017000000170693224bdbdb58c21909000000000000000000000000000939d21ed0f3f49bca4b1f4618e8c0e4da964293c4407f17f91ca6145647a62465b8aa3c09b3cd3a93dc4e991ef551f9c560860d1ed607c7fe5c0b3f273119e84c06a638bda1505e5b3cbfc502b5000000"], 0x34}}, 0x4000000) 2.330828927s ago: executing program 4 (id=564): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000240)={0x20, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.203401897s ago: executing program 1 (id=565): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000640)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x1010000, &(0x7f0000000980)=ANY=[@ANYRES8=0x0], 0x22, 0x1c1, &(0x7f0000000780)="$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") setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@hci, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x18}}], 0x1, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) futex(&(0x7f0000004000), 0x4, 0x0, 0x0, &(0x7f0000004000), 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=@delchain={0x840, 0x65, 0x0, 0x0, 0x0, {}, [@f_rsvp={{0x9}, {0x810, 0x2, [@TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36bf1c4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}]}]}}]}, 0x840}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 4 (id=566): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) dup(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r4, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/44, 0x2c}], 0x1, 0x36, 0x0) kernel console output (not intermixed with test programs): v: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.379481][ T6680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.379501][ T6680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.379513][ T6680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.380959][ T6680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.401460][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.401479][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.401499][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.401511][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.401521][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.401533][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.402303][ T6702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.403808][ T6852] loop1: detected capacity change from 4096 to 0 [ 260.405367][ T6852] bio_check_eod: 5 callbacks suppressed [ 260.405382][ T6852] syz.1.214: attempt to access beyond end of device [ 260.405382][ T6852] loop1: rw=0, sector=3200, nr_sectors = 8 limit=0 [ 260.405430][ T6852] ntfs3(loop1): failed to read block 190 [ 260.406091][ T6852] ntfs3(loop1): ino=21, "file1" failed to parse mft record [ 260.406114][ T6852] ntfs3(loop1): ino=21, "file1" attr_set_size [ 260.411304][ T6680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.411322][ T6680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.411333][ T6680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.411345][ T6680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.411355][ T6680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.411366][ T6680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.411378][ T6680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.411390][ T6680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.412147][ T6680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.415637][ T29] audit: type=1800 audit(1728380759.142:22): pid=6852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.214" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 260.446921][ T6702] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.446955][ T6702] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.446981][ T6702] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.447007][ T6702] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.450043][ T6680] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.450074][ T6680] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.450100][ T6680] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.450126][ T6680] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.459941][ T6113] syz-executor: attempt to access beyond end of device [ 260.459941][ T6113] loop1: rw=0, sector=768, nr_sectors = 8 limit=0 [ 260.460159][ T6113] ntfs3(loop1): failed to read volume at offset 0x60000 [ 260.514464][ T6113] syz-executor: attempt to access beyond end of device [ 260.514464][ T6113] loop1: rw=2049, sector=256, nr_sectors = 8 limit=0 [ 260.872659][ T6113] Buffer I/O error on dev loop1, logical block 32, lost sync page write [ 260.872723][ T6113] ntfs3(loop1): ino=3, ntfs_set_state failed, -5. [ 260.872747][ T6113] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 260.872781][ T6113] syz-executor: attempt to access beyond end of device [ 260.872781][ T6113] loop1: rw=2049, sector=256, nr_sectors = 8 limit=0 [ 260.872801][ T6113] Buffer I/O error on dev loop1, logical block 32, lost sync page write [ 260.872843][ T6113] ntfs3(loop1): ino=3, ntfs_set_state failed, -5. [ 260.872879][ T6113] syz-executor: attempt to access beyond end of device [ 260.872879][ T6113] loop1: rw=0, sector=256, nr_sectors = 8 limit=0 [ 260.873082][ T1098] kworker/u8:7: attempt to access beyond end of device [ 260.873082][ T1098] loop1: rw=2049, sector=256, nr_sectors = 8 limit=0 [ 260.873102][ T1098] Buffer I/O error on dev loop1, logical block 32, lost sync page write [ 260.873268][ T1098] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -5. [ 260.873390][ T6113] syz-executor: attempt to access beyond end of device [ 260.873390][ T6113] loop1: rw=0, sector=256, nr_sectors = 8 limit=0 [ 260.875395][ T6113] syz-executor: attempt to access beyond end of device [ 260.875395][ T6113] loop1: rw=0, sector=256, nr_sectors = 8 limit=0 [ 261.024027][ T5577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.024046][ T5577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.037149][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.056442][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.084392][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.092221][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.150337][ T5577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.195815][ T5577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.224983][ T6861] loop4: detected capacity change from 0 to 2048 [ 261.256133][ T5244] Bluetooth: hci2: command tx timeout [ 261.268316][ T5577] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.280308][ T6861] loop4: p2 < > p4 [ 261.295749][ T6861] loop4: p4 size 8192 extends beyond EOD, truncated [ 261.322452][ T4688] loop4: p2 < > p4 [ 261.341566][ T4688] loop4: p4 size 8192 extends beyond EOD, truncated [ 261.358756][ T5577] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.629114][ T5577] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.828038][ T6859] loop0: detected capacity change from 0 to 32768 [ 262.186735][ T6514] udevd[6514]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 262.267879][ T6182] udevd[6182]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 262.297285][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 262.309149][ T6859] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 262.318199][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 262.335288][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 262.345280][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 262.355551][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 262.372842][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 262.386753][ T5577] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.410801][ T6859] XFS (loop0): Ending clean mount [ 262.462910][ T6665] XFS (loop0): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 262.476011][ T5577] bridge_slave_1: left allmulticast mode [ 262.481696][ T5577] bridge_slave_1: left promiscuous mode [ 262.504352][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.512776][ T5577] bridge_slave_0: left allmulticast mode [ 262.528621][ T5577] bridge_slave_0: left promiscuous mode [ 262.536838][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.609013][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 262.918273][ T5577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.070640][ T5577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.129934][ T5577] bond0 (unregistering): Released all slaves [ 263.183572][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 263.189884][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 263.201099][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 263.212263][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 263.223935][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.237140][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 263.246543][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.292633][ T6905] capability: warning: `syz.0.227' uses 32-bit capabilities (legacy support in use) [ 263.399939][ T6874] chnl_net:caif_netlink_parms(): no params data found [ 263.471881][ T9] usb 3-1: usb_control_msg returned -32 [ 263.489531][ T9] usbtmc 3-1:16.0: can't read capabilities [ 263.518925][ T5577] hsr_slave_0: left promiscuous mode [ 263.534456][ T5577] hsr_slave_1: left promiscuous mode [ 263.540273][ T5577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.562215][ T5577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.584745][ T5577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.612476][ T5577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.647281][ T5577] veth1_macvtap: left promiscuous mode [ 263.652811][ T5577] veth0_macvtap: left promiscuous mode [ 263.662126][ T5577] veth1_vlan: left promiscuous mode [ 263.668532][ T5577] veth0_vlan: left promiscuous mode [ 263.763797][ T5577] team0 (unregistering): Port device team_slave_1 removed [ 263.774988][ T5577] team0 (unregistering): Port device team_slave_0 removed [ 263.895566][ T6874] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.903197][ T6874] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.912596][ T6874] bridge_slave_0: entered allmulticast mode [ 263.919569][ T6874] bridge_slave_0: entered promiscuous mode [ 263.927596][ T6874] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.934956][ T6874] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.942432][ T6874] bridge_slave_1: entered allmulticast mode [ 263.949263][ T6874] bridge_slave_1: entered promiscuous mode [ 263.969366][ T6874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.980354][ T6874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.032801][ T5237] usb 3-1: USB disconnect, device number 5 [ 264.422454][ T6874] team0: Port device team_slave_0 added [ 264.454883][ T5244] Bluetooth: hci3: command tx timeout [ 264.463580][ T6874] team0: Port device team_slave_1 added [ 264.492637][ T6874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.510428][ T6874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.590386][ T6874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.098142][ T6874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.134830][ T6874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.274728][ T6874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.159505][ T6874] hsr_slave_0: entered promiscuous mode [ 266.186721][ T6874] hsr_slave_1: entered promiscuous mode [ 266.300169][ T6961] loop0: detected capacity change from 0 to 128 [ 266.310725][ T6874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.336242][ T6874] Cannot create hsr debugfs directory [ 266.337617][ T6961] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 266.502118][ T6982] loop4: detected capacity change from 0 to 128 [ 266.543540][ T5244] Bluetooth: hci3: command tx timeout [ 266.556911][ T6982] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 266.575802][ T6982] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 266.626717][ T6990] loop2: detected capacity change from 0 to 1024 [ 266.823886][ T6992] netlink: 20 bytes leftover after parsing attributes in process `syz.2.242'. [ 267.176447][ T7001] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.340339][ T6680] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 267.705429][ T7010] netlink: 'syz.0.245': attribute type 1 has an invalid length. [ 267.731319][ T7010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.245'. [ 268.957953][ T6874] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 269.481328][ T6874] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 269.495558][ T5244] Bluetooth: hci3: command tx timeout [ 269.531401][ T7007] loop4: detected capacity change from 0 to 32768 [ 269.567769][ T6874] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 269.606604][ T7007] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 269.622784][ T7031] loop2: detected capacity change from 0 to 1024 [ 269.898090][ T7038] loop0: detected capacity change from 0 to 2048 [ 270.114375][ T7038] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.245176][ T6874] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 270.355790][ T7031] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 270.416554][ T7031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.473737][ T7007] XFS (loop4): Ending clean mount [ 270.476600][ T6874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.512646][ T6874] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.530150][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.537275][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.555328][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.562459][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.601766][ T7051] loop0: detected capacity change from 0 to 256 [ 270.632580][ T6874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 270.643171][ T6874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.666299][ T7051] exFAT-fs (loop0): failed to load alloc-bitmap [ 270.672577][ T7051] exFAT-fs (loop0): failed to recognize exfat type [ 270.756318][ T6288] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 270.793967][ T7007] XFS (loop4): Quotacheck needed: Please wait. [ 270.812417][ T6676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.830685][ T6874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.848638][ T7007] XFS (loop4): Quotacheck: Done. [ 270.905011][ T6874] veth0_vlan: entered promiscuous mode [ 270.919775][ T6680] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 270.932851][ T6874] veth1_vlan: entered promiscuous mode [ 270.943938][ T6288] usb 4-1: Using ep0 maxpacket: 8 [ 270.952775][ T6288] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 270.957630][ T6874] veth0_macvtap: entered promiscuous mode [ 270.961196][ T6288] usb 4-1: config 0 has an invalid interface number: 49 but max is 2 [ 270.970409][ T6874] veth1_macvtap: entered promiscuous mode [ 270.994300][ T6288] usb 4-1: config 0 has no interface number 1 [ 271.009277][ T6288] usb 4-1: config 0 has no interface number 2 [ 271.030568][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.044431][ T6288] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 271.075660][ T6288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.083555][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.113129][ T6288] usb 4-1: config 0 descriptor?? [ 271.117935][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.132906][ T6288] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 271.138731][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.171813][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.196431][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.216898][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.240038][ T7078] loop4: detected capacity change from 0 to 2048 [ 271.248065][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.272462][ T7078] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 271.289710][ T7078] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 271.299055][ T6874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.317057][ T7078] UDF-fs: Scanning with blocksize 512 failed [ 271.332776][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.340743][ T6288] qcserial 4-1:0.49: Qualcomm USB modem converter detected [ 271.359590][ T7078] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.372502][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.403223][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.425144][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.445352][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.473556][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.494162][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.535511][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.581799][ T6874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.590050][ T5244] Bluetooth: hci3: command tx timeout [ 271.602041][ T6874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.610978][ T6874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.693763][ T6874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.703204][ T6874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.028362][ T7074] loop2: detected capacity change from 0 to 32768 [ 272.152682][ T7100] loop4: detected capacity change from 0 to 1024 [ 272.162811][ T8] usb 4-1: USB disconnect, device number 5 [ 272.172169][ T8] qcserial 4-1:0.49: device disconnected [ 272.180067][ T7074] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 272.200993][ T29] audit: type=1800 audit(1728380770.932:23): pid=7103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.257" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 272.260504][ T5570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.268648][ T5570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.271365][ T7100] loop4: detected capacity change from 0 to 1024 [ 272.302011][ T5570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.317759][ T7100] hfsplus: extend alloc file! (8192,65536,366) [ 272.331734][ T7074] XFS (loop2): Ending clean mount [ 272.341060][ T5570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.456029][ T5313] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 272.653625][ T5313] usb 1-1: Using ep0 maxpacket: 32 [ 272.696276][ T5313] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 272.721011][ T5313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.761907][ T5313] usb 1-1: config 0 descriptor?? [ 273.253837][ T7074] syz.2.255 (7074) used greatest stack depth: 18320 bytes left [ 273.267699][ T6676] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 273.274794][ T5313] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 273.555154][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 273.618152][ T7139] random: crng reseeded on system resumption [ 274.013872][ T5313] gspca_sunplus: reg_w_riv err -110 [ 274.019651][ T5313] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 274.134353][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 274.140780][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 274.149657][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.215173][ T7153] Bluetooth: MGMT ver 1.23 [ 274.541791][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.551653][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 274.561706][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.574764][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 274.581046][ T7103] futex_wake_op: syz.0.257 tries to shift op by 32; fix this program [ 274.583972][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.609387][ T5286] usb 1-1: USB disconnect, device number 2 [ 274.617248][ T7156] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 274.828416][ T9] usb 4-1: usb_control_msg returned -32 [ 274.834109][ T9] usbtmc 4-1:16.0: can't read capabilities [ 275.691843][ T7164] loop4: detected capacity change from 0 to 32768 [ 275.698916][ T7164] XFS: ikeep mount option is deprecated. [ 275.706174][ T7164] XFS: ikeep mount option is deprecated. [ 275.727209][ T7164] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.763265][ T7164] XFS (loop4): Ending clean mount [ 275.801486][ T29] audit: type=1804 audit(1728380774.522:24): pid=7164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.265" name="/newroot/13/file0/bus" dev="loop4" ino=9289 res=1 errno=0 [ 275.824874][ T6680] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.836001][ T9] usb 4-1: USB disconnect, device number 6 [ 275.883581][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 276.089449][ T7183] loop1: detected capacity change from 0 to 1024 [ 276.194850][ T7183] EXT4-fs (loop1): orphan cleanup on readonly fs [ 276.205693][ T7183] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.268: bad orphan inode 8 [ 276.223321][ T7183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 276.434759][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.445841][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.469564][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 276.497505][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.516757][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.527564][ T8] usb 1-1: config 0 descriptor?? [ 276.757887][ T6874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.918459][ T7182] loop4: detected capacity change from 0 to 32768 [ 276.946043][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 276.952115][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 276.968558][ T8] usb 1-1: USB disconnect, device number 3 [ 277.996012][ T29] audit: type=1326 audit(1728380776.732:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7189 comm="syz.2.271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d7977dff9 code=0x0 [ 278.428888][ T7182] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 278.525965][ T7182] XFS (loop4): Ending clean mount [ 278.592294][ T7182] xfs: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 278.780292][ T7216] loop0: detected capacity change from 0 to 8 [ 278.807723][ T7216] SQUASHFS error: Failed to read block 0x2d7: -5 [ 278.823319][ T7216] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 278.873585][ T7208] loop1: detected capacity change from 0 to 32768 [ 278.883782][ T7208] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.274 (7208) [ 278.902473][ T7208] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 278.912923][ T7208] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 278.921801][ T7208] BTRFS info (device loop1): using free-space-tree [ 278.997013][ T6680] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 279.227115][ T7226] loop3: detected capacity change from 0 to 4096 [ 279.477672][ T5285] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 279.670160][ T5285] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.683019][ T5285] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.694151][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.874095][ T6874] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 279.874971][ T5285] usb 1-1: Product: syz [ 279.897989][ T5285] usb 1-1: Manufacturer: syz [ 279.920019][ T7244] loop2: detected capacity change from 0 to 4096 [ 279.927566][ T7244] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 279.931068][ T5285] usb 1-1: SerialNumber: syz [ 280.036518][ T5285] hub 1-1:1.0: bad descriptor, ignoring hub [ 280.042614][ T5285] hub 1-1:1.0: probe with driver hub failed with error -5 [ 280.080698][ T7244] ntfs3(loop2): Failed to load $Extend (-22). [ 280.096787][ T7244] ntfs3(loop2): Failed to initialize $Extend. [ 281.204864][ T7255] loop1: detected capacity change from 0 to 64 [ 281.267677][ T7261] sctp: [Deprecated]: syz.3.285 (pid 7261) Use of int in max_burst socket option. [ 281.267677][ T7261] Use struct sctp_assoc_value instead [ 281.331728][ T7262] loop4: detected capacity change from 0 to 2048 [ 281.373426][ T7270] loop1: detected capacity change from 0 to 16 [ 281.381588][ T7270] erofs: (device loop1): mounted with root inode @ nid 36. [ 281.518349][ T7262] loop4: p3 < > p4 < > [ 281.522553][ T7262] loop4: partition table partially beyond EOD, truncated [ 281.532781][ T7262] loop4: p3 start 4284289 is beyond EOD, truncated [ 282.533545][ T5244] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 282.541921][ T5285] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 282.541999][ T5244] Bluetooth: hci0: Injecting HCI hardware error event [ 282.554909][ T5285] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 282.555242][ T5244] Bluetooth: hci0: hardware error 0x00 [ 282.590180][ T5285] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 282.752239][ T5285] usb 1-1: USB disconnect, device number 4 [ 282.762931][ T5285] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 282.808140][ T7279] loop3: detected capacity change from 0 to 4096 [ 282.818770][ T7279] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 282.855060][ T7279] ntfs3(loop3): Failed to load $Extend (-22). [ 282.861176][ T7279] ntfs3(loop3): Failed to initialize $Extend. [ 283.033805][ T7296] Zero length message leads to an empty skb [ 283.533563][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 283.620340][ T7290] loop2: detected capacity change from 0 to 32768 [ 283.736368][ T7306] kvm: kvm [7305]: vcpu0, guest rIP: 0x14b Unhandled WRMSR(0xc2) = 0x290000000000 [ 283.746459][ T7306] kvm: MONITOR instruction emulated as NOP! [ 283.756987][ T7306] kvm: kvm [7305]: vcpu0, guest rIP: 0x14b Unhandled WRMSR(0xc2) = 0x290000000000 [ 283.767815][ T7306] kvm: kvm [7305]: vcpu0, guest rIP: 0x14b Unhandled WRMSR(0xc2) = 0x290000000000 [ 283.780233][ T7306] kvm: kvm [7305]: vcpu0, guest rIP: 0x14b Unhandled WRMSR(0xc2) = 0x290000000000 [ 283.804761][ T8] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 283.812866][ T8] usb 4-1: config 0 has no interface number 0 [ 283.821123][ T8] usb 4-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 283.832330][ T8] usb 4-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 283.854933][ T7294] loop1: detected capacity change from 0 to 32768 [ 283.869984][ T7294] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.294 (7294) [ 283.877436][ T8] usb 4-1: config 0 interface 48 has no altsetting 0 [ 283.896455][ T7294] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 283.904849][ T8] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=eb.57 [ 283.907933][ T7294] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 283.923928][ T8] usb 4-1: New USB device strings: Mfr=1, Product=32, SerialNumber=0 [ 283.941604][ T7318] loop4: detected capacity change from 0 to 512 [ 283.942057][ T8] usb 4-1: Product: syz [ 283.951550][ T7294] BTRFS info (device loop1): using free-space-tree [ 283.995206][ T8] usb 4-1: Manufacturer: syz [ 284.011628][ T7318] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.298: corrupted in-inode xattr: e_name out of bounds [ 284.028218][ T7318] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.298: couldn't read orphan inode 15 (err -117) [ 284.037925][ T8] usb 4-1: config 0 descriptor?? [ 284.047542][ T7318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.071541][ T7318] EXT4-fs error (device loop4): ext4_add_entry:2437: inode #2: comm syz.4.298: Directory hole found for htree leaf block 0 [ 284.152646][ T6680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.173609][ T7294] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 284.274808][ T6874] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 284.332759][ T8] keyspan 4-1:0.48: Keyspan 4 port adapter converter detected [ 284.340782][ T8] keyspan 4-1:0.48: found no endpoint descriptor for endpoint 81 [ 284.348940][ T8] keyspan 4-1:0.48: found no endpoint descriptor for endpoint 88 [ 284.351378][ T7353] ieee802154 phy1 wpan1: encryption failed: -22 [ 284.357521][ T8] keyspan 4-1:0.48: found no endpoint descriptor for endpoint 1 [ 284.374967][ T8] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 284.380468][ T7353] loop4: detected capacity change from 0 to 512 [ 284.384103][ T8] keyspan 4-1:0.48: found no endpoint descriptor for endpoint 2 [ 284.399577][ T8] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 284.408449][ T8] keyspan 4-1:0.48: found no endpoint descriptor for endpoint 4 [ 284.408886][ T7353] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.304: corrupted in-inode xattr: invalid ea_ino [ 284.418531][ T8] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 284.441164][ T8] keyspan 4-1:0.48: found no endpoint descriptor for endpoint 6 [ 284.450369][ T7353] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.304: couldn't read orphan inode 15 (err -117) [ 284.467612][ T8] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 284.474055][ T7353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.481994][ T8] usb 4-1: USB disconnect, device number 7 [ 284.504688][ T8] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 284.524619][ T7353] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz.4.304: deleted inode referenced: 15 [ 284.567575][ T7353] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz.4.304: deleted inode referenced: 15 [ 284.594107][ T8] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 284.626795][ T7353] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz.4.304: deleted inode referenced: 15 [ 284.643034][ T8] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 284.698360][ T8] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 284.709374][ T8] keyspan 4-1:0.48: device disconnected [ 284.711273][ T29] audit: type=1804 audit(1728380783.442:26): pid=7361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.305" name="/newroot/25/file0" dev="fuse" ino=1 res=1 errno=0 [ 284.720241][ T6680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.783783][ T5244] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 284.798255][ T29] audit: type=1804 audit(1728380783.532:27): pid=7366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.305" name="/newroot/25/file0" dev="fuse" ino=1 res=1 errno=0 [ 284.823179][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 284.839524][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.306'. [ 284.849684][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.306'. [ 285.397827][ T7380] loop2: detected capacity change from 0 to 2048 [ 285.429100][ T29] audit: type=1800 audit(1728380784.162:28): pid=7361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.305" name="/" dev="fuse" ino=1 res=0 errno=0 [ 285.566552][ T7380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.598947][ T7383] syzkaller0: entered allmulticast mode [ 287.738165][ T6676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.781038][ T7409] loop0: detected capacity change from 0 to 4096 [ 288.053660][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 288.454605][ T7420] usb usb8: usbfs: process 7420 (syz.3.319) did not claim interface 0 before use [ 289.264114][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 289.353996][ T9] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 289.383581][ T9] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 289.416290][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 289.428457][ T7430] loop1: detected capacity change from 0 to 128 [ 289.435070][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.462887][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 289.463808][ T7430] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 289.477934][ T9] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 289.484589][ T7431] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 289.497287][ T7431] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 289.507476][ T6514] udevd[6514]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.508229][ T7431] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 289.531229][ T7430] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 289.540983][ T7431] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 289.548840][ T7431] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 289.553903][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 289.563465][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 289.575136][ T7431] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 289.587039][ T8] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 289.596359][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.604486][ T8] usb 1-1: Product: syz [ 289.605222][ T7431] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 289.608637][ T8] usb 1-1: Manufacturer: syz [ 289.608654][ T8] usb 1-1: SerialNumber: syz [ 289.626371][ T8] usb 1-1: config 0 descriptor?? [ 289.633696][ T7431] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 289.641220][ T7431] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 289.648826][ T7427] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 289.664101][ T8] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 289.675178][ T7427] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 289.678113][ T7431] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 289.702662][ T7431] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 289.711338][ T7427] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 289.726157][ T7431] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 289.728232][ T7412] loop2: detected capacity change from 0 to 2048 [ 289.748071][ T7427] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 289.764676][ T7435] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 289.772882][ T7412] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 289.847648][ T7427] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 289.858184][ T7440] netlink: 36 bytes leftover after parsing attributes in process `syz.4.326'. [ 289.873048][ T7440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.326'. [ 289.882122][ T7440] netlink: 36 bytes leftover after parsing attributes in process `syz.4.326'. [ 289.891640][ T7412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 289.906606][ T7440] netlink: 36 bytes leftover after parsing attributes in process `syz.4.326'. [ 289.982473][ T5570] usb 1-1: Failed to submit usb control message: -71 [ 289.982624][ T8] usb 1-1: USB disconnect, device number 5 [ 289.994730][ T5570] usb 1-1: unable to send the bmi data to the device: -71 [ 290.001762][ T9] usb 3-1: USB disconnect, device number 6 [ 290.006652][ T7443] loop1: detected capacity change from 0 to 1024 [ 290.012233][ T5570] usb 1-1: unable to get target info from device [ 290.022912][ T5570] usb 1-1: could not get target info (-71) [ 290.031502][ T5570] usb 1-1: could not probe fw (-71) [ 290.072262][ T7443] hfsplus: xattr searching failed [ 290.081429][ T7443] hfsplus: b-tree write err: -5, ino 3 [ 290.848106][ T7461] loop2: detected capacity change from 0 to 512 [ 290.867422][ T7461] EXT4-fs (loop2): filesystem is read-only [ 291.384438][ T7461] EXT4-fs (loop2): filesystem is read-only [ 291.390376][ T7461] EXT4-fs (loop2): orphan cleanup on readonly fs [ 291.397271][ T7461] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.332: bad orphan inode 16 [ 291.408807][ T7461] ext4_test_bit(bit=15, block=3) = 0 [ 291.417091][ T7461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 291.454512][ T6676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.494329][ T5244] Bluetooth: hci1: command 0x0c1a tx timeout [ 291.577370][ T5244] Bluetooth: hci5: command 0x0c1a tx timeout [ 291.623905][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 291.659221][ T5244] Bluetooth: hci2: command 0x0c1a tx timeout [ 291.733687][ T5244] Bluetooth: hci3: command 0x0c1a tx timeout [ 291.750751][ T7475] loop1: detected capacity change from 0 to 512 [ 291.757597][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 291.785064][ T8] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 291.795134][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.804780][ T8] usb 1-1: config 0 descriptor?? [ 291.824188][ T7475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.837212][ T7475] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.849367][ T8] cp210x 1-1:0.0: cp210x converter detected [ 292.013725][ T9] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 292.231553][ T8] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 292.256722][ T8] cp210x 1-1:0.0: querying part number failed [ 292.438670][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.513625][ T9] usb 5-1: Product: syz [ 292.533606][ T9] usb 5-1: Manufacturer: syz [ 292.699370][ T9] usb 5-1: SerialNumber: syz [ 292.709249][ T8] usb 1-1: cp210x converter now attached to ttyUSB0 [ 292.766095][ T9] usb 5-1: config 0 descriptor?? [ 292.916619][ T6874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.657006][ T5244] Bluetooth: hci1: command 0x0c1a tx timeout [ 293.663120][ T5243] Bluetooth: hci5: command 0x0c1a tx timeout [ 293.703989][ T5237] usb 1-1: USB disconnect, device number 6 [ 293.716448][ T5237] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 293.732944][ T5237] cp210x 1-1:0.0: device disconnected [ 293.738681][ T5243] Bluetooth: hci2: command 0x0c1a tx timeout [ 293.814606][ T5244] Bluetooth: hci3: command 0x0c1a tx timeout [ 293.832902][ T7495] loop2: detected capacity change from 0 to 256 [ 293.841447][ T7470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.860022][ T7495] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 293.915422][ T7470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.929624][ T7499] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 293.962537][ T9] usb 5-1: ignoring: probably an ADSL modem [ 294.193173][ T9] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 294.220347][ T9] usb 5-1: USB disconnect, device number 7 [ 294.393824][ T5237] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 294.677283][ T5237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.690173][ T5237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.701490][ T5237] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 294.715277][ T5237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.727093][ T5237] usb 1-1: config 0 descriptor?? [ 294.813966][ T7498] loop1: detected capacity change from 0 to 32768 [ 294.849655][ T7498] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 294.984609][ T7498] XFS (loop1): Ending clean mount [ 294.991724][ T7498] XFS (loop1): Quotacheck needed: Please wait. [ 295.044858][ T7498] XFS (loop1): Quotacheck: Done. [ 295.728082][ T6874] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 295.835365][ T7528] loop4: detected capacity change from 0 to 1024 [ 295.904096][ T5244] Bluetooth: hci3: command 0x0c1a tx timeout [ 295.910162][ T5244] Bluetooth: hci2: command 0x0c1a tx timeout [ 295.916389][ T5244] Bluetooth: hci1: command 0x0c1a tx timeout [ 295.922422][ T5244] Bluetooth: hci5: command 0x0c1a tx timeout [ 295.927402][ T7535] loop3: detected capacity change from 0 to 64 [ 295.942469][ T7528] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.350: bad orphan inode 2097152 [ 296.071735][ T5237] usb 1-1: language id specifier not provided by device, defaulting to English [ 296.081905][ T7528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.104419][ T7528] EXT4-fs error (device loop4): __ext4_new_inode:1070: comm syz.4.350: reserved inode found cleared - inode=18 [ 296.304634][ T7538] netlink: 'syz.2.352': attribute type 3 has an invalid length. [ 296.316735][ T7538] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.352'. [ 296.390125][ T6680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.862307][ T7555] netlink: 'syz.1.351': attribute type 1 has an invalid length. [ 296.870037][ T7555] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.351'. [ 297.988728][ T5237] uclogic 0003:256C:006D.0002: v1 frame probing failed: -71 [ 297.996253][ T5237] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 298.006179][ T5237] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 298.019492][ T5237] usb 1-1: USB disconnect, device number 7 [ 298.147024][ T7567] veth1_macvtap: left promiscuous mode [ 298.206228][ T7569] loop3: detected capacity change from 0 to 2048 [ 298.264313][ T7569] loop3: p3 < > p4 < > [ 298.268625][ T7569] loop3: partition table partially beyond EOD, truncated [ 298.277368][ T7569] loop3: p3 start 4284289 is beyond EOD, truncated [ 298.311172][ T4688] loop3: p3 < > p4 < > [ 298.317690][ T4688] loop3: partition table partially beyond EOD, truncated [ 298.325674][ T4688] loop3: p3 start 4284289 is beyond EOD, truncated [ 298.649539][ T7585] loop1: detected capacity change from 0 to 2048 [ 298.738667][ T7585] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 298.912574][ T7585] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 299.139861][ T7591] loop2: detected capacity change from 0 to 512 [ 299.178648][ T7591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 299.194062][ T7591] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.704331][ T5237] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 300.054364][ T5237] usb 5-1: Using ep0 maxpacket: 16 [ 300.083187][ T5237] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.093607][ T5237] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 300.223301][ T7608] loop0: detected capacity change from 0 to 1764 [ 300.263776][ T5237] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 300.273065][ T5237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.281155][ T5237] usb 5-1: Product: syz [ 300.285615][ T5237] usb 5-1: Manufacturer: syz [ 300.290456][ T5237] usb 5-1: SerialNumber: syz [ 300.306421][ T5237] usb 5-1: config 0 descriptor?? [ 300.532132][ T6676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 300.610619][ T7614] process 'syz.1.373' launched './file0' with NULL argv: empty string added [ 300.871274][ T5570] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.011993][ T5570] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.036116][ T25] usb 5-1: USB disconnect, device number 8 [ 301.119131][ T5570] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.605082][ T5570] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.659872][ T7623] trusted_key: syz.3.377 sent an empty control message without MSG_MORE. [ 301.717433][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.807596][ T7631] netlink: get zone limit has 4 unknown bytes [ 302.185814][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.193792][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.211514][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.219262][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 302.233109][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.277772][ T5570] bridge_slave_1: left allmulticast mode [ 302.287120][ T5570] bridge_slave_1: left promiscuous mode [ 302.293157][ T5570] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.459651][ T5570] bridge_slave_0: left allmulticast mode [ 302.465819][ T5570] bridge_slave_0: left promiscuous mode [ 302.471506][ T5570] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.803636][ T937] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 304.248012][ T937] usb 2-1: Using ep0 maxpacket: 32 [ 304.294917][ T5244] Bluetooth: hci1: command tx timeout [ 304.816962][ T937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.827541][ T937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.842539][ T937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.855101][ T937] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 304.868199][ T937] usb 2-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 304.977675][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.385'. [ 304.986518][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.385'. [ 305.961863][ T937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.971921][ T937] usb 2-1: config 0 descriptor?? [ 306.373677][ T5244] Bluetooth: hci1: command tx timeout [ 306.503308][ T5570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.515399][ T5570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.526665][ T5570] bond0 (unregistering): Released all slaves [ 306.743450][ T937] hid-generic 0003:1B96:9F0A.0003: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.1-1/input0 [ 307.105188][ T7695] loop3: detected capacity change from 0 to 2048 [ 307.191909][ T7695] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.228437][ T7628] chnl_net:caif_netlink_parms(): no params data found [ 307.336105][ T5570] hsr_slave_0: left promiscuous mode [ 307.357580][ T5570] hsr_slave_1: left promiscuous mode [ 307.372366][ T5570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.390143][ T5570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.409245][ T5570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.432721][ T5570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.475875][ T5570] veth1_macvtap: left promiscuous mode [ 307.509961][ T5570] veth0_macvtap: left promiscuous mode [ 307.526299][ T5570] veth1_vlan: left promiscuous mode [ 307.531702][ T5570] veth0_vlan: left promiscuous mode [ 307.940700][ T7727] x_tables: unsorted underflow at hook 1 [ 308.057564][ T5570] team0 (unregistering): Port device team_slave_1 removed [ 308.069390][ T5570] team0 (unregistering): Port device team_slave_0 removed [ 308.095644][ T7727] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (1048576 ns). Using initial count to start timer. [ 308.104958][ T7722] loop2: detected capacity change from 0 to 512 [ 308.137082][ T7727] kvm: pic: non byte write [ 308.141900][ T7722] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 308.150692][ T7722] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 308.162668][ T7722] EXT4-fs (loop2): DAX unsupported by block device. [ 308.251832][ T7628] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.262979][ T7628] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.275529][ T7628] bridge_slave_0: entered allmulticast mode [ 308.294294][ T7733] loop4: detected capacity change from 0 to 512 [ 308.301822][ T7628] bridge_slave_0: entered promiscuous mode [ 308.314796][ T7628] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.322482][ T7628] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.334634][ T7733] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 308.343030][ T7628] bridge_slave_1: entered allmulticast mode [ 308.350405][ T7628] bridge_slave_1: entered promiscuous mode [ 308.379615][ T7733] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.397: iget: bad i_size value: -67835469387268086 [ 308.406895][ T7628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.416743][ T7733] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.397: couldn't read orphan inode 15 (err -117) [ 308.430920][ T7628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.446137][ T7733] EXT4-fs (loop4): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.465540][ T5244] Bluetooth: hci1: command tx timeout [ 308.468489][ T7733] ext2 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.491781][ T7628] team0: Port device team_slave_0 added [ 308.510281][ T7628] team0: Port device team_slave_1 added [ 308.534747][ T7733] EXT4-fs error (device loop4): ext4_add_entry:2437: inode #2: comm syz.4.397: Directory hole found for htree leaf block 0 [ 308.585017][ T7628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.631257][ T7628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.657423][ T7628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.906548][ T7628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.914035][ T7628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.084789][ T937] usb 2-1: USB disconnect, device number 5 [ 309.093968][ T7628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.251780][ T7628] hsr_slave_0: entered promiscuous mode [ 309.264448][ T7628] hsr_slave_1: entered promiscuous mode [ 309.993524][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 310.165128][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 310.172962][ T9] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 310.202788][ T9] usb 4-1: config 0 has no interface number 0 [ 310.221314][ T7772] loop2: detected capacity change from 0 to 64 [ 310.231311][ T9] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid maxpacket 59136, setting to 1024 [ 310.308167][ T7772] hfs: request for non-existent node 131072 in B*Tree [ 310.339481][ T7772] hfs: request for non-existent node 131072 in B*Tree [ 310.356275][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 310.367184][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.367321][ T7775] hfs: request for non-existent node 131072 in B*Tree [ 310.376023][ T9] usb 4-1: Product: syz [ 310.405775][ T7628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 310.430536][ T9] usb 4-1: Manufacturer: syz [ 310.443375][ T7775] hfs: request for non-existent node 131072 in B*Tree [ 310.444029][ T9] usb 4-1: SerialNumber: syz [ 310.462155][ T9] usb 4-1: config 0 descriptor?? [ 310.464511][ T7772] hfs: request for non-existent node 131072 in B*Tree [ 310.475236][ T7772] hfs: request for non-existent node 131072 in B*Tree [ 310.514960][ T7628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 310.527582][ T7758] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 310.534808][ T5244] Bluetooth: hci1: command tx timeout [ 310.545797][ T7628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 310.571378][ T7772] hfs: request for non-existent node 131072 in B*Tree [ 310.581763][ T7772] hfs: request for non-existent node 131072 in B*Tree [ 310.583257][ T7628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 310.655986][ T7775] hfs: request for non-existent node 131072 in B*Tree [ 310.675341][ T7775] hfs: request for non-existent node 131072 in B*Tree [ 310.715132][ T7772] hfs: request for non-existent node 131072 in B*Tree [ 310.725262][ T7772] hfs: request for non-existent node 131072 in B*Tree [ 310.768441][ T7772] hfs: request for non-existent node 12 in B*Tree [ 310.778239][ T7772] hfs: request for non-existent node 12 in B*Tree [ 310.811895][ T7772] hfs: request for non-existent node 13 in B*Tree [ 310.819019][ T7772] hfs: request for non-existent node 13 in B*Tree [ 310.851661][ T7772] hfs: request for non-existent node 14 in B*Tree [ 310.860131][ T7772] hfs: request for non-existent node 14 in B*Tree [ 310.870416][ T6680] EXT4-fs (loop4): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 310.888223][ T9] radio-si470x 4-1:0.35: this is not a si470x device. [ 310.905821][ T7628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.906656][ T7772] hfs: request for non-existent node 15 in B*Tree [ 310.960068][ T7772] hfs: request for non-existent node 15 in B*Tree [ 310.974149][ T9] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 310.985411][ T7628] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.991658][ T7775] hfs: request for non-existent node 16 in B*Tree [ 311.009890][ T9] usb 4-1: USB disconnect, device number 8 [ 311.019058][ T7775] hfs: request for non-existent node 16 in B*Tree [ 311.036903][ T5570] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.044024][ T5570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.134968][ T5570] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.142120][ T5570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.222873][ T7793] netlink: 156 bytes leftover after parsing attributes in process `syz.4.405'. [ 311.549646][ T7628] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 311.560110][ T7628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 311.780790][ T7628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.913542][ T5285] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 311.923261][ T7628] veth0_vlan: entered promiscuous mode [ 311.936220][ T7628] veth1_vlan: entered promiscuous mode [ 311.945165][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 311.972479][ T7628] veth0_macvtap: entered promiscuous mode [ 311.982856][ T7628] veth1_macvtap: entered promiscuous mode [ 312.012108][ T1098] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.050490][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.064456][ T5285] usb 2-1: Using ep0 maxpacket: 16 [ 312.082084][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.094032][ T5285] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 312.103677][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 312.111208][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.115863][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 312.119824][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.143292][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 312.152601][ T5285] usb 2-1: config 0 descriptor?? [ 312.162733][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.172815][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.185025][ T5285] usb 2-1: interface 1 not found [ 312.192050][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.194714][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 312.202493][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.236453][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.254216][ T7628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.270174][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.465857][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.588778][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.605921][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 312.616294][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 312.626442][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 312.636159][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 312.642987][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.645960][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 312.673686][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.685570][ T25] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 312.695079][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.703183][ T25] usb 3-1: Product: syz [ 312.716436][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.726834][ T25] usb 3-1: Manufacturer: syz [ 312.731444][ T25] usb 3-1: SerialNumber: syz [ 312.736173][ T7628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.747212][ T7628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.758009][ T7628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.768989][ T25] usb 3-1: config 0 descriptor?? [ 312.778676][ T7805] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 312.799354][ T1098] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.834529][ T7628] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.843273][ T7628] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.852248][ T7628] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.861183][ T7628] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.874220][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.885773][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.895317][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.904539][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.912191][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 312.920040][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.938630][ T1098] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.004947][ T1098] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.112404][ T25] cxacru 3-1:0.0: submit of read urb for cm 0x90 failed (-8) [ 313.142897][ T25] usb 3-1: USB disconnect, device number 7 [ 313.161306][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.171125][ T7844] cxacru 3-1:0.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 313.173158][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.190836][ T7844] cxacru 3-1:0.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 313.223229][ T1098] bridge_slave_1: left allmulticast mode [ 313.243397][ T1098] bridge_slave_1: left promiscuous mode [ 313.267168][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.285595][ T1098] bridge_slave_0: left allmulticast mode [ 313.308472][ T1098] bridge_slave_0: left promiscuous mode [ 313.314446][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.816902][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.832250][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.858672][ T1098] bond0 (unregistering): Released all slaves [ 313.947150][ T5570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.011690][ T5570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.033328][ T7866] loop4: detected capacity change from 0 to 128 [ 314.086645][ T5237] usb 2-1: USB disconnect, device number 6 [ 314.746833][ T7832] chnl_net:caif_netlink_parms(): no params data found [ 314.890785][ T7881] loop0: detected capacity change from 0 to 1024 [ 314.933974][ T5243] Bluetooth: hci2: command tx timeout [ 314.949897][ T7881] EXT4-fs: Ignoring removed oldalloc option [ 314.994644][ T7881] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 315.023438][ T7832] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.054863][ T7881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.068957][ T7832] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.085064][ T7832] bridge_slave_0: entered allmulticast mode [ 315.092139][ T7832] bridge_slave_0: entered promiscuous mode [ 315.108611][ T7832] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.122597][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.135576][ T7832] bridge_slave_1: entered allmulticast mode [ 315.148123][ T7832] bridge_slave_1: entered promiscuous mode [ 315.178789][ T1098] hsr_slave_0: left promiscuous mode [ 315.189922][ T1098] hsr_slave_1: left promiscuous mode [ 315.197287][ T29] audit: type=1804 audit(1728380813.932:29): pid=7881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.376" name="/newroot/0/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 315.230605][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.254503][ T7881] loop0: detected capacity change from 1024 to 0 [ 315.255452][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.286023][ T7881] syz.0.376: attempt to access beyond end of device [ 315.286023][ T7881] loop0: rw=0, sector=992, nr_sectors = 2 limit=0 [ 315.299537][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.307687][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.350307][ T1098] veth1_macvtap: left promiscuous mode [ 315.356385][ T7881] syz.0.376: attempt to access beyond end of device [ 315.356385][ T7881] loop0: rw=0, sector=992, nr_sectors = 2 limit=0 [ 315.363684][ T1098] veth0_macvtap: left promiscuous mode [ 315.397991][ T1098] veth1_vlan: left promiscuous mode [ 315.409087][ T1098] veth0_vlan: left promiscuous mode [ 315.430113][ T7881] syz.0.376: attempt to access beyond end of device [ 315.430113][ T7881] loop0: rw=0, sector=992, nr_sectors = 2 limit=0 [ 315.475970][ T7881] syz.0.376: attempt to access beyond end of device [ 315.475970][ T7881] loop0: rw=0, sector=992, nr_sectors = 2 limit=0 [ 315.531150][ T7881] syz.0.376: attempt to access beyond end of device [ 315.531150][ T7881] loop0: rw=0, sector=992, nr_sectors = 2 limit=0 [ 315.583717][ T7881] syz.0.376: attempt to access beyond end of device [ 315.583717][ T7881] loop0: rw=0, sector=992, nr_sectors = 2 limit=0 [ 315.630363][ T7881] syz.0.376: attempt to access beyond end of device [ 315.630363][ T7881] loop0: rw=0, sector=992, nr_sectors = 2 limit=0 [ 315.685817][ T7881] syz.0.376: attempt to access beyond end of device [ 315.685817][ T7881] loop0: rw=0, sector=992, nr_sectors = 2 limit=0 [ 315.723868][ T7881] syz.0.376: attempt to access beyond end of device [ 315.723868][ T7881] loop0: rw=0, sector=992, nr_sectors = 2 limit=0 [ 315.791683][ T7881] syz.0.376: attempt to access beyond end of device [ 315.791683][ T7881] loop0: rw=0, sector=992, nr_sectors = 2 limit=0 [ 315.844074][ T7881] EXT4-fs error (device loop0): ext4_get_inode_loc:4541: inode #15: block 8: comm syz.0.376: unable to read itable block [ 315.860499][ T7881] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 315.898828][ T7881] EXT4-fs (loop0): I/O error while writing superblock [ 315.933602][ T7881] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: IO failure [ 315.952249][ T7881] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 315.962455][ T7881] EXT4-fs (loop0): I/O error while writing superblock [ 315.973018][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 316.014649][ T7881] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #15: comm syz.0.376: mark_inode_dirty error [ 316.028208][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 316.043645][ T7881] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 316.071092][ T7881] EXT4-fs (loop0): I/O error while writing superblock [ 316.131357][ T7628] EXT4-fs error (device loop0): ext4_get_inode_loc:4541: inode #2: block 5: comm syz-executor: unable to read itable block [ 316.173767][ T7628] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 316.289177][ T7628] EXT4-fs (loop0): I/O error while writing superblock [ 316.298273][ T7628] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: IO failure [ 316.309854][ T7628] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 316.335041][ T7628] EXT4-fs (loop0): I/O error while writing superblock [ 316.343736][ T7628] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 316.411158][ T7628] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 316.431101][ T7628] EXT4-fs (loop0): I/O error while writing superblock [ 316.463063][ T5570] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 5 [ 316.465257][ T7832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.485573][ T5570] EXT4-fs (loop0): This should not happen!! Data will be lost [ 316.485573][ T5570] [ 316.554252][ T5570] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4526: inode #15: block 8: comm kworker/u8:11: unable to read itable block [ 316.608188][ T7832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.617307][ T5570] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 316.617351][ T5570] EXT4-fs (loop0): I/O error while writing superblock [ 316.617638][ T5570] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4526: inode #2: block 5: comm kworker/u8:11: unable to read itable block [ 316.617677][ T5570] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 316.661801][ T7628] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 316.953193][ T7890] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 317.014105][ T5243] Bluetooth: hci2: command tx timeout [ 317.042932][ T7832] team0: Port device team_slave_0 added [ 317.266111][ T7832] team0: Port device team_slave_1 added [ 317.433906][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.500434][ T7832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.507512][ T7832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.588501][ T7832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.963010][ T7832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.003010][ T7832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.042879][ T7957] loop2: detected capacity change from 0 to 2048 [ 318.072734][ T7832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.152394][ T7957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.154579][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.183421][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.191052][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.200303][ T7832] hsr_slave_0: entered promiscuous mode [ 318.208668][ T7832] hsr_slave_1: entered promiscuous mode [ 318.208720][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.222632][ T7832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.230611][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 318.315058][ T7832] Cannot create hsr debugfs directory [ 318.320633][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.635658][ T7969] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 318.651798][ T7969] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 318.683725][ T7969] EXT4-fs (loop2): This should not happen!! Data will be lost [ 318.683725][ T7969] [ 318.693664][ T7969] EXT4-fs (loop2): Total free blocks count 0 [ 318.699885][ T7969] EXT4-fs (loop2): Free/Dirty block details [ 318.706138][ T7969] EXT4-fs (loop2): free_blocks=2415919104 [ 318.712141][ T7969] EXT4-fs (loop2): dirty_blocks=16 [ 318.717601][ T7969] EXT4-fs (loop2): Block reservation details [ 318.723882][ T7969] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 318.746165][ T7970] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 320.386602][ T1098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.463665][ T5244] Bluetooth: hci2: command tx timeout [ 320.469211][ T5244] Bluetooth: hci1: command tx timeout [ 321.638811][ T1098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.914456][ T1098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.448207][ T1098] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.536650][ T5244] Bluetooth: hci2: command tx timeout [ 322.543397][ T5243] Bluetooth: hci1: command tx timeout [ 324.613941][ T5243] Bluetooth: hci1: command tx timeout [ 324.630226][ T1098] bridge_slave_1: left allmulticast mode [ 324.689735][ T1098] bridge_slave_1: left promiscuous mode [ 324.806664][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.890516][ T1098] bridge_slave_0: left allmulticast mode [ 324.911533][ T1098] bridge_slave_0: left promiscuous mode [ 324.968242][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.925757][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.086574][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.091463][ T6676] EXT4-fs: 7 callbacks suppressed [ 326.091477][ T6676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.220012][ T1098] bond0 (unregistering): Released all slaves [ 326.707467][ T5243] Bluetooth: hci1: command tx timeout [ 328.821964][ T7992] loop2: detected capacity change from 0 to 2048 [ 328.827808][ T7998] loop4: detected capacity change from 0 to 256 [ 329.067201][ T7992] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.509714][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 330.538348][ T1098] hsr_slave_0: left promiscuous mode [ 330.621271][ T1098] hsr_slave_1: left promiscuous mode [ 330.978164][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.002685][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.066264][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.127530][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.297756][ T1098] veth1_macvtap: left promiscuous mode [ 331.303334][ T1098] veth0_macvtap: left promiscuous mode [ 331.323774][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 331.333639][ T1098] veth1_vlan: left promiscuous mode [ 331.335718][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 331.338933][ T1098] veth0_vlan: left promiscuous mode [ 331.379046][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 331.542511][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 331.569593][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 331.578040][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.248016][ T8003] loop4: detected capacity change from 0 to 512 [ 332.747776][ T8003] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 332.985451][ T8003] EXT4-fs (loop4): 1 truncate cleaned up [ 333.007518][ T8003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.145478][ T8005] loop2: detected capacity change from 0 to 4096 [ 333.206052][ T8005] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 333.218780][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 333.740025][ T8005] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 333.750201][ T8005] ntfs3(loop2): Failed to load $Extend (-22). [ 333.756792][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 333.769545][ T8005] ntfs3(loop2): Failed to initialize $Extend. [ 333.820860][ T5244] Bluetooth: hci4: command tx timeout [ 335.138929][ T7964] chnl_net:caif_netlink_parms(): no params data found [ 335.312386][ T6680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.936427][ T5244] Bluetooth: hci4: command tx timeout [ 337.976024][ T5244] Bluetooth: hci4: command tx timeout [ 338.954909][ T7832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 339.275420][ T7832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 339.467411][ T7964] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.494336][ T7964] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.512238][ T7964] bridge_slave_0: entered allmulticast mode [ 340.324502][ T7964] bridge_slave_0: entered promiscuous mode [ 340.331910][ T7964] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.341394][ T5244] Bluetooth: hci4: command tx timeout [ 340.361852][ T7964] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.378172][ T7964] bridge_slave_1: entered allmulticast mode [ 340.520332][ T7964] bridge_slave_1: entered promiscuous mode [ 340.610820][ T7832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 340.982040][ T7832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 342.213727][ T7964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.160954][ T7964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.573257][ T7964] team0: Port device team_slave_0 added [ 343.672630][ T7964] team0: Port device team_slave_1 added [ 344.128532][ T5243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.352905][ T5243] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.389289][ T5243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.442016][ T5243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.461196][ T5243] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 344.470763][ T5243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.712921][ T7964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.924764][ T7964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.034091][ T7964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.042714][ T8043] loop2: detected capacity change from 0 to 64 [ 345.049904][ T7964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.060616][ T7964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.101964][ T7964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.133069][ T8043] hfs: invalid btree extent records (0 size) [ 345.194444][ T8043] hfs: unable to open catalog tree [ 345.247255][ T8043] hfs: can't find a HFS filesystem on dev loop2 [ 345.731534][ T8043] loop2: detected capacity change from 0 to 512 [ 346.015697][ T8000] chnl_net:caif_netlink_parms(): no params data found [ 346.030067][ T8043] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 346.533576][ T5243] Bluetooth: hci5: command tx timeout [ 346.574279][ T8043] EXT4-fs (loop2): 1 truncate cleaned up [ 346.792631][ T8043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.603966][ T7964] hsr_slave_0: entered promiscuous mode [ 348.762298][ T8050] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 348.763220][ T5243] Bluetooth: hci5: command tx timeout [ 348.848663][ T7964] hsr_slave_1: entered promiscuous mode [ 349.744503][ T8000] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.752060][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.760746][ T8000] bridge_slave_0: entered allmulticast mode [ 349.790711][ T8000] bridge_slave_0: entered promiscuous mode [ 349.809326][ T8000] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.819502][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.835496][ T8000] bridge_slave_1: entered allmulticast mode [ 349.876715][ T8000] bridge_slave_1: entered promiscuous mode [ 351.018295][ T5243] Bluetooth: hci5: command tx timeout [ 351.107574][ T6676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.001334][ T8000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.188743][ T8000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.952299][ T7832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.093719][ T5243] Bluetooth: hci5: command tx timeout [ 353.169750][ T8000] team0: Port device team_slave_0 added [ 353.477835][ T8000] team0: Port device team_slave_1 added [ 353.941617][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.959023][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.988314][ T8000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.000854][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.009952][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.038943][ T8000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.469868][ T7832] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.963067][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.970214][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.685450][ T8035] chnl_net:caif_netlink_parms(): no params data found [ 356.522420][ T8000] hsr_slave_0: entered promiscuous mode [ 356.748860][ T8000] hsr_slave_1: entered promiscuous mode [ 356.802722][ T8000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.853045][ T8000] Cannot create hsr debugfs directory [ 357.078862][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.086000][ T6516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.621995][ T8035] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.695202][ T8035] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.756467][ T8035] bridge_slave_0: entered allmulticast mode [ 358.790500][ T8035] bridge_slave_0: entered promiscuous mode [ 358.998838][ T8035] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.071635][ T8035] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.159427][ T8035] bridge_slave_1: entered allmulticast mode [ 359.246657][ T8035] bridge_slave_1: entered promiscuous mode [ 360.546581][ T8035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.035042][ T8035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.334062][ T7964] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 361.630218][ T8035] team0: Port device team_slave_0 added [ 361.759642][ T8000] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.808325][ T7964] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 361.877001][ T8035] team0: Port device team_slave_1 added [ 362.251589][ T7964] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 362.300025][ T8000] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.442562][ T7964] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 362.640472][ T8000] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.684091][ T8035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.691118][ T8035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.719313][ T8035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.779813][ T8000] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.819984][ T8035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.827507][ T8035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.866899][ T8035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.496898][ T8035] hsr_slave_0: entered promiscuous mode [ 363.511727][ T8035] hsr_slave_1: entered promiscuous mode [ 363.523321][ T8035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.549091][ T8035] Cannot create hsr debugfs directory [ 364.001651][ T7832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.323495][ T8000] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 364.412767][ T8000] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 364.698063][ T8000] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 364.772310][ T8000] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 365.615519][ T8107] loop2: detected capacity change from 0 to 32768 [ 365.647321][ T8107] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.452 (8107) [ 365.680572][ T8107] BTRFS error (device loop2): open_ctree failed [ 365.796008][ T8035] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.039872][ T8035] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.290828][ T8035] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.474518][ T8035] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.023596][ T8108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.375219][ T7832] veth0_vlan: entered promiscuous mode [ 367.561911][ T7964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.738090][ T7832] veth1_vlan: entered promiscuous mode [ 368.735219][ T7964] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.219721][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.226885][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.715604][ T7832] veth0_macvtap: entered promiscuous mode [ 369.724319][ T7832] veth1_macvtap: entered promiscuous mode [ 369.738506][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.748973][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.758933][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.769568][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.779504][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.789960][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.800683][ T7832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.838620][ T8035] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 369.910330][ T8035] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 369.931674][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.938804][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.957092][ T8035] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 369.969030][ T8035] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 369.980512][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.991455][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.005856][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.016792][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.027933][ T7832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.040691][ T7832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.051854][ T7832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.097368][ T7832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.107170][ T7832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.118372][ T7832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.132274][ T7832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.183995][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.191833][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.254838][ T8000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.274591][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.289553][ T8000] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.297793][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.749628][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.756775][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.842395][ T8145] loop3: detected capacity change from 0 to 1024 [ 370.851060][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.858186][ T6516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.952607][ T8035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.978695][ T8152] loop3: detected capacity change from 0 to 1024 [ 371.009308][ T8035] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.039009][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.046134][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.098995][ T8152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.111929][ T8035] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 371.155251][ T8035] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.182867][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.189995][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.460927][ T29] audit: type=1800 audit(1728380870.192:30): pid=8152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.456" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 371.474931][ T8152] Trying to write to read-only block-device loop3 [ 371.560981][ T8000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.610640][ T7832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.615996][ T7964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.718843][ T8000] veth0_vlan: entered promiscuous mode [ 371.759909][ T8000] veth1_vlan: entered promiscuous mode [ 371.778190][ T8035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.798654][ T7964] veth0_vlan: entered promiscuous mode [ 371.832335][ T7964] veth1_vlan: entered promiscuous mode [ 371.858543][ T8000] veth0_macvtap: entered promiscuous mode [ 371.882210][ T8000] veth1_macvtap: entered promiscuous mode [ 371.913793][ T5330] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 371.970652][ T7964] veth0_macvtap: entered promiscuous mode [ 372.005677][ T7964] veth1_macvtap: entered promiscuous mode [ 372.015349][ T8000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.026074][ T8000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.035955][ T8000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.046503][ T8000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.057572][ T8000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.068057][ T8000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.077905][ T8000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.088460][ T8000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.099304][ T8000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.110140][ T8000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.120747][ T8000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.130777][ T8000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.141272][ T8000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.151132][ T8000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.162708][ T8000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.172574][ T8000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.183032][ T8000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.193950][ T8000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.231274][ T8000] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.240144][ T8000] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.253927][ T5330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.267165][ T5330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.285586][ T8000] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.304679][ T5330] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 372.308111][ T8000] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.316279][ T5330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.332774][ T5330] usb 4-1: config 0 descriptor?? [ 372.370780][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.381710][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.391710][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.407926][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.418012][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.431801][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.442846][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.453802][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.463992][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.474996][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.486284][ T7964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.510015][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.531609][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.541796][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.557257][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.567454][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.584656][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.596239][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.608186][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.621719][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.633108][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.645039][ T7964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.682373][ T8035] veth0_vlan: entered promiscuous mode [ 372.691442][ T7964] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.703981][ T7964] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.716317][ T7964] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.727541][ T7964] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.740108][ T5572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.755939][ T8035] veth1_vlan: entered promiscuous mode [ 372.770923][ T5572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.841373][ T5572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.872002][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.882954][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.896278][ T5572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.911718][ T8035] veth0_macvtap: entered promiscuous mode [ 372.926489][ T6516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.938633][ T6516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.948985][ T8035] veth1_macvtap: entered promiscuous mode [ 372.962393][ T5330] usb 4-1: language id specifier not provided by device, defaulting to English [ 372.992704][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.019092][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.044293][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.056686][ T29] audit: type=1804 audit(1728380871.782:31): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.431" name="/newroot/0/bus/file0" dev="overlay" ino=25 res=1 errno=0 [ 373.069047][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.090453][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.184481][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.196954][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.221861][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.712245][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.723225][ T7844] cxacru 3-1:0.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 373.730723][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.746621][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.762757][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.777141][ T8035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.849252][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.936888][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.948346][ T5330] uclogic 0003:256C:006D.0004: v1 frame probing failed: -71 [ 373.953097][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.966868][ T5330] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 373.974977][ T5330] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 373.992380][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.996383][ T5330] usb 4-1: USB disconnect, device number 9 [ 374.009784][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.020445][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.030437][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.040982][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.050878][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.061520][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.156515][ T8035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.167437][ T8035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.182648][ T8035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.312051][ T8220] netlink: 'syz.2.462': attribute type 1 has an invalid length. [ 374.391537][ T8222] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 374.407813][ T8035] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.416804][ T8035] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.425937][ T8035] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.436893][ T8035] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.455465][ T8228] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.456137][ T1082] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 374.512409][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.525040][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.564817][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.573124][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.643916][ T1082] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 374.753177][ T29] audit: type=1326 audit(1728380873.482:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8234 comm="syz.0.466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e1e77dff9 code=0x0 [ 376.175224][ T8251] fuse: Bad value for 'fd' [ 376.369078][ T8259] loop0: detected capacity change from 0 to 1024 [ 376.774006][ T5357] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 376.799374][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 376.851155][ T8256] syzkaller0: entered promiscuous mode [ 376.868324][ T8256] syzkaller0: entered allmulticast mode [ 376.940641][ T8266] hfsplus: request for non-existent node 128 in B*Tree [ 376.953825][ T5357] usb 5-1: Using ep0 maxpacket: 16 [ 376.965666][ T8266] hfsplus: request for non-existent node 128 in B*Tree [ 376.983635][ T5357] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.000126][ T5357] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.032884][ T5357] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 377.053783][ T5357] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.079687][ T5357] usb 5-1: config 0 descriptor?? [ 377.153037][ T9] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 377.170958][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.204644][ T9] usb 3-1: config 0 descriptor?? [ 377.231139][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 377.253122][ T8269] binder_alloc: 8268: binder_alloc_buf, no vma [ 377.401136][ T8271] loop1: detected capacity change from 0 to 2048 [ 377.445951][ T8271] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 377.460550][ T8271] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 377.476016][ T8271] UDF-fs: Scanning with blocksize 512 failed [ 377.495411][ T8271] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 377.547305][ T5357] usbhid 5-1:0.0: can't add hid device: -71 [ 377.554286][ T5357] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 377.575015][ T5357] usb 5-1: USB disconnect, device number 9 [ 377.890937][ T9] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 378.378969][ T8278] loop1: detected capacity change from 0 to 512 [ 378.457539][ T8278] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 378.486869][ T8278] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 378.501874][ T8278] EXT4-fs (loop1): 1 truncate cleaned up [ 378.519616][ T8278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.785365][ T8283] loop3: detected capacity change from 0 to 2048 [ 378.958730][ T9] gspca_cpia1: usb_control_msg 03, error -71 [ 378.967758][ T9] cpia1 3-1:0.0: unexpected systemstate: 00 [ 379.035353][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.169335][ T8283] orangefs_mount: mount request failed with -4 [ 379.506493][ T9] usb 3-1: USB disconnect, device number 8 [ 379.542992][ T8000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.326773][ T8315] loop1: detected capacity change from 0 to 2048 [ 381.356285][ T8319] loop2: detected capacity change from 0 to 128 [ 381.376067][ T8319] udf: Unknown parameter '^BFuS9' [ 381.407155][ T8317] loop0: detected capacity change from 0 to 512 [ 381.534757][ T8315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.009923][ T8314] kvm: kvm [8312]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 382.010090][ T8317] EXT4-fs: test_dummy_encryption requires encrypt feature [ 382.019322][ T8314] kvm: kvm [8312]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 382.237010][ T8000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.565195][ T5285] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 383.013671][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 383.024389][ T5285] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 383.041003][ T5285] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 383.050374][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.070368][ T5285] usb 3-1: Product: syz [ 383.078223][ T5285] usb 3-1: Manufacturer: syz [ 383.082945][ T5285] usb 3-1: SerialNumber: syz [ 383.094331][ T5285] usb 3-1: config 0 descriptor?? [ 383.105340][ T5285] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 383.261175][ T8348] loop4: detected capacity change from 0 to 1024 [ 383.340490][ T29] audit: type=1326 audit(1728380882.062:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7977dff9 code=0x7ffc0000 [ 383.369907][ T29] audit: type=1326 audit(1728380882.062:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7977dff9 code=0x7ffc0000 [ 383.373762][ T5357] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 383.392514][ T29] audit: type=1326 audit(1728380882.062:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f9d7977dff9 code=0x7ffc0000 [ 383.422868][ T29] audit: type=1326 audit(1728380882.062:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7977dff9 code=0x7ffc0000 [ 383.445123][ T29] audit: type=1326 audit(1728380882.062:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7977dff9 code=0x7ffc0000 [ 383.627922][ T5285] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 383.648954][ T5285] usb 3-1: USB disconnect, device number 9 [ 383.649434][ T5357] usb 4-1: Using ep0 maxpacket: 8 [ 383.682203][ T5357] usb 4-1: config 0 has no interfaces? [ 383.826488][ T5357] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 384.099262][ T8357] udevd[8357]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.149495][ T5357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.157849][ T5357] usb 4-1: Product: syz [ 384.162164][ T5357] usb 4-1: Manufacturer: syz [ 384.170136][ T5357] usb 4-1: SerialNumber: syz [ 384.178843][ T5357] usb 4-1: config 0 descriptor?? [ 384.233581][ T1098] hfsplus: b-tree write err: -5, ino 4 [ 384.707104][ T5330] usb 4-1: USB disconnect, device number 10 [ 386.490251][ T8390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.506'. [ 391.128220][ T8422] netlink: 324 bytes leftover after parsing attributes in process `syz.2.513'. [ 391.504385][ T8432] random: crng reseeded on system resumption [ 395.349752][ T8469] loop0: detected capacity change from 0 to 2048 [ 395.654233][ T8469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.674157][ T8469] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.722840][ T8481] syz.4.528 uses obsolete (PF_INET,SOCK_PACKET) [ 395.975247][ T8490] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.534: bg 0: block 288: padding at end of block bitmap is not set [ 396.013662][ T8490] fs-verity (loop0, inode 13): ext4_end_enable_verity() failed with err -117 [ 396.326267][ T7964] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.648864][ T8502] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 396.723056][ T937] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 396.887835][ T937] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.988049][ T937] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.004318][ T937] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 397.102446][ T937] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 397.118031][ T937] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 397.127439][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 397.136071][ T937] usb 4-1: SerialNumber: syz [ 397.641830][ T937] usb 4-1: 0:2 : does not exist [ 397.646834][ T937] usb 4-1: unit 5 not found! [ 398.195294][ T5330] usb 4-1: USB disconnect, device number 11 [ 398.204968][ T8518] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 398.237398][ T8513] kvm: pic: level sensitive irq not supported [ 398.237474][ T8513] kvm: pic: non byte read [ 398.250470][ T8513] kvm: pic: level sensitive irq not supported [ 398.250908][ T8513] kvm: pic: non byte read [ 399.409260][ T8533] loop4: detected capacity change from 0 to 2048 [ 399.432930][ T8533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.447466][ T8533] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.950177][ T8543] loop0: detected capacity change from 0 to 256 [ 399.980121][ T8543] FAT-fs (loop0): Directory bread(block 64) failed [ 400.005001][ T8543] FAT-fs (loop0): Directory bread(block 65) failed [ 400.065886][ T8543] FAT-fs (loop0): Directory bread(block 66) failed [ 400.073135][ T8543] FAT-fs (loop0): Directory bread(block 67) failed [ 400.082182][ T8543] FAT-fs (loop0): Directory bread(block 68) failed [ 400.089318][ T8543] FAT-fs (loop0): Directory bread(block 69) failed [ 400.097228][ T8543] FAT-fs (loop0): Directory bread(block 70) failed [ 400.104558][ T8543] FAT-fs (loop0): Directory bread(block 71) failed [ 400.111265][ T8543] FAT-fs (loop0): Directory bread(block 72) failed [ 400.118027][ T8543] FAT-fs (loop0): Directory bread(block 73) failed [ 400.187188][ T8547] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.545: bg 0: block 288: padding at end of block bitmap is not set [ 400.205659][ T8547] fs-verity (loop4, inode 13): ext4_end_enable_verity() failed with err -117 [ 400.569115][ T8035] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.607644][ T8549] loop1: detected capacity change from 0 to 1024 [ 400.629777][ T8549] loop1: detected capacity change from 0 to 1024 [ 400.640007][ T8549] hfsplus: extend alloc file! (8192,65536,366) [ 400.706516][ T8545] loop3: detected capacity change from 0 to 32768 [ 400.900853][ T8552] loop4: detected capacity change from 0 to 1024 [ 401.122538][ T8552] hfsplus: invalid xattr key length: 0 [ 401.131454][ T8545] ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 401.150816][ T8545] ocfs2: Mounting device (7,3) on (node local, slot 65535) with ordered data mode. [ 402.196641][ T8563] syzkaller0: entered allmulticast mode [ 404.946755][ T5577] hfsplus: b-tree write err: -5, ino 8 [ 409.390152][ T5237] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 411.199060][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.555'. [ 412.783587][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 412.909388][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 412.918921][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 412.926664][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 412.934849][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 412.942231][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 412.949774][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 412.965295][ T5237] usb 5-1: device descriptor read/all, error -71 [ 412.986865][ T8578] loop1: detected capacity change from 0 to 2048 [ 415.033510][ T5243] Bluetooth: hci3: command tx timeout [ 415.276629][ T8578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.293511][ T5244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 415.300797][ T5244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 415.309157][ T5244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 415.324114][ T5244] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 415.332251][ T5244] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 415.340437][ T5244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 416.438151][ T8578] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.447711][ T5243] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 417.422911][ T5238] Bluetooth: hci3: command tx timeout [ 417.429599][ T5238] Bluetooth: hci6: command tx timeout [ 417.430449][ T8574] chnl_net:caif_netlink_parms(): no params data found [ 418.423248][ T5243] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 418.430754][ T5243] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 418.451659][ T8590] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 288: padding at end of block bitmap is not set [ 419.526480][ T5243] Bluetooth: hci6: command tx timeout [ 419.526498][ T5238] Bluetooth: hci3: command tx timeout [ 420.778432][ T8000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.790854][ T5243] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 420.877541][ T5243] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 420.881348][ T8600] netlink: 'syz.4.563': attribute type 8 has an invalid length. [ 421.939909][ T5243] Bluetooth: hci3: command tx timeout [ 421.945376][ T5243] Bluetooth: hci6: command tx timeout [ 421.951276][ T5243] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 424.194624][ T5243] Bluetooth: hci6: command tx timeout [ 424.214958][ T8574] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.222013][ T8574] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.252464][ T8574] bridge_slave_0: entered allmulticast mode [ 424.261202][ T8604] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 424.269498][ T8574] bridge_slave_0: entered promiscuous mode [ 425.337215][ T8574] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.349545][ T8574] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.351564][ T5243] Bluetooth: hci7: command tx timeout [ 426.356818][ T8574] bridge_slave_1: entered allmulticast mode [ 426.376915][ T8611] loop1: detected capacity change from 0 to 8 [ 426.377270][ T8574] bridge_slave_1: entered promiscuous mode [ 426.413770][ T8611] SQUASHFS error: zlib decompression failed, data probably corrupt [ 426.453282][ T8611] SQUASHFS error: Failed to read block 0x9b: -5 [ 426.468806][ T8611] SQUASHFS error: Unable to read metadata cache entry [99] [ 427.423756][ T5243] Bluetooth: hci7: command tx timeout [ 430.537747][ T5243] Bluetooth: hci7: command tx timeout [ 432.955724][ T5244] Bluetooth: hci7: command tx timeout [ 438.752301][ T8611] SQUASHFS error: Unable to read inode 0x127 [ 440.363809][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.615958][ T1098] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.803043][ T1098] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.842284][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 440.849588][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 440.857079][ T8574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.868750][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 440.871803][ T8585] chnl_net:caif_netlink_parms(): no params data found [ 440.891012][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 440.900603][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 440.900950][ T8623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 440.907989][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 440.922673][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 440.924599][ T8623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 440.930736][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 440.945398][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 440.947421][ T8623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 440.962073][ T8574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.980910][ T1098] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.005705][ T8574] team0: Port device team_slave_0 added [ 441.023494][ T5248] Bluetooth: hci2: command 0x0406 tx timeout [ 441.026938][ T8574] team0: Port device team_slave_1 added [ 441.052875][ T8574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.065581][ T8574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.091700][ T8574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.116970][ T1098] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.128726][ T8574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.136653][ T8574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.162633][ T8574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.235053][ T8585] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.242665][ T8585] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.250506][ T8585] bridge_slave_0: entered allmulticast mode [ 441.257348][ T8545] ocfs2: Unmounting device (7,3) on (node local) [ 441.263862][ T8545] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 441.276427][ T8545] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 441.284819][ T8545] CPU: 1 UID: 0 PID: 8545 Comm: syz.3.546 Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 441.294868][ T8545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 441.304935][ T8545] RIP: 0010:ocfs2_evict_inode+0xdd3/0x4680 [ 441.310748][ T8545] Code: 00 00 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 5f 17 71 fe 4c 01 f3 4d 8b 24 24 49 83 c4 08 4c 89 e0 48 c1 e8 03 <42> 80 3c 30 00 74 08 4c 89 e7 e8 3e 17 71 fe 49 8b 3c 24 49 81 c7 [ 441.330340][ T8545] RSP: 0018:ffffc900047d6f00 EFLAGS: 00010202 [ 441.336392][ T8545] RAX: 0000000000000001 RBX: fffff520008fadf4 RCX: ffff88802e725a00 [ 441.344349][ T8545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 441.352300][ T8545] RBP: ffffc900047d7650 R08: ffffffff838d937e R09: 1ffff1100ba57616 [ 441.360260][ T8545] R10: dffffc0000000000 R11: ffffed100ba57617 R12: 0000000000000008 [ 441.368215][ T8545] R13: 1ffff1100ba57644 R14: dffffc0000000000 R15: ffff88805d2bb338 [ 441.376190][ T8545] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 441.385101][ T8545] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.391665][ T8545] CR2: 00005595e720ae78 CR3: 000000004f21a000 CR4: 00000000003526f0 [ 441.399620][ T8545] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 441.407744][ T8545] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 441.415697][ T8545] Call Trace: [ 441.418958][ T8545] [ 441.421870][ T8545] ? __die_body+0x5f/0xb0 [ 441.426196][ T8545] ? die_addr+0xb0/0xe0 [ 441.430334][ T8545] ? exc_general_protection+0x3dd/0x5d0 [ 441.435869][ T8545] ? up_write+0x1a9/0x590 [ 441.440205][ T8545] ? asm_exc_general_protection+0x26/0x30 [ 441.445909][ T8545] ? ocfs2_evict_inode+0xd1e/0x4680 [ 441.451093][ T8545] ? ocfs2_evict_inode+0xdd3/0x4680 [ 441.456273][ T8545] ? __pfx__prb_read_valid+0x10/0x10 [ 441.461541][ T8545] ? __pfx_ocfs2_evict_inode+0x10/0x10 [ 441.466980][ T8545] ? rcu_is_watching+0x15/0xb0 [ 441.471725][ T8545] ? __switch_to+0xe93/0x1c30 [ 441.476385][ T8545] ? sched_clock_cpu+0x76/0x490 [ 441.481220][ T8545] ? rcu_is_watching+0x15/0xb0 [ 441.485963][ T8545] ? lock_release+0xbf/0xa30 [ 441.490529][ T8545] ? __pfx_lock_acquire+0x10/0x10 [ 441.495529][ T8545] ? deref_stack_reg+0x17c/0x210 [ 441.500447][ T8545] ? __pfx_lock_release+0x10/0x10 [ 441.505450][ T8545] ? stack_trace_save+0x118/0x1d0 [ 441.510453][ T8545] ? unwind_next_frame+0x18e6/0x22d0 [ 441.515806][ T8545] ? rcu_is_watching+0x15/0xb0 [ 441.520551][ T8545] ? rcu_is_watching+0x15/0xb0 [ 441.525293][ T8545] ? lock_release+0xbf/0xa30 [ 441.529859][ T8545] ? do_raw_spin_lock+0x14f/0x370 [ 441.534859][ T8545] ? __pfx_lock_release+0x10/0x10 [ 441.539859][ T8545] ? do_raw_spin_unlock+0x13c/0x8b0 [ 441.545040][ T8545] ? rcu_is_watching+0x15/0xb0 [ 441.549783][ T8545] ? _raw_spin_unlock+0x28/0x50 [ 441.554615][ T8545] ? writeback_single_inode+0x400/0x660 [ 441.560143][ T8545] ? write_inode_now+0x1dd/0x260 [ 441.565061][ T8545] ? rcu_is_watching+0x15/0xb0 [ 441.569799][ T8545] ? lock_release+0xbf/0xa30 [ 441.574364][ T8545] ? inode_wait_for_writeback+0x111/0x2a0 [ 441.580063][ T8545] ? __pfx_lock_release+0x10/0x10 [ 441.585068][ T8545] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 441.591112][ T8545] ? do_raw_spin_unlock+0x13c/0x8b0 [ 441.596288][ T8545] ? __pfx_ocfs2_evict_inode+0x10/0x10 [ 441.601726][ T8545] evict+0x4e8/0x9b0 [ 441.605599][ T8545] ? __pfx_evict+0x10/0x10 [ 441.609991][ T8545] ? iput+0x713/0xa50 [ 441.613951][ T8545] ocfs2_free_slot_info+0x94/0x270 [ 441.619040][ T8545] ? destroy_workqueue+0x86f/0xc40 [ 441.624131][ T8545] ocfs2_delete_osb+0x58/0x180 [ 441.628870][ T8545] ocfs2_dismount_volume+0x594/0x8f0 [ 441.634132][ T8545] ? __pfx_ocfs2_dismount_volume+0x10/0x10 [ 441.639912][ T8545] ? __pfx_evict_inodes+0x10/0x10 [ 441.644918][ T8545] ? __pfx_ocfs2_put_super+0x10/0x10 [ 441.650184][ T8545] generic_shutdown_super+0x139/0x2d0 [ 441.655541][ T8545] kill_block_super+0x44/0x90 [ 441.660221][ T8545] deactivate_locked_super+0xc4/0x130 [ 441.665571][ T8545] cleanup_mnt+0x41f/0x4b0 [ 441.669969][ T8545] task_work_run+0x24f/0x310 [ 441.674536][ T8545] ? rcu_is_watching+0x15/0xb0 [ 441.679278][ T8545] ? __pfx_task_work_run+0x10/0x10 [ 441.684365][ T8545] ? do_exit+0xa2a/0x28e0 [ 441.688671][ T8545] ? kmem_cache_free+0x1a2/0x420 [ 441.693587][ T8545] ? do_exit+0xa2a/0x28e0 [ 441.697890][ T8545] do_exit+0xa2f/0x28e0 [ 441.702020][ T8545] ? rcu_is_watching+0x15/0xb0 [ 441.706762][ T8545] ? __pfx_do_exit+0x10/0x10 [ 441.711327][ T8545] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 441.716678][ T8545] ? __pfx_lock_release+0x10/0x10 [ 441.721679][ T8545] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 441.727989][ T8545] ? _raw_spin_lock_irq+0xdf/0x120 [ 441.733080][ T8545] do_group_exit+0x207/0x2c0 [ 441.737648][ T8545] get_signal+0x16a3/0x1740 [ 441.742133][ T8545] ? __pfx_get_signal+0x10/0x10 [ 441.746962][ T8545] arch_do_signal_or_restart+0x96/0x860 [ 441.752494][ T8545] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 441.758632][ T8545] ? rcu_is_watching+0x15/0xb0 [ 441.763373][ T8545] syscall_exit_to_user_mode+0xc9/0x370 [ 441.768903][ T8545] do_syscall_64+0x100/0x230 [ 441.773476][ T8545] ? clear_bhb_loop+0x35/0x90 [ 441.778143][ T8545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.784013][ T8545] RIP: 0033:0x7f96a337dff9 [ 441.788420][ T8545] Code: Unable to access opcode bytes at 0x7f96a337dfcf. [ 441.795416][ T8545] RSP: 002b:00007f96a410f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 441.803805][ T8545] RAX: 0000000000ffecc0 RBX: 00007f96a3535f80 RCX: 00007f96a337dff9 [ 441.811754][ T8545] RDX: 7706c522012798af RSI: 0000000020001340 RDI: 0000000000000005 [ 441.819701][ T8545] RBP: 00007f96a33f0296 R08: 0000000000000000 R09: 0000000000000000 [ 441.827651][ T8545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.835600][ T8545] R13: 0000000000000000 R14: 00007f96a3535f80 R15: 00007ffd7a7da758 [ 441.843555][ T8545] [ 441.846552][ T8545] Modules linked in: [ 441.852161][ T8545] ---[ end trace 0000000000000000 ]--- [ 441.857648][ T8545] RIP: 0010:ocfs2_evict_inode+0xdd3/0x4680 [ 441.863477][ T8545] Code: 00 00 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 5f 17 71 fe 4c 01 f3 4d 8b 24 24 49 83 c4 08 4c 89 e0 48 c1 e8 03 <42> 80 3c 30 00 74 08 4c 89 e7 e8 3e 17 71 fe 49 8b 3c 24 49 81 c7 [ 441.883092][ T8545] RSP: 0018:ffffc900047d6f00 EFLAGS: 00010202 [ 441.889166][ T8545] RAX: 0000000000000001 RBX: fffff520008fadf4 RCX: ffff88802e725a00 [ 441.897263][ T8545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 441.905249][ T8545] RBP: ffffc900047d7650 R08: ffffffff838d937e R09: 1ffff1100ba57616 [ 441.913200][ T8545] R10: dffffc0000000000 R11: ffffed100ba57617 R12: 0000000000000008 [ 441.921189][ T8545] R13: 1ffff1100ba57644 R14: dffffc0000000000 R15: ffff88805d2bb338 [ 441.929165][ T8545] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 441.938089][ T8545] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.944676][ T8545] CR2: 00005595e720ae78 CR3: 000000004f21a000 CR4: 00000000003526f0 [ 441.952629][ T8545] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 441.961053][ T8545] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 441.969044][ T8545] Kernel panic - not syncing: Fatal exception [ 441.975455][ T8545] Kernel Offset: disabled [ 441.979761][ T8545] Rebooting in 86400 seconds..